This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer File: qIAb4jY_IRvS9XgYrer5wNvhS9s.cer (raw, json) Hash identifier: ccqEJfzfHssbnIwtP7JpiX1X2kyQo/8LUKkDDechnUU= Subject key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E374C8AEF97F741914A2B24D98D1F2F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 82.115.214.0/24 IP: 185.66.202.0/23 IP: 185.237.4.0/22 IP: 2a07:e3c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:4c:8a:ef:97:f7:41:91:4a:2b:24:d9:8d:1f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:36:85:87:3e:3f:7c:25:1f:b5:af:5e:7e:3a: da:2d:e7:38:42:af:b8:d5:eb:0a:4b:1e:a6:0d:7e: 57:da:ff:24:f8:7f:a8:8d:87:c8:1e:4a:6b:4f:08: 7a:47:c4:d0:e8:db:1c:0c:c0:e7:7e:8b:dc:91:8d: c2:4c:d1:2f:8e:10:c5:e4:2a:30:36:99:a3:8f:f7: 84:8a:8e:47:50:00:ba:92:4f:06:ff:3e:4a:3a:3e: cc:f2:69:0f:d6:68:2b:d3:ec:64:6e:db:f2:54:31: f3:19:11:9d:88:44:a3:be:79:26:52:b9:9e:8b:98: 95:a5:a2:e7:38:24:39:59:04:e5:7c:db:83:fe:13: 2a:cf:70:4e:07:32:5a:f2:23:67:63:dc:d3:26:09: 87:31:d1:df:8f:13:35:77:99:e3:0f:06:34:4c:08: b9:36:ab:c1:e4:43:27:89:97:a4:78:0e:ac:61:b0: 05:27:7b:5e:9a:47:1f:7f:4f:f6:f7:29:fd:95:d6: cc:c6:b6:57:a1:8f:3d:d8:a4:ec:6b:67:3c:d6:5e: ab:92:c4:85:b5:eb:20:57:70:9f:ee:e7:13:a0:5f: 52:c6:0b:6b:ae:58:79:17:30:e2:77:27:37:fe:16: 6d:6a:e4:99:bf:3c:7f:8e:a6:cb:eb:7d:d4:ed:ea: b9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.115.214.0/24 185.66.202.0/23 185.237.4.0/22 IPv6: 2a07:e3c0::/32 Signature Algorithm: sha256WithRSAEncryption 2d:5a:67:83:9a:a9:75:38:64:56:2a:5a:b7:82:03:55:72:11: 26:f0:20:b0:99:a8:98:03:5a:47:75:25:cd:e7:be:54:3b:c3: 52:69:b3:cb:09:92:a0:78:69:7e:6e:3e:c0:a2:2d:a4:07:8f: eb:3d:0b:cb:ad:64:10:dd:e8:44:4e:05:7f:88:e3:18:1b:c1: 9f:e6:31:9c:14:1d:51:37:bf:66:fb:6d:ee:d9:f1:88:e1:d7: de:25:25:f1:a5:93:e9:39:26:18:ad:d5:5b:53:05:fa:20:f9: 0c:2d:84:b0:1b:47:79:78:57:08:a0:5d:fd:56:32:ee:b4:8d: a0:f1:bb:3f:26:07:e2:ba:b7:6c:08:a1:59:ef:1b:9b:8f:85: 38:4d:bf:e1:d5:c8:b6:84:fa:7f:f9:71:99:52:75:ce:8b:f8: 26:79:75:bf:d5:6c:cc:2b:58:f5:51:ab:5d:4e:c5:5c:d4:21: dd:3a:6e:04:1e:b9:7a:b6:57:64:f7:85:1e:17:73:dd:f0:c1: 71:d5:e9:60:6f:88:65:de:ed:a7:9e:c2:59:47:62:18:f5:8a: d1:52:b8:cd:85:19:37:4d:ea:77:a4:c1:2c:c7:80:4f:bd:99: 39:61:ae:16:43:02:0a:e6:58:8d:16:25:79:96:c5:e0:4c:b1: 1b:12:1c:fe -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt+N0yK75f3QZFKKyTZjR8vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODgwMWJlMjM2M2YyMTFiZDJmNTc4MThhZGVhZjljMGRiZTE0YmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzaFhz4/fCUfta9efjraLec4Qq+4 1esKSx6mDX5X2v8k+H+ojYfIHkprTwh6R8TQ6NscDMDnfovckY3CTNEvjhDF5Cow Npmjj/eEio5HUAC6kk8G/z5KOj7M8mkP1mgr0+xkbtvyVDHzGRGdiESjvnkmUrme i5iVpaLnOCQ5WQTlfNuD/hMqz3BOBzJa8iNnY9zTJgmHMdHfjxM1d5njDwY0TAi5 NqvB5EMniZekeA6sYbAFJ3temkcff0/29yn9ldbMxrZXoY892KTsa2c81l6rksSF tesgV3Cf7ucToF9Sxgtrrlh5FzDidyc3/hZtauSZvzx/jqbL633U7eq5wwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFKiAG+I2PyEb0vV4GK3q+cDb4UvbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxLzgxMWU3 My1jZjMwLTQ5NGQtYWNhYy04NDIwYWU5ZTA2MjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvODExZTcz LWNmMzAtNDk0ZC1hY2FjLTg0MjBhZTllMDYyMi8xL3FJQWI0allfSVJ2UzlYZ1ly ZXI1d052aFM5cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAUnPWAwQBuULKAwQCue0EMA0EAgACMAcDBQAq B+PAMA0GCSqGSIb3DQEBCwUAA4IBAQAtWmeDmql1OGRWKlq3ggNVchEm8CCwmaiY A1pHdSXN575UO8NSabPLCZKgeGl+bj7Aoi2kB4/rPQvLrWQQ3ehETgV/iOMYG8Gf 5jGcFB1RN79m+23u2fGI4dfeJSXxpZPpOSYYrdVbUwX6IPkMLYSwG0d5eFcIoF39 VjLutI2g8bs/JgfiurdsCKFZ7xubj4U4Tb/h1ci2hPp/+XGZUnXOi/gmeXW/1WzM K1j1UatdTsVc1CHdOm4EHrl6tldk94UeF3Pd8MFx1elgb4hl3u2nnsJZR2IY9YrR UrjNhRk3Tep3pMEsx4BPvZk5Ya4WQwIK5liNFiV5lsXgTLEbEhz+ -----END CERTIFICATE-----Generated at Sun Jan 25 08:02:46 2026 by rpki-client