This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer File: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer (raw, json) Hash identifier: 4rjGiPs8CyROQ1DG0AtFPpjJO5AWH2kzcjcUtMMbvx4= Subject key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B354A00626D1AE772279485FD6DD190 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56595 AS: 207067 IP: 46.226.0.0/21 IP: 89.32.88.0/21 IP: 91.239.46.0/24 IP: 91.240.174.0/24 IP: 95.215.9.0/24 IP: 185.7.228.0/22 IP: 185.8.93.0/24 IP: 185.34.8.0/22 IP: 185.73.152.0/22 IP: 185.100.68.0/22 IP: 185.122.64.0/22 IP: 185.240.200.0/22 IP: 188.241.20.0/22 IP: 192.124.192.0 -- 192.124.198.255 IP: 192.124.200.0/24 IP: 192.124.203.0/24 IP: 192.124.206.0/23 IP: 193.33.125.0/24 IP: 195.230.123.0/24 IP: 2a00:a600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:4a:00:62:6d:1a:e7:72:27:94:85:fd:6d:d1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:88:b0:f5:4e:60:95:08:f1:0c:52:e6:88:2a: 2a:cf:0d:25:1c:42:94:15:3b:ca:58:89:44:78:37: ee:f8:19:c8:a6:3a:65:ff:f1:a8:87:26:f4:b9:67: 7c:83:bd:ed:49:c8:42:de:ca:93:bb:96:2e:3d:59: 57:dd:70:fd:d1:15:8a:5f:7e:a0:b4:5e:7d:5b:84: 30:7f:1d:8a:90:49:c6:bb:56:1b:2e:a3:74:61:a2: c8:bb:d3:74:f2:32:35:49:2c:85:c5:2c:84:fe:91: 57:4a:52:81:d0:2b:ec:5b:50:15:cd:9a:22:b9:04: 24:21:df:71:e2:a3:b9:70:31:17:99:c5:68:58:d5: 4d:27:56:eb:b1:67:94:ff:cc:82:07:b0:5d:d8:86: 4a:1c:25:c0:81:bf:92:f1:cd:28:3e:5c:eb:d2:91: f0:2b:a8:1c:9c:f5:64:cd:f9:38:fe:19:32:b4:8f: 9e:dc:f0:30:56:70:79:df:a9:c5:b5:04:21:0d:98: d5:f6:c1:84:a8:3a:9e:7e:cd:15:d5:ea:36:79:cf: b9:93:05:03:62:81:3a:c0:58:89:48:88:af:aa:ea: 0b:48:d5:df:63:6d:b0:21:7d:00:2e:a8:ec:5d:b8: f2:65:cb:ab:03:6b:7c:7c:bd:12:94:c3:af:4b:35: 01:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.226.0.0/21 89.32.88.0/21 91.239.46.0/24 91.240.174.0/24 95.215.9.0/24 185.7.228.0/22 185.8.93.0/24 185.34.8.0/22 185.73.152.0/22 185.100.68.0/22 185.122.64.0/22 185.240.200.0/22 188.241.20.0/22 192.124.192.0-192.124.198.255 192.124.200.0/24 192.124.203.0/24 192.124.206.0/23 193.33.125.0/24 195.230.123.0/24 IPv6: 2a00:a600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56595 207067 Signature Algorithm: sha256WithRSAEncryption 49:d4:61:2c:71:f0:4f:8f:6b:95:4b:b1:cd:54:41:12:2b:a9: 95:a1:f8:2e:bf:dd:67:a4:df:4b:47:ca:7f:c9:c9:62:d7:8b: 7a:eb:9c:24:23:19:ba:14:9d:64:4e:e8:f9:a2:a5:9c:1f:5a: 2a:2d:0c:02:80:36:cd:a2:a2:a4:8c:e0:51:8e:e1:2f:37:54: 4e:af:52:7d:49:4d:45:90:47:2b:4c:b1:8b:97:db:89:ce:db: d5:11:2a:08:d3:8a:b8:94:0a:29:d6:c2:81:c2:32:aa:59:f2: 3b:c8:df:ae:44:13:01:d1:c3:7a:38:a9:84:73:28:f8:6e:a6: 37:95:15:f3:84:57:e3:dc:49:38:41:c1:d8:a2:f1:43:97:af: 7c:d9:4e:aa:c5:3f:18:c9:bb:6f:8b:8e:6c:5c:5d:fd:d0:c8: 49:79:ff:f1:36:6c:d5:d8:c5:91:30:65:ee:ce:7d:5a:28:d4: 0b:a7:54:e3:d7:2a:b5:3f:c1:54:19:6c:b8:74:be:37:f6:1e: 96:cb:66:e1:cc:5a:27:bc:d0:2c:e1:d4:ed:56:61:5b:7e:cc: 87:75:1b:4f:a9:d0:12:7b:78:38:ab:f8:5f:9a:46:06:8f:31: 10:d0:23:2a:e4:04:d5:a2:e6:96:fb:bc:33:e3:5c:bc:c3:92: b0:e0:b6:9d -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgISAZt7NUoAYm0a53InlIX9bdGQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGI1ZmU2N2MyMDc5N2QzOTQxNTU1NTU0ZjhjOTg4Y2EyZjdjMTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIiw9U5glQjxDFLmiCoqzw0lHEKU FTvKWIlEeDfu+BnIpjpl//Gohyb0uWd8g73tSchC3sqTu5YuPVlX3XD90RWKX36g tF59W4Qwfx2KkEnGu1YbLqN0YaLIu9N08jI1SSyFxSyE/pFXSlKB0CvsW1AVzZoi uQQkId9x4qO5cDEXmcVoWNVNJ1brsWeU/8yCB7Bd2IZKHCXAgb+S8c0oPlzr0pHw K6gcnPVkzfk4/hkytI+e3PAwVnB536nFtQQhDZjV9sGEqDqefs0V1eo2ec+5kwUD YoE6wFiJSIivquoLSNXfY22wIX0ALqjsXbjyZcurA2t8fL0SlMOvSzUBfQIDAQAB o4IDLDCCAygwHQYDVR0OBBYEFKi1/mfCB5fTlBVVVU+MmIyi98F7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5L2U3Y2Jm My02NGU2LTQwMjMtYmVmZC0xY2M2MTkxOTc1NTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvZTdjYmYz LTY0ZTYtNDAyMy1iZWZkLTFjYzYxOTE5NzU1MS8xL3FMWC1aOElIbDlPVUZWVlZU NHlZaktMM3dYcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGlBggrBgEF BQcBBwEB/wSBlTCBkjCBgAQCAAEwegMEAy7iAAMEA1kgWAMEAFvvLgMEAFvwrgME AF/XCQMEArkH5AMEALkIXQMEArkiCAMEArlJmAMEArlkRAMEArl6QAMEArnwyAME ArzxFDAMAwQGwHzAAwQAwHzGAwQAwHzIAwQAwHzLAwQBwHzOAwQAwSF9AwQAw+Z7 MA0EAgACMAcDBQMqAKYAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDdEwIDAyjb MA0GCSqGSIb3DQEBCwUAA4IBAQBJ1GEscfBPj2uVS7HNVEESK6mVofguv91npN9L R8p/ycli14t665wkIxm6FJ1kTuj5oqWcH1oqLQwCgDbNoqKkjOBRjuEvN1ROr1J9 SU1FkEcrTLGLl9uJztvVESoI04q4lAop1sKBwjKqWfI7yN+uRBMB0cN6OKmEcyj4 bqY3lRXzhFfj3Ek4QcHYovFDl6982U6qxT8Yybtvi45sXF390MhJef/xNmzV2MWR MGXuzn1aKNQLp1Tj1yq1P8FUGWy4dL439h6Wy2bhzFonvNAs4dTtVmFbfsyHdRtP qdASe3g4q/hfmkYGjzEQ0CMq5ATVouaW+7wz41y8w5Kw4Lad -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:55 2026 by rpki-client