This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer File: QtzU0b098prdQHW2jymvkHBHRDw.cer (raw, json) Hash identifier: ek69iC46u6mt4trj1tO0q7pgYlzjlDZZTi3r/XZPpXw= Subject key identifier: 42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AE236CA9DDB53C1F88A6A508FE52B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.209.75.0/24 IP: 2001:67c:211c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e2:36:ca:9d:db:53:c1:f8:8a:6a:50:8f:e5:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42dcd4d1bd3df29add4075b68f29af907047443c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d7:11:06:54:f8:e7:94:dc:25:10:c7:48:08: 9b:2e:a0:a7:1b:a1:8f:2d:1b:b4:d1:e5:d6:29:b3: 9b:58:4c:92:11:98:2f:da:5d:aa:37:b9:61:8b:09: 53:ad:d1:c3:56:38:c0:9c:e1:70:0e:f1:b7:77:47: 3f:6f:59:c9:51:f3:63:ba:c5:23:69:00:f1:1a:88: 8d:0d:a0:7f:ba:e1:85:e0:c6:90:f6:cd:5a:52:e9: 7a:8c:91:43:57:c0:4a:ea:99:c6:6c:54:04:4e:2a: 55:3d:ed:f8:af:1c:bb:c4:aa:7d:b1:6f:b1:38:ec: eb:87:95:c3:25:0f:42:78:5d:aa:9a:7d:31:bb:6e: 39:af:21:22:5e:d5:a3:91:c5:ef:1e:66:e5:68:8d: b0:c9:d4:fc:84:54:b4:8c:79:1b:70:f2:0b:78:47: 7f:d9:91:ff:ec:82:59:e4:6f:7e:7d:d7:c4:aa:e1: 73:08:68:ca:f0:03:75:66:8f:52:22:1b:fe:10:ad: 93:e3:b7:b7:35:ed:52:b7:d2:9c:75:c4:7b:91:d3: 66:9d:a6:28:5e:64:52:97:cd:14:ea:54:7a:5c:bc: da:a2:50:8b:ea:68:14:a1:8c:e8:62:cc:72:81:15: 6c:3a:b1:b3:fb:0e:6a:df:e4:95:c3:fe:22:56:85: 93:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.75.0/24 IPv6: 2001:67c:211c::/48 Signature Algorithm: sha256WithRSAEncryption 54:9a:cc:d9:80:a0:17:5d:53:16:b1:b1:93:99:49:c7:24:35: b8:ec:91:06:2f:5d:e6:7a:cc:e6:ee:a4:19:48:31:14:a3:67: f1:dc:0e:b7:36:43:9d:4d:b7:c1:67:ba:37:e7:ae:3a:0f:17: 4c:dd:36:48:58:77:0d:a1:34:e8:ad:73:00:37:2c:37:dc:37: 81:31:ba:07:49:11:3a:53:b1:8b:aa:f0:30:99:06:0d:a8:66: cb:01:d4:aa:a4:db:c9:d9:03:b3:ae:0d:e4:cb:71:5e:ac:0e: 07:fa:91:44:42:5f:8e:64:40:7d:f2:58:ae:2f:fc:0c:b4:22: 6e:fb:08:e9:37:c4:29:ef:16:75:da:59:34:76:69:fa:fe:fe: 7b:f4:d6:7f:3b:93:87:63:89:c9:42:77:cd:40:2c:a6:43:e4: cc:fc:24:df:fe:2b:a5:d9:d1:67:b9:d7:e2:5d:a0:ff:b6:31: 9e:85:9b:27:50:0c:0c:ed:8d:8a:ab:16:ed:ab:88:f6:77:1e: 2c:e7:38:c7:f6:1f:fa:9a:fb:0a:b9:75:ab:38:89:66:3d:5a: 93:99:08:83:72:4e:d7:0f:eb:7c:0c:c2:a4:e1:e6:59:72:07: b4:bb:08:0f:f3:20:ab:51:fa:95:d6:db:e9:1f:7e:de:ce:53: cb:97:c6:13 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt6WuI2yp3bU8H4impQj+UrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmRjZDRkMWJkM2RmMjlhZGQ0MDc1YjY4ZjI5YWY5MDcwNDc0NDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtcRBlT455TcJRDHSAibLqCnG6GP LRu00eXWKbObWEySEZgv2l2qN7lhiwlTrdHDVjjAnOFwDvG3d0c/b1nJUfNjusUj aQDxGoiNDaB/uuGF4MaQ9s1aUul6jJFDV8BK6pnGbFQETipVPe34rxy7xKp9sW+x OOzrh5XDJQ9CeF2qmn0xu245ryEiXtWjkcXvHmblaI2wydT8hFS0jHkbcPILeEd/ 2ZH/7IJZ5G9+fdfEquFzCGjK8AN1Zo9SIhv+EK2T47e3Ne1St9KcdcR7kdNmnaYo XmRSl80U6lR6XLzaolCL6mgUoYzoYsxygRVsOrGz+w5q3+SVw/4iVoWTzwIDAQAB o4IClTCCApEwHQYDVR0OBBYEFELc1NG9PfKa3UB1to8pr5BwR0Q8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzI5N2Yx ZS05MjJiLTQ1YjQtODkzZi1mYjk4ZmUzZGJjMTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvMjk3ZjFl LTkyMmItNDViNC04OTNmLWZiOThmZTNkYmMxNC8xL1F0elUwYjA5OHByZFFIVzJq eW12a0hCSFJEdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW9FLMA8EAgACMAkDBwAgAQZ8IRwwDQYJKoZI hvcNAQELBQADggEBAFSazNmAoBddUxaxsZOZScckNbjskQYvXeZ6zObupBlIMRSj Z/HcDrc2Q51Nt8FnujfnrjoPF0zdNkhYdw2hNOitcwA3LDfcN4ExugdJETpTsYuq 8DCZBg2oZssB1Kqk28nZA7OuDeTLcV6sDgf6kURCX45kQH3yWK4v/Ay0Im77COk3 xCnvFnXaWTR2afr+/nv01n87k4djiclCd81ALKZD5Mz8JN/+K6XZ0We51+JdoP+2 MZ6FmydQDAztjYqrFu2riPZ3HiznOMf2H/qa+wq5das4iWY9WpOZCINyTtcP63wM wqTh5llyB7S7CA/zIKtR+pXW2+kfft7OU8uXxhM= -----END CERTIFICATE-----Generated at Mon Jan 26 12:24:34 2026 by rpki-client