This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer File: RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer (raw, json) Hash identifier: Iyaork/193nLYo91ginBbMb5vftXs1wkWnIrU4nfz3Q= Subject key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82DBEFFF4E811684270679ACD5DA62 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207906 AS: 209311 IP: 193.111.211.0/24 IP: 195.189.184.0/23 IP: 195.189.190.0/23 IP: 2a0a:8ac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:db:ef:ff:4e:81:16:84:27:06:79:ac:d5:da:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f3:eb:a8:d3:ab:77:d1:70:12:a3:7f:0d:21: 05:aa:5a:58:61:ff:42:29:73:90:69:e4:4b:0b:4d: 28:e6:86:70:c6:15:a5:96:7a:4a:23:e8:c6:57:e0: 3d:34:85:15:21:65:7a:38:80:f6:30:75:84:70:02: 8f:33:58:02:bc:db:c9:72:ca:c2:6c:9f:43:28:19: f5:2a:c1:e1:d6:5f:68:97:8f:b7:ca:07:0e:44:ed: 01:66:8b:2b:b4:ba:5c:cd:b1:1d:e4:9f:cc:8c:95: f8:1c:f8:30:25:03:f8:a2:e9:b7:e6:02:10:1c:4e: 41:a8:c0:d8:b7:75:71:f4:b8:74:14:fc:0b:8c:02: 88:c5:bb:dc:f2:e3:15:87:57:03:d7:df:58:53:a2: dd:7c:09:a5:aa:92:87:49:48:09:90:c6:ec:9b:32: 27:b3:10:4a:d7:f3:f5:e9:7c:88:72:6f:e5:55:f0: be:bf:d3:35:8a:c3:4c:db:0b:86:7c:f6:bf:6f:91: 9b:57:88:0c:66:6c:08:02:73:30:95:3a:a0:90:52: a2:ef:25:db:bb:e7:5c:31:32:82:de:d8:75:e2:58: 40:76:6d:0b:38:1d:86:d3:2e:36:f4:d6:8c:47:1d: 51:20:04:22:88:09:90:35:34:b4:17:06:a3:ab:f4: c1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.211.0/24 195.189.184.0/23 195.189.190.0/23 IPv6: 2a0a:8ac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207906 209311 Signature Algorithm: sha256WithRSAEncryption 90:2e:cf:e8:c1:52:8c:bd:0a:45:69:7e:62:16:3f:26:26:0e: 71:1e:9a:20:96:85:0b:90:48:ba:e2:46:26:20:f4:08:ed:47: 5b:58:3e:65:c7:ba:68:33:4c:26:69:a1:c6:a9:42:0e:fe:ea: c8:ed:0c:4d:2a:8a:35:3b:2b:f4:db:ec:34:ef:be:e5:c9:99: 27:26:5c:68:04:b3:e4:ba:0f:4b:71:bc:62:f1:84:02:19:4f: 96:d2:84:81:66:cc:6f:2e:a3:18:85:f5:a0:ff:70:d2:be:6f: dc:6f:35:5e:a4:cc:fb:93:aa:1d:74:42:2b:92:f7:fa:80:8a: 94:99:12:59:26:80:da:93:84:e9:4b:33:65:07:e1:47:76:2b: 22:6d:93:5c:f8:64:b0:f0:40:01:c1:49:ce:e5:dd:f9:2a:af: b2:cf:31:7b:48:2b:21:e5:cd:ea:0e:85:65:a9:08:61:5b:82: 2e:ff:85:ab:41:72:2f:31:10:08:28:3c:86:0d:7d:1a:7b:a9: 86:41:92:ee:78:c5:78:38:c3:be:77:8d:e6:08:4f:bc:cb:7b: ac:dd:87:7d:e5:e6:37:3c:da:ba:48:f7:78:d8:64:0b:71:6e: dd:96:48:9f:b2:e2:3e:b3:76:2d:2a:0b:8f:91:b2:df:66:9d: 64:8e:fd:a8 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt/gtvv/06BFoQnBnms1dpiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmE0YjM1YzhlMDI1NmVhYTJmYmY3NTFlNmMwMWU1ZTkwOWMwYTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vPrqNOrd9FwEqN/DSEFqlpYYf9C KXOQaeRLC00o5oZwxhWllnpKI+jGV+A9NIUVIWV6OID2MHWEcAKPM1gCvNvJcsrC bJ9DKBn1KsHh1l9ol4+3ygcORO0BZosrtLpczbEd5J/MjJX4HPgwJQP4oum35gIQ HE5BqMDYt3Vx9Lh0FPwLjAKIxbvc8uMVh1cD199YU6LdfAmlqpKHSUgJkMbsmzIn sxBK1/P16XyIcm/lVfC+v9M1isNM2wuGfPa/b5GbV4gMZmwIAnMwlTqgkFKi7yXb u+dcMTKC3th14lhAdm0LOB2G0y429NaMRx1RIAQiiAmQNTS0Fwajq/TBlwIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFEaks1yOAlbqovv3UebAHl6QnAofMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiLzExOTFk Ni01NDIzLTQyY2YtOGY2Yi0xMTc4ODZlYjdkNjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvMTE5MWQ2 LTU0MjMtNDJjZi04ZjZiLTExNzg4NmViN2Q2Ny8xL1JxU3pYSTRDVnVxaS1fZFI1 c0FlWHBDY0NoOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAwW/TAwQBw724AwQBw72+MA0EAgACMAcDBQMq CorAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMsIgIDAzGfMA0GCSqGSIb3DQEB CwUAA4IBAQCQLs/owVKMvQpFaX5iFj8mJg5xHpogloULkEi64kYmIPQI7UdbWD5l x7poM0wmaaHGqUIO/urI7QxNKoo1Oyv02+w0777lyZknJlxoBLPkug9Lcbxi8YQC GU+W0oSBZsxvLqMYhfWg/3DSvm/cbzVepMz7k6oddEIrkvf6gIqUmRJZJoDak4Tp SzNlB+FHdisibZNc+GSw8EABwUnO5d35Kq+yzzF7SCsh5c3qDoVlqQhhW4Iu/4Wr QXIvMRAIKDyGDX0ae6mGQZLueMV4OMO+d43mCE+8y3us3Yd95eY3PNq6SPd42GQL cW7dlkifsuI+s3YtKguPkbLfZp1kjv2o -----END CERTIFICATE-----Generated at Mon Jan 26 00:17:56 2026 by rpki-client