This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer File: q9PisS9HkZgpT69gxuNqCht7_VQ.cer (raw, json) Hash identifier: i8L/m3YPq9ORRiJRtM1QOmOUNHCrw8tO0MurjJrE0U4= Subject key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38068E8A5FA76636A14823D02C8084 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56683 IP: 193.194.116.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:06:8e:8a:5f:a7:66:36:a1:48:23:d0:2c:80:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:01:38:54:e9:1e:53:4d:09:6c:9a:0b:17:cb: 84:1c:0f:e0:2c:1b:9c:f9:76:62:ad:b8:46:ca:04: 6b:df:43:97:1f:e8:d6:fd:c5:d9:6e:2d:6e:9e:70: f3:25:15:50:41:60:f2:1a:8a:9a:7d:d3:ec:50:30: de:6e:93:09:97:5e:07:5f:fd:9a:ae:0c:e6:69:38: 9f:23:62:3c:57:2b:4e:82:15:e5:8b:78:76:3f:ec: 5c:09:9c:5a:5b:59:a2:80:88:86:de:7e:70:7d:2a: 95:46:86:a3:dd:e2:ea:0b:35:f6:c3:a0:27:dc:2d: 85:e3:c1:d8:6b:92:47:3b:88:40:7e:55:e5:60:d9: 96:97:e1:b5:cd:54:3d:ec:56:a0:12:5e:e9:0d:dc: 6a:ec:9f:04:d6:71:b9:ab:d7:3d:48:9b:0c:ed:9c: 09:4e:88:05:cb:2d:9c:04:a9:03:f0:dd:49:9c:a6: bd:53:da:15:69:0c:de:b6:ee:31:6c:97:dd:f9:60: 97:34:13:7e:a9:cc:e6:b1:e1:eb:81:0e:61:92:d9: b6:04:a7:0e:1d:14:bd:1b:8f:74:dc:13:eb:6b:69: 9b:af:0a:17:42:f7:4c:b1:75:b9:c9:66:ee:be:a5: 05:e6:59:b1:ef:ea:a9:4c:f4:4a:89:3e:cc:04:6f: f8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.194.116.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56683 Signature Algorithm: sha256WithRSAEncryption 4f:c1:1f:29:15:3b:9b:66:18:e0:37:30:77:9e:c6:ef:19:80: 0e:12:9c:8a:0e:55:3c:d2:4b:40:e2:ec:25:ad:e2:4b:58:b5: 36:1b:58:b0:94:58:d7:dd:4a:1f:78:68:12:b5:a1:9d:59:b4: dd:75:f2:70:74:8c:a7:ac:dd:6e:bd:49:a5:f2:99:85:b4:54: 9f:eb:67:6b:73:aa:10:3f:fa:58:d1:c0:ee:5c:c9:45:48:03: 65:e8:9d:9a:b4:1f:78:0b:64:0f:25:44:3a:59:9c:ab:a6:bc: d8:2b:a5:b0:e2:d6:49:d3:12:16:9d:1d:25:14:1f:3e:14:5a: ea:73:3e:50:78:a5:f0:8c:45:5c:6d:6a:ff:e0:a0:a1:16:17: ee:b5:90:e5:de:0d:ba:ff:c0:a7:b1:34:fe:bc:83:71:2d:ab: de:00:67:05:ab:4d:82:2b:55:76:67:1f:21:7c:81:c3:82:29: d2:60:10:a8:78:7d:65:cf:3e:50:30:e3:d1:51:12:21:c4:01: 92:2a:ef:72:d2:63:83:e3:1b:67:f5:e0:3c:71:1a:00:90:79: a4:98:17:c8:8c:99:d9:6c:83:67:30:96:0a:c7:ef:a0:a1:0b: e5:71:a2:cd:57:a3:9e:0e:d7:6f:0b:b2:c7:1d:d1:29:8e:bc: e5:ec:11:f1 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+OAaOil+nZjahSCPQLICEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmQzZTJiMTJmNDc5MTk4Mjk0ZmFmNjBjNmUzNmEwYTFiN2JmZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gE4VOkeU00JbJoLF8uEHA/gLBuc +XZirbhGygRr30OXH+jW/cXZbi1unnDzJRVQQWDyGoqafdPsUDDebpMJl14HX/2a rgzmaTifI2I8VytOghXli3h2P+xcCZxaW1migIiG3n5wfSqVRoaj3eLqCzX2w6An 3C2F48HYa5JHO4hAflXlYNmWl+G1zVQ97FagEl7pDdxq7J8E1nG5q9c9SJsM7ZwJ TogFyy2cBKkD8N1JnKa9U9oVaQzetu4xbJfd+WCXNBN+qczmseHrgQ5hktm2BKcO HRS9G4903BPra2mbrwoXQvdMsXW5yWbuvqUF5lmx7+qpTPRKiT7MBG/4LQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKvT4rEvR5GYKU+vYMbjagobe/1UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzLzc5MWZi NS1hNWViLTQ3ZjUtYWQ5YS05OTdmNDdhYjdkZjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvNzkxZmI1 LWE1ZWItNDdmNS1hZDlhLTk5N2Y0N2FiN2RmMi8xL3E5UGlzUzlIa1pncFQ2OWd4 dU5xQ2h0N19WUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwcJ0MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDdazANBgkqhkiG9w0BAQsFAAOCAQEAT8EfKRU7m2YY4Dcwd57G7xmADhKcig5V PNJLQOLsJa3iS1i1NhtYsJRY191KH3hoErWhnVm03XXycHSMp6zdbr1JpfKZhbRU n+tna3OqED/6WNHA7lzJRUgDZeidmrQfeAtkDyVEOlmcq6a82CulsOLWSdMSFp0d JRQfPhRa6nM+UHil8IxFXG1q/+CgoRYX7rWQ5d4Nuv/Ap7E0/ryDcS2r3gBnBatN gitVdmcfIXyBw4Ip0mAQqHh9Zc8+UDDj0VESIcQBkirvctJjg+MbZ/XgPHEaAJB5 pJgXyIyZ2WyDZzCWCsfvoKEL5XGizVejng7Xbwuyxx3RKY685ewR8Q== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:07 2026 by rpki-client