This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer File: qGW64ld4vu2IgMCN8tPzf8N6vB4.cer (raw, json) Hash identifier: J9XStFgRuGLw6zeBzgnkbAJmYt7P6Cv7njLNqLv9dwo= Subject key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1229E3544CEC2AA5701E99AB540D0B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214037 IP: 185.126.252.0/22 IP: 193.162.78.0/24 IP: 194.4.68.0/22 IP: 212.79.112.0/20 IP: 212.87.160.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:29:e3:54:4c:ec:2a:a5:70:1e:99:ab:54:0d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a865bae25778beed8880c08df2d3f37fc37abc1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:90:25:0b:43:4c:cc:38:a6:df:76:57:53:c3: 30:ca:d3:2f:23:4d:ee:89:e6:91:ff:3a:fa:2c:93: aa:c0:dd:f1:75:69:42:50:35:01:98:86:cc:75:49: 68:15:f5:ea:04:98:20:b9:9c:0f:98:10:e2:e3:b5: 94:6b:d5:d5:1e:42:b6:9a:65:72:de:c9:24:d8:03: f2:74:44:2e:a8:d4:60:07:a1:12:78:5e:f3:84:ec: 0d:fd:2a:b1:ac:70:8c:fe:22:00:5a:1c:db:cc:89: 66:a1:10:f9:11:e4:2e:06:90:f5:65:5d:05:46:70: 7d:37:c1:79:76:22:64:90:72:c2:93:e5:04:24:cf: fe:d5:d8:5d:38:ac:f5:6d:a3:fd:8b:4b:f3:5e:b3: 3e:f3:85:ac:5e:45:7c:37:c8:6c:51:aa:d0:ad:9a: 79:25:0a:36:fe:46:ff:d3:a8:9b:e0:49:97:48:d8: 7d:a6:f1:85:d8:32:90:aa:dc:19:9c:33:86:df:d7: 61:7d:f8:d8:7f:0f:68:f8:e8:d8:ef:98:95:d5:57: f2:41:14:bd:c5:14:be:21:a0:f5:11:6e:20:a0:6d: 00:9a:82:9a:d2:58:a2:42:f9:c9:69:17:69:e3:39: d0:33:1c:76:d8:d9:e4:b6:1e:83:87:b2:86:9b:ec: 15:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.126.252.0/22 193.162.78.0/24 194.4.68.0/22 212.79.112.0/20 212.87.160.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214037 Signature Algorithm: sha256WithRSAEncryption 64:c6:55:8b:39:d7:b1:46:79:50:30:78:5b:56:31:43:b0:cb: 04:1d:b3:52:5e:4d:f4:97:8f:f4:7c:67:70:87:29:87:db:1b: e1:c5:34:d0:46:2d:52:e1:53:65:65:51:57:ca:0a:67:2a:c2: 03:25:50:e2:cb:cc:03:df:b3:f4:7e:36:28:da:2b:01:7e:8a: 2c:4c:14:55:32:a7:5a:01:5f:e0:db:5c:9c:e7:69:22:86:e7: 26:fb:71:54:33:7a:89:26:94:69:96:e1:3d:f5:0b:8c:ec:ad: a3:e0:8e:7c:26:99:f1:54:3a:a5:ec:f4:a8:22:f1:fb:19:e8: 17:5f:8f:02:1e:06:17:c6:93:03:08:d3:7f:8a:1c:b8:57:d5: 3a:3c:40:33:08:a6:54:e9:33:23:da:df:bd:40:9f:2d:0b:41: bc:59:da:20:f8:c1:83:bb:fc:41:b4:3a:f0:78:f9:bf:79:42: 36:4e:38:74:ab:44:4d:73:ca:10:04:b5:f6:5f:7d:ea:27:28: c9:42:44:c6:ee:f4:b8:ab:2e:21:58:49:fa:2f:88:6e:5e:d1: 38:b3:84:b4:e9:8c:34:6f:26:d6:69:59:b6:3d:34:f5:66:64: 6d:84:42:fa:27:c5:3e:2d:b5:63:eb:82:53:4d:c7:38:9d:20: 13:0d:76:32 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZt8EinjVEzsKqVwHpmrVA0LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODY1YmFlMjU3NzhiZWVkODg4MGMwOGRmMmQzZjM3ZmMzN2FiYzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5AlC0NMzDim33ZXU8MwytMvI03u ieaR/zr6LJOqwN3xdWlCUDUBmIbMdUloFfXqBJgguZwPmBDi47WUa9XVHkK2mmVy 3skk2APydEQuqNRgB6ESeF7zhOwN/SqxrHCM/iIAWhzbzIlmoRD5EeQuBpD1ZV0F RnB9N8F5diJkkHLCk+UEJM/+1dhdOKz1baP9i0vzXrM+84WsXkV8N8hsUarQrZp5 JQo2/kb/06ib4EmXSNh9pvGF2DKQqtwZnDOG39dhffjYfw9o+OjY75iV1VfyQRS9 xRS+IaD1EW4goG0AmoKa0liiQvnJaRdp4znQMxx22Nnkth6Dh7KGm+wVCQIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFKhluuJXeL7tiIDAjfLT83/DerweMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiLzY0NDRk MS01ZjAwLTRlNTAtODAxOS0xYjZmNzUwY2Y5YTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvNjQ0NGQx LTVmMDAtNGU1MC04MDE5LTFiNmY3NTBjZjlhMi8xL3FHVzY0bGQ0dnUySWdNQ044 dFB6ZjhONnZCNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAkBAIAATAeAwQCuX78AwQAwaJOAwQCwgREAwQE1E9wAwQF1Feg MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNEFTANBgkqhkiG9w0BAQsFAAOCAQEA ZMZViznXsUZ5UDB4W1YxQ7DLBB2zUl5N9JeP9HxncIcph9sb4cU00EYtUuFTZWVR V8oKZyrCAyVQ4svMA9+z9H42KNorAX6KLEwUVTKnWgFf4NtcnOdpIobnJvtxVDN6 iSaUaZbhPfULjOyto+COfCaZ8VQ6pez0qCLx+xnoF1+PAh4GF8aTAwjTf4ocuFfV OjxAMwimVOkzI9rfvUCfLQtBvFnaIPjBg7v8QbQ68Hj5v3lCNk44dKtETXPKEAS1 9l996icoyUJExu70uKsuIVhJ+i+Ibl7ROLOEtOmMNG8m1mlZtj009WZkbYRC+ifF Pi21Y+uCU03HOJ0gEw12Mg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:52:37 2026 by rpki-client