This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer File: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer (raw, json) Hash identifier: Mr9R/O9wO/wUF98NfQ+SXp2ewxUlj8Tg4pjwNz2OJ24= Subject key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834F77A0D484466EBC4700890F06F48 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.82.228.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f7:7a:0d:48:44:66:eb:c4:70:08:90:f0:6f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:c2:1a:49:98:79:9b:82:a6:8e:70:97:ad: c2:29:d0:52:80:d1:a4:13:8e:67:11:1e:54:bd:f6: 24:6d:f3:a4:13:62:36:8e:ae:57:82:fb:07:1b:54: 52:e2:3a:5f:52:b8:fb:dd:bd:ea:12:9b:10:56:a2: 67:14:7e:63:51:48:1c:87:14:4c:8f:49:1f:c8:63: 6f:00:42:14:7a:86:51:db:3b:df:b7:f7:a7:41:b9: 15:70:b2:a4:d9:8d:c3:69:94:fa:91:81:ee:1e:11: 48:0f:a5:f6:05:29:e8:f3:e6:87:0f:54:4c:57:c3: e8:c9:af:d9:ec:65:63:c6:2e:04:2a:76:7a:99:24: 34:5d:2b:18:82:2e:21:b9:0d:46:94:12:9b:59:54: 9e:39:5d:38:31:14:e5:3a:5e:cf:9a:3c:eb:51:54: 44:12:6c:f1:f2:04:75:ef:6d:4a:23:85:61:33:c6: 83:52:48:31:37:3c:cb:29:0b:69:7f:9b:7e:2a:44: 97:b9:5b:1a:fb:ae:7b:09:28:7e:45:c0:a7:b6:48: df:20:ac:44:6b:7b:e2:44:a0:fb:18:2d:44:08:37: f1:51:c5:b5:c0:1e:72:3c:a1:70:5b:13:f5:63:0f: 5f:65:ec:7a:97:40:13:1a:03:37:ff:10:c5:76:48: b5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.228.0/22 Signature Algorithm: sha256WithRSAEncryption 15:7b:9e:10:87:bb:d1:95:e0:0f:0d:c2:b3:4f:83:cc:c3:99: 53:94:d3:d0:67:62:93:b6:64:ba:41:d7:4b:e4:ce:e2:af:fa: eb:2f:53:79:52:f2:e3:4b:4b:f7:09:27:1d:e2:d2:63:4d:66: 1d:b3:32:59:7b:cc:22:ef:1b:5b:15:2a:07:07:78:dd:25:98: 18:f8:cc:f9:b4:7b:2d:17:b7:a6:be:b4:cd:e4:f0:f5:8a:25: 21:46:ad:90:21:f1:d2:6e:1b:32:0d:c8:89:b4:72:fb:a9:aa: 9e:ed:72:13:29:e8:6b:53:c3:03:7c:04:92:37:b8:98:f8:e4: b7:f5:36:52:40:f4:f3:6f:6d:69:47:b4:f7:f0:c7:92:84:49: ee:f6:b6:a3:46:80:1b:9b:cf:16:5e:78:3b:eb:d2:b1:aa:6d: 18:4a:d7:d2:ac:a2:91:4d:bb:e1:76:b0:d9:7e:b3:38:eb:61: 98:9e:d8:b8:48:c3:63:12:8c:cc:c4:f3:d2:09:12:d2:df:89: a6:c6:0b:b4:5a:4b:b0:c1:2b:af:97:81:c6:ab:8b:0b:a9:07: d2:bf:75:e4:47:d0:bd:28:66:50:82:ad:d9:c5:5e:08:cb:be: fd:30:f2:a2:9e:bd:87:59:12:c8:a8:ed:19:08:bc:89:04:58: 5a:6d:8a:e9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4NPd6DUhEZuvEcAiQ8G9IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTBlMjhmMmU1MDlmZTM3YWM1YzM0MDFhMGE4YzExMDI5YjYyMWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqbCGkmYeZuCpo5wl63CKdBSgNGk E45nER5UvfYkbfOkE2I2jq5XgvsHG1RS4jpfUrj73b3qEpsQVqJnFH5jUUgchxRM j0kfyGNvAEIUeoZR2zvft/enQbkVcLKk2Y3DaZT6kYHuHhFID6X2BSno8+aHD1RM V8Poya/Z7GVjxi4EKnZ6mSQ0XSsYgi4huQ1GlBKbWVSeOV04MRTlOl7PmjzrUVRE Emzx8gR1721KI4VhM8aDUkgxNzzLKQtpf5t+KkSXuVsa+657CSh+RcCntkjfIKxE a3viRKD7GC1ECDfxUcW1wB5yPKFwWxP1Yw9fZex6l0ATGgM3/xDFdki1rQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKkOKPLlCf43rFw0AaCowRAptiHkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5Lzk5ZTU4 NS1hNjUyLTQ0ZjMtYTUzMS1hMDAzYmZkZjRlNDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvOTllNTg1 LWE2NTItNDRmMy1hNTMxLWEwMDNiZmRmNGU0NS8xL3FRNG84dVVKX2plc1hEUUJv S2pCRUNtMkllUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLVLkMA0GCSqGSIb3DQEBCwUAA4IBAQAVe54Q h7vRleAPDcKzT4PMw5lTlNPQZ2KTtmS6QddL5M7ir/rrL1N5UvLjS0v3CScd4tJj TWYdszJZe8wi7xtbFSoHB3jdJZgY+Mz5tHstF7emvrTN5PD1iiUhRq2QIfHSbhsy DciJtHL7qaqe7XITKehrU8MDfASSN7iY+OS39TZSQPTzb21pR7T38MeShEnu9raj RoAbm88WXng769Kxqm0YStfSrKKRTbvhdrDZfrM462GYnti4SMNjEozMxPPSCRLS 34mmxgu0WkuwwSuvl4HGq4sLqQfSv3XkR9C9KGZQgq3ZxV4Iy779MPKinr2HWRLI qO0ZCLyJBFhabYrp -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:32 2026 by rpki-client