This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer File: qBaZpbxkh70vF0nRM_yi43_U2og.cer (raw, json) Hash identifier: XkHgoVAsNtK1fx0nWsCfyGSe8+Tah4wzpZJSMKn9/aU= Subject key identifier: A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED650F3756552C0D50AD1EB7ACA3EA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 149.133.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:65:0f:37:56:55:2c:0d:50:ad:1e:b7:ac:a3:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4a:ca:df:16:dd:8a:0a:a4:f2:cd:3a:f7:d7: 26:12:af:ba:26:42:76:69:cf:26:fa:bf:47:e7:a2: 31:71:05:68:30:0d:50:ec:7c:fd:5e:63:23:4c:8e: b6:c4:66:fd:f3:bb:b8:08:b9:2e:1a:6c:67:a1:c6: 61:d8:3e:65:bc:99:14:cd:0a:e9:f6:61:95:bf:51: af:0b:0c:c0:ea:e5:d7:35:7c:16:c1:ac:6b:fc:35: a8:b2:e9:32:de:b6:31:67:fb:bb:53:dd:07:40:7c: 11:69:8d:c5:51:4f:a4:e5:2f:70:ba:60:4d:fd:8d: f6:e6:24:09:12:eb:1a:ae:49:4e:41:ec:26:97:a8: 83:1e:85:30:d5:6c:db:f2:1c:b2:f3:e0:59:98:de: d0:9e:53:ab:32:72:11:11:4a:1b:0f:dd:3e:51:cd: 38:ac:27:ed:39:d4:99:40:a7:c0:9f:e6:2d:4c:bb: ce:06:45:31:ac:29:43:fa:16:32:87:12:b7:79:cb: 0f:44:1a:93:e2:05:4f:0e:df:8f:cd:7b:52:96:82: c0:88:f6:f8:4d:c5:35:ad:54:24:1d:7c:e7:4b:c8: 36:87:93:2e:a3:8e:76:4a:e4:8a:9d:53:4d:36:8c: cf:60:c9:88:c5:d1:1c:43:6a:6b:1b:e4:bf:95:b8: 43:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.133.0.0/16 Signature Algorithm: sha256WithRSAEncryption 21:93:19:03:78:d0:1d:94:a4:d4:9d:c6:b1:3d:09:ab:4a:87: d3:89:5b:75:76:e8:e1:a0:07:df:d0:14:0a:58:29:3d:ef:20: 1a:4e:6c:d8:90:7e:56:9f:74:87:4b:97:de:3c:74:ee:c9:75: 0c:cd:4e:ef:13:4e:c6:3f:ec:21:5b:87:08:70:30:a5:7d:ec: d5:f5:8c:9c:03:98:94:a4:e7:9c:bc:23:27:dd:dd:0c:92:aa: 02:a1:34:1d:7d:22:39:e7:54:17:be:db:cf:54:12:67:58:7b: 67:da:ac:42:55:69:29:04:59:13:61:f4:58:08:54:ec:0f:dd: ce:b6:83:c4:47:ea:ee:13:b8:8b:2e:1f:7f:b8:6c:1c:ce:6b: f6:3e:b9:97:80:02:42:3a:9c:76:e3:1f:03:48:25:64:eb:46: 92:ec:ed:68:55:ec:91:4f:11:b0:30:97:ff:e7:06:46:ec:17: 0a:5c:d8:be:fd:f5:38:06:90:4b:6c:d3:54:9e:6c:96:77:b2: 80:8b:8d:39:34:85:de:3a:c1:70:2c:f6:d6:36:df:e1:b1:a3: 1c:a2:53:f1:af:8c:c6:f0:c7:0a:1d:0f:0f:a4:bb:2d:d0:0d: a8:45:d9:32:ed:cf:b3:22:3c:cb:3f:6d:e3:f7:72:4b:68:2b: 4e:5e:51:ac -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt87WUPN1ZVLA1QrR63rKPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODE2OTlhNWJjNjQ4N2JkMmYxNzQ5ZDEzM2ZjYTJlMzdmZDRkYTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyErK3xbdigqk8s0699cmEq+6JkJ2 ac8m+r9H56IxcQVoMA1Q7Hz9XmMjTI62xGb987u4CLkuGmxnocZh2D5lvJkUzQrp 9mGVv1GvCwzA6uXXNXwWwaxr/DWosuky3rYxZ/u7U90HQHwRaY3FUU+k5S9wumBN /Y325iQJEusarklOQewml6iDHoUw1Wzb8hyy8+BZmN7QnlOrMnIREUobD90+Uc04 rCftOdSZQKfAn+YtTLvOBkUxrClD+hYyhxK3ecsPRBqT4gVPDt+PzXtSloLAiPb4 TcU1rVQkHXznS8g2h5Muo452SuSKnVNNNozPYMmIxdEcQ2prG+S/lbhDQwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFKgWmaW8ZIe9LxdJ0TP8ouN/1NqIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0L2ZkNzQ5 My03NTk5LTQzYjYtODU1OS03ODdjMDYzMmNmZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvZmQ3NDkz LTc1OTktNDNiNi04NTU5LTc4N2MwNjMyY2ZlYS8xL3FCYVpwYnhraDcwdkYwblJN X3lpNDNfVTJvZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAlYUwDQYJKoZIhvcNAQELBQADggEBACGTGQN4 0B2UpNSdxrE9CatKh9OJW3V26OGgB9/QFApYKT3vIBpObNiQflafdIdLl948dO7J dQzNTu8TTsY/7CFbhwhwMKV97NX1jJwDmJSk55y8Iyfd3QySqgKhNB19IjnnVBe+ 289UEmdYe2farEJVaSkEWRNh9FgIVOwP3c62g8RH6u4TuIsuH3+4bBzOa/Y+uZeA AkI6nHbjHwNIJWTrRpLs7WhV7JFPEbAwl//nBkbsFwpc2L799TgGkEts01SebJZ3 soCLjTk0hd46wXAs9tY23+GxoxyiU/GvjMbwxwodDw+kuy3QDahF2TLtz7MiPMs/ beP3cktoK05eUaw= -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:36 2026 by rpki-client