This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer File: qQIAoAAN9dhFudsoTQotvuZ2xag.cer (raw, json) Hash identifier: Nb611+gyDdartRu/EikO3/YDFncz4j89oFcUhxPWSEM= Subject key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA359247A3ECEA21F662A81C43D4D67 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8870 IP: 91.197.128.0/22 IP: 91.222.64.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:59:24:7a:3e:ce:a2:1f:66:2a:81:c4:3d:4d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5e:cf:6e:8b:4a:69:6b:4e:db:70:23:e9:08: 6a:02:30:53:09:d5:88:4b:bd:61:0a:be:a1:f2:50: d4:ca:25:62:0f:eb:cc:9b:96:27:fb:e7:1b:78:2d: 5a:51:81:c7:36:09:3a:0d:74:1b:a6:8e:be:b7:a0: 35:23:f2:9b:34:d7:8a:dc:3e:9a:60:90:b8:ce:81: 6a:83:b8:70:6a:38:5e:dc:00:9b:c7:e1:d5:e4:e5: b4:06:8d:c6:38:82:46:74:7a:f3:e8:4c:2c:11:af: ea:d7:ed:ac:0a:ab:87:ea:89:69:5e:90:9b:a9:18: 89:62:15:29:79:4a:47:46:ae:67:c2:34:48:ef:a5: dc:eb:7d:52:d2:dd:51:85:3e:54:36:62:4d:84:b3: f6:57:25:19:2a:33:fa:9b:d4:bf:40:e5:3a:25:ed: f0:53:06:3c:b0:8c:1f:21:60:d6:6a:4c:80:c0:44: 3b:fd:d3:87:92:63:3a:a3:c4:04:a7:86:e6:8c:ed: fe:2c:f6:f2:8a:33:09:bf:d6:bc:99:e5:32:37:d3: b4:03:8c:73:25:d4:4a:68:47:9e:cd:73:0a:fa:f1: 9a:0f:4a:a3:ee:a8:c3:f6:47:f4:80:c2:9f:8a:ae: 45:82:98:ff:cc:36:ed:74:24:e7:9a:7f:5a:4a:bd: 4f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.128.0/22 91.222.64.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8870 Signature Algorithm: sha256WithRSAEncryption 26:31:79:ee:8e:0e:01:fc:1e:a0:06:b3:ee:7c:79:82:d5:82: a0:1e:9e:2b:b2:d0:4a:65:f8:dd:46:a6:68:b6:96:cc:ce:72: ab:c4:28:a3:39:de:55:39:da:e2:3e:e7:3f:6d:cd:09:66:b5: 58:77:7e:27:c6:f6:a9:45:5f:cf:ab:4c:0f:81:5b:91:14:22: b6:13:c4:84:bb:d2:88:17:80:7b:96:dc:8d:99:33:fb:b9:cb: 68:94:88:aa:72:0e:25:e0:be:0e:de:aa:ce:d4:32:be:85:ac: da:e1:69:80:d2:fd:1d:f3:bd:74:f7:5e:36:0b:a9:0f:af:11: 9d:f9:16:c5:1e:87:ed:14:44:e4:3e:24:39:13:c5:46:20:9c: f7:f6:1e:05:ce:d3:8e:dc:2c:8e:0f:8e:09:b7:ba:4d:a6:70: b4:9b:80:5b:d2:53:72:94:2d:db:83:db:34:f5:01:4c:d7:e4: a9:ad:fe:b1:4b:48:2c:d1:19:6a:b5:b7:04:ba:39:b0:b8:b4: db:80:66:53:fd:cf:d7:56:ba:e0:60:79:6d:6d:82:44:e0:08: 7b:1d:1a:44:ef:f0:32:24:bb:21:bb:c1:98:63:7c:72:44:b7: ba:06:0d:11:f1:15:94:85:14:d0:05:ec:98:85:8c:af:45:e9: 7c:76:17:66 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt7o1kkej7Ooh9mKoHEPU1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTAyMDBhMDAwMGRmNWQ4NDViOWRiMjg0ZDBhMmRiZWU2NzZjNWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF7PbotKaWtO23Aj6QhqAjBTCdWI S71hCr6h8lDUyiViD+vMm5Yn++cbeC1aUYHHNgk6DXQbpo6+t6A1I/KbNNeK3D6a YJC4zoFqg7hwajhe3ACbx+HV5OW0Bo3GOIJGdHrz6EwsEa/q1+2sCquH6olpXpCb qRiJYhUpeUpHRq5nwjRI76Xc631S0t1RhT5UNmJNhLP2VyUZKjP6m9S/QOU6Je3w UwY8sIwfIWDWakyAwEQ7/dOHkmM6o8QEp4bmjO3+LPbyijMJv9a8meUyN9O0A4xz JdRKaEeezXMK+vGaD0qj7qjD9kf0gMKfiq5Fgpj/zDbtdCTnmn9aSr1PUQIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFKkCAKAADfXYRbnbKE0KLb7mdsWoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyL2IxZTNl MS04YjdkLTRlMjItODcwYy01OGY1NzQ0OTViYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvYjFlM2Ux LThiN2QtNGUyMi04NzBjLTU4ZjU3NDQ5NWJiOC8xL3FRSUFvQUFOOWRoRnVkc29U UW90dnVaMnhhZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW8WAAwQCW95AMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAiKmMA0GCSqGSIb3DQEBCwUAA4IBAQAmMXnujg4B/B6gBrPufHmC1YKg Hp4rstBKZfjdRqZotpbMznKrxCijOd5VOdriPuc/bc0JZrVYd34nxvapRV/Pq0wP gVuRFCK2E8SEu9KIF4B7ltyNmTP7uctolIiqcg4l4L4O3qrO1DK+haza4WmA0v0d 87109142C6kPrxGd+RbFHoftFETkPiQ5E8VGIJz39h4FztOO3CyOD44Jt7pNpnC0 m4Bb0lNylC3bg9s09QFM1+Sprf6xS0gs0RlqtbcEujmwuLTbgGZT/c/XVrrgYHlt bYJE4Ah7HRpE7/AyJLshu8GYY3xyRLe6Bg0R8RWUhRTQBeyYhYyvRel8dhdm -----END CERTIFICATE-----Generated at Sun Jan 25 05:39:30 2026 by rpki-client