This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer File: qBKXsdNqQt446EgLuSm0W8kDDJ0.cer (raw, json) Hash identifier: qCqwQ5zX4cZdf/+p2BaS5JofecILuzzmNao/N8gyfeE= Subject key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F193038944B92B6BC2D1930DD30CF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215004 IP: 176.118.177.0/24 IP: 2a14:3240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:19:30:38:94:4b:92:b6:bc:2d:19:30:dd:30:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0e:62:4e:72:56:b7:5b:98:40:19:d7:73:79: 60:e7:0f:d4:36:60:bd:90:03:f1:9c:0e:45:c6:1c: 9d:a9:84:ac:94:ac:ad:9e:b3:b8:ad:d7:b1:e8:dc: db:23:72:64:7d:22:89:f2:f5:83:97:a4:6c:1b:fa: 19:57:ef:6d:01:5a:d8:d9:7a:cd:be:91:bf:ac:db: 7f:4a:6b:06:d4:6c:7b:47:8c:00:1b:fe:0f:9b:1e: 91:66:95:da:5f:f5:f4:4a:73:61:85:90:26:7f:b6: c3:6c:a1:74:4b:06:73:0e:3e:7b:6a:d7:55:b3:18: 33:98:33:80:54:ea:90:2a:b3:fd:39:0a:35:b4:98: d0:ac:6f:95:55:a3:fc:dd:f1:b3:9a:5e:60:0f:d2: 9b:57:a0:b8:f7:09:57:11:73:c9:63:4b:b7:17:7f: 5a:70:f2:c4:e4:65:ef:82:cb:00:f7:d6:1d:09:30: 34:0a:01:68:ac:e2:75:00:70:77:6d:e2:9b:05:c0: 8b:d4:78:40:bc:c9:77:94:93:4e:95:0b:9e:d7:a1: 4f:cb:a2:ba:2a:18:4a:8b:9f:11:b6:23:a9:96:f1: a3:38:16:43:29:bc:be:ea:8f:ac:0b:85:93:d8:aa: 87:0b:38:15:d0:02:a5:0a:82:16:15:69:ed:b8:85: 6e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.118.177.0/24 IPv6: 2a14:3240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215004 Signature Algorithm: sha256WithRSAEncryption 92:ab:f1:66:9d:ba:cf:ef:13:3e:ef:48:e0:a5:68:11:57:45: 85:34:12:f8:48:9c:f9:a4:c9:48:19:d3:00:67:1f:a4:54:90: b1:5a:ba:48:39:9c:50:46:62:02:e2:7c:a4:ca:3a:a7:a7:36: a5:b7:0d:56:df:ec:06:ac:69:fc:0f:79:f9:a7:89:6f:a1:41: 2d:9a:86:24:df:3b:e2:d2:f2:7b:0b:30:09:2f:56:9a:a2:ff: 12:7d:e1:74:60:4d:64:af:5c:b8:3f:dd:ff:1f:36:3b:55:2b: 2b:bf:97:af:73:d8:31:62:c2:93:c2:fa:ce:d7:18:dd:91:e0: 2f:69:3f:9b:a8:c8:92:36:e4:ca:4e:7a:c6:4f:b3:19:c2:4b: a5:26:9f:c1:76:28:7d:70:fb:84:99:21:89:53:d3:71:b4:63: 8f:63:de:60:c0:da:fc:fe:bb:ea:de:f8:b2:a2:41:26:26:dc: df:28:de:40:6c:3b:14:05:76:61:ad:a4:c7:1d:0f:9b:2d:fd: 6e:c9:a7:5e:9a:32:2f:e0:39:28:91:2d:a0:1f:90:2c:6c:2d: 49:94:47:cf:a7:e7:da:6c:91:57:96:a7:dd:f4:02:2d:0d:cf: da:bc:0a:e7:16:92:2d:96:2a:da:af:8e:bb:50:b5:05:2e:6a: b4:87:e5:32 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8fxkwOJRLkra8LRkw3TDPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODEyOTdiMWQzNmE0MmRlMzhlODQ4MGJiOTI5YjQ1YmM5MDMwYzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg5iTnJWt1uYQBnXc3lg5w/UNmC9 kAPxnA5FxhydqYSslKytnrO4rdex6NzbI3JkfSKJ8vWDl6RsG/oZV+9tAVrY2XrN vpG/rNt/SmsG1Gx7R4wAG/4Pmx6RZpXaX/X0SnNhhZAmf7bDbKF0SwZzDj57atdV sxgzmDOAVOqQKrP9OQo1tJjQrG+VVaP83fGzml5gD9KbV6C49wlXEXPJY0u3F39a cPLE5GXvgssA99YdCTA0CgForOJ1AHB3beKbBcCL1HhAvMl3lJNOlQue16FPy6K6 KhhKi58RtiOplvGjOBZDKby+6o+sC4WT2KqHCzgV0AKlCoIWFWntuIVu+wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKgSl7HTakLeOOhIC7kptFvJAwydMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmLzcyMGU1 Zi03ZjMzLTRkOWQtOGNkZS0yMmRkMGYzOTI4ZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvNzIwZTVm LTdmMzMtNGQ5ZC04Y2RlLTIyZGQwZjM5MjhkNS8xL3FCS1hzZE5xUXQ0NDZFZ0x1 U20wVzhrRERKMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAsHaxMA0EAgACMAcDBQMqFDJAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNH3DANBgkqhkiG9w0BAQsFAAOCAQEAkqvxZp26z+8T Pu9I4KVoEVdFhTQS+Eic+aTJSBnTAGcfpFSQsVq6SDmcUEZiAuJ8pMo6p6c2pbcN Vt/sBqxp/A95+aeJb6FBLZqGJN874tLyewswCS9WmqL/En3hdGBNZK9cuD/d/x82 O1UrK7+Xr3PYMWLCk8L6ztcY3ZHgL2k/m6jIkjbkyk56xk+zGcJLpSafwXYofXD7 hJkhiVPTcbRjj2PeYMDa/P676t74sqJBJibc3yjeQGw7FAV2Ya2kxx0Pmy39bsmn XpoyL+A5KJEtoB+QLGwtSZRHz6fn2myRV5an3fQCLQ3P2rwK5xaSLZYq2q+Ou1C1 BS5qtIflMg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:33:27 2026 by rpki-client