This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer (raw, json) Hash identifier: lYi+dyAV1DSP0OoAkPAtCPmmcSUeF6rJQghrWU/R7Go= Subject key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A624DE210F75894223081D4ADE18B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5507 AS: 12303 AS: 210788 IP: 193.41.34.0/24 IP: 193.41.47.0/24 IP: 193.41.70.0/24 IP: 193.41.82.0/24 IP: 193.188.137.0/24 IP: 193.239.148.0/23 IP: 2001:7f8:35::/48 IP: 2a0f:7ec0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:62:4d:e2:10:f7:58:94:22:30:81:d4:ad:e1:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8c:99:a5:ed:cb:3e:fd:43:56:f5:d4:51:df: b0:eb:ef:1f:41:00:6c:03:4b:3c:80:9e:2b:39:c2: ed:8e:8c:b1:19:c3:6a:24:ca:b4:84:f3:f0:c7:e1: d3:26:a6:8b:cc:59:fe:4d:04:60:fa:e7:b3:08:2d: 87:e5:92:df:02:b2:31:3a:41:c2:ae:2a:13:4b:fd: dd:42:36:da:84:cb:9f:c2:4f:ad:ba:be:0b:59:3b: f6:99:82:57:60:21:d6:e8:44:8b:57:fb:58:bb:62: 24:80:77:0c:4b:4e:05:3b:c4:81:08:2b:ef:7f:13: 8c:21:fb:c8:5e:bf:e0:5b:aa:94:0a:2e:05:f1:10: 22:ac:01:b3:95:91:4d:bd:e5:fc:e7:95:fd:1b:ae: b5:3d:8c:5a:52:91:97:5a:e1:32:19:77:d7:1e:a4: c7:17:c0:ab:0c:db:a4:00:55:3d:07:d7:3d:d4:d9: d0:30:f3:08:5e:20:ba:67:46:f6:d5:42:a1:da:ec: ee:a8:5f:39:2c:35:f9:24:7a:41:58:70:7d:f7:85: 17:0d:52:16:16:06:2a:1d:5d:7c:aa:37:dc:98:71: 63:df:b5:1d:0d:0e:23:82:ff:52:00:ee:73:9d:c2: 1a:c6:54:eb:26:11:1f:6e:6f:ec:85:15:b1:15:9a: 7f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.34.0/24 193.41.47.0/24 193.41.70.0/24 193.41.82.0/24 193.188.137.0/24 193.239.148.0/23 IPv6: 2001:7f8:35::/48 2a0f:7ec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5507 12303 210788 Signature Algorithm: sha256WithRSAEncryption 93:64:22:60:4f:37:60:c0:14:a8:45:65:20:d6:0b:f1:cb:39: 9d:1f:bb:a2:fb:66:eb:40:de:0e:b5:fe:43:2c:b3:b8:79:29: 10:aa:ec:bf:2d:d9:13:16:4b:3c:a6:75:bc:51:0d:e5:7d:dc: d8:5f:81:b2:cf:4b:86:51:91:30:b4:6b:ae:9e:49:6a:7d:ad: 8a:78:dd:8a:2c:76:90:87:9a:8d:b5:64:71:88:18:81:03:06: c2:25:a4:21:bb:7c:cd:1d:df:d7:66:1d:db:8d:6d:b1:fc:a1: db:28:ad:0d:8e:50:45:aa:c6:1c:0e:07:c3:51:93:e2:04:7f: ce:79:77:ec:63:34:11:4d:27:d6:ef:09:3c:36:78:4a:96:1c: ce:a4:67:f2:a5:6a:87:2b:c6:bb:87:c8:53:89:50:74:99:a2: 74:20:50:87:19:90:0a:25:18:1c:f7:29:09:ea:e3:f1:aa:5e: 1f:32:61:d9:ce:df:13:71:7b:ca:ff:e7:87:a3:0d:73:bf:92: 9e:54:4c:88:96:63:09:3f:10:4e:84:ac:7d:5c:56:1a:a6:f8: 03:1f:17:5d:07:81:cb:f6:93:0f:ba:c3:b1:51:93:03:a2:e3: 49:7a:86:c9:51:18:4a:18:4b:c8:91:89:b4:5f:30:58:57:bf: 38:60:f4:5c -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgISAZt6WmJN4hD3WJQiMIHUreGLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmM0NWI2NThiMWVjMGZkZWI0NTllNmZmMjU3N2RiOGNhNmE5MzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14yZpe3LPv1DVvXUUd+w6+8fQQBs A0s8gJ4rOcLtjoyxGcNqJMq0hPPwx+HTJqaLzFn+TQRg+uezCC2H5ZLfArIxOkHC rioTS/3dQjbahMufwk+tur4LWTv2mYJXYCHW6ESLV/tYu2IkgHcMS04FO8SBCCvv fxOMIfvIXr/gW6qUCi4F8RAirAGzlZFNveX855X9G661PYxaUpGXWuEyGXfXHqTH F8CrDNukAFU9B9c91NnQMPMIXiC6Z0b21UKh2uzuqF85LDX5JHpBWHB994UXDVIW FgYqHV18qjfcmHFj37UdDQ4jgv9SAO5zncIaxlTrJhEfbm/shRWxFZp/lQIDAQAB o4IC3jCCAtowHQYDVR0OBBYEFKvEW2WLHsD960Web/JXfbjKapMwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5L2M1YzFi My1lNWNhLTRhODMtODM5MC05MTc5MzNiMTUwMmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvYzVjMWIz LWU1Y2EtNGE4My04MzkwLTkxNzkzM2IxNTAyZS8xL3E4UmJaWXNld1AzclJaNXY4 bGQ5dU1wcWt6QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFUGCCsGAQUF BwEHAQH/BEYwRDAqBAIAATAkAwQAwSkiAwQAwSkvAwQAwSlGAwQAwSlSAwQAwbyJ AwQBwe+UMBYEAgACMBADBwAgAQf4ADUDBQAqD37AMCIGCCsGAQUFBwEIAQH/BBMw EaAPMA0CAhWDAgIwDwIDAzdkMA0GCSqGSIb3DQEBCwUAA4IBAQCTZCJgTzdgwBSo RWUg1gvxyzmdH7ui+2brQN4Otf5DLLO4eSkQquy/LdkTFks8pnW8UQ3lfdzYX4Gy z0uGUZEwtGuunklqfa2KeN2KLHaQh5qNtWRxiBiBAwbCJaQhu3zNHd/XZh3bjW2x /KHbKK0NjlBFqsYcDgfDUZPiBH/OeXfsYzQRTSfW7wk8NnhKlhzOpGfypWqHK8a7 h8hTiVB0maJ0IFCHGZAKJRgc9ykJ6uPxql4fMmHZzt8TcXvK/+eHow1zv5KeVEyI lmMJPxBOhKx9XFYapvgDHxddB4HL9pMPusOxUZMDouNJeobJURhKGEvIkYm0XzBY V784YPRc -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:41 2026 by rpki-client