This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.cer (raw, json) Hash identifier: jZpZG1RjtrY+pRM+/i1Mjz9uj67hlTdRUWfoLrfKOcE= Subject key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C73FE48E7FDF8002E6183A6F69055F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198957 IP: 46.30.136.0/21 IP: 185.156.104.0/22 IP: 2a07:9600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3f:e4:8e:7f:df:80:02:e6:18:3a:6f:69:05:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ab:c3:e0:46:c2:37:ff:91:14:9f:b1:06:cd: 12:72:d1:8b:2f:fc:13:e6:6a:de:ba:07:64:e1:da: 44:23:ef:9d:d6:a0:50:bb:5b:d8:6d:63:cc:5e:db: de:af:7e:dc:4a:d7:34:4e:66:42:76:e4:61:47:bd: 11:44:d5:47:b3:09:7e:a1:f7:c0:d1:45:38:07:90: 7e:1a:ea:49:b8:ed:c9:be:3d:c7:8a:02:91:63:06: cb:c9:b7:08:96:77:3e:d8:19:e0:80:d9:a3:84:72: b5:77:67:34:8d:82:23:40:3b:2d:3c:0b:71:cf:bd: d4:1c:ab:22:f2:13:c1:9b:e1:d5:77:ca:8e:2c:32: 74:fb:73:fb:5c:c7:31:71:59:4b:cc:28:78:28:e9: 71:fb:5f:bc:bd:e4:93:da:2e:5e:0f:73:19:28:2d: ac:ca:9b:c0:4c:ed:ad:d2:a2:5d:dd:c5:75:b3:8a: 01:80:5b:1e:cb:92:dc:9d:e2:36:b6:6b:42:0d:c6: 5c:15:1a:79:10:ce:48:45:bb:88:c3:16:8f:d4:4e: 41:04:c8:0a:12:7d:9a:ea:75:18:30:31:12:38:17: 77:65:0a:ea:1d:e9:27:55:99:c2:fa:ac:52:3f:5f: 59:7e:7c:a6:a9:3f:14:30:38:83:b2:45:66:74:e2: 46:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.30.136.0/21 185.156.104.0/22 IPv6: 2a07:9600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198957 Signature Algorithm: sha256WithRSAEncryption 32:20:c1:90:27:3b:bd:88:e4:20:71:82:6d:da:4b:c2:2d:8b: 98:08:ec:86:95:db:d2:4c:00:32:35:c6:da:ea:5c:ef:c3:92: 11:0d:e5:f2:29:d2:04:d6:be:19:dc:41:49:f6:99:b7:b2:dd: 5b:bd:86:86:56:2d:fa:9a:45:03:3e:ec:4d:32:be:8f:b9:8b: 8f:8a:3f:a8:cb:6e:9e:7a:d2:ec:21:0b:a1:8f:02:9d:02:b7: d0:93:c6:0a:50:72:ac:91:38:9a:0e:73:e4:96:e4:0c:93:91: 8e:ce:25:5b:3a:e7:b6:75:08:ad:1d:b8:07:4f:b9:b4:54:cc: cb:93:e4:09:8d:0f:00:9a:5e:5a:61:3a:10:f0:a7:b3:fb:ae: 6c:f2:57:70:d4:88:bd:8f:45:dc:54:83:8c:2b:19:e5:65:16: 43:52:c6:17:9c:36:a0:75:a9:b7:3c:39:a0:8f:be:45:ed:bf: 6c:72:e6:53:12:8b:6f:5c:0b:e4:9f:99:a6:37:3e:3d:64:31: 61:2e:bd:cf:05:87:1d:a9:07:34:19:97:87:aa:ea:06:02:06: 14:d4:fe:01:72:39:f3:23:ae:b6:f5:59:c1:1f:a4:c0:6d:5f: ee:c9:4c:0e:05:55:66:ec:aa:0d:54:63:a2:13:57:ff:dc:e9: c4:2c:7f:9d -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3xz/kjn/fgALmGDpvaQVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDBjNmIyYmQyOWQzMTY4NDg3YzllYzVmZGU0YzNmYzQyZDljZmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6vD4EbCN/+RFJ+xBs0SctGLL/wT 5mreugdk4dpEI++d1qBQu1vYbWPMXtver37cStc0TmZCduRhR70RRNVHswl+offA 0UU4B5B+GupJuO3Jvj3HigKRYwbLybcIlnc+2BnggNmjhHK1d2c0jYIjQDstPAtx z73UHKsi8hPBm+HVd8qOLDJ0+3P7XMcxcVlLzCh4KOlx+1+8veST2i5eD3MZKC2s ypvATO2t0qJd3cV1s4oBgFsey5LcneI2tmtCDcZcFRp5EM5IRbuIwxaP1E5BBMgK En2a6nUYMDESOBd3ZQrqHeknVZnC+qxSP19ZfnymqT8UMDiDskVmdOJGxQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFP0MayvSnTFoSHyexf3kw/xC2c++MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzQzNWQ4 OC0zNzFlLTRmODYtYTkwYS1jZmJiYzE0NjcxYTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvNDM1ZDg4 LTM3MWUtNGY4Ni1hOTBhLWNmYmJjMTQ2NzFhMy8xL19ReHJLOUtkTVdoSWZKN0Zf ZVREX0VMWno3NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDLh6IAwQCuZxoMA0EAgACMAcDBQMqB5YAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMJLTANBgkqhkiG9w0BAQsFAAOCAQEAMiDB kCc7vYjkIHGCbdpLwi2LmAjshpXb0kwAMjXG2upc78OSEQ3l8inSBNa+GdxBSfaZ t7LdW72GhlYt+ppFAz7sTTK+j7mLj4o/qMtunnrS7CELoY8CnQK30JPGClByrJE4 mg5z5JbkDJORjs4lWzrntnUIrR24B0+5tFTMy5PkCY0PAJpeWmE6EPCns/uubPJX cNSIvY9F3FSDjCsZ5WUWQ1LGF5w2oHWptzw5oI++Re2/bHLmUxKLb1wL5J+Zpjc+ PWQxYS69zwWHHakHNBmXh6rqBgIGFNT+AXI58yOutvVZwR+kwG1f7slMDgVVZuyq DVRjohNX/9zpxCx/nQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:44 2026 by rpki-client