This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer (raw, json) Hash identifier: Rz1tAxYyPWJ9HyVTemnM21O+R2AsmhXwioli2bUMx4A= Subject key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E2E0A693B1536BD7088505A64729E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216066 IP: 185.187.100.0/22 IP: 2a0a:47c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:2e:0a:69:3b:15:36:bd:70:88:50:5a:64:72:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e8:56:2a:ad:d6:b2:39:c4:ca:b4:66:1e:62: dd:c0:f5:58:68:9d:69:de:c1:72:c2:72:f1:4a:7a: 59:a3:cc:3e:55:c2:20:57:e4:db:72:ff:59:87:dc: 99:e9:24:f7:f0:f9:7e:76:57:f8:85:fe:6e:80:68: 86:c5:7a:a0:07:fc:0d:b9:66:0c:84:ef:a6:16:e0: 8c:73:2f:43:7e:e0:de:a6:01:f7:b7:a2:df:a9:c5: 42:37:45:46:f4:78:b5:f2:b3:ce:88:42:54:81:b7: 03:89:c2:6a:c6:b4:5d:f6:03:1a:8d:30:1e:5f:c7: 5a:7c:74:aa:b9:4d:51:1b:77:dc:31:c0:45:aa:34: 22:67:5a:ee:95:3a:3f:bb:00:62:e0:3d:61:9f:90: dc:19:bb:e9:7b:92:bf:b1:4c:86:57:17:4c:c8:9f: a7:3b:3d:83:4f:c3:11:08:97:2a:c4:26:23:75:52: 84:8b:bb:4d:b2:23:be:d1:f2:ba:58:73:15:f4:9d: ec:df:76:03:e8:0f:90:40:bc:8e:09:62:95:e0:cc: d8:3a:3c:2d:54:64:df:2b:e1:f1:e7:3b:41:c2:81: 6f:43:27:d9:32:b4:58:09:58:18:4e:b6:14:a0:f3: 0f:33:a2:fb:d0:0e:ef:f9:2e:f4:65:19:1a:30:bb: e4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.100.0/22 IPv6: 2a0a:47c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216066 Signature Algorithm: sha256WithRSAEncryption 5a:33:69:95:8f:c2:9f:7e:0c:b4:37:fe:b4:ff:82:78:2e:bd: 79:6c:bf:82:6e:d1:6e:09:56:7a:51:cc:64:96:f8:21:3b:22: de:0d:95:85:d0:24:2e:42:42:b1:15:56:76:52:86:f0:dd:e7: 74:27:83:b8:18:10:f2:39:ea:2f:a1:5d:5a:b3:61:76:a7:33: 22:76:2b:b8:42:f6:2c:6f:fa:c4:a3:3b:a4:d8:a1:0d:4a:38: 5c:41:5b:a2:73:02:b4:4c:e1:1d:d4:8d:53:ed:e2:91:23:70: 09:49:23:20:59:b7:98:eb:d3:73:27:e2:cb:aa:5d:04:32:d9: 6d:50:5a:98:1f:66:9f:df:db:10:a0:f8:4e:02:ae:e6:73:f9: a7:57:07:1b:1f:db:df:c0:88:a0:04:a0:1a:62:95:8d:1f:c0: 22:6b:2d:bc:2a:18:02:86:92:b0:0e:30:15:ad:6c:41:3d:29: 9c:c6:55:83:83:78:b2:2f:24:52:3f:02:3f:5e:55:10:22:c6: 6c:b5:e8:20:61:cb:bc:db:48:05:65:41:d1:a5:24:c4:0a:7f: 25:82:87:0e:c2:72:b0:4f:8b:74:dc:16:72:14:35:84:27:93: 6c:d0:30:23:fc:2f:e1:01:62:de:b0:68:29:ce:46:43:c5:83: c7:ee:5d:fc -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fi4KaTsVNr1wiFBaZHKeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjlmODRjNmE0OGQ1YzZkZmU2NDE0OTg3M2IxNDhkMTEyMGIwMDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhehWKq3WsjnEyrRmHmLdwPVYaJ1p 3sFywnLxSnpZo8w+VcIgV+Tbcv9Zh9yZ6ST38Pl+dlf4hf5ugGiGxXqgB/wNuWYM hO+mFuCMcy9DfuDepgH3t6LfqcVCN0VG9Hi18rPOiEJUgbcDicJqxrRd9gMajTAe X8dafHSquU1RG3fcMcBFqjQiZ1rulTo/uwBi4D1hn5DcGbvpe5K/sUyGVxdMyJ+n Oz2DT8MRCJcqxCYjdVKEi7tNsiO+0fK6WHMV9J3s33YD6A+QQLyOCWKV4MzYOjwt VGTfK+Hx5ztBwoFvQyfZMrRYCVgYTrYUoPMPM6L70A7v+S70ZRkaMLvkdwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKufhMakjVxt/mQUmHOxSNESCwCbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzM2MTc3 Zi03Y2Q4LTRiZDMtODY4OS0yMTNkNjRiZWZmNzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvMzYxNzdm LTdjZDgtNGJkMy04Njg5LTIxM2Q2NGJlZmY3MS8xL3E1LUV4cVNOWEczLVpCU1lj N0ZJMFJJTEFKcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubtkMA0EAgACMAcDBQMqCkfAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNMAjANBgkqhkiG9w0BAQsFAAOCAQEAWjNplY/Cn34M tDf+tP+CeC69eWy/gm7RbglWelHMZJb4ITsi3g2VhdAkLkJCsRVWdlKG8N3ndCeD uBgQ8jnqL6FdWrNhdqczInYruEL2LG/6xKM7pNihDUo4XEFbonMCtEzhHdSNU+3i kSNwCUkjIFm3mOvTcyfiy6pdBDLZbVBamB9mn9/bEKD4TgKu5nP5p1cHGx/b38CI oASgGmKVjR/AImstvCoYAoaSsA4wFa1sQT0pnMZVg4N4si8kUj8CP15VECLGbLXo IGHLvNtIBWVB0aUkxAp/JYKHDsJysE+LdNwWchQ1hCeTbNAwI/wv4QFi3rBoKc5G Q8WDx+5d/A== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:23 2026 by rpki-client