This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer File: gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer (raw, json) Hash identifier: oQvkefsa1h6gk02C7h1dlM6b16zHVDWkJGqdG0dAF2U= Subject key identifier: 81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA657EB1AEE08FD22C775B784877BEB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.87.132.0/22 IP: 2a05:c340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:57:eb:1a:ee:08:fd:22:c7:75:b7:84:87:7b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3a:8b:7d:cb:ef:8b:54:2c:54:d5:77:60:96: ce:bb:4b:0b:68:65:34:c0:e8:53:c7:04:68:44:a8: 6c:60:be:32:61:d8:25:e3:40:b5:02:db:4b:0b:56: 29:a6:56:a0:7d:d2:c3:53:10:af:ab:fe:e0:a9:24: 44:31:c3:73:bf:ef:6f:d2:42:a4:fb:66:27:f7:38: 98:60:59:4c:6b:27:09:05:21:49:54:9e:89:9c:db: 87:63:2d:65:7d:a2:ec:6c:ec:1f:9b:ee:c3:28:8e: ee:cd:f4:a8:32:68:b7:ee:d9:3d:f2:6a:89:8c:ca: 4a:9f:93:61:49:75:ae:fa:d0:85:58:57:e2:75:4b: 36:8f:bc:f9:51:9d:7b:fc:54:23:82:bd:2e:e0:32: e1:5c:bd:c6:0b:a4:10:6d:b4:23:69:cb:88:ac:d4: 63:c2:fd:ea:01:89:05:d6:b2:00:5a:80:75:ec:e9: bc:48:be:e9:30:04:5c:9c:d1:64:2f:bf:16:90:a4: ad:52:c2:a4:20:70:31:fb:76:fc:01:a0:29:d5:5d: cb:5d:15:98:7c:a6:e2:8d:8c:de:4b:bd:d3:12:80: fc:ec:05:68:6f:59:91:21:1d:cd:ad:13:32:05:8d: 14:b8:3b:dc:58:ed:56:3e:55:9f:22:07:98:b5:64: 45:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.87.132.0/22 IPv6: 2a05:c340::/29 Signature Algorithm: sha256WithRSAEncryption 31:bd:06:eb:c2:2b:70:ef:7a:da:89:a4:e9:5d:1a:db:f2:63: a5:36:21:36:06:8a:22:c2:e6:53:ba:d0:20:7c:13:56:ea:01: 0d:7c:e0:0a:00:02:42:b1:0f:7f:65:a6:44:fd:91:9e:f0:a3: cf:1e:c8:a2:5c:9d:d6:55:a6:c9:43:c3:66:e5:5a:09:a1:62: 76:40:18:a0:88:a7:f7:f8:b2:27:b9:e4:ac:fd:50:87:5a:71: 12:60:7f:23:fa:a4:7a:29:7e:a3:d7:10:be:a5:74:63:8e:45: 99:d4:5a:4e:0e:8e:b4:2e:fa:30:97:02:b7:d5:35:48:bc:6f: 2a:96:ad:cc:13:3c:5d:7f:c7:bf:f0:cc:7d:00:43:54:40:f5: 1e:3e:80:5e:0c:85:6d:83:14:97:3c:dd:c9:f4:57:52:4e:6a: 73:fe:97:81:cf:c0:85:c7:ed:21:91:44:dd:c4:36:45:a9:bb: 9c:d6:3c:ed:50:a0:bd:7c:30:af:5c:5c:a1:97:16:e1:3a:3c: b3:6c:bd:6d:6c:a7:44:b7:34:f1:5f:bd:95:16:1c:a3:0d:6c: 4c:f7:e2:ae:d6:f6:36:f3:66:c3:0e:67:98:3a:db:12:48:c2: 9d:92:07:d2:2d:48:0b:03:49:a2:b7:a0:2a:a0:3d:c1:79:15: 51:24:30:67 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+plfrGu4I/SLHdbeEh3vrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTBlNTBmOGJlMjFlNjU1NmEyYTNiNWU2MGUxZGU3NjVhZTAyZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTqLfcvvi1QsVNV3YJbOu0sLaGU0 wOhTxwRoRKhsYL4yYdgl40C1AttLC1YpplagfdLDUxCvq/7gqSREMcNzv+9v0kKk +2Yn9ziYYFlMaycJBSFJVJ6JnNuHYy1lfaLsbOwfm+7DKI7uzfSoMmi37tk98mqJ jMpKn5NhSXWu+tCFWFfidUs2j7z5UZ17/FQjgr0u4DLhXL3GC6QQbbQjacuIrNRj wv3qAYkF1rIAWoB17Om8SL7pMARcnNFkL78WkKStUsKkIHAx+3b8AaAp1V3LXRWY fKbijYzeS73TEoD87AVob1mRIR3NrRMyBY0UuDvcWO1WPlWfIgeYtWRFRQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFIEOUPi+IeZVaio7XmDh3nZa4C1OMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2Lzg4MGRm NC1lMzM0LTRhNzctOGY0YS03ZGZkZThiMTJlMmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvODgwZGY0 LWUzMzQtNGE3Ny04ZjRhLTdkZmRlOGIxMmUyYy8xL2dRNVEtTDRoNWxWcUtqdGVZ T0hlZGxyZ0xVNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVeEMA0EAgACMAcDBQMqBcNAMA0GCSqGSIb3 DQEBCwUAA4IBAQAxvQbrwitw73raiaTpXRrb8mOlNiE2BooiwuZTutAgfBNW6gEN fOAKAAJCsQ9/ZaZE/ZGe8KPPHsiiXJ3WVabJQ8Nm5VoJoWJ2QBigiKf3+LInueSs /VCHWnESYH8j+qR6KX6j1xC+pXRjjkWZ1FpODo60LvowlwK31TVIvG8qlq3MEzxd f8e/8Mx9AENUQPUePoBeDIVtgxSXPN3J9FdSTmpz/peBz8CFx+0hkUTdxDZFqbuc 1jztUKC9fDCvXFyhlxbhOjyzbL1tbKdEtzTxX72VFhyjDWxM9+Ku1vY282bDDmeY OtsSSMKdkgfSLUgLA0mit6AqoD3BeRVRJDBn -----END CERTIFICATE-----Generated at Sun Jan 25 23:08:14 2026 by rpki-client