This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer File: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer (raw, json) Hash identifier: /hU6lrFmXLcbFMg+CMxQLHyTSbHUgYGXAXo0JNc1Gto= Subject key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF11EE1D096610F1FEFD820101FCB83 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199640 IP: 185.8.140.0/22 IP: 2a03:3c40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:1e:e1:d0:96:61:0f:1f:ef:d8:20:10:1f:cb:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6d:dd:da:fa:b7:03:f8:ce:41:4e:53:d2:75: 26:31:28:20:2a:82:ec:56:ed:87:76:24:8c:f4:2f: 1a:a2:ea:eb:60:34:21:3c:ee:79:f4:95:50:e6:67: 8c:f7:19:ba:3d:77:c7:47:d5:cd:b4:af:d8:cf:86: 55:79:b5:61:2b:4b:c5:b8:db:e3:7c:96:24:e5:a0: 1d:18:bf:0b:87:d1:05:b8:df:d4:1a:97:06:fd:9a: e4:a1:de:ae:33:45:3a:12:c0:c4:0b:14:23:aa:be: 7a:60:bf:08:3e:55:c9:05:0c:2b:74:0e:4d:4e:49: 3d:2e:33:97:62:3a:47:31:b7:e1:87:d2:b8:72:c3: 43:ad:f3:8f:92:81:56:86:3b:16:21:cf:af:b1:d1: 87:ab:3d:cf:20:a2:a7:8b:e8:4e:c0:99:e0:34:ca: 69:c4:57:20:34:62:61:11:6b:d2:b1:88:5e:f4:7d: 0d:32:2f:5b:b4:68:f4:74:52:bf:b7:13:a0:cf:4c: e0:96:3d:6b:db:fa:6e:21:03:d1:c7:45:58:82:cb: 11:bc:a0:42:5b:41:37:9d:86:19:2d:bc:dd:58:0d: 60:66:40:75:06:2d:8b:0f:b3:bc:0d:fb:df:17:e3: d6:2f:16:64:9d:04:8f:6e:40:06:a2:a4:51:60:1a: cd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.8.140.0/22 IPv6: 2a03:3c40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199640 Signature Algorithm: sha256WithRSAEncryption 5e:a8:61:90:cd:cb:d3:bf:e9:dc:52:66:dc:10:75:78:d8:c0: d9:44:7b:72:3b:29:30:75:b7:52:55:e3:16:ef:d4:51:75:56: 3b:1c:e2:b1:1b:ce:26:2a:c9:22:c9:e3:42:f9:fd:3c:47:f8: ce:cd:a3:b2:8d:6a:36:10:51:8e:c1:51:19:24:a0:e8:63:17: d2:56:e3:0b:e0:62:a8:97:84:58:5d:eb:e8:cf:a8:ea:e8:f7: 36:8c:89:c5:40:97:0f:38:46:0c:4b:21:27:57:e4:28:a9:b4: e8:88:dd:21:8f:02:19:f0:7c:6d:0f:f5:2d:f6:bb:35:b4:a1: d1:48:b3:56:47:82:9f:1a:57:b3:49:f9:7c:15:77:b5:1f:66: 74:07:5f:c2:62:0f:45:a3:f9:f3:22:f7:40:03:17:b1:53:b1: 22:ff:f3:11:18:bb:2b:cc:39:95:7e:09:1f:5b:de:02:0a:75: 3e:8a:af:cb:de:c6:8b:d1:8e:96:98:c6:73:cb:ac:22:b1:6c: 8a:56:ff:db:d1:66:54:95:ea:3e:37:9a:06:04:6c:18:96:ff: 73:25:6c:2f:0d:a0:0d:0a:ba:7b:8f:ea:c5:5c:68:10:ac:06: cf:88:f1:66:b2:5f:07:6b:0f:5e:67:b9:a0:1a:b5:46:2a:73: 3a:29:0c:e0 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/8R7h0JZhDx/v2CAQH8uDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjliMWNmMjFkMjBmOGM2Zjk0NjQxZTMzMjdlNDU1NWUyZTQxMTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp23d2vq3A/jOQU5T0nUmMSggKoLs Vu2HdiSM9C8aourrYDQhPO559JVQ5meM9xm6PXfHR9XNtK/Yz4ZVebVhK0vFuNvj fJYk5aAdGL8Lh9EFuN/UGpcG/Zrkod6uM0U6EsDECxQjqr56YL8IPlXJBQwrdA5N Tkk9LjOXYjpHMbfhh9K4csNDrfOPkoFWhjsWIc+vsdGHqz3PIKKni+hOwJngNMpp xFcgNGJhEWvSsYhe9H0NMi9btGj0dFK/txOgz0zglj1r2/puIQPRx0VYgssRvKBC W0E3nYYZLbzdWA1gZkB1Bi2LD7O8DfvfF+PWLxZknQSPbkAGoqRRYBrNNwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEKbHPIdIPjG+UZB4zJ+RVXi5BECMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmLzIwNDUw OS04YTMyLTRiMjgtOTdjOC1lNTZlNzM4MzgwZGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvMjA0NTA5 LThhMzItNGIyOC05N2M4LWU1NmU3MzgzODBkZS8xL1Fwc2M4aDBnLU1iNVJrSGpN bjVGVmVMa0VRSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQiMMA0EAgACMAcDBQAqAzxAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwML2DANBgkqhkiG9w0BAQsFAAOCAQEAXqhhkM3L07/p 3FJm3BB1eNjA2UR7cjspMHW3UlXjFu/UUXVWOxzisRvOJirJIsnjQvn9PEf4zs2j so1qNhBRjsFRGSSg6GMX0lbjC+BiqJeEWF3r6M+o6uj3NoyJxUCXDzhGDEshJ1fk KKm06IjdIY8CGfB8bQ/1Lfa7NbSh0UizVkeCnxpXs0n5fBV3tR9mdAdfwmIPRaP5 8yL3QAMXsVOxIv/zERi7K8w5lX4JH1veAgp1Poqvy97Gi9GOlpjGc8usIrFsilb/ 29FmVJXqPjeaBgRsGJb/cyVsLw2gDQq6e4/qxVxoEKwGz4jxZrJfB2sPXme5oBq1 RipzOikM4A== -----END CERTIFICATE-----Generated at Sun Jan 25 21:08:34 2026 by rpki-client