This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer File: q4gs1tGWrh-WhyrK54MhvnqSuOs.cer (raw, json) Hash identifier: TSxKW9OSRQ8kN0ojJM8lpHDELcLilevKUFb8Jcg6UuA= Subject key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D05B67EFBC550AE6FD74510E0DDEC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6697 IP: 37.44.64.0/18 IP: 37.45.0.0/16 IP: 37.212.0.0/14 IP: 82.209.192.0/18 IP: 86.57.128.0/17 IP: 93.84.0.0/15 IP: 178.120.0.0/13 IP: 185.152.136.0/22 IP: 194.158.192.0/19 IP: 2001:7f8:5a::/48 IP: 2a02:2208::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:05:b6:7e:fb:c5:50:ae:6f:d7:45:10:e0:dd:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f6:d4:f0:80:57:95:74:e3:d9:0b:b5:d8:58: de:11:e8:d4:ae:ce:9d:4f:01:38:40:5e:7e:1b:12: ec:06:c8:d5:b2:b0:ae:f4:0e:44:26:ae:92:61:71: ea:34:e7:1f:3f:e0:72:3f:90:a2:86:7c:4b:9d:d1: 6d:24:41:d1:a0:db:20:d5:0a:ae:9b:cc:c2:67:0a: 7a:94:74:bb:c6:db:78:24:9a:d4:63:42:95:40:94: ea:4f:4b:19:6d:1f:22:37:72:d8:16:82:6d:42:68: 56:7e:0b:33:a0:d6:78:f1:94:66:90:cd:07:b1:fd: 46:26:8a:6d:20:2f:21:f6:a5:2d:8c:e5:56:9b:0c: 51:4b:23:7f:52:02:2c:7e:09:bd:90:51:8d:19:c1: 14:74:0a:cc:cf:05:0a:06:73:4f:a4:ce:1f:e3:c3: 29:f4:e9:d8:d2:b7:02:9a:44:4a:c4:20:22:bb:2f: dd:39:c8:24:3b:92:48:c3:90:aa:27:a1:cb:28:5e: 26:83:09:92:bc:d4:9a:0b:71:47:ac:89:c8:86:7a: af:55:27:a3:62:38:b3:7b:e7:9d:03:d4:b7:f3:98: d7:95:e6:97:7c:0e:5f:7b:62:fb:b8:29:fa:90:e2: 7e:3e:eb:ba:e4:b4:2c:50:0e:03:45:94:63:96:7c: c9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.64.0/18 37.45.0.0/16 37.212.0.0/14 82.209.192.0/18 86.57.128.0/17 93.84.0.0/15 178.120.0.0/13 185.152.136.0/22 194.158.192.0/19 IPv6: 2001:7f8:5a::/48 2a02:2208::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6697 Signature Algorithm: sha256WithRSAEncryption 9c:b3:33:f8:d9:ca:80:59:9f:41:a2:69:af:be:67:98:66:f2: 90:c8:ac:cc:e1:3b:5a:89:cc:3a:21:e6:30:a3:d1:57:80:90: 7e:3a:62:a2:9e:67:d8:19:37:c8:99:5f:a2:64:25:51:54:ee: 76:e0:82:e8:93:e7:b2:df:0f:f7:21:84:c5:cd:82:67:0f:d2: 64:b9:35:85:7f:80:91:8f:8f:9a:d5:52:96:bc:68:dd:29:68: 11:f0:90:7d:1d:7f:32:d1:24:c0:79:cc:64:e1:92:8b:c6:95: cf:c9:67:6b:9c:fd:7e:a1:f8:20:ff:41:cd:d6:35:53:b6:f2: 03:b5:64:c5:35:a6:f2:3d:fc:07:86:8b:c6:32:04:06:a9:b8: 5a:fb:b5:37:22:61:df:cf:2b:1b:9c:f8:25:d8:bb:bc:98:7b: f7:71:b7:64:e5:b9:0e:7a:9f:a6:54:54:5b:6f:ca:03:87:f2: 9d:69:8b:7d:20:ea:a3:b9:b8:3f:42:68:e8:8f:27:50:39:f7: 11:22:ff:c7:c4:b2:9a:61:6d:b6:42:70:fb:17:6b:e3:1f:9a: db:8b:99:55:c8:40:fc:2f:bb:11:c0:98:2d:77:b3:62:f8:bd: 95:34:19:83:dc:59:b0:5c:96:30:67:3d:01:18:45:16:26:bb: 30:b8:8e:d3 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgISAZt9XQW2fvvFUK5v10UQ4N3sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjg4MmNkNmQxOTZhZTFmOTY4NzJhY2FlNzgzMjFiZTdhOTJiOGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvbU8IBXlXTj2Qu12FjeEejUrs6d TwE4QF5+GxLsBsjVsrCu9A5EJq6SYXHqNOcfP+ByP5CihnxLndFtJEHRoNsg1Qqu m8zCZwp6lHS7xtt4JJrUY0KVQJTqT0sZbR8iN3LYFoJtQmhWfgszoNZ48ZRmkM0H sf1GJoptIC8h9qUtjOVWmwxRSyN/UgIsfgm9kFGNGcEUdArMzwUKBnNPpM4f48Mp 9OnY0rcCmkRKxCAiuy/dOcgkO5JIw5CqJ6HLKF4mgwmSvNSaC3FHrInIhnqvVSej Yjize+edA9S385jXleaXfA5fe2L7uCn6kOJ+Puu65LQsUA4DRZRjlnzJdwIDAQAB o4IC4zCCAt8wHQYDVR0OBBYEFKuILNbRlq4flocqyueDIb56krjrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxLzRiNmNj OS0wOWQzLTQ2NzgtYjBhNy05NTBjMTgwNTk2ZDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvNGI2Y2M5 LTA5ZDMtNDY3OC1iMGE3LTk1MGMxODA1OTZkMC8xL3E0Z3MxdEdXcmgtV2h5cks1 NE1odm5xU3VPcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGMGCCsGAQUF BwEHAQH/BFQwUjA4BAIAATAyAwQGJSxAAwMAJS0DAwIl1AMEBlLRwAMEB1Y5gAMD AV1UAwMDsngDBAK5mIgDBAXCnsAwFgQCAAIwEAMHACABB/gAWgMFAyoCIggwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICGikwDQYJKoZIhvcNAQELBQADggEBAJyzM/jZ yoBZn0Giaa++Z5hm8pDIrMzhO1qJzDoh5jCj0VeAkH46YqKeZ9gZN8iZX6JkJVFU 7nbgguiT57LfD/chhMXNgmcP0mS5NYV/gJGPj5rVUpa8aN0paBHwkH0dfzLRJMB5 zGThkovGlc/JZ2uc/X6h+CD/Qc3WNVO28gO1ZMU1pvI9/AeGi8YyBAapuFr7tTci Yd/PKxuc+CXYu7yYe/dxt2TluQ56n6ZUVFtvygOH8p1pi30g6qO5uD9CaOiPJ1A5 9xEi/8fEspphbbZCcPsXa+MfmtuLmVXIQPwvuxHAmC13s2L4vZU0GYPcWbBcljBn PQEYRRYmuzC4jtM= -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:41 2026 by rpki-client