This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer File: Qkq4x890A7ViChuBPmrR2g2stE0.cer (raw, json) Hash identifier: 0xOecA8UC8Fxb6IBnkf32hC4LNOHZ2+TjAbvJtTkwVQ= Subject key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797ECCEADD257EFCC71739AA6451F7EA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.188.108.0/22 IP: 2a0b:bf80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:cc:ea:dd:25:7e:fc:c7:17:39:aa:64:51:f7:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3d:c6:ba:15:1c:52:95:92:28:6f:7b:19:24: 63:36:41:da:d5:02:04:2a:c6:5e:6b:ce:1f:22:3e: 48:4a:7e:ae:df:ee:5c:ca:30:ba:24:a6:0f:fa:e5: 7c:51:a5:50:38:fb:bb:f3:78:4c:1b:f3:a0:d4:18: 00:80:94:69:ac:ce:0e:03:5f:a8:bf:ba:33:67:c0: 34:cc:3d:35:af:cd:3b:ec:45:53:2b:11:40:da:25: e0:ad:cb:3e:93:50:2d:d9:83:f0:07:12:fa:b6:bf: d3:e7:35:f0:c0:ae:48:00:70:b5:87:83:dd:3c:5d: 0f:10:cb:8c:bd:8f:74:e6:ed:c3:27:8e:43:40:f5: 3f:53:70:93:20:c1:b9:a1:07:94:a0:3f:5b:70:b1: da:c5:dd:61:75:c2:11:be:ee:97:4a:11:28:3f:75: b0:58:3e:10:c0:0f:d8:7b:68:f1:e5:2c:3f:3d:b2: 03:8e:b2:56:d1:af:a9:2d:f3:ec:3b:1b:f9:86:27: 4a:23:9e:04:b6:01:a1:55:00:a7:e1:64:f5:30:77: 63:2f:0d:14:e7:3a:48:a2:73:a3:a3:97:69:84:33: 70:2f:eb:2a:4f:4b:79:d0:3f:32:a8:90:ec:79:3d: 16:e5:8f:9b:45:b7:de:b4:69:7a:d3:e5:f3:d6:e6: f3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.108.0/22 IPv6: 2a0b:bf80::/32 Signature Algorithm: sha256WithRSAEncryption a3:bc:73:9a:64:c9:d2:a4:57:fe:93:26:55:9d:ab:9d:72:12: e7:3a:0b:2f:ad:fc:29:4f:7f:1d:09:a0:63:15:4a:49:44:37: 28:85:d9:10:b9:1e:9e:9e:35:15:de:ea:8a:fb:49:3d:95:92: 32:20:3a:5f:16:f4:84:e7:86:3f:0f:80:2e:d8:ac:cc:30:1e: 7a:12:45:6c:3f:da:84:6e:22:49:3f:8e:2f:df:e7:0d:1b:94: d7:c2:10:6b:c4:fd:67:f7:ed:ed:86:8d:33:e7:c4:d5:65:bf: ab:4c:17:7c:ed:8d:d5:86:f5:a7:4d:13:89:34:fc:b4:75:48: 95:e0:4e:b0:01:c9:82:1c:cf:04:7e:09:9b:77:61:91:e8:ad: 6c:e3:11:85:d7:d1:63:f2:76:e9:d9:62:e0:f9:23:55:11:13: 5b:6d:ac:8e:a7:3c:b2:bd:21:8d:3a:d5:75:24:ba:d5:09:17: 76:15:cd:c9:19:b6:ec:47:50:0a:e8:6d:37:e0:ff:f7:e5:53: e6:3e:8f:68:40:c8:a6:76:ff:21:84:71:37:07:71:d7:e4:d8: cf:0b:49:7f:c0:29:c2:51:19:99:52:c9:63:ca:8d:39:63:2c: c5:7b:7e:2e:1e:99:3a:46:ae:b6:43:77:d2:49:a3:68:14:13: e1:18:28:3b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5fszq3SV+/McXOapkUffqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjRhYjhjN2NmNzQwM2I1NjIwYTFiODEzZTZhZDFkYTBkYWNiNDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD3GuhUcUpWSKG97GSRjNkHa1QIE KsZea84fIj5ISn6u3+5cyjC6JKYP+uV8UaVQOPu783hMG/Og1BgAgJRprM4OA1+o v7ozZ8A0zD01r8077EVTKxFA2iXgrcs+k1At2YPwBxL6tr/T5zXwwK5IAHC1h4Pd PF0PEMuMvY905u3DJ45DQPU/U3CTIMG5oQeUoD9bcLHaxd1hdcIRvu6XShEoP3Ww WD4QwA/Ye2jx5Sw/PbIDjrJW0a+pLfPsOxv5hidKI54EtgGhVQCn4WT1MHdjLw0U 5zpIonOjo5dphDNwL+sqT0t50D8yqJDseT0W5Y+bRbfetGl60+Xz1ubz4QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFEJKuMfPdAO1YgobgT5q0doNrLRNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzNiMzIx NS01NzIxLTQzNDUtODQxYi0yYWQ5MzA4ZjFmNmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvM2IzMjE1 LTU3MjEtNDM0NS04NDFiLTJhZDkzMDhmMWY2Yy8xL1FrcTR4ODkwQTdWaUNodUJQ bXJSMmcyc3RFMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubxsMA0EAgACMAcDBQAqC7+AMA0GCSqGSIb3 DQEBCwUAA4IBAQCjvHOaZMnSpFf+kyZVnaudchLnOgsvrfwpT38dCaBjFUpJRDco hdkQuR6enjUV3uqK+0k9lZIyIDpfFvSE54Y/D4Au2KzMMB56EkVsP9qEbiJJP44v 3+cNG5TXwhBrxP1n9+3tho0z58TVZb+rTBd87Y3VhvWnTROJNPy0dUiV4E6wAcmC HM8Efgmbd2GR6K1s4xGF19Fj8nbp2WLg+SNVERNbbayOpzyyvSGNOtV1JLrVCRd2 Fc3JGbbsR1AK6G034P/35VPmPo9oQMimdv8hhHE3B3HX5NjPC0l/wCnCURmZUslj yo05YyzFe34uHpk6Rq62Q3fSSaNoFBPhGCg7 -----END CERTIFICATE-----Generated at Mon Jan 26 15:03:50 2026 by rpki-client