This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer File: qFMQ9QMTeuizXU8yn0bwad1wOBU.cer (raw, json) Hash identifier: eboBYKIcuk4/kTPKBnKoMp3Sj/CieZYDskpmWowAkX4= Subject key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7E1250023048F5C74D72868380557 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50352 AS: 200880 AS: 206961 IP: 92.42.20.0/22 IP: 130.255.174.0/24 IP: 146.19.85.0/24 IP: 185.94.80.0/22 IP: 185.165.124.0/22 IP: 185.187.46.0/23 IP: 185.197.140.0/22 IP: 185.227.244.0/22 IP: 193.42.157.0/24 IP: 193.42.210.0/24 IP: 193.42.214.0/24 IP: 193.42.217.0/24 IP: 194.50.52.0/24 IP: 194.50.59.0/24 IP: 194.50.74.0/24 IP: 194.50.82.0/24 IP: 2a05:bf80::/29 IP: 2a09:a740::/29 IP: 2a0a:1200::/29 IP: 2a0a:7ac0::/29 IP: 2a0b:9680::/29 IP: 2a0d:600::/29 IP: 2a0e:b7c0::/29 IP: 2a0f:81c0::/29 IP: 2a0f:a740::/29 IP: 2a11:a580::/29 IP: 2a11:b2c0::/29 IP: 2a12:6b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e1:25:00:23:04:8f:5c:74:d7:28:68:38:05:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a85310f503137ae8b35d4f329f46f069dd703815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:5a:7e:77:22:64:25:45:d3:67:39:3d:c6: e8:1d:e1:a3:fa:23:a0:17:30:bc:7e:89:d5:c5:36: ad:92:a7:23:6a:ba:3c:67:f1:f4:49:60:9f:aa:eb: 97:a9:f6:2a:c1:70:bf:cc:68:16:d7:54:83:5e:7b: 6f:62:1a:bd:c1:e2:10:b6:10:93:94:c0:81:d5:84: 16:07:ed:0b:3f:57:06:f9:4e:a9:0f:73:1e:bb:1f: 6c:ff:de:3f:5a:21:d3:0e:d5:a9:fe:8f:b0:18:35: 9a:f0:0b:74:c0:37:a7:a1:a8:16:00:15:7e:3e:55: 8c:b6:f3:5a:51:29:8b:ae:62:04:67:43:e5:c7:29: 59:e9:63:32:54:88:a2:51:a7:e4:b1:6c:d7:ee:6e: 91:21:a9:6c:3f:56:11:e3:66:a8:fd:20:cd:47:7d: be:6f:17:83:31:1c:ed:aa:ff:64:80:68:56:1b:53: b8:51:82:c9:8b:46:cd:b0:4b:a2:4b:7a:cc:da:c5: 68:77:84:e4:4f:8e:2c:d5:ce:16:60:91:86:62:09: 8b:3f:4c:e8:f5:e8:c9:86:2a:f5:f0:34:83:a6:d1: db:9e:30:34:e6:93:e7:9e:51:bc:18:ee:5f:96:18: 2b:00:ba:b8:11:e0:e1:4c:86:29:18:37:70:df:07: 0f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.42.20.0/22 130.255.174.0/24 146.19.85.0/24 185.94.80.0/22 185.165.124.0/22 185.187.46.0/23 185.197.140.0/22 185.227.244.0/22 193.42.157.0/24 193.42.210.0/24 193.42.214.0/24 193.42.217.0/24 194.50.52.0/24 194.50.59.0/24 194.50.74.0/24 194.50.82.0/24 IPv6: 2a05:bf80::/29 2a09:a740::/29 2a0a:1200::/29 2a0a:7ac0::/29 2a0b:9680::/29 2a0d:600::/29 2a0e:b7c0::/29 2a0f:81c0::/29 2a0f:a740::/29 2a11:a580::/29 2a11:b2c0::/29 2a12:6b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50352 200880 206961 Signature Algorithm: sha256WithRSAEncryption 00:d9:49:bb:b8:38:4c:dc:0e:6a:4d:8e:88:0e:26:f3:68:25: 90:70:69:69:d4:6b:d7:e8:44:27:11:9b:c1:94:29:00:9f:f8: 1a:42:bf:21:68:3d:51:d7:d2:ad:01:62:e8:86:5b:0f:0b:6b: 15:4d:2d:53:47:80:38:b5:e6:d1:e7:81:a8:e9:22:c4:6a:16: ad:fb:a2:6c:28:97:67:ef:f2:3b:57:0e:0e:8b:f7:c8:ce:27: 80:c9:14:e3:5d:61:c7:84:08:aa:a5:d7:da:c9:a3:8e:99:f5: 11:f9:eb:ec:13:2f:10:87:ef:a4:c5:ad:6f:c8:96:83:97:4a: 6d:54:b8:25:5f:0e:11:51:1f:1d:ea:be:f5:dd:1a:90:a9:a1: 48:07:48:0d:77:1c:f1:d5:bf:20:87:de:e8:b3:a4:b8:19:9a: 11:92:ef:be:3b:03:df:19:f8:21:f2:0e:12:64:69:82:d3:b3: 18:7c:73:ef:88:d1:2f:7e:eb:4a:6d:4c:07:75:ed:89:b8:d3: d7:f6:a1:30:d6:04:bd:4b:71:05:0b:ca:30:56:2d:da:64:61: 1c:82:12:29:c9:37:b9:8c:6f:57:38:c7:c3:08:d9:f8:e4:d2: 5e:ea:b5:c3:53:06:48:d7:a0:a6:70:69:f3:5d:19:05:8c:d5: ee:ef:6e:64 -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgISAZt6x+ElACMEj1x01yhoOAVXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODUzMTBmNTAzMTM3YWU4YjM1ZDRmMzI5ZjQ2ZjA2OWRkNzAzODE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp81afnciZCVF02c5PcboHeGj+iOg FzC8fonVxTatkqcjaro8Z/H0SWCfquuXqfYqwXC/zGgW11SDXntvYhq9weIQthCT lMCB1YQWB+0LP1cG+U6pD3Meux9s/94/WiHTDtWp/o+wGDWa8At0wDenoagWABV+ PlWMtvNaUSmLrmIEZ0PlxylZ6WMyVIiiUafksWzX7m6RIalsP1YR42ao/SDNR32+ bxeDMRztqv9kgGhWG1O4UYLJi0bNsEuiS3rM2sVod4TkT44s1c4WYJGGYgmLP0zo 9ejJhir18DSDptHbnjA05pPnnlG8GO5flhgrALq4EeDhTIYpGDdw3wcPvQIDAQAB o4IDYzCCA18wHQYDVR0OBBYEFKhTEPUDE3ros11PMp9G8GndcDgVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2I0Mjk0 OS1lZTBhLTQxMjMtODdiZi0zMDE4OWE1YTRlYmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvYjQyOTQ5 LWVlMGEtNDEyMy04N2JmLTMwMTg5YTVhNGViYS8xL3FGTVE5UU1UZXVpelhVOHlu MGJ3YWQxd09CVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHXBggrBgEF BQcBBwEB/wSBxzCBxDBmBAIAATBgAwQCXCoUAwQAgv+uAwQAkhNVAwQCuV5QAwQC uaV8AwQBubsuAwQCucWMAwQCueP0AwQAwSqdAwQAwSrSAwQAwSrWAwQAwSrZAwQA wjI0AwQAwjI7AwQAwjJKAwQAwjJSMFoEAgACMFQDBQMqBb+AAwUDKgmnQAMFAyoK EgADBQMqCnrAAwUDKguWgAMFAyoNBgADBQMqDrfAAwUDKg+BwAMFAyoPp0ADBQMq EaWAAwUDKhGywAMFAyoSawAwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDAMSwAgMD ELACAwMocTANBgkqhkiG9w0BAQsFAAOCAQEAANlJu7g4TNwOak2OiA4m82glkHBp adRr1+hEJxGbwZQpAJ/4GkK/IWg9UdfSrQFi6IZbDwtrFU0tU0eAOLXm0eeBqOki xGoWrfuibCiXZ+/yO1cODov3yM4ngMkU411hx4QIqqXX2smjjpn1Efnr7BMvEIfv pMWtb8iWg5dKbVS4JV8OEVEfHeq+9d0akKmhSAdIDXcc8dW/IIfe6LOkuBmaEZLv vjsD3xn4IfIOEmRpgtOzGHxz74jRL37rSm1MB3XtibjT1/ahMNYEvUtxBQvKMFYt 2mRhHIISKck3uYxvVzjHwwjZ+OTSXuq1w1MGSNegpnBp810ZBYzV7u9uZA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:10 2026 by rpki-client