This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer File: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer (raw, json) Hash identifier: 7TN1Fox5FSqiS0b0xEihfv4gJDX1IGFAdJRSOXe3+E4= Subject key identifier: A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14CA614D10A893E50D8E7627C1AFB2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.138.30.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:ca:61:4d:10:a8:93:e5:0d:8e:76:27:c1:af:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a84570854fe886b94ae625363c625dda60bb3efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:17:24:3a:d3:fd:f4:0a:ad:e8:74:1b:24:11: 3e:f3:1d:e2:07:84:73:40:2f:c8:b3:99:9a:4e:da: e2:e9:19:be:30:f4:8d:d3:91:34:eb:c0:0a:e4:f9: fd:c4:c1:98:b2:79:4a:f3:70:94:d5:84:62:ef:d2: 23:71:03:e5:59:4e:1b:6b:af:97:8f:27:e6:3a:fe: 0a:f2:77:45:57:96:c3:0f:1a:a0:60:c3:5d:e9:70: 32:1d:c8:53:90:5c:da:96:e6:95:74:d6:d4:9e:41: 87:66:51:b0:29:a0:bf:52:39:b5:af:aa:7c:6a:e6: 49:d5:44:e6:07:7a:63:bc:89:38:34:0c:0a:1a:ff: f3:7d:5e:9c:15:82:64:0e:17:6d:c8:f6:de:1e:95: fd:2a:82:5f:2f:ad:ab:e8:7b:74:35:9b:a8:37:87: f3:24:38:6a:34:1a:b0:b2:24:0a:1b:eb:30:87:d3: ca:ca:17:41:53:a1:33:a7:ec:df:5d:ae:16:05:8e: 80:b3:9a:4e:94:db:d5:43:57:1c:57:62:83:6f:43: c9:11:58:cc:a2:fd:d2:81:96:e2:5e:a0:dc:42:2b: 69:10:45:0b:ed:c5:00:ff:7d:e2:1f:8d:3b:3b:c3: 1f:bc:52:88:40:f8:45:76:91:3d:09:07:66:43:cb: f1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.30.0/24 Signature Algorithm: sha256WithRSAEncryption 22:0b:bb:64:92:e1:3c:bc:21:3a:98:a1:21:b5:b4:93:2c:cf: 25:72:f0:97:bf:34:bf:94:47:f0:ac:23:3a:5b:c1:af:7c:65: b2:0c:99:40:5a:19:5c:8b:72:5b:21:41:89:c6:ac:2e:5f:19: ac:04:c7:43:44:e7:33:b1:fe:50:ed:2b:ca:b0:89:16:8c:41: b0:15:fe:52:27:8c:eb:47:cf:18:3c:4e:8b:0e:79:ec:6d:5c: 70:c4:3c:16:2d:35:ce:0f:f9:69:77:76:5e:e3:4b:52:f4:84: 72:96:24:fd:36:9f:d2:84:e1:8f:53:68:a2:c5:08:63:01:99: d7:43:b5:79:00:04:6f:37:3b:ea:dc:f1:c2:ca:b9:7d:4e:dd: ea:36:b8:8c:08:71:d3:46:4d:d9:2c:02:55:8f:fb:5b:39:f9: 17:64:f7:49:87:2e:84:49:12:d6:21:6a:44:bc:c8:53:6b:5f: 5d:d6:7d:b3:a9:da:87:48:af:cc:90:c5:04:6a:88:a3:b1:dc: 96:d1:68:ed:4b:28:84:72:7c:9c:ff:6a:d0:ff:7f:28:3a:c5: 9d:d5:42:5b:d7:2d:d9:55:6e:42:4c:24:85:15:b8:64:08:0f: e7:64:46:c2:35:e8:b9:70:3e:d7:49:04:dd:76:01:61:bd:aa: 92:8c:e1:93 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/FMphTRCok+UNjnYnwa+yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODQ1NzA4NTRmZTg4NmI5NGFlNjI1MzYzYzYyNWRkYTYwYmIzZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRckOtP99Aqt6HQbJBE+8x3iB4Rz QC/Is5maTtri6Rm+MPSN05E068AK5Pn9xMGYsnlK83CU1YRi79IjcQPlWU4ba6+X jyfmOv4K8ndFV5bDDxqgYMNd6XAyHchTkFzaluaVdNbUnkGHZlGwKaC/Ujm1r6p8 auZJ1UTmB3pjvIk4NAwKGv/zfV6cFYJkDhdtyPbeHpX9KoJfL62r6Ht0NZuoN4fz JDhqNBqwsiQKG+swh9PKyhdBU6Ezp+zfXa4WBY6As5pOlNvVQ1ccV2KDb0PJEVjM ov3SgZbiXqDcQitpEEUL7cUA/33iH407O8MfvFKIQPhFdpE9CQdmQ8vxXQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKhFcIVP6Ia5SuYlNjxiXdpguz78MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlL2ZhYzJh Mi01ZjY5LTQwNDMtOGQ2NS01YmM4Nzk1YzJjYmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvZmFjMmEy LTVmNjktNDA0My04ZDY1LTViYzg3OTVjMmNiYS8xL3FFVndoVV9vaHJsSzVpVTJQ R0pkMm1DN1B2dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwYoeMA0GCSqGSIb3DQEBCwUAA4IBAQAiC7tk kuE8vCE6mKEhtbSTLM8lcvCXvzS/lEfwrCM6W8GvfGWyDJlAWhlci3JbIUGJxqwu XxmsBMdDROczsf5Q7SvKsIkWjEGwFf5SJ4zrR88YPE6LDnnsbVxwxDwWLTXOD/lp d3Ze40tS9IRyliT9Np/ShOGPU2iixQhjAZnXQ7V5AARvNzvq3PHCyrl9Tt3qNriM CHHTRk3ZLAJVj/tbOfkXZPdJhy6ESRLWIWpEvMhTa19d1n2zqdqHSK/MkMUEaoij sdyW0WjtSyiEcnyc/2rQ/38oOsWd1UJb1y3ZVW5CTCSFFbhkCA/nZEbCNei5cD7X SQTddgFhvaqSjOGT -----END CERTIFICATE-----Generated at Mon Jan 26 07:17:13 2026 by rpki-client