This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer File: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer (raw, json) Hash identifier: x+Qd0b+iJwhGFZuJ4yNUQ0NTjllc42WTsb36B3gl2EI= Subject key identifier: 43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C3B09ADC6AC560A0572DAF5D0604D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49020 IP: 185.139.12.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:3b:09:ad:c6:ac:56:0a:05:72:da:f5:d0:60:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4309599380c5c59dc06684920b694c3ea6d308a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:33:9b:68:47:ca:c8:5b:a4:6f:66:3e:42:2a: 1e:d9:ee:88:d4:94:7c:56:04:bf:3f:fd:65:8c:1a: 56:da:55:c1:28:12:97:50:33:a7:47:02:3f:24:0f: 4f:eb:68:a8:74:78:c6:85:c0:60:16:1f:91:0a:7e: 96:a6:82:07:1c:4e:d5:9a:aa:22:9d:3d:d2:e6:f4: 26:53:d1:76:1b:81:49:a3:fa:34:7a:84:d5:90:fc: 77:39:f3:34:1f:37:91:51:e6:c1:67:b0:02:73:1f: 86:6f:4a:65:a6:2f:6d:61:50:63:5d:6e:f7:1a:58: a2:d3:fc:b0:f2:f1:aa:48:1e:29:c2:86:ab:e9:ed: 11:f1:57:50:07:2d:b1:f6:2a:3e:8c:43:fa:d0:c5: 1e:95:8a:07:13:e7:d2:41:24:92:29:7e:69:a6:c8: 53:ee:5c:6c:46:83:fb:df:c0:95:22:e0:f9:c1:88: 7c:45:ba:38:31:f4:d7:5e:3a:d3:0a:81:2d:75:ed: e3:6e:6a:42:40:0a:ce:9e:57:5c:d6:60:fb:c1:b6: 3b:93:80:2d:aa:c6:27:70:d8:86:af:ff:ba:9d:09: ff:03:10:fc:66:dd:85:72:48:bb:3c:dc:d1:e4:ce: a1:a1:ce:e8:a6:16:c6:f8:fd:f7:59:7a:5f:72:5b: 75:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.12.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49020 Signature Algorithm: sha256WithRSAEncryption 72:56:13:9e:0d:a6:cb:51:77:fe:38:89:37:e0:b2:fc:96:4c: a3:db:f8:b7:5b:5a:6f:e7:07:ac:5c:36:66:12:ba:d8:79:fb: 65:cd:02:1d:dc:b7:a7:d9:33:d2:f3:c4:c9:41:7f:b2:5e:d1: fd:4b:21:26:e1:df:b7:a2:59:6b:46:c4:e9:cd:1d:3e:f3:d2: ab:ea:0d:98:bb:e5:a1:f9:98:49:9e:db:d0:b9:d6:c9:57:c6: 33:0d:83:28:bf:cd:85:09:5d:e0:db:e4:76:0c:0b:95:d4:97: 3d:fa:ed:37:75:cc:ee:84:db:d5:dd:86:24:4c:15:bd:d2:75: 4e:0c:7d:ea:1c:1c:1b:06:bd:66:99:65:d7:4c:9a:54:e7:95: a8:5b:56:23:bc:35:1b:c7:a1:09:39:e6:1c:3d:4d:c5:70:5a: 53:ff:f8:3b:a9:56:8c:74:a5:88:8c:4a:38:23:37:ec:1c:79: d5:fa:a1:81:99:be:09:07:a1:04:3a:fb:f1:64:df:53:26:15: 65:cd:19:e9:f7:d9:5e:d2:e9:27:27:e9:26:ed:27:2b:37:fd: af:99:f4:73:08:aa:43:a5:5d:19:df:4e:fd:96:48:65:45:ef: c1:c8:04:64:63:75:bc:b6:23:10:e0:46:0c:0a:88:88:62:d0: 0d:7c:26:a8 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9XDsJrcasVgoFctr10GBNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzA5NTk5MzgwYzVjNTlkYzA2Njg0OTIwYjY5NGMzZWE2ZDMwOGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/TObaEfKyFukb2Y+Qioe2e6I1JR8 VgS/P/1ljBpW2lXBKBKXUDOnRwI/JA9P62iodHjGhcBgFh+RCn6WpoIHHE7Vmqoi nT3S5vQmU9F2G4FJo/o0eoTVkPx3OfM0HzeRUebBZ7ACcx+Gb0plpi9tYVBjXW73 Glii0/yw8vGqSB4pwoar6e0R8VdQBy2x9io+jEP60MUelYoHE+fSQSSSKX5ppshT 7lxsRoP738CVIuD5wYh8Rbo4MfTXXjrTCoEtde3jbmpCQArOnldc1mD7wbY7k4At qsYncNiGr/+6nQn/AxD8Zt2Fcki7PNzR5M6hoc7ophbG+P33WXpfclt1xQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFEMJWZOAxcWdwGaEkgtpTD6m0wimMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2LzlhYjM3 ZC01YTk5LTQ0NDgtOGVmNS03YjVmOTgxNTVmZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvOWFiMzdk LTVhOTktNDQ0OC04ZWY1LTdiNWY5ODE1NWZlNi8xL1F3bFprNERGeFozQVpvU1ND MmxNUHFiVENLWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuYsMMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC/fDANBgkqhkiG9w0BAQsFAAOCAQEAclYTng2my1F3/jiJN+Cy/JZMo9v4t1ta b+cHrFw2ZhK62Hn7Zc0CHdy3p9kz0vPEyUF/sl7R/UshJuHft6JZa0bE6c0dPvPS q+oNmLvlofmYSZ7b0LnWyVfGMw2DKL/NhQld4NvkdgwLldSXPfrtN3XM7oTb1d2G JEwVvdJ1Tgx96hwcGwa9Zpll10yaVOeVqFtWI7w1G8ehCTnmHD1NxXBaU//4O6lW jHSliIxKOCM37Bx51fqhgZm+CQehBDr78WTfUyYVZc0Z6ffZXtLpJyfpJu0nKzf9 r5n0cwiqQ6VdGd9O/ZZIZUXvwcgEZGN1vLYjEOBGDAqIiGLQDXwmqA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:18 2026 by rpki-client