This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer File: p2q9qQNG0MrSXcpvdFC8z40I53E.cer (raw, json) Hash identifier: laei+V4acXyab5wlwoJAK0lnezWrRaSw+0j80I7UpVI= Subject key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14E7562E952D8D8A8B5F4AD340476D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15553 IP: 193.227.64.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:e7:56:2e:95:2d:8d:8a:8b:5f:4a:d3:40:47:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a76abda90346d0cad25dca6f7450bccf8d08e771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c7:f8:38:98:30:7c:ea:63:81:fa:a8:7a:f6: 74:78:81:06:ac:84:0a:5c:dc:22:1a:ba:88:e9:19: 40:ef:e9:0a:66:99:0a:a5:bd:5e:34:17:b7:91:11: d0:c5:0f:aa:34:6a:b7:db:0e:b3:f6:bd:33:36:66: 58:70:54:42:1d:ec:e2:36:5b:ec:07:23:fd:0c:60: cf:1e:58:ae:ea:b4:cf:a2:71:95:cf:64:aa:7e:f9: fa:fd:b7:a2:2f:db:b4:21:44:90:17:b2:e4:4c:74: 05:27:52:40:d7:68:13:ba:ca:ec:55:3e:30:ed:c7: 28:ac:0e:39:ea:20:ec:e0:03:8f:a7:a9:2e:c0:0f: 16:c7:ee:e3:d7:14:7c:a4:c6:50:88:90:47:c7:f1: a7:eb:db:28:1d:84:0b:82:eb:61:c1:03:ed:3a:f4: 84:a2:74:31:6d:ac:66:1f:e8:1a:4a:62:a0:62:eb: 46:e7:f9:66:66:b4:29:12:37:41:2f:cb:35:09:78: 05:13:bb:d8:1a:87:4d:5a:55:f7:90:9b:52:d7:47: 7c:b2:8e:ef:3b:6c:bd:11:f7:37:6c:1d:78:98:8b: 55:32:b4:d3:68:f6:65:b6:d6:f0:dd:73:95:ca:a9: a4:63:4c:e9:8a:24:06:b8:ca:ac:d2:59:00:4a:1d: 3b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.227.64.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15553 Signature Algorithm: sha256WithRSAEncryption 1a:d2:06:ad:c9:6f:97:70:1e:6d:c8:06:33:f2:f0:46:44:12: 85:2e:2a:1d:ad:0c:a4:33:dc:cb:c1:a0:07:f1:cd:14:4a:38: e3:32:d8:43:70:5e:6b:4c:c6:98:fe:ed:d7:22:27:14:9b:ec: 7f:c5:38:a7:b5:09:1f:93:79:8e:f9:a4:e7:c7:32:66:67:cd: 01:77:94:97:44:fe:28:0e:2a:bb:96:79:16:d1:03:76:c4:99: 62:94:bc:f1:f7:12:25:51:17:fd:9a:1c:d3:8b:07:a3:23:78: c2:e2:88:b5:ee:45:08:85:c7:c0:c6:ea:b9:f8:97:ae:55:03: 52:e0:b3:05:90:e8:71:58:53:48:20:96:d8:8c:6f:fc:93:d8: 8b:a5:ca:65:a7:1f:33:b7:b1:80:04:38:16:3c:69:6d:c1:12: b6:17:ef:8c:69:8a:db:d2:f1:fc:81:ac:d3:d7:b5:9f:d3:4b: 58:06:bb:20:df:34:66:cc:2a:55:71:18:10:a8:b4:75:ac:5e: b4:24:fd:52:6d:99:44:c1:40:d0:f7:60:44:9d:5e:78:ef:e0: 5c:de:9a:27:7f:29:5f:66:91:ae:86:00:f8:66:88:38:84:60: 81:88:c7:4a:ca:0d:17:92:f0:b3:69:74:ad:2f:69:5d:21:5d: 89:cb:81:8c -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt/FOdWLpUtjYqLX0rTQEdtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzZhYmRhOTAzNDZkMGNhZDI1ZGNhNmY3NDUwYmNjZjhkMDhlNzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucf4OJgwfOpjgfqoevZ0eIEGrIQK XNwiGrqI6RlA7+kKZpkKpb1eNBe3kRHQxQ+qNGq32w6z9r0zNmZYcFRCHeziNlvs ByP9DGDPHliu6rTPonGVz2Sqfvn6/beiL9u0IUSQF7LkTHQFJ1JA12gTusrsVT4w 7ccorA456iDs4AOPp6kuwA8Wx+7j1xR8pMZQiJBHx/Gn69soHYQLguthwQPtOvSE onQxbaxmH+gaSmKgYutG5/lmZrQpEjdBL8s1CXgFE7vYGodNWlX3kJtS10d8so7v O2y9Efc3bB14mItVMrTTaPZlttbw3XOVyqmkY0zpiiQGuMqs0lkASh07wwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFKdqvakDRtDK0l3Kb3RQvM+NCOdxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzM0NWM5 Yi03YjRhLTRiMjEtOWIwMC00ZDMwMTY4NGMzYmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvMzQ1Yzli LTdiNGEtNGIyMS05YjAwLTRkMzAxNjg0YzNiYy8xL3AycTlxUU5HME1yU1hjcHZk RkM4ejQwSTUzRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQFweNAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AjzBMA0GCSqGSIb3DQEBCwUAA4IBAQAa0gatyW+XcB5tyAYz8vBGRBKFLiodrQyk M9zLwaAH8c0USjjjMthDcF5rTMaY/u3XIicUm+x/xTintQkfk3mO+aTnxzJmZ80B d5SXRP4oDiq7lnkW0QN2xJlilLzx9xIlURf9mhzTiwejI3jC4oi17kUIhcfAxuq5 +JeuVQNS4LMFkOhxWFNIIJbYjG/8k9iLpcplpx8zt7GABDgWPGltwRK2F++MaYrb 0vH8gazT17Wf00tYBrsg3zRmzCpVcRgQqLR1rF60JP1SbZlEwUDQ92BEnV547+Bc 3ponfylfZpGuhgD4Zog4hGCBiMdKyg0XkvCzaXStL2ldIV2Jy4GM -----END CERTIFICATE-----Generated at Sun Jan 25 11:47:00 2026 by rpki-client