This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer File: q0ZoYAiowQHoTqh4MYrljrcc7II.cer (raw, json) Hash identifier: pV6qficbNhVszXblDWVC/ly26VivcbIB5pZFE9kQQGs= Subject key identifier: AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80CE8D5C73A0C65DF3160FFB5DF185 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.11.152.0/23 IP: 2001:67c:4b8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:ce:8d:5c:73:a0:c6:5d:f3:16:0f:fb:5d:f1:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab46686008a8c101e84ea878318ae58eb71cec82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d7:e6:1f:1f:7e:91:a0:7b:03:82:2a:d9:db: d3:c8:28:10:8d:1b:f0:3b:7a:0c:77:3d:1f:27:95: 18:c7:81:69:7d:f3:89:f3:f6:ce:f8:6e:3e:2b:bf: 18:48:49:97:1e:4f:71:79:bf:b0:72:94:fc:a1:21: 2a:d6:a4:9a:c3:22:3d:f2:c3:6d:c5:4c:54:15:e1: 93:60:8f:8d:fe:0c:9a:bc:81:7f:dc:46:00:77:99: 5a:0e:04:13:d9:73:e9:32:56:5e:78:b5:76:fd:82: 4b:2d:b3:c0:d9:24:db:62:bf:d5:8d:12:18:f0:a0: d0:d9:4c:5e:0b:9b:e8:c7:71:8e:43:21:0f:a8:45: c8:0c:5a:f1:1d:5e:31:57:dd:72:66:73:91:4f:5b: 1d:f4:75:ec:95:e8:84:e8:81:56:5e:4d:79:2f:6a: 82:39:04:05:71:15:48:05:d3:16:56:59:71:84:4b: e9:45:57:54:e2:20:aa:3d:1e:55:d4:de:89:a7:44: 6a:9a:97:8e:e0:28:aa:1d:ca:ac:1b:fe:0a:1c:19: 26:06:ed:ee:42:f8:a9:5d:af:3a:b5:29:ad:8c:f9: 19:6d:f0:a5:c4:83:65:73:9b:3a:74:72:ce:5a:7d: 2a:08:79:00:57:7e:23:95:9c:3a:f3:55:0d:f6:62: 57:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.11.152.0/23 IPv6: 2001:67c:4b8::/48 Signature Algorithm: sha256WithRSAEncryption 4c:cc:bf:84:ec:05:45:4e:f3:98:ea:4d:af:6e:49:25:50:f0: b6:e6:9e:ac:0e:26:cb:6e:dd:55:5c:6b:a1:92:06:e0:bf:39: 53:54:d2:23:79:dd:3f:59:1b:82:16:70:9e:23:2a:89:f5:e8: cb:e4:f2:7f:ea:5a:77:34:57:72:25:9e:fe:71:22:36:d8:05: c8:a6:85:fc:73:ce:ca:fd:64:2d:0d:fb:04:08:d2:a3:25:da: d0:fc:cf:0d:a0:bf:40:6f:01:7f:bb:94:b3:cb:90:d7:b7:74: d6:7a:a8:ed:8e:e3:12:4c:d9:37:b8:06:5d:39:1a:bb:ae:fa: 7e:4d:22:20:40:4f:d8:f2:66:36:fc:8d:0a:56:1e:ee:9e:f1: a3:36:15:31:0e:7a:ff:0c:3d:ce:c0:3b:c0:5c:a5:b8:e7:98: 8c:c7:09:75:d7:07:ae:db:c1:fb:e4:03:1c:e0:4f:eb:76:96: b5:90:1d:71:3a:af:30:9a:e7:ac:95:83:2b:74:0b:eb:61:f8: 11:46:53:09:cb:89:5d:75:eb:e6:2d:fc:de:68:59:51:b0:7d: ee:05:0f:f3:0c:76:8c:e6:8e:14:d3:98:1e:4e:6a:8d:86:ac: 32:2f:35:73:61:d2:ff:1d:1b:1f:09:68:b8:26:45:83:46:aa: d0:ba:7c:3e -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt8gM6NXHOgxl3zFg/7XfGFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjQ2Njg2MDA4YThjMTAxZTg0ZWE4NzgzMThhZTU4ZWI3MWNlYzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NfmHx9+kaB7A4Iq2dvTyCgQjRvw O3oMdz0fJ5UYx4FpffOJ8/bO+G4+K78YSEmXHk9xeb+wcpT8oSEq1qSawyI98sNt xUxUFeGTYI+N/gyavIF/3EYAd5laDgQT2XPpMlZeeLV2/YJLLbPA2STbYr/VjRIY 8KDQ2UxeC5vox3GOQyEPqEXIDFrxHV4xV91yZnORT1sd9HXsleiE6IFWXk15L2qC OQQFcRVIBdMWVllxhEvpRVdU4iCqPR5V1N6Jp0RqmpeO4CiqHcqsG/4KHBkmBu3u QvipXa86tSmtjPkZbfClxINlc5s6dHLOWn0qCHkAV34jlZw681UN9mJXuwIDAQAB o4IClTCCApEwHQYDVR0OBBYEFKtGaGAIqMEB6E6oeDGK5Y63HOyCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmLzcyNjRk Ni0zYmZkLTRkZTktOGZmYi1mMzM2M2NiZDQyNGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvNzI2NGQ2 LTNiZmQtNGRlOS04ZmZiLWYzMzYzY2JkNDI0Yy8xL3EwWm9ZQWlvd1FIb1RxaDRN WXJsanJjYzdJSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBwguYMA8EAgACMAkDBwAgAQZ8BLgwDQYJKoZI hvcNAQELBQADggEBAEzMv4TsBUVO85jqTa9uSSVQ8LbmnqwOJstu3VVca6GSBuC/ OVNU0iN53T9ZG4IWcJ4jKon16Mvk8n/qWnc0V3Ilnv5xIjbYBcimhfxzzsr9ZC0N +wQI0qMl2tD8zw2gv0BvAX+7lLPLkNe3dNZ6qO2O4xJM2Te4Bl05Gruu+n5NIiBA T9jyZjb8jQpWHu6e8aM2FTEOev8MPc7AO8BcpbjnmIzHCXXXB67bwfvkAxzgT+t2 lrWQHXE6rzCa56yVgyt0C+th+BFGUwnLiV116+Yt/N5oWVGwfe4FD/MMdozmjhTT mB5Oao2GrDIvNXNh0v8dGx8JaLgmRYNGqtC6fD4= -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:44 2026 by rpki-client