This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer File: QpK12ktP_q9yBklRj7qqEMXLKBE.cer (raw, json) Hash identifier: CpqQzIlv7qkNcbDkvyMXKXpc6G8EJTjhrCAQBg9qJEM= Subject key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019ADF2C490A12CEC2C8E4CB831410131C77 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 02 Dec 2025 13:06:52 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 44854 AS: 51517 AS: 56393 AS: 203291 IP: 45.113.237.0/24 IP: 93.114.180.0/23 IP: 103.229.81.0/24 IP: 176.119.215.0/24 IP: 185.1.160.0/23 IP: 185.219.6.0/24 IP: 193.37.216.0/22 IP: 2001:7f8:10f::/48 IP: 2a10:e300::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:2c:49:0a:12:ce:c2:c8:e4:cb:83:14:10:13:1c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 2 13:06:52 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:24:3a:c5:e2:f4:f1:b4:ee:b9:ae:f1:14:bf: 54:fd:35:3f:1c:3f:f5:34:dd:94:f5:a1:2d:ce:2d: 8e:f4:15:e1:e3:72:23:6a:a3:3c:86:65:58:d1:69: c1:0e:e1:91:67:91:98:f5:6a:ad:63:d3:4b:83:2b: 34:36:d5:20:10:5c:88:8a:ac:e3:8b:13:ad:20:54: dd:0c:b0:ee:6d:9a:b2:bc:e9:6b:95:ab:3d:0e:35: f4:a5:fd:7b:2d:4e:20:dd:a2:e4:69:e4:5c:1e:4c: 6d:bf:bf:fa:4d:ab:4e:dc:5b:54:5d:9d:15:ee:1b: 3a:d4:31:4a:6a:ab:cd:05:c1:e3:3f:05:a6:3c:37: 67:5b:d3:ef:62:3b:28:83:38:7f:1e:4b:39:80:0f: 6f:5f:83:cf:0d:79:db:f2:26:ea:df:6e:1a:07:07: 3e:ba:17:91:23:27:91:9e:4b:c6:07:fe:f9:d4:c3: c3:13:b3:6d:b0:76:7d:b3:f2:d5:c7:8b:fc:b5:80: 4c:22:0e:68:ba:07:5c:f2:67:07:bd:cd:5e:a6:a9: 3b:76:35:e0:11:c1:59:0d:d4:92:3e:46:ed:11:cf: e7:c6:42:63:7b:76:d4:75:d1:b5:e1:be:fd:a2:ad: b8:37:3f:ad:4d:99:da:d8:7d:fb:5c:58:76:e9:c1: 4a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.113.237.0/24 93.114.180.0/23 103.229.81.0/24 176.119.215.0/24 185.1.160.0/23 185.219.6.0/24 193.37.216.0/22 IPv6: 2001:7f8:10f::/48 2a10:e300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44854 51517 56393 203291 Signature Algorithm: sha256WithRSAEncryption 69:f6:3d:0c:8f:13:85:97:bf:84:78:75:f0:a1:5f:ee:24:c9: ed:e1:82:54:82:56:55:73:68:a5:21:58:8f:32:24:78:6f:ec: 86:e1:ba:66:87:0c:f0:b5:49:49:62:dd:30:2e:9e:4e:d4:a4: 53:0b:08:a6:9b:d5:cc:0b:7f:7e:65:35:aa:50:6f:17:b8:95: 08:d3:bc:f7:87:c6:a6:aa:56:4b:f1:cc:f8:ed:2f:bb:15:30: 08:ba:6d:b5:79:39:ea:4a:14:42:26:54:ee:11:e8:a4:06:1c: 55:6b:83:8f:17:a1:db:da:84:7c:ed:04:54:fb:43:30:bb:6c: 23:73:8f:66:30:73:c9:3e:41:be:43:21:61:9b:c4:69:29:d9: 65:7f:3f:b5:a8:ef:ba:09:56:22:a7:f5:e4:ef:98:7c:93:27: 7f:82:b7:ee:9c:f8:a4:07:ad:fe:1d:b0:12:74:42:7d:a3:45: 26:52:8e:2c:42:81:fa:61:f5:e9:7c:ff:19:a0:b2:64:85:47: 6b:07:e4:4f:fe:5d:26:93:05:42:80:42:81:23:e6:ef:cd:76: 33:aa:48:08:72:5a:42:46:82:44:3f:c7:70:3d:0b:0a:56:9a: 89:ba:57:d9:44:eb:55:cd:f0:85:2f:6d:3c:27:60:7d:fa:20: bf:d5:36:bb -----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgISAZrfLEkKEs7CyOTLgxQQExx3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAyMTMwNjUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjkyYjVkYTRiNGZmZWFmNzIwNjQ5NTE4ZmJhYWExMGM1Y2IyODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiQ6xeL08bTuua7xFL9U/TU/HD/1 NN2U9aEtzi2O9BXh43IjaqM8hmVY0WnBDuGRZ5GY9WqtY9NLgys0NtUgEFyIiqzj ixOtIFTdDLDubZqyvOlrlas9DjX0pf17LU4g3aLkaeRcHkxtv7/6TatO3FtUXZ0V 7hs61DFKaqvNBcHjPwWmPDdnW9PvYjsogzh/Hks5gA9vX4PPDXnb8ibq324aBwc+ uheRIyeRnkvGB/751MPDE7NtsHZ9s/LVx4v8tYBMIg5ougdc8mcHvc1epqk7djXg EcFZDdSSPkbtEc/nxkJje3bUddG14b79oq24Nz+tTZna2H37XFh26cFKRwIDAQAB o4IC6zCCAucwHQYDVR0OBBYEFEKStdpLT/6vcgZJUY+6qhDFyygRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1LzQ1MjJm Yi1jMWRhLTRjY2MtYTdjNy1hMDQzZTFiNjdiOTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvNDUyMmZi LWMxZGEtNGNjYy1hN2M3LWEwNDNlMWI2N2I5NC8xL1FwSzEya3RQX3E5eUJrbFJq N3FxRU1YTEtCRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGCCsGAQUF BwEHAQH/BEwwSjAwBAIAATAqAwQALXHtAwQBXXK0AwQAZ+VRAwQAsHfXAwQBuQGg AwQAudsGAwQCwSXYMBYEAgACMBADBwAgAQf4AQ8DBQAqEOMAMCkGCCsGAQUFBwEI AQH/BBowGKAWMBQCAwCvNgIDAMk9AgMA3EkCAwMaGzANBgkqhkiG9w0BAQsFAAOC AQEAafY9DI8ThZe/hHh18KFf7iTJ7eGCVIJWVXNopSFYjzIkeG/shuG6ZocM8LVJ SWLdMC6eTtSkUwsIppvVzAt/fmU1qlBvF7iVCNO894fGpqpWS/HM+O0vuxUwCLpt tXk56koUQiZU7hHopAYcVWuDjxeh29qEfO0EVPtDMLtsI3OPZjBzyT5BvkMhYZvE aSnZZX8/tajvuglWIqf15O+YfJMnf4K37pz4pAet/h2wEnRCfaNFJlKOLEKB+mH1 6Xz/GaCyZIVHawfkT/5dJpMFQoBCgSPm7812M6pICHJaQkaCRD/HcD0LClaaibpX 2UTrVc3whS9tPCdgffogv9U2uw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:30 2025 by rpki-client