This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer File: QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer (raw, json) Hash identifier: /mRdO9XbOX+livW4Zj580ZvhCi9/hgzy781wohR+i0I= Subject key identifier: 43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BE0DFFBA75D80EBD15E3852A0A56F468E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 21 Jan 2026 14:05:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214427 IP: 31.171.211.0/24 IP: 2a01:fa00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:df:fb:a7:5d:80:eb:d1:5e:38:52:a0:a5:6f:46:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 21 14:05:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=431c57e1921d31a34aebd12e507a136fe04598c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4b:73:e1:f7:c5:5d:13:19:46:eb:5b:08:4d: 2b:d2:c3:95:4b:98:b6:98:fb:27:9b:25:e1:b9:e9: aa:b9:5a:92:fc:24:34:9c:f2:ee:bf:1a:fa:cb:18: db:cc:1b:50:c0:71:95:93:6e:32:d4:92:18:fe:5a: ca:40:58:11:a8:5e:f4:0a:5d:05:66:c6:b8:a6:31: dc:f4:04:53:c7:a7:72:1e:8a:cf:b0:00:08:96:3b: 84:a3:c9:a8:91:5f:21:7f:ef:f4:e7:43:3a:4c:d8: a0:20:8f:15:48:c4:8a:67:04:01:ed:5e:7c:6c:ba: 22:25:5d:87:22:8b:30:14:08:bf:79:73:ad:27:d3: 01:b8:71:4a:4f:67:a8:76:89:85:9b:6d:77:fe:d7: ba:1a:f6:a9:27:94:16:80:36:6b:6d:16:89:57:9e: 5e:90:87:ff:c4:cd:92:a4:12:de:e7:a2:52:70:61: e8:c3:67:5d:dc:03:c2:90:96:73:95:79:bb:b5:e8: 42:09:a5:fe:80:74:f6:eb:e2:bc:e8:64:79:71:18: a0:08:e3:6c:96:1c:fa:30:d0:82:eb:94:89:b3:41: 8d:05:c7:06:39:35:3c:eb:6d:a2:d4:1f:2a:e2:4c: 4b:37:4d:8e:ce:09:25:77:30:65:a9:48:53:f7:15: a5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.171.211.0/24 IPv6: 2a01:fa00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214427 Signature Algorithm: sha256WithRSAEncryption 58:98:59:3c:10:64:ac:e2:22:7f:19:cb:33:37:31:c0:43:1e: a9:00:48:b5:dd:71:ec:f5:9a:ee:87:60:0d:8b:c9:0e:06:cd: 14:63:4a:28:a1:f7:05:29:8d:a1:ca:1b:a5:71:1a:57:6a:52: 85:81:c6:48:ca:b6:5a:35:a9:3b:7e:9a:5d:34:ac:97:53:72: d2:3b:4b:ea:b5:9c:06:39:cc:80:f0:a1:b5:35:cf:d6:9e:0e: 2a:5e:34:92:57:77:3b:08:90:80:ad:02:27:4f:2b:73:cb:10: ca:1c:32:51:cc:d7:36:fa:fe:4b:fa:ff:76:7c:58:d2:df:44: 88:3c:ad:ab:ad:5a:92:91:21:17:13:15:bb:f1:26:62:e0:5b: 7f:30:24:34:27:9d:05:4b:82:d2:0c:fe:12:37:c5:66:be:98: 6a:c2:ff:78:2b:79:8f:bd:f6:03:66:ce:50:43:fb:7e:3b:40: 1a:5c:ae:f4:71:da:a1:fc:2b:1b:ca:7e:31:2c:30:d0:1d:6e: d2:a4:5e:7c:62:aa:fd:e5:fc:43:0b:95:7a:75:a7:45:e4:a2: 83:c5:bc:56:7f:34:5f:8c:51:a4:85:96:4e:4e:86:b0:e0:0b: 62:a0:25:c7:a6:bf:bc:ea:51:81:50:c0:de:8a:3d:6f:c1:70: ad:95:35:43 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZvg3/unXYDr0V44UqClb0aOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIxMTQwNTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzFjNTdlMTkyMWQzMWEzNGFlYmQxMmU1MDdhMTM2ZmUwNDU5OGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Utz4ffFXRMZRutbCE0r0sOVS5i2 mPsnmyXhuemquVqS/CQ0nPLuvxr6yxjbzBtQwHGVk24y1JIY/lrKQFgRqF70Cl0F Zsa4pjHc9ARTx6dyHorPsAAIljuEo8mokV8hf+/050M6TNigII8VSMSKZwQB7V58 bLoiJV2HIoswFAi/eXOtJ9MBuHFKT2eodomFm213/te6GvapJ5QWgDZrbRaJV55e kIf/xM2SpBLe56JScGHow2dd3APCkJZzlXm7tehCCaX+gHT26+K86GR5cRigCONs lhz6MNCC65SJs0GNBccGOTU8622i1B8q4kxLN02OzgkldzBlqUhT9xWlWwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEMcV+GSHTGjSuvRLlB6E2/gRZjGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1LzBmMWFh Zi1iMTczLTRjZTEtYmNiYS1jYzM1M2ViYWNiYTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvMGYxYWFm LWIxNzMtNGNlMS1iY2JhLWNjMzUzZWJhY2JhNi8xL1F4eFg0WklkTWFOSzY5RXVV SG9UYi1CRm1NWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAH6vTMA0EAgACMAcDBQMqAfoAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNFmzANBgkqhkiG9w0BAQsFAAOCAQEAWJhZPBBkrOIi fxnLMzcxwEMeqQBItd1x7PWa7odgDYvJDgbNFGNKKKH3BSmNocobpXEaV2pShYHG SMq2WjWpO36aXTSsl1Ny0jtL6rWcBjnMgPChtTXP1p4OKl40kld3OwiQgK0CJ08r c8sQyhwyUczXNvr+S/r/dnxY0t9EiDytq61akpEhFxMVu/EmYuBbfzAkNCedBUuC 0gz+EjfFZr6YasL/eCt5j732A2bOUEP7fjtAGlyu9HHaofwrG8p+MSww0B1u0qRe fGKq/eX8QwuVenWnReSig8W8Vn80X4xRpIWWTk6GsOALYqAlx6a/vOpRgVDA3oo9 b8FwrZU1Qw== -----END CERTIFICATE-----Generated at Mon Jan 26 17:29:48 2026 by rpki-client