This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer (raw, json) Hash identifier: DMuYBZ0JbGCB43rInbVjEQtWZeuxxfVcX6c+Kmw5ffs= Subject key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77592B6BEC83C72D6273491E8674AC7A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210461 AS: 210925 AS: 211509 IP: 185.1.225.0/24 IP: 2001:678:3f4::/48 IP: 2001:7f8:11f::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2b:6b:ec:83:c7:2d:62:73:49:1e:86:74:ac:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:49:73:d2:0b:f1:0b:69:73:13:d9:be:33:89: 1f:56:80:38:96:70:eb:be:98:c3:58:4e:c9:df:c2: ea:88:d1:50:f9:e2:84:5d:64:f6:ef:d6:b5:bc:25: 1e:71:c6:7b:30:b8:72:5d:1d:38:c8:40:62:04:a2: 84:22:f5:33:75:dc:2b:b0:c1:7d:e9:57:ff:52:c1: 60:61:2d:37:a2:a7:8e:43:d3:45:62:17:80:e9:13: 4e:03:98:85:dd:45:d1:d3:d9:43:dd:fb:1c:61:98: 81:f1:fe:2a:88:1e:1a:82:2e:4e:dd:50:c1:de:42: 82:46:ff:f5:ba:83:f0:90:88:27:cb:4b:29:b1:bc: 2a:e4:5b:8b:1f:1b:f8:78:77:6e:18:4a:32:ff:9b: 3b:d0:d1:1b:b6:16:a5:c1:8c:63:a9:fb:6c:ac:8e: d9:13:42:c3:cd:a3:15:7f:1e:ac:c6:f1:cf:d9:6a: 01:ea:58:bd:58:ff:0d:9f:78:e7:0b:f9:49:89:fd: d5:ae:9a:57:2b:fc:fb:3e:18:80:28:28:2f:25:50: 14:e0:d7:34:41:1c:a3:a9:8d:0f:f7:b9:e0:de:b7: e3:d2:66:09:cc:2e:38:ec:27:08:00:9a:c0:fc:3a: db:67:61:a1:39:bc:d6:06:ec:f5:a6:3f:9f:05:8d: 42:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.225.0/24 IPv6: 2001:678:3f4::/48 2001:7f8:11f::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210461 210925 211509 Signature Algorithm: sha256WithRSAEncryption 88:34:42:d9:5b:ee:27:00:8b:aa:71:39:c3:7a:d1:3d:21:92: d4:f9:f2:18:75:24:05:7f:0a:8d:f3:52:2b:b6:64:2b:d8:f4: 89:58:51:1f:c7:0a:b4:72:33:fc:e8:45:49:aa:82:c3:5f:fd: b0:61:d6:a6:41:a2:5c:5b:56:22:db:b7:9a:a8:39:d9:85:22: 11:1f:95:57:13:0b:85:37:d2:17:9b:15:88:c6:d9:3c:b1:dc: 95:3c:7f:7b:e1:c3:30:bf:f9:75:76:46:be:49:47:d3:4d:97: 93:bc:9a:ed:20:01:12:1f:2d:7a:2b:ad:5b:e7:84:17:82:6d: 47:54:23:92:01:2e:34:5a:d0:a4:93:0b:7a:5d:15:ea:95:ea: 71:d8:8f:82:b3:9e:0d:99:e5:21:1e:57:05:00:68:26:9a:96: 48:64:7a:2c:54:f0:0e:02:5d:d5:c7:23:24:aa:29:af:20:72: b8:66:2e:22:c9:41:f0:10:ae:ad:46:df:f3:2a:af:f1:e2:19: 76:79:7a:5c:76:1f:27:23:4f:27:96:c9:d7:e0:65:e6:ad:36: 2c:89:fd:ce:8b:4c:cb:e0:20:24:c0:83:cd:55:03:04:cc:df: 61:dd:5c:a5:7a:7e:81:1d:bd:9b:11:fa:e8:ef:9d:00:97:e3: 30:38:32:14 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZt3WStr7IPHLWJzSR6GdKx6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmU3ZmM2Yjc0YjJiODYzMjgxMWZkZmQ4MTZkMDNlOTM5YWZkNzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ulz0gvxC2lzE9m+M4kfVoA4lnDr vpjDWE7J38LqiNFQ+eKEXWT279a1vCUeccZ7MLhyXR04yEBiBKKEIvUzddwrsMF9 6Vf/UsFgYS03oqeOQ9NFYheA6RNOA5iF3UXR09lD3fscYZiB8f4qiB4agi5O3VDB 3kKCRv/1uoPwkIgny0spsbwq5FuLHxv4eHduGEoy/5s70NEbthalwYxjqftsrI7Z E0LDzaMVfx6sxvHP2WoB6li9WP8Nn3jnC/lJif3VrppXK/z7PhiAKCgvJVAU4Nc0 QRyjqY0P97ng3rfj0mYJzC447CcIAJrA/DrbZ2GhObzWBuz1pj+fBY1CvwIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFELn/Gt0srhjKBH9/YFtA+k5r9cSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiL2E3Y2Nl ZC1kYTU0LTQwMzctYmM5YS0yZjkwNmRhMmVmMjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvYTdjY2Vk LWRhNTQtNDAzNy1iYzlhLTJmOTA2ZGEyZWYyMC8xL1F1ZjhhM1N5dUdNb0VmMzln VzBENlRtdjF4SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF BwEHAQH/BCowKDAMBAIAATAGAwQAuQHhMBgEAgACMBIDBwAgAQZ4A/QDBwAgAQf4 AR8wJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDAzYdAgMDN+0CAwM6NTANBgkqhkiG 9w0BAQsFAAOCAQEAiDRC2VvuJwCLqnE5w3rRPSGS1PnyGHUkBX8KjfNSK7ZkK9j0 iVhRH8cKtHIz/OhFSaqCw1/9sGHWpkGiXFtWItu3mqg52YUiER+VVxMLhTfSF5sV iMbZPLHclTx/e+HDML/5dXZGvklH002Xk7ya7SABEh8teiutW+eEF4JtR1QjkgEu NFrQpJMLel0V6pXqcdiPgrOeDZnlIR5XBQBoJpqWSGR6LFTwDgJd1ccjJKopryBy uGYuIslB8BCurUbf8yqv8eIZdnl6XHYfJyNPJ5bJ1+Bl5q02LIn9zotMy+AgJMCD zVUDBMzfYd1cpXp+gR29mxH66O+dAJfjMDgyFA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:06:21 2026 by rpki-client