This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer File: qTnMFiHuMBCumOEnvSVKeDP9KCc.cer (raw, json) Hash identifier: OeB9H4d4OBXwiWY7sZQKydeBd0lZFjacm6Wn6nX+pkY= Subject key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82F7453D518568A301754D69711DAA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56623 IP: 31.133.112.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:f7:45:3d:51:85:68:a3:01:75:4d:69:71:1d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a939cc1621ee3010ae98e127bd254a7833fd2827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b5:68:57:e3:60:cd:ee:8a:cc:8b:d6:67:cb: 2f:3e:c1:95:b0:ca:1e:60:e8:df:21:d2:2c:fb:16: 59:45:17:b5:72:65:e4:54:fe:0e:1a:02:f9:57:fc: e9:20:d8:29:a2:d2:68:4a:14:b8:90:99:de:80:4f: 6c:aa:f9:90:da:58:1a:be:98:65:84:56:aa:e2:e1: 23:1d:9b:13:5f:df:a7:59:24:ca:0f:61:3b:05:3f: ac:8a:96:51:99:b7:9d:93:79:88:01:95:8f:99:3a: 48:0e:85:f8:f4:8b:3f:19:57:69:09:51:18:64:d4: f2:7b:40:38:1b:2a:0c:96:86:6b:b7:2c:87:3e:35: 4c:6b:76:28:b2:6c:b7:4e:d4:51:74:19:4f:03:24: 70:3c:02:3c:f5:05:4b:21:0d:80:64:d5:04:07:42: 63:ae:50:1c:f8:2a:0b:68:13:e3:04:32:8c:27:be: 37:97:dc:23:89:f0:f3:fd:19:27:2a:27:5f:12:56: 50:24:f6:d9:dd:00:30:1c:1f:da:bb:8e:45:de:e2: d3:68:35:56:77:fc:15:be:22:12:33:6d:ae:98:54: 23:88:98:9f:38:8f:0a:6c:26:26:86:2e:cc:11:f2: 7b:b0:5d:b2:b8:02:5b:34:89:b0:8e:42:7a:23:d8: f0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.112.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56623 Signature Algorithm: sha256WithRSAEncryption 96:52:8f:40:be:13:3c:00:aa:83:4a:7a:8a:50:27:18:0d:cb: af:08:5e:f0:55:e0:1a:fc:0d:09:23:41:5d:8a:6e:61:90:0f: a8:13:98:6d:4d:2a:13:ba:2d:25:da:35:8e:28:01:7a:73:f3: 3b:ce:00:44:0f:2a:6a:0b:e5:55:03:77:28:e6:3b:37:68:19: e8:66:3c:de:63:db:9b:ac:52:4e:32:9e:7d:0e:9d:1f:5a:61: 8c:19:bb:d4:7e:b1:bd:95:40:e0:aa:b2:86:58:e7:23:b4:25: 02:20:71:6d:cc:f0:c1:a3:9c:c4:8b:92:41:55:b2:8a:d0:4c: 70:71:a0:e6:17:23:b2:da:5c:ad:3b:03:ba:56:9b:00:43:ba: f1:de:07:5a:bf:fb:c7:0b:6c:c9:45:59:11:9a:25:cc:68:a3: db:7d:71:cb:a8:7f:61:20:9e:97:98:89:25:aa:4b:65:d2:d6: 24:06:a3:a2:2a:00:a5:19:b4:72:f5:16:86:92:e8:20:1e:e6: c1:5a:70:cf:82:09:f2:c9:a0:2a:e6:99:b7:fc:8b:f3:23:fc: 88:c4:44:60:82:20:73:c7:2b:05:fa:e8:bb:0d:3b:bb:d2:22: d4:93:62:6d:a9:59:12:a4:cf:da:5a:07:7a:35:68:e3:6e:3c: b3:0e:25:b6 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/gvdFPVGFaKMBdU1pcR2qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTM5Y2MxNjIxZWUzMDEwYWU5OGUxMjdiZDI1NGE3ODMzZmQyODI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47VoV+Ngze6KzIvWZ8svPsGVsMoe YOjfIdIs+xZZRRe1cmXkVP4OGgL5V/zpINgpotJoShS4kJnegE9sqvmQ2lgavphl hFaq4uEjHZsTX9+nWSTKD2E7BT+sipZRmbedk3mIAZWPmTpIDoX49Is/GVdpCVEY ZNTye0A4GyoMloZrtyyHPjVMa3Yosmy3TtRRdBlPAyRwPAI89QVLIQ2AZNUEB0Jj rlAc+CoLaBPjBDKMJ743l9wjifDz/RknKidfElZQJPbZ3QAwHB/au45F3uLTaDVW d/wVviISM22umFQjiJifOI8KbCYmhi7MEfJ7sF2yuAJbNImwjkJ6I9jwHwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKk5zBYh7jAQrpjhJ70lSngz/SgnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjL2Q1YmY3 Mi0zMTE1LTRjNzEtYTFiZi1iMDYxOTRkMTNjNmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvZDViZjcy LTMxMTUtNGM3MS1hMWJmLWIwNjE5NGQxM2M2Yi8xL3FUbk1GaUh1TUJDdW1PRW52 U1ZLZURQOUtDYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDH4VwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDdLzANBgkqhkiG9w0BAQsFAAOCAQEAllKPQL4TPACqg0p6ilAnGA3Lrwhe8FXg GvwNCSNBXYpuYZAPqBOYbU0qE7otJdo1jigBenPzO84ARA8qagvlVQN3KOY7N2gZ 6GY83mPbm6xSTjKefQ6dH1phjBm71H6xvZVA4KqyhljnI7QlAiBxbczwwaOcxIuS QVWyitBMcHGg5hcjstpcrTsDulabAEO68d4HWr/7xwtsyUVZEZolzGij231xy6h/ YSCel5iJJapLZdLWJAajoioApRm0cvUWhpLoIB7mwVpwz4IJ8smgKuaZt/yL8yP8 iMREYIIgc8crBfrouw07u9Ii1JNibalZEqTP2loHejVo4248sw4ltg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:35:57 2026 by rpki-client