This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer File: qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer (raw, json) Hash identifier: +ATdHJFQBEa5M0CfKZHPaqPPjhi9ghQ2Ab8jpncQoPE= Subject key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4EC1EDBA75AC15CC4EE6810FB6DD8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213160 IP: 45.13.100.0/22 IP: 91.194.202.0/23 IP: 170.255.0.0/16 IP: 2a0e:e500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ec:1e:db:a7:5a:c1:5c:c4:ee:68:10:fb:6d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:06:f7:ae:d8:91:5d:af:5b:b3:4b:00:79:bf: 85:78:90:73:3c:8e:6c:b5:0f:55:a8:a6:54:b7:0c: 26:5b:a8:71:22:28:6f:a1:92:f5:3d:1d:8f:50:d3: 72:a9:cb:d0:8d:1f:f6:17:d7:ad:bb:ce:8f:6e:69: 9a:7c:38:3e:2b:b3:96:79:da:4c:3b:40:99:77:6e: 01:ac:b6:aa:cf:68:95:57:02:89:aa:a1:2b:07:17: f9:be:5b:34:dc:08:e7:63:fb:61:83:a7:83:97:f5: 12:7e:ff:5a:f0:24:ce:e8:8d:ea:17:c1:38:d9:1c: 26:70:e7:0b:8e:ed:4c:81:bc:b8:74:1c:22:4a:93: 0f:0c:04:bd:fc:e8:54:c3:72:7e:32:14:f1:56:4e: bc:a9:8b:c1:cd:6f:4b:6d:91:53:f0:6c:e5:6d:1f: e1:84:04:75:9a:a0:c0:9b:ad:10:69:b6:a2:2e:67: 0c:e7:6b:3d:95:7b:a3:c2:86:51:71:30:d9:13:a4: 1a:db:17:9a:a7:00:17:74:d7:3f:7e:97:cb:76:30: a3:67:0e:14:ad:58:94:e0:c2:e4:8d:d6:a2:41:c8: f5:98:b7:a5:cf:5b:f6:0f:5e:de:b8:40:3e:ea:18: b4:02:99:5d:f7:1a:41:4b:4f:e1:48:9d:b9:62:25: 65:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.100.0/22 91.194.202.0/23 170.255.0.0/16 IPv6: 2a0e:e500::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213160 Signature Algorithm: sha256WithRSAEncryption 98:ad:ba:73:df:0c:63:34:46:ea:95:95:7a:26:0b:69:a3:10: 4b:dc:c6:45:2a:45:99:6c:9d:b7:95:38:01:58:17:a7:74:f4: b7:65:f7:9f:33:6b:ce:33:61:1e:3d:4a:e3:7d:68:35:70:0d: c6:44:c1:20:47:4a:07:57:54:cf:73:b2:1c:97:f7:ad:35:2d: bb:a2:37:58:3a:d4:37:0a:b4:3a:23:1b:fb:c3:01:39:63:29: 96:75:25:b7:c5:19:5a:42:9b:e6:3b:71:05:53:8b:ca:e7:6a: 29:48:ab:ca:fd:09:86:0a:5a:67:59:a0:20:ce:2c:e5:08:09: bf:28:0e:a7:0c:bb:5d:21:b9:16:fc:9c:a9:0a:f5:74:63:3f: 47:13:6a:52:c2:ab:e2:1a:18:a5:9d:12:32:2e:e9:60:04:15: b2:f4:e0:fd:b6:d7:d1:c7:93:3f:11:a4:40:8f:52:6d:fa:6d: 6b:48:a4:aa:15:72:82:73:3e:fc:c1:e8:e5:8a:62:23:d0:2d: c8:ea:73:65:17:4c:58:95:df:12:23:87:6c:4e:4e:be:5a:7d: 92:81:0f:02:5d:63:93:b9:a3:a9:30:3e:f9:89:e6:c1:e8:9d: 9e:41:80:e4:ef:84:e5:8b:64:ba:14:cd:19:a0:d5:fe:fb:67: be:78:2c:1a -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt7pOwe26dawVzE7mgQ+23YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTgyZjNkMGU2NjQyOWI2ODViMTg1MGE5ZGZmMjVjN2FhMzdhMGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQb3rtiRXa9bs0sAeb+FeJBzPI5s tQ9VqKZUtwwmW6hxIihvoZL1PR2PUNNyqcvQjR/2F9etu86PbmmafDg+K7OWedpM O0CZd24BrLaqz2iVVwKJqqErBxf5vls03AjnY/thg6eDl/USfv9a8CTO6I3qF8E4 2RwmcOcLju1Mgby4dBwiSpMPDAS9/OhUw3J+MhTxVk68qYvBzW9LbZFT8GzlbR/h hAR1mqDAm60QabaiLmcM52s9lXujwoZRcTDZE6Qa2xeapwAXdNc/fpfLdjCjZw4U rViU4MLkjdaiQcj1mLelz1v2D17euEA+6hi0Apld9xpBS0/hSJ25YiVlcQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFKmC89DmZCm2hbGFCp3/JceqN6DGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5L2I0NWJh NC1hYjM2LTQ5YWItOThlNC04YjQ3OTNmOTBmMTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvYjQ1YmE0 LWFiMzYtNDlhYi05OGU0LThiNDc5M2Y5MGYxNS8xL3FZTHowT1prS2JhRnNZVUtu ZjhseDZvM29NWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF BwEHAQH/BCowKDAXBAIAATARAwQCLQ1kAwQBW8LKAwMAqv8wDQQCAAIwBwMFAyoO 5QAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDA0CoMA0GCSqGSIb3DQEBCwUAA4IB AQCYrbpz3wxjNEbqlZV6JgtpoxBL3MZFKkWZbJ23lTgBWBendPS3ZfefM2vOM2Ee PUrjfWg1cA3GRMEgR0oHV1TPc7Icl/etNS27ojdYOtQ3CrQ6Ixv7wwE5YymWdSW3 xRlaQpvmO3EFU4vK52opSKvK/QmGClpnWaAgzizlCAm/KA6nDLtdIbkW/JypCvV0 Yz9HE2pSwqviGhilnRIyLulgBBWy9OD9ttfRx5M/EaRAj1Jt+m1rSKSqFXKCcz78 wejlimIj0C3I6nNlF0xYld8SI4dsTk6+Wn2SgQ8CXWOTuaOpMD75iebB6J2eQYDk 74Tli2S6FM0ZoNX++2e+eCwa -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:59 2026 by rpki-client