This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer File: RQxYEkixGuKkb1UuXKQ8adZecqg.cer (raw, json) Hash identifier: aL8H070TWD5xWY96vEACx8lYxfDriLdZkHZqneguCB4= Subject key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B365F6958E970552B17B170F4EFA098 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15363 IP: 193.101.11.0/24 IP: 193.101.24.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:5f:69:58:e9:70:55:2b:17:b1:70:f4:ef:a0:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f3:39:4e:97:b4:35:8f:48:60:58:78:86:92: 5f:d0:ec:37:19:28:63:c0:90:9e:f0:92:25:5d:73: 03:77:98:f0:13:97:6b:36:18:44:2b:6a:b2:4e:d3: 86:95:37:6e:fa:28:e7:b3:49:99:7c:f6:fe:52:5b: d7:27:24:3a:77:98:b7:33:30:73:6c:9a:a8:ff:78: 56:b8:6f:8b:e2:b6:3a:bf:e4:8c:43:4e:55:ac:34: b7:e3:26:62:66:e8:5d:57:16:8f:d0:33:c2:8e:04: 36:b1:1a:bf:b3:cf:57:fc:f9:fd:a7:76:89:09:c4: 9a:e3:08:e7:bd:5d:7c:a8:a5:70:8f:41:e2:94:d3: e4:a5:0b:69:69:5d:b6:14:50:d9:c0:83:36:63:33: 2a:a7:48:40:3e:98:68:dc:95:f0:34:56:5d:a1:26: 3e:5d:e7:e6:9a:0e:00:1a:25:da:1d:ad:85:dc:05: b2:47:d1:f8:56:b0:1b:ab:08:2f:95:2f:93:14:2d: 13:f0:45:1e:0e:ae:d5:e1:1e:6a:32:69:57:14:c4: 12:ad:fd:5b:21:92:d8:e1:42:2d:07:4a:69:c9:a1: ae:61:58:5f:dc:74:bf:ff:1a:d6:3a:70:a4:9a:cd: 32:fd:d5:d0:11:08:ea:55:2d:a1:2c:1e:55:d1:e6: f7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.101.11.0/24 193.101.24.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15363 Signature Algorithm: sha256WithRSAEncryption 1f:dd:57:ba:71:c9:dc:3e:3a:8e:90:53:5b:52:ec:4d:a6:69: 22:14:65:72:b2:2b:90:87:a0:16:b0:95:f7:15:46:03:c1:0b: 35:95:da:09:c0:32:8b:5b:41:e9:13:1a:90:2e:3e:20:cd:83: 02:38:b7:c1:35:51:cd:9d:cf:31:36:1b:74:47:f4:00:7c:3d: c3:b4:86:c3:a4:04:4c:87:81:c1:e2:4f:7b:41:07:f7:ef:86: 14:91:f5:f8:88:bf:0b:6b:9e:a9:06:fd:02:da:24:22:84:85: 05:f1:fe:cc:de:f7:6c:f5:58:19:65:59:4d:8f:54:06:3e:da: ff:cd:fc:a9:19:6e:c3:97:8f:4e:12:bf:54:9b:b9:df:46:f1: ad:08:f9:ca:1f:ba:a9:1b:1b:27:ad:f4:1b:05:3b:f9:fc:8e: 6a:94:28:52:21:76:a7:0f:57:a2:f0:83:a4:3a:ce:02:8f:99: 3d:00:00:72:aa:53:06:72:d9:c6:8d:80:79:ea:72:79:4e:4a: 82:a9:b3:75:3e:f5:dc:b6:a6:ab:da:5b:27:30:de:9b:21:83: c6:c2:68:8e:00:dc:03:c4:df:96:1d:73:2c:74:f5:e9:99:46: a0:47:7f:a3:8a:53:bb:04:f9:4a:db:de:6c:f1:31:87:52:a5: 95:6b:8d:33 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt7Nl9pWOlwVSsXsXD076CYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTBjNTgxMjQ4YjExYWUyYTQ2ZjU1MmU1Y2E0M2M2OWQ2NWU3MmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPM5Tpe0NY9IYFh4hpJf0Ow3GShj wJCe8JIlXXMDd5jwE5drNhhEK2qyTtOGlTdu+ijns0mZfPb+UlvXJyQ6d5i3MzBz bJqo/3hWuG+L4rY6v+SMQ05VrDS34yZiZuhdVxaP0DPCjgQ2sRq/s89X/Pn9p3aJ CcSa4wjnvV18qKVwj0HilNPkpQtpaV22FFDZwIM2YzMqp0hAPpho3JXwNFZdoSY+ Xefmmg4AGiXaHa2F3AWyR9H4VrAbqwgvlS+TFC0T8EUeDq7V4R5qMmlXFMQSrf1b IZLY4UItB0ppyaGuYVhf3HS//xrWOnCkms0y/dXQEQjqVS2hLB5V0eb3BQIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFEUMWBJIsRripG9VLlykPGnWXnKoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxLzFjZjBi Mi1jNTFkLTQ1ZjUtODRkYy03NDk5YTgyMzFmNTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvMWNmMGIy LWM1MWQtNDVmNS04NGRjLTc0OTlhODIzMWY1Ni8xL1JReFlFa2l4R3VLa2IxVXVY S1E4YWRaZWNxZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwWULAwQDwWUYMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAjwDMA0GCSqGSIb3DQEBCwUAA4IBAQAf3Ve6ccncPjqOkFNbUuxNpmki FGVysiuQh6AWsJX3FUYDwQs1ldoJwDKLW0HpExqQLj4gzYMCOLfBNVHNnc8xNht0 R/QAfD3DtIbDpARMh4HB4k97QQf374YUkfX4iL8La56pBv0C2iQihIUF8f7M3vds 9VgZZVlNj1QGPtr/zfypGW7Dl49OEr9Um7nfRvGtCPnKH7qpGxsnrfQbBTv5/I5q lChSIXanD1ei8IOkOs4Cj5k9AAByqlMGctnGjYB56nJ5TkqCqbN1PvXctqar2lsn MN6bIYPGwmiOANwDxN+WHXMsdPXpmUagR3+jilO7BPlK295s8TGHUqWVa40z -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:29 2026 by rpki-client