This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer File: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer (raw, json) Hash identifier: VW6Dd03qtL+fWtvIk6+VR7o/hX1FOWAP51l2YXb7BWQ= Subject key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A25C5CE84BEF8E481C919CF3CFF8C9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 1267 -- 1269 IP: 151.81.0.0 -- 151.84.255.255 IP: 151.93.0.0/16 IP: 151.95.0.0/16 IP: 185.215.172.0/22 IP: 192.5.97.0/24 IP: 192.92.126.0/24 IP: 192.94.212.0/24 IP: 192.106.0.0/16 IP: 193.70.128.0/17 IP: 193.76.0.0/16 IP: 195.45.0.0/16 IP: 2a02:b000::/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:5c:5c:e8:4b:ef:8e:48:1c:91:9c:f3:cf:f8:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:eb:0f:86:90:3f:93:61:02:2b:03:da:75: 3f:8b:97:e7:ea:a1:e5:3d:c2:ed:63:ce:a5:30:60: 1e:19:9c:43:30:6d:ef:5f:05:84:24:ab:79:0c:e9: 2e:17:57:90:9b:2b:e0:df:5f:26:69:70:e2:f4:52: 3d:1b:bb:6b:cc:54:3e:13:98:c1:fb:86:44:bb:77: 16:21:f3:2c:a5:89:be:ec:56:65:81:ba:e8:d2:1c: ab:f2:de:75:88:bf:04:04:4c:3a:50:4f:ef:7c:c7: 2d:40:aa:52:e2:57:f5:ca:91:72:b9:0e:3d:d0:fd: 6b:01:0f:c8:d6:f0:7f:23:1b:dc:f2:45:83:0e:fb: 59:77:5d:c3:1b:11:2b:b3:45:ac:f2:21:05:2d:d4: f4:e5:7f:46:6f:ea:07:b6:d0:10:05:d7:77:93:0e: 2e:03:4b:7d:99:76:51:ad:67:67:09:83:18:26:8f: 27:ef:cb:29:9f:c3:2c:81:23:8f:ba:e1:08:23:26: 26:13:20:b2:2c:2a:94:7a:80:96:6a:ce:16:cb:5c: f2:b3:f0:20:06:78:1f:20:93:18:7c:6f:42:e1:ea: 16:a4:0e:66:94:39:ac:2d:05:a1:9b:0b:6c:02:27: b6:78:a8:a7:af:10:b8:e2:4e:80:a0:04:64:c0:5b: 2d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.81.0.0-151.84.255.255 151.93.0.0/16 151.95.0.0/16 185.215.172.0/22 192.5.97.0/24 192.92.126.0/24 192.94.212.0/24 192.106.0.0/16 193.70.128.0/17 193.76.0.0/16 195.45.0.0/16 IPv6: 2a02:b000::/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1267-1269 Signature Algorithm: sha256WithRSAEncryption 62:ee:1b:9c:ad:cc:12:01:f2:2a:38:41:74:e6:94:2b:02:55: 04:a8:bc:bd:ed:d3:5c:5f:37:81:cf:9c:a7:66:ac:52:76:51: a4:3c:61:28:ce:b7:a7:7e:c2:80:67:0c:f2:3d:f3:eb:91:62: 85:62:3a:0a:3a:fc:ec:ff:78:53:6c:71:94:14:70:fb:31:32: ba:d9:34:5c:dc:10:f5:03:93:9f:ac:ce:f7:d3:5b:bc:27:8b: c4:aa:ec:71:ae:fc:2e:85:5e:ba:28:a1:01:78:6d:92:42:cc: ff:56:e5:e8:0f:47:ed:79:26:df:bc:0c:8b:18:7f:54:8e:57: d5:92:c8:4a:0e:bb:84:e3:18:8f:f9:93:84:bf:5d:d4:61:ac: 44:06:ab:71:3b:5d:65:55:d2:17:cc:fb:0c:c0:1f:d2:89:c0: 34:0d:05:df:53:09:2e:57:5a:35:29:77:7b:5a:77:35:e6:e0: aa:05:52:75:22:66:11:a4:10:5c:34:22:57:00:4f:47:4b:e6: a7:58:8d:02:c1:b1:a4:8f:59:39:ea:7b:02:61:92:c7:13:d5: 03:0a:bd:ad:5a:f0:27:c5:35:7d:37:aa:c2:7e:96:81:65:77: 2a:ff:56:d9:c4:80:63:ec:07:a9:ef:0f:b1:bb:eb:23:53:23: 0e:e0:38:8c -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgISAZt4olxc6EvvjkgckZzzz/jJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOThlNTk0M2MzNTVkNDhjMDA0ZTZiZjRhM2I2Y2RiOGMzMGFkYzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbjrD4aQP5NhAisD2nU/i5fn6qHl PcLtY86lMGAeGZxDMG3vXwWEJKt5DOkuF1eQmyvg318maXDi9FI9G7trzFQ+E5jB +4ZEu3cWIfMspYm+7FZlgbro0hyr8t51iL8EBEw6UE/vfMctQKpS4lf1ypFyuQ49 0P1rAQ/I1vB/Ixvc8kWDDvtZd13DGxErs0Ws8iEFLdT05X9Gb+oHttAQBdd3kw4u A0t9mXZRrWdnCYMYJo8n78spn8MsgSOPuuEIIyYmEyCyLCqUeoCWas4Wy1zys/Ag BngfIJMYfG9C4eoWpA5mlDmsLQWhmwtsAie2eKinrxC44k6AoARkwFstmQIDAQAB o4IC8DCCAuwwHQYDVR0OBBYEFKmOWUPDVdSMAE5r9KO2zbjDCtxMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzL2NkOTJj ZC03ZmUzLTQyMjMtODM1MC0zYzc3M2E2YzQyZjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvY2Q5MmNk LTdmZTMtNDIyMy04MzUwLTNjNzczYTZjNDJmOS8xL3FZNVpROE5WMUl3QVRtdjBv N2JOdU1NSzNFdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGoGCCsGAQUF BwEHAQH/BFswWTBJBAIAATBDMAoDAwCXUQMDAJdUAwMAl10DAwCXXwMEArnXrAME AMAFYQMEAMBcfgMEAMBe1AMDAMBqAwQHwUaAAwMAwUwDAwDDLTAMBAIAAjAGAwQB KgKwMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAowCAICBPMCAgT1MA0GCSqGSIb3DQEB CwUAA4IBAQBi7hucrcwSAfIqOEF05pQrAlUEqLy97dNcXzeBz5ynZqxSdlGkPGEo zrenfsKAZwzyPfPrkWKFYjoKOvzs/3hTbHGUFHD7MTK62TRc3BD1A5OfrM7301u8 J4vEquxxrvwuhV66KKEBeG2SQsz/VuXoD0fteSbfvAyLGH9UjlfVkshKDruE4xiP +ZOEv13UYaxEBqtxO11lVdIXzPsMwB/SicA0DQXfUwkuV1o1KXd7Wnc15uCqBVJ1 ImYRpBBcNCJXAE9HS+anWI0CwbGkj1k56nsCYZLHE9UDCr2tWvAnxTV9N6rCfpaB ZXcq/1bZxIBj7Aep7w+xu+sjUyMO4DiM -----END CERTIFICATE-----Generated at Sun Jan 25 18:12:15 2026 by rpki-client