This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer File: qgYKY9op1_lWF6b_u09RzMvHhlE.cer (raw, json) Hash identifier: KXLVD0OPaNIBbVggeKipKeJ4hj+F2EotCR7yj21B7UA= Subject key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6BE8085F0F3207E26B1A927934063 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204094 IP: 185.113.140.0/22 IP: 185.231.233.0/24 IP: 2a03::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:be:80:85:f0:f3:20:7e:26:b1:a9:27:93:40:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4a:42:21:cc:7c:9a:9e:f3:18:ad:9b:e1:4f: e7:30:6d:6f:d5:7a:66:d4:09:c5:e1:43:19:a1:c7: 54:6d:4a:93:df:92:0e:8f:bf:00:2b:4f:21:d8:24: 56:d7:e0:e8:01:19:14:8a:e9:f4:87:4e:50:ca:9a: 75:b6:7d:af:34:3f:18:18:76:26:e9:ed:ef:43:6f: 39:01:83:57:f9:55:55:74:4c:21:37:63:e5:2c:6a: 1a:8b:42:c4:ad:8c:22:bb:80:e3:52:24:0a:a6:86: 0c:77:d3:1b:a8:fd:e0:0d:92:44:fd:24:a1:76:3c: f8:3d:38:ef:b8:6f:2b:86:35:53:e6:f5:6c:75:d8: 10:3e:17:76:f4:db:4e:84:b4:df:93:2e:49:4a:90: 4a:48:c5:55:d1:23:bb:0a:0b:2a:66:e3:6c:54:ae: 6a:5d:bb:df:db:69:47:98:d0:1d:bc:57:68:9e:da: a3:9b:dd:c8:9a:b9:6a:c5:20:03:1d:d0:4c:36:9d: a2:96:aa:94:48:0c:fb:34:74:bb:c0:ba:b4:82:3d: ce:5e:3d:77:0e:ba:c0:64:14:f9:f2:d9:d7:72:5c: c2:71:5f:6a:83:77:2f:7b:d0:fa:f1:a6:35:b3:99: 3b:bc:0f:31:ed:e8:7a:b8:92:22:61:4a:20:41:2c: 17:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.140.0/22 185.231.233.0/24 IPv6: 2a03::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204094 Signature Algorithm: sha256WithRSAEncryption 7f:c7:57:c6:82:4f:34:f6:d7:a5:2f:c6:06:76:28:ad:f2:40: d2:92:7f:ed:25:98:96:8a:9a:aa:48:cc:5a:a1:89:22:28:d3: 53:86:16:79:50:0e:5a:6c:04:c1:0d:d2:41:62:17:ff:9f:95: 56:27:49:c3:80:8d:40:f7:57:e6:08:ef:df:46:1a:88:a4:ac: 46:01:c5:3b:fd:ba:15:ab:05:64:56:b3:e2:8d:a8:1f:9b:95: 8f:d3:78:e8:f9:91:88:bd:90:5a:ea:b6:4a:bc:e7:09:11:13: 52:1f:db:44:bc:2c:0a:85:69:60:72:5e:05:54:39:da:13:98: 7f:43:6c:18:27:c1:26:76:63:09:f2:f6:ae:7e:be:20:a0:fa: f4:85:af:b7:55:9f:3e:89:ee:9c:34:9f:b9:ad:94:07:92:5c: 8f:b4:04:38:23:3c:e5:e3:c3:ba:80:0f:ee:86:fe:68:c5:a9: f0:d2:00:81:48:f5:5f:bc:0d:63:c4:6d:fd:c9:d2:83:d0:3b: f6:95:cd:55:a1:de:ec:be:66:1f:2a:9e:44:7e:90:61:0e:fd: bd:fe:0a:46:36:11:d8:98:ed:a0:53:a1:e3:55:ba:45:0e:b0: 89:77:e3:fc:14:72:7e:e5:f0:32:ed:39:32:b5:3d:dc:b1:d1: 20:09:43:21 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3xr6AhfDzIH4msaknk0BjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTA2MGE2M2RhMjlkN2Y5NTYxN2E2ZmZiYjRmNTFjY2NiYzc4NjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkpCIcx8mp7zGK2b4U/nMG1v1Xpm 1AnF4UMZocdUbUqT35IOj78AK08h2CRW1+DoARkUiun0h05Qypp1tn2vND8YGHYm 6e3vQ285AYNX+VVVdEwhN2PlLGoai0LErYwiu4DjUiQKpoYMd9MbqP3gDZJE/SSh djz4PTjvuG8rhjVT5vVsddgQPhd29NtOhLTfky5JSpBKSMVV0SO7CgsqZuNsVK5q Xbvf22lHmNAdvFdontqjm93ImrlqxSADHdBMNp2ilqqUSAz7NHS7wLq0gj3OXj13 DrrAZBT58tnXclzCcV9qg3cve9D68aY1s5k7vA8x7eh6uJIiYUogQSwXkwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFKoGCmPaKdf5Vhem/7tPUczLx4ZRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzE3ZTgy YS0wZTBjLTQyNmItYTE3MC03NWZlYTZhNzBlYjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMTdlODJh LTBlMGMtNDI2Yi1hMTcwLTc1ZmVhNmE3MGViNy8xL3FnWUtZOW9wMV9sV0Y2Yl91 MDlSek12SGhsRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuXGMAwQAuefpMA0EAgACMAcDBQAqAwAAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMdPjANBgkqhkiG9w0BAQsFAAOCAQEAf8dX xoJPNPbXpS/GBnYorfJA0pJ/7SWYloqaqkjMWqGJIijTU4YWeVAOWmwEwQ3SQWIX /5+VVidJw4CNQPdX5gjv30YaiKSsRgHFO/26FasFZFaz4o2oH5uVj9N46PmRiL2Q Wuq2SrznCRETUh/bRLwsCoVpYHJeBVQ52hOYf0NsGCfBJnZjCfL2rn6+IKD69IWv t1WfPonunDSfua2UB5Jcj7QEOCM85ePDuoAP7ob+aMWp8NIAgUj1X7wNY8Rt/cnS g9A79pXNVaHe7L5mHyqeRH6QYQ79vf4KRjYR2JjtoFOh41W6RQ6wiXfj/BRyfuXw Mu05MrU93LHRIAlDIQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:22 2026 by rpki-client