This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer (raw, json) Hash identifier: x8wvVuFyx4p+9IHIdP3ON5wFNxLQJ4Op8TxIue9CQC0= Subject key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F839360C4B388871D349C5D20E69EBE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35145 IP: 5.181.224.0/22 IP: 194.53.200.0/22 IP: 194.61.236.0/22 IP: 2a0e:800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:93:60:c4:b3:88:87:1d:34:9c:5d:20:e6:9e:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:58:e4:8b:2a:c9:e6:14:67:4a:fd:8d:30:ed: eb:e5:11:73:86:35:13:e2:25:43:15:21:19:f2:69: bd:72:da:4b:51:f5:e4:a1:58:07:52:74:d8:db:d3: f4:43:c2:67:20:1c:78:be:82:21:5c:70:90:30:34: b8:10:b3:b8:1f:d0:91:bc:b4:8a:0a:58:b7:bd:42: ec:37:8c:b3:17:68:55:b2:f8:d3:ad:53:79:b2:7e: 23:5f:1b:7e:c3:af:4b:24:e2:91:a1:98:4c:a5:bb: 77:ba:27:39:a8:55:76:c3:2e:5e:7e:ba:e3:e2:68: 5a:7a:ae:59:e7:9d:46:08:b2:34:5d:92:ce:34:14: ba:5b:2f:82:6a:d8:8a:e1:03:5b:97:57:df:6d:2b: 5b:06:2a:8d:0c:12:eb:39:c9:b1:d4:1c:cd:22:61: 71:a7:1d:43:fe:80:d4:ae:3b:1d:d0:40:bd:fc:79: 3f:78:f7:49:4c:77:7f:4b:ed:86:bc:d2:86:36:29: b8:22:be:40:b8:89:3c:c9:b8:96:7c:96:0b:64:d6: 27:7b:56:24:76:51:30:a5:10:68:a0:bf:72:09:9f: fa:be:d7:95:85:3e:1c:67:91:8b:88:09:65:8c:16: 23:0b:63:e1:95:20:5f:63:1f:dd:d6:ef:2e:8b:2f: b7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.224.0/22 194.53.200.0/22 194.61.236.0/22 IPv6: 2a0e:800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35145 Signature Algorithm: sha256WithRSAEncryption 7d:90:e8:9e:a0:32:c3:1e:ad:5c:d8:18:f4:5c:9a:7c:52:ab: 8e:3a:2b:f3:76:f3:30:a3:e6:03:73:82:96:cf:3d:05:48:2d: 3e:31:78:c7:d3:48:0c:a2:68:43:b7:16:74:d5:a1:f1:27:34: 79:38:3d:d4:70:61:0f:ab:3a:c8:d4:24:ed:dc:3b:0f:73:76: 42:e1:fd:08:f9:27:16:dd:2f:e0:20:d4:7d:6f:5a:0d:02:f8: 84:f9:2e:4f:f5:71:66:f2:0b:91:c8:38:c2:8c:bf:0f:b0:e6: 2b:d1:56:32:96:20:4a:e3:da:42:f3:d8:a8:2c:c6:cd:95:80: 72:25:29:04:9f:6c:1c:38:2d:8c:2e:77:58:78:0e:46:50:38: 9a:fe:c9:43:e7:63:e0:ed:2a:63:8e:73:a8:88:8c:16:62:31: af:63:1c:a6:d4:94:ae:d2:f0:ca:31:23:0a:ed:4b:64:5e:cf: 74:1e:fd:53:ea:56:b5:60:e2:3e:d6:85:a9:ee:22:ac:1e:e3: 0d:3d:68:a1:d8:dc:3b:c1:34:e7:f3:28:c9:ce:4a:cd:3e:14: 41:95:e9:b1:9a:ad:24:fe:a9:b5:1b:c9:85:c2:5c:45:a4:fe: f1:15:79:f2:c5:b0:63:1c:14:6c:4d:ee:b8:1d:18:ed:cd:1d: c4:1a:cb:ce -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt/g5NgxLOIhx00nF0g5p6+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmNlNzU5MzIwMTk1YjljYzE4Y2NmY2IxYjUzMmFlYTk0OTI1OGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArljkiyrJ5hRnSv2NMO3r5RFzhjUT 4iVDFSEZ8mm9ctpLUfXkoVgHUnTY29P0Q8JnIBx4voIhXHCQMDS4ELO4H9CRvLSK Cli3vULsN4yzF2hVsvjTrVN5sn4jXxt+w69LJOKRoZhMpbt3uic5qFV2wy5efrrj 4mhaeq5Z551GCLI0XZLONBS6Wy+CatiK4QNbl1ffbStbBiqNDBLrOcmx1BzNImFx px1D/oDUrjsd0EC9/Hk/ePdJTHd/S+2GvNKGNim4Ir5AuIk8ybiWfJYLZNYne1Yk dlEwpRBooL9yCZ/6vteVhT4cZ5GLiAlljBYjC2PhlSBfYx/d1u8uiy+3lwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFELOdZMgGVucwYzPyxtTKuqUkljxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0L2E1MjA0 OC0xMmNhLTRhMDMtOTViZS02OTc5NDhlYTcxZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvYTUyMDQ4 LTEyY2EtNGEwMy05NWJlLTY5Nzk0OGVhNzFmNS8xL1FzNTFreUFaVzV6QmpNX0xH MU1xNnBTU1dQRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCBbXgAwQCwjXIAwQCwj3sMA0EAgACMAcDBQMq DggAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCJSTANBgkqhkiG9w0BAQsFAAOC AQEAfZDonqAywx6tXNgY9FyafFKrjjor83bzMKPmA3OCls89BUgtPjF4x9NIDKJo Q7cWdNWh8Sc0eTg91HBhD6s6yNQk7dw7D3N2QuH9CPknFt0v4CDUfW9aDQL4hPku T/VxZvILkcg4woy/D7DmK9FWMpYgSuPaQvPYqCzGzZWAciUpBJ9sHDgtjC53WHgO RlA4mv7JQ+dj4O0qY45zqIiMFmIxr2McptSUrtLwyjEjCu1LZF7PdB79U+pWtWDi PtaFqe4irB7jDT1oodjcO8E05/Moyc5KzT4UQZXpsZqtJP6ptRvJhcJcRaT+8RV5 8sWwYxwUbE3uuB0Y7c0dxBrLzg== -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:49 2026 by rpki-client