This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer File: cqpTdXQ1Dyam82tD3DA7njOefuw.cer (raw, json) Hash identifier: 869895cL6UJafnzaUtKLcFqETni4MdejpNX4f/6c270= Subject key identifier: 72:AA:53:75:74:35:0F:26:A6:F3:6B:43:DC:30:3B:9E:33:9E:7E:EC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BD63C8351C75342A638F8C48D5F9B22F1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 19 Jan 2026 12:30:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214550 IP: 109.74.19.0/24 IP: 2a14:73c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:3c:83:51:c7:53:42:a6:38:f8:c4:8d:5f:9b:22:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 19 12:30:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72aa537574350f26a6f36b43dc303b9e339e7eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:91:53:4d:51:8a:4d:a1:51:f0:ba:e4:36:03: 8c:ed:94:67:c8:1e:3b:d6:de:80:dd:31:b2:19:69: 56:69:c9:24:8a:3d:e8:8c:94:01:4b:cd:db:2e:00: c3:09:db:98:0e:b1:6d:0f:44:07:e1:81:8b:db:61: 83:11:a2:73:e6:7e:98:53:5d:2f:68:a7:66:c4:55: 1d:d2:dc:e4:53:88:bd:ae:61:9d:30:02:cc:87:91: e9:71:b6:a0:85:1f:e0:7d:40:6c:a0:c5:03:11:38: a3:5e:fd:c9:96:c0:c1:80:d2:bd:b2:a2:64:ea:89: 3a:fe:87:9b:ba:5f:74:03:76:d5:f8:3b:f0:b3:c4: 8b:01:bc:ad:92:ec:f6:51:c9:64:bd:db:63:17:60: c5:cc:5d:6a:75:89:f6:a2:8e:c9:87:6e:1a:4f:46: b4:63:f8:35:bf:2f:2a:45:b9:28:15:9b:2a:39:1f: c9:df:73:35:2a:53:bb:e1:65:6c:0a:56:1e:2e:24: 4c:40:53:a7:08:c8:80:07:2d:39:eb:f0:fe:c4:3e: e1:ed:98:4f:ec:b1:aa:00:c2:61:02:70:20:ad:91: db:02:39:99:1a:4d:c8:5d:87:9a:10:2e:39:df:5a: e4:10:63:1e:92:d3:1f:6e:16:f1:73:c9:46:8a:6a: df:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AA:53:75:74:35:0F:26:A6:F3:6B:43:DC:30:3B:9E:33:9E:7E:EC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.74.19.0/24 IPv6: 2a14:73c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214550 Signature Algorithm: sha256WithRSAEncryption a0:47:32:32:d4:1b:1a:f1:8e:16:f6:5a:d2:c0:b1:6a:4a:e7: 5b:ff:d0:b3:fb:32:2e:33:d8:de:b0:2e:1f:d3:7c:80:99:73: 7e:e1:4e:f3:68:84:64:5f:18:6c:b7:f8:00:e6:2d:ae:93:dd: 54:0b:69:9d:0d:2c:aa:65:5f:33:70:99:5e:4b:f7:2a:07:2e: ee:66:cf:ce:4a:33:33:70:f4:9e:59:40:c1:a6:a4:ca:f3:90: 16:28:31:aa:52:c5:7a:82:9d:8b:f3:ad:29:08:cb:2c:c6:bb: fc:d5:b2:73:b4:a9:b1:d5:df:07:53:6d:b2:56:60:df:b3:5b: d6:b8:10:cc:63:4a:c2:3d:3b:4e:7c:f2:6e:f6:5f:b0:a4:61: aa:8b:09:9a:8b:a0:fa:a4:2e:90:49:a3:e7:a3:bf:79:3a:8f: 45:99:58:32:ee:d6:55:d3:6c:e2:28:b5:3f:3b:cc:a5:a0:77: 51:3a:6e:84:47:f7:76:fa:07:f8:51:c8:91:b2:ac:3f:e5:21: d0:d3:43:c2:b8:d4:87:fd:cb:79:c1:53:d3:68:87:21:d2:39: bc:6c:49:9e:31:bf:e7:11:09:4d:a3:ba:bf:26:de:0f:98:1d: ff:d1:47:a1:15:0d:39:50:e4:39:d7:c8:93:db:a0:65:ff:4a: 30:a1:4a:9c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZvWPINRx1NCpjj4xI1fmyLxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE5MTIzMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmFhNTM3NTc0MzUwZjI2YTZmMzZiNDNkYzMwM2I5ZTMzOWU3ZWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JFTTVGKTaFR8LrkNgOM7ZRnyB47 1t6A3TGyGWlWackkij3ojJQBS83bLgDDCduYDrFtD0QH4YGL22GDEaJz5n6YU10v aKdmxFUd0tzkU4i9rmGdMALMh5HpcbaghR/gfUBsoMUDETijXv3JlsDBgNK9sqJk 6ok6/oebul90A3bV+Dvws8SLAbytkuz2UclkvdtjF2DFzF1qdYn2oo7Jh24aT0a0 Y/g1vy8qRbkoFZsqOR/J33M1KlO74WVsClYeLiRMQFOnCMiABy056/D+xD7h7ZhP 7LGqAMJhAnAgrZHbAjmZGk3IXYeaEC4531rkEGMektMfbhbxc8lGimrfewIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHKqU3V0NQ8mpvNrQ9wwO54znn7sMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzBmNDM4 My03MjZjLTRhYjgtOWIyNS05NmZkMDJiY2U3NjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvMGY0Mzgz LTcyNmMtNGFiOC05YjI1LTk2ZmQwMmJjZTc2NC8xL2NxcFRkWFExRHlhbTgydEQz REE3bmpPZWZ1dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAbUoTMA0EAgACMAcDBQMqFHPAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNGFjANBgkqhkiG9w0BAQsFAAOCAQEAoEcyMtQbGvGO FvZa0sCxakrnW//Qs/syLjPY3rAuH9N8gJlzfuFO82iEZF8YbLf4AOYtrpPdVAtp nQ0sqmVfM3CZXkv3Kgcu7mbPzkozM3D0nllAwaakyvOQFigxqlLFeoKdi/OtKQjL LMa7/NWyc7SpsdXfB1NtslZg37Nb1rgQzGNKwj07TnzybvZfsKRhqosJmoug+qQu kEmj56O/eTqPRZlYMu7WVdNs4ii1PzvMpaB3UTpuhEf3dvoH+FHIkbKsP+Uh0NND wrjUh/3LecFT02iHIdI5vGxJnjG/5xEJTaO6vybeD5gd/9FHoRUNOVDkOdfIk9ug Zf9KMKFKnA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:08:58 2026 by rpki-client