This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer File: QukMnRAJsywZRbb45liUg8XqR0M.cer (raw, json) Hash identifier: giJvc2nChTXexvXoKlToB6C+jqrNQ/hFE5vDzM9t3tU= Subject key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4F665D30F64AC981EF223FAF426C8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28771 IP: 92.118.216.0/22 IP: 185.188.19.0/24 IP: 193.32.28.0/23 IP: 193.43.158.0/24 IP: 217.61.241.0/24 IP: 2001:67c:2b04::/48 IP: 2a09:d7c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:f6:65:d3:0f:64:ac:98:1e:f2:23:fa:f4:26:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:06:dc:53:b3:8d:17:d0:13:45:f2:67:d6: 69:48:e0:e5:e0:8a:d4:a3:58:04:74:4c:a1:31:13: 57:f5:14:b7:4a:ee:7c:77:5e:e5:47:76:74:4b:6d: cd:e5:2d:49:6c:3c:d1:32:4a:50:4b:23:d1:91:d7: 6b:aa:6c:ed:e7:de:89:7f:1f:5b:c7:d7:37:ec:26: 87:b0:58:c5:d1:3c:6a:a8:f1:94:87:e3:56:45:04: 78:18:0c:c7:32:16:b0:83:ed:7b:bb:e7:f0:ff:8c: 19:a0:1d:14:c5:c9:61:71:ed:80:09:27:b8:50:b7: 34:69:4f:9d:41:ef:e4:b0:0d:d1:29:04:99:63:b4: 9a:a8:c7:6b:66:d0:82:f4:c6:b2:de:93:de:7b:6c: 6c:af:be:40:94:1f:af:b2:12:e9:2b:44:82:44:05: 40:ab:b1:1d:96:eb:31:e1:78:b6:b1:ba:59:e5:9c: 5c:93:66:4f:17:e7:07:fc:1e:65:1e:a4:60:1e:09: c7:7b:44:91:e6:61:4d:43:fe:be:f1:e9:b7:c1:06: 00:38:a8:e6:60:99:f5:3c:fd:16:6d:f7:ec:e8:b4: bf:72:4a:52:bd:30:4f:ac:e8:89:4f:0a:df:0a:40: 1e:ae:32:1f:d9:a1:58:eb:3d:c3:4b:f7:1a:d0:f6: de:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.216.0/22 185.188.19.0/24 193.32.28.0/23 193.43.158.0/24 217.61.241.0/24 IPv6: 2001:67c:2b04::/48 2a09:d7c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28771 Signature Algorithm: sha256WithRSAEncryption 75:3c:b1:68:bb:db:f9:d2:96:bc:f5:76:69:5d:0a:02:59:4c: 8a:b6:42:ed:5c:ba:85:ac:d0:00:9a:51:8b:f9:9b:b4:d7:4d: 99:bb:3c:af:1b:38:0a:2a:1d:34:58:86:58:78:eb:3a:5e:51: f8:81:ac:d5:a9:82:a3:9d:62:3c:24:21:19:75:66:96:da:78: e6:b2:f8:37:4d:93:28:c6:6f:cc:72:86:d8:39:c6:67:5a:ce: 7f:85:37:7e:ea:24:20:12:f2:29:a1:00:43:00:71:74:92:08: 62:1e:8f:91:ee:58:66:e8:53:c0:5a:df:d1:e0:d5:d1:fb:1c: 22:a3:0f:69:96:78:a2:db:c4:45:83:a1:2e:2e:9c:40:2f:75: 47:bf:e1:d8:4d:09:a2:6c:c4:c7:f4:4a:39:e4:4e:ed:9d:f1: 84:ef:28:c5:36:85:c7:81:37:8e:29:ec:d3:6b:11:f9:c4:37: b2:5b:72:9b:b8:a6:dc:ae:5f:a0:25:f7:ec:29:1c:d7:7f:af: e0:f3:cc:4b:fb:07:7b:51:80:5a:26:62:ba:d7:ca:f5:3d:87: 64:6b:cf:d1:39:81:95:1f:27:11:fb:b8:ad:18:af:15:e7:c4: 66:81:b3:94:db:b0:88:b3:8f:c5:ec:31:aa:69:52:06:df:45: 30:62:b2:a9 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgISAZt+pPZl0w9krJge8iP69CbIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmU5MGM5ZDEwMDliMzJjMTk0NWI2ZjhlNjU4OTQ4M2M1ZWE0NzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+sG3FOzjRfQE0XyZ9ZpSODl4IrU o1gEdEyhMRNX9RS3Su58d17lR3Z0S23N5S1JbDzRMkpQSyPRkddrqmzt596Jfx9b x9c37CaHsFjF0TxqqPGUh+NWRQR4GAzHMhawg+17u+fw/4wZoB0Uxclhce2ACSe4 ULc0aU+dQe/ksA3RKQSZY7SaqMdrZtCC9May3pPee2xsr75AlB+vshLpK0SCRAVA q7Edlusx4Xi2sbpZ5Zxck2ZPF+cH/B5lHqRgHgnHe0SR5mFNQ/6+8em3wQYAOKjm YJn1PP0Wbffs6LS/ckpSvTBPrOiJTwrfCkAerjIf2aFY6z3DS/ca0PbegwIDAQAB o4ICzzCCAsswHQYDVR0OBBYEFELpDJ0QCbMsGUW2+OZYlIPF6kdDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4Lzk1NWE0 MC05ZDk0LTRmODItODhlNS02OWM2Mjk4NDE1ZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvOTU1YTQw LTlkOTQtNGY4Mi04OGU1LTY5YzYyOTg0MTVmOC8xL1F1a01uUkFKc3l3WlJiYjQ1 bGlVZzhYcVIwTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8GCCsGAQUF BwEHAQH/BEAwPjAkBAIAATAeAwQCXHbYAwQAubwTAwQBwSAcAwQAwSueAwQA2T3x MBYEAgACMBADBwAgAQZ8KwQDBQMqCdfAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnBjMA0GCSqGSIb3DQEBCwUAA4IBAQB1PLFou9v50pa89XZpXQoCWUyKtkLtXLqF rNAAmlGL+Zu0102ZuzyvGzgKKh00WIZYeOs6XlH4gazVqYKjnWI8JCEZdWaW2njm svg3TZMoxm/McobYOcZnWs5/hTd+6iQgEvIpoQBDAHF0kghiHo+R7lhm6FPAWt/R 4NXR+xwiow9plnii28RFg6EuLpxAL3VHv+HYTQmibMTH9Eo55E7tnfGE7yjFNoXH gTeOKezTaxH5xDeyW3KbuKbcrl+gJffsKRzXf6/g88xL+wd7UYBaJmK618r1PYdk a8/ROYGVHycR+7itGK8V58RmgbOU27CIs4/F7DGqaVIG30UwYrKp -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:19 2026 by rpki-client