This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer File: QpK12ktP_q9yBklRj7qqEMXLKBE.cer (raw, json) Hash identifier: 6eBS93ecQrsBLms/GJKD+A58Rig2IbJBM9UNpzB0Kio= Subject key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E381A67966511DB0DB18CC81340E05D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44854 AS: 51517 AS: 56393 AS: 203291 IP: 45.113.237.0/24 IP: 93.114.180.0/23 IP: 103.229.81.0/24 IP: 103.251.156.0/22 IP: 176.119.215.0/24 IP: 185.1.160.0/23 IP: 185.219.6.0/24 IP: 193.37.216.0/22 IP: 2001:7f8:10f::/48 IP: 2a10:e300::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1a:67:96:65:11:db:0d:b1:8c:c8:13:40:e0:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:24:3a:c5:e2:f4:f1:b4:ee:b9:ae:f1:14:bf: 54:fd:35:3f:1c:3f:f5:34:dd:94:f5:a1:2d:ce:2d: 8e:f4:15:e1:e3:72:23:6a:a3:3c:86:65:58:d1:69: c1:0e:e1:91:67:91:98:f5:6a:ad:63:d3:4b:83:2b: 34:36:d5:20:10:5c:88:8a:ac:e3:8b:13:ad:20:54: dd:0c:b0:ee:6d:9a:b2:bc:e9:6b:95:ab:3d:0e:35: f4:a5:fd:7b:2d:4e:20:dd:a2:e4:69:e4:5c:1e:4c: 6d:bf:bf:fa:4d:ab:4e:dc:5b:54:5d:9d:15:ee:1b: 3a:d4:31:4a:6a:ab:cd:05:c1:e3:3f:05:a6:3c:37: 67:5b:d3:ef:62:3b:28:83:38:7f:1e:4b:39:80:0f: 6f:5f:83:cf:0d:79:db:f2:26:ea:df:6e:1a:07:07: 3e:ba:17:91:23:27:91:9e:4b:c6:07:fe:f9:d4:c3: c3:13:b3:6d:b0:76:7d:b3:f2:d5:c7:8b:fc:b5:80: 4c:22:0e:68:ba:07:5c:f2:67:07:bd:cd:5e:a6:a9: 3b:76:35:e0:11:c1:59:0d:d4:92:3e:46:ed:11:cf: e7:c6:42:63:7b:76:d4:75:d1:b5:e1:be:fd:a2:ad: b8:37:3f:ad:4d:99:da:d8:7d:fb:5c:58:76:e9:c1: 4a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.113.237.0/24 93.114.180.0/23 103.229.81.0/24 103.251.156.0/22 176.119.215.0/24 185.1.160.0/23 185.219.6.0/24 193.37.216.0/22 IPv6: 2001:7f8:10f::/48 2a10:e300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44854 51517 56393 203291 Signature Algorithm: sha256WithRSAEncryption 0c:9c:4b:be:59:27:a1:08:4e:6b:2b:0c:7c:cb:d6:31:a5:a9: 18:89:57:1b:9b:06:2e:41:43:27:26:f8:a5:ad:56:28:14:d8: d0:54:ad:eb:f8:65:e1:f8:fb:41:75:df:30:91:7d:f8:b5:97: 45:94:31:bd:72:b3:4a:22:9e:c7:c4:46:ab:14:d2:c4:93:6f: 9e:b1:bf:0c:fb:e1:1f:26:49:85:8b:7c:30:7a:7c:a2:eb:08: 5d:55:ec:e7:9b:34:d6:81:4a:69:9f:fa:51:5e:50:12:5c:2b: e1:cc:86:43:9b:56:01:72:3a:4b:d1:2c:a5:99:ed:fa:78:53: 8a:c0:7d:e6:01:fe:06:e6:43:59:33:cf:2a:13:12:cf:6e:ad: e8:41:cf:72:c7:55:37:53:af:36:1d:4d:bc:d5:28:a7:49:98: f8:ff:81:1b:a1:c0:a9:38:7c:0a:b9:01:4e:ac:5c:1e:b9:aa: 77:46:c5:df:2e:9a:21:d9:e0:3c:b3:40:50:4e:96:d2:eb:9c: 4b:a6:6d:03:4c:84:29:c2:f2:cd:83:c3:a3:e6:6a:8f:3c:d3: bc:27:55:0c:a8:5b:98:73:0e:81:74:2c:7a:77:7e:96:ae:a0: 82:9f:4f:59:e1:b6:52:48:6f:52:35:03:45:4e:fd:7b:64:6a: c1:50:8e:3d -----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgISAZt+OBpnlmUR2w2xjMgTQOBdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjkyYjVkYTRiNGZmZWFmNzIwNjQ5NTE4ZmJhYWExMGM1Y2IyODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiQ6xeL08bTuua7xFL9U/TU/HD/1 NN2U9aEtzi2O9BXh43IjaqM8hmVY0WnBDuGRZ5GY9WqtY9NLgys0NtUgEFyIiqzj ixOtIFTdDLDubZqyvOlrlas9DjX0pf17LU4g3aLkaeRcHkxtv7/6TatO3FtUXZ0V 7hs61DFKaqvNBcHjPwWmPDdnW9PvYjsogzh/Hks5gA9vX4PPDXnb8ibq324aBwc+ uheRIyeRnkvGB/751MPDE7NtsHZ9s/LVx4v8tYBMIg5ougdc8mcHvc1epqk7djXg EcFZDdSSPkbtEc/nxkJje3bUddG14b79oq24Nz+tTZna2H37XFh26cFKRwIDAQAB o4IC8TCCAu0wHQYDVR0OBBYEFEKStdpLT/6vcgZJUY+6qhDFyygRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1LzQ1MjJm Yi1jMWRhLTRjY2MtYTdjNy1hMDQzZTFiNjdiOTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvNDUyMmZi LWMxZGEtNGNjYy1hN2M3LWEwNDNlMWI2N2I5NC8xL1FwSzEya3RQX3E5eUJrbFJq N3FxRU1YTEtCRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGEGCCsGAQUF BwEHAQH/BFIwUDA2BAIAATAwAwQALXHtAwQBXXK0AwQAZ+VRAwQCZ/ucAwQAsHfX AwQBuQGgAwQAudsGAwQCwSXYMBYEAgACMBADBwAgAQf4AQ8DBQAqEOMAMCkGCCsG AQUFBwEIAQH/BBowGKAWMBQCAwCvNgIDAMk9AgMA3EkCAwMaGzANBgkqhkiG9w0B AQsFAAOCAQEADJxLvlknoQhOaysMfMvWMaWpGIlXG5sGLkFDJyb4pa1WKBTY0FSt 6/hl4fj7QXXfMJF9+LWXRZQxvXKzSiKex8RGqxTSxJNvnrG/DPvhHyZJhYt8MHp8 ousIXVXs55s01oFKaZ/6UV5QElwr4cyGQ5tWAXI6S9EspZnt+nhTisB95gH+BuZD WTPPKhMSz26t6EHPcsdVN1OvNh1NvNUop0mY+P+BG6HAqTh8CrkBTqxcHrmqd0bF 3y6aIdngPLNAUE6W0uucS6ZtA0yEKcLyzYPDo+ZqjzzTvCdVDKhbmHMOgXQsend+ lq6ggp9PWeG2UkhvUjUDRU79e2RqwVCOPQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:16 2026 by rpki-client