This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer File: qcxE1_HQ3Apavyd2SVth3kgZkl8.cer (raw, json) Hash identifier: cskhfJ9FH+sYVRySkT25wDEzj4Sqb0U19QYXq8oyuM0= Subject key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E388576F6BB15EA8C2CDF876D234E28 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 93.115.102.0/23 IP: 185.253.9.0/24 IP: 2a14:7ac0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:85:76:f6:bb:15:ea:8c:2c:df:87:6d:23:4e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f4:a6:a6:64:ea:5a:fe:2d:a4:2e:e6:bb:de: fb:d2:c2:a3:1f:2b:ee:c0:16:ab:69:fe:55:8c:78: af:9a:4e:09:1b:0f:7f:dd:c5:67:c7:33:f1:55:38: 68:2c:e4:4b:c3:dd:00:da:90:02:d0:47:a6:ca:b8: 94:0e:00:fb:61:70:18:cf:0f:f3:20:2b:d3:a9:de: 3c:ad:d2:90:e8:b1:aa:69:93:f9:58:c3:37:99:3b: 29:c8:09:9d:4d:b7:35:82:b7:00:84:5b:7e:bd:bf: 97:8d:45:88:60:08:75:5c:32:e3:ec:be:06:15:eb: 5f:d2:9d:7f:17:9a:c6:7f:28:bb:69:c4:30:4a:37: 70:0a:52:33:6d:c1:77:55:49:ff:74:dd:fd:ed:53: 95:2b:1a:5e:48:da:dd:af:df:e6:84:81:c9:ec:54: 7a:db:86:3a:c8:7b:b1:b7:4c:22:be:53:d8:db:c5: 55:82:70:cf:af:b7:98:43:33:fd:ce:bd:02:1e:04: 21:ba:86:89:57:bc:48:fa:ac:b8:a8:f6:02:40:37: 65:82:8c:c9:31:68:7a:e1:48:3b:93:f2:87:13:50: 01:e7:eb:af:c0:1e:fc:e2:84:7f:0c:09:ae:9b:02: c3:aa:77:0b:d0:ca:95:86:6d:d9:6b:37:15:42:8d: 0b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.115.102.0/23 185.253.9.0/24 IPv6: 2a14:7ac0::/32 Signature Algorithm: sha256WithRSAEncryption 18:03:cb:aa:73:3d:d0:23:55:6c:e1:a9:76:ff:68:f1:d4:7a: 64:70:14:36:32:34:7b:98:17:17:21:e4:e9:b3:4e:59:42:bb: 06:c6:ae:b3:d7:ed:43:69:26:fa:66:51:00:a2:a6:ff:d5:ed: b1:8f:d9:85:02:15:86:26:6a:28:fd:78:60:6f:20:6e:08:5f: 53:c7:b3:5b:d6:11:de:86:ce:7e:2c:9a:de:48:0e:f1:76:1c: 3f:7b:e3:c9:fb:d8:39:d7:8d:b4:19:6a:61:c0:f7:61:b7:24: 6b:72:02:aa:e3:cd:25:38:a3:28:a2:4a:ef:0d:e8:7a:ee:8c: 9f:ab:b5:ce:98:fb:8b:31:de:74:be:dc:44:d0:df:f1:ea:df: 74:45:43:bd:3c:ce:f8:5a:5d:98:9e:ba:3e:97:f2:c6:c6:b2: 11:61:ef:4b:98:d4:56:e6:b9:05:8c:d5:5b:cd:a7:57:28:b9: 21:00:15:09:3e:0c:42:31:2c:a2:8f:5b:71:a2:4b:0f:4f:7f: b5:06:3b:9b:2d:cf:49:5f:a5:ff:27:21:2f:0e:a0:a9:5d:f6: d6:2e:c0:3c:5a:ce:5d:10:06:02:ee:d2:c4:32:a7:2c:4d:bb: 24:dd:04:59:27:59:70:74:00:54:df:b7:35:7c:21:b0:d8:c2: f0:3e:0d:d9 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt+OIV29rsV6ows34dtI04oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWNjNDRkN2YxZDBkYzBhNWFiZjI3NzY0OTViNjFkZTQ4MTk5MjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PSmpmTqWv4tpC7mu9770sKjHyvu wBaraf5VjHivmk4JGw9/3cVnxzPxVThoLORLw90A2pAC0EemyriUDgD7YXAYzw/z ICvTqd48rdKQ6LGqaZP5WMM3mTspyAmdTbc1grcAhFt+vb+XjUWIYAh1XDLj7L4G Fetf0p1/F5rGfyi7acQwSjdwClIzbcF3VUn/dN397VOVKxpeSNrdr9/mhIHJ7FR6 24Y6yHuxt0wivlPY28VVgnDPr7eYQzP9zr0CHgQhuoaJV7xI+qy4qPYCQDdlgozJ MWh64Ug7k/KHE1AB5+uvwB784oR/DAmumwLDqncL0MqVhm3ZazcVQo0LLQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFKnMRNfx0NwKWr8ndklbYd5IGZJfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiL2RhYjg2 Ny1hNTc5LTRhOTUtYWVmNy0xNjE3ZjM4YTZkZmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvZGFiODY3 LWE1NzktNGE5NS1hZWY3LTE2MTdmMzhhNmRmYy8xL3FjeEUxX0hRM0FwYXZ5ZDJT VnRoM2tnWmtsOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBXXNmAwQAuf0JMA0EAgACMAcDBQAqFHrAMA0G CSqGSIb3DQEBCwUAA4IBAQAYA8uqcz3QI1Vs4al2/2jx1HpkcBQ2MjR7mBcXIeTp s05ZQrsGxq6z1+1DaSb6ZlEAoqb/1e2xj9mFAhWGJmoo/XhgbyBuCF9Tx7Nb1hHe hs5+LJreSA7xdhw/e+PJ+9g51420GWphwPdhtyRrcgKq480lOKMookrvDeh67oyf q7XOmPuLMd50vtxE0N/x6t90RUO9PM74Wl2Ynro+l/LGxrIRYe9LmNRW5rkFjNVb zadXKLkhABUJPgxCMSyij1txoksPT3+1BjubLc9JX6X/JyEvDqCpXfbWLsA8Ws5d EAYC7tLEMqcsTbsk3QRZJ1lwdABU37c1fCGw2MLwPg3Z -----END CERTIFICATE-----Generated at Sun Jan 25 12:08:27 2026 by rpki-client