This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer File: qfL96iY7efzhE4kFKwzZQJlcbf4.cer (raw, json) Hash identifier: vplGbGzYVE01Abctnk0bhd/OE/PndeEvsG5hPcePEA4= Subject key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE134B939B851F58C792FFB08C68F2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12839 AS: 204471 IP: 193.194.16.0 -- 193.194.20.255 IP: 217.197.106.0/24 IP: 2a12:d8c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:13:4b:93:9b:85:1f:58:c7:92:ff:b0:8c:68:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fa:e4:dd:a1:78:73:81:55:e2:92:34:78:76: d3:9e:df:9f:bb:07:6f:66:ea:ad:6d:a8:dd:54:02: 9f:49:d3:4f:2c:1e:c0:a9:a7:86:12:42:ce:26:7e: ea:82:48:7f:ef:4a:47:30:cb:1d:fe:4e:3a:f9:93: 6f:a7:97:b7:be:d2:a2:11:a9:ac:eb:50:c7:e2:0d: 54:98:d6:03:fe:8e:1a:12:57:90:c4:bf:d3:46:77: 4c:98:a0:2b:a9:df:cc:a7:9a:e0:8b:e0:a4:11:7d: 09:a7:bd:ed:45:57:f2:cd:89:ab:35:75:cb:4b:c2: 9f:52:96:4d:23:cc:81:56:77:60:c6:0c:49:79:19: 6e:13:24:27:a0:53:56:81:54:2d:af:7e:b8:35:fa: b0:d1:14:f6:0b:98:88:35:cb:5f:6e:8c:b9:25:4a: 72:3a:c0:61:42:ce:65:b2:86:ae:00:fa:20:d5:63: f2:f0:47:ee:2d:81:06:70:60:58:c0:f1:a8:43:d4: fc:ac:5f:8b:cf:47:ef:fa:ae:7b:d5:39:c2:0b:63: ad:e3:10:a1:0a:e6:cd:54:e0:1a:38:56:a9:47:ac: a4:21:dd:cc:b3:19:68:6a:f1:65:14:09:84:02:2b: 0d:86:aa:5a:61:ad:e2:61:57:40:ec:1f:5f:60:31: 8d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.194.16.0-193.194.20.255 217.197.106.0/24 IPv6: 2a12:d8c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12839 204471 Signature Algorithm: sha256WithRSAEncryption b1:0a:b8:a5:c3:93:3b:34:dc:3c:59:23:e8:b7:5b:fc:0e:1e: ed:87:c7:93:96:05:93:55:3d:54:84:11:16:bc:9c:8c:25:85: 84:07:16:16:c6:0f:78:fd:a4:53:a0:9b:0c:7c:91:a2:b5:4d: a7:3a:87:e4:7e:35:1d:82:b6:40:88:c7:d1:75:78:ce:bf:be: 17:83:d2:8d:97:7f:e0:fe:18:b8:e8:cb:39:8b:d9:a9:d8:b4: c5:df:5b:c5:b7:25:f9:40:6b:23:5b:42:e9:49:ff:32:b9:08: be:b6:04:5d:a7:03:d8:86:43:e7:05:c2:f8:a7:6a:8e:de:63: f3:d7:fa:41:f2:2b:41:41:88:1d:7e:28:66:2a:da:ca:3b:df: 8c:52:ac:2d:0a:2f:5c:5e:52:06:36:28:11:16:b6:8c:83:6e: 81:df:77:82:d6:21:8d:46:51:18:b1:c3:33:22:b7:77:05:9c: 85:03:13:a4:aa:33:f2:94:0e:22:cf:ed:c9:a2:5b:1c:ff:dc: da:59:69:2d:e8:d6:63:75:63:18:a3:21:cc:57:5a:82:da:21: ef:ba:b7:2f:cc:b4:de:e9:61:3e:9e:cb:9d:98:dc:64:9c:20: b1:f7:17:54:f4:e7:50:e0:cb:70:78:8e:06:a6:5f:22:75:6c: 79:6d:d2:d9 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt87hNLk5uFH1jHkv+wjGjyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWYyZmRlYTI2M2I3OWZjZTExMzg5MDUyYjBjZDk0MDk5NWM2ZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/rk3aF4c4FV4pI0eHbTnt+fuwdv ZuqtbajdVAKfSdNPLB7AqaeGEkLOJn7qgkh/70pHMMsd/k46+ZNvp5e3vtKiEams 61DH4g1UmNYD/o4aEleQxL/TRndMmKArqd/Mp5rgi+CkEX0Jp73tRVfyzYmrNXXL S8KfUpZNI8yBVndgxgxJeRluEyQnoFNWgVQtr364Nfqw0RT2C5iINctfboy5JUpy OsBhQs5lsoauAPog1WPy8EfuLYEGcGBYwPGoQ9T8rF+Lz0fv+q571TnCC2Ot4xCh CubNVOAaOFapR6ykId3MsxloavFlFAmEAisNhqpaYa3iYVdA7B9fYDGNNwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFKny/eomO3n84ROJBSsM2UCZXG3+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzLzUzZmY2 Mi1jMWFkLTQyNDQtYjkxYS1mOGFmZmVmMTEyZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvNTNmZjYy LWMxYWQtNDI0NC1iOTFhLWY4YWZmZWYxMTJkOC8xL3FmTDk2aVk3ZWZ6aEU0a0ZL d3paUUpsY2JmNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUMAwDBATBwhADBADBwhQDBADZxWowDQQCAAIwBwMF AyoS2MAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICMicCAwMetzANBgkqhkiG9w0B AQsFAAOCAQEAsQq4pcOTOzTcPFkj6Ldb/A4e7YfHk5YFk1U9VIQRFrycjCWFhAcW FsYPeP2kU6CbDHyRorVNpzqH5H41HYK2QIjH0XV4zr++F4PSjZd/4P4YuOjLOYvZ qdi0xd9bxbcl+UBrI1tC6Un/MrkIvrYEXacD2IZD5wXC+Kdqjt5j89f6QfIrQUGI HX4oZirayjvfjFKsLQovXF5SBjYoERa2jINugd93gtYhjUZRGLHDMyK3dwWchQMT pKoz8pQOIs/tyaJbHP/c2llpLejWY3VjGKMhzFdagtoh77q3L8y03ulhPp7LnZjc ZJwgsfcXVPTnUODLcHiOBqZfInVseW3S2Q== -----END CERTIFICATE-----Generated at Mon Jan 26 06:34:29 2026 by rpki-client