This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer File: qif1ErChAmXfKzRvFDpkXDgnQr4.cer (raw, json) Hash identifier: /gW6LnD6eH5TsUr446DOs+QA0wyGuA/8ShG4/smvfRM= Subject key identifier: AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3883300A814A31425C632528F3F36B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51202 AS: 198160 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:83:30:0a:81:4a:31:42:5c:63:25:28:f3:f3:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa27f512b0a10265df2b346f143a645c382742be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b6:03:21:a8:c5:50:bf:65:12:0d:ac:19:09: 39:a9:0c:de:5a:5f:d5:e3:44:af:0e:e2:d5:31:16: 65:b0:a0:b6:14:17:af:19:1c:a0:a8:e3:62:6c:8c: ae:a5:b0:ff:a8:39:6e:9d:17:e2:1a:96:75:d0:c3: 2c:e0:9d:8e:92:ee:90:4d:a1:2a:29:0f:0d:47:05: db:b7:c6:d6:71:ff:96:1c:10:5f:d0:dd:f6:ca:1e: 3b:14:e1:3d:d3:22:b7:fc:d1:dc:b8:bc:26:49:83: d3:d0:1b:00:f6:8f:20:83:19:b1:14:9b:48:80:4b: 02:bb:d5:12:77:4d:0b:41:2c:e1:76:b8:bb:7b:e4: 29:f5:c2:bf:d3:4d:9b:10:96:68:36:95:a6:36:ce: 9b:a3:60:60:b2:0b:e3:26:55:61:91:2a:8e:cc:fa: 34:c2:b7:7f:02:92:b4:82:e2:a2:a4:ce:24:49:cf: de:e6:05:4b:26:b2:33:31:5a:3a:71:a7:6b:79:67: be:44:03:e2:bb:1f:6d:e6:38:b5:73:ad:0a:0c:17: 6d:52:81:27:ed:25:59:75:b6:23:b8:04:3f:8a:81: 31:0c:ce:21:48:fd:49:b1:b4:24:e5:ba:e4:37:8d: 85:c3:be:84:40:21:90:21:70:8d:c6:ab:23:06:0a: 2e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 51202 198160 Signature Algorithm: sha256WithRSAEncryption 0f:8e:f4:99:40:6b:4f:9a:f8:78:a2:61:60:01:fb:2b:08:a6: 0a:93:c0:47:ec:4f:53:7a:76:2a:b8:39:0a:38:54:14:d5:88: 68:13:35:20:94:d7:08:61:64:21:95:86:9a:04:2b:76:57:cd: 5f:b8:d3:ee:72:d1:3e:e8:0a:75:67:fd:95:7c:d8:9d:85:9a: 3e:9e:1c:7b:38:58:45:d2:a4:15:56:9f:4b:4e:3f:e8:af:16: 7d:d9:48:c9:2c:7f:ba:49:e4:96:c7:43:f3:fc:29:2d:18:a3: ed:e9:16:d5:5e:d9:bc:72:da:28:72:e5:46:c0:cb:b6:5e:10: a3:b8:3c:a3:e0:8d:97:53:54:d8:de:44:a1:20:eb:c0:19:b5: ec:e1:94:1d:66:88:53:03:fd:61:d2:e4:d5:46:64:11:a7:fa: d0:2e:50:48:b9:09:98:3f:69:60:88:58:1a:fa:30:00:70:53: c0:37:19:86:8f:b5:57:17:30:aa:14:83:8e:ab:fc:a4:eb:0a: de:0e:a8:6a:c2:55:11:7c:dd:1e:62:77:e7:2a:58:04:60:9a: fc:5a:6a:98:6c:4f:53:1d:7f:ce:94:a5:53:d6:45:65:ea:ab: 44:76:92:46:40:35:58:37:0e:af:0b:9d:1d:e6:91:52:2c:60: 0b:af:74:98 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+OIMwCoFKMUJcYyUo8/NrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTI3ZjUxMmIwYTEwMjY1ZGYyYjM0NmYxNDNhNjQ1YzM4Mjc0MmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbYDIajFUL9lEg2sGQk5qQzeWl/V 40SvDuLVMRZlsKC2FBevGRygqONibIyupbD/qDlunRfiGpZ10MMs4J2Oku6QTaEq KQ8NRwXbt8bWcf+WHBBf0N32yh47FOE90yK3/NHcuLwmSYPT0BsA9o8ggxmxFJtI gEsCu9USd00LQSzhdri7e+Qp9cK/002bEJZoNpWmNs6bo2BgsgvjJlVhkSqOzPo0 wrd/ApK0guKipM4kSc/e5gVLJrIzMVo6cadreWe+RAPiux9t5ji1c60KDBdtUoEn 7SVZdbYjuAQ/ioExDM4hSP1JsbQk5brkN42Fw76EQCGQIXCNxqsjBgouXwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKon9RKwoQJl3ys0bxQ6ZFw4J0K+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdmL2Q4MzQ1 ZC00MjZlLTQ5YzMtYjBiMC1mYjdmYmIxYzU4ZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2YvZDgzNDVk LTQyNmUtNDljMy1iMGIwLWZiN2ZiYjFjNThmZS8xL3FpZjFFckNoQW1YZkt6UnZG RHBrWERnblFyNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwDIAgIDAwYQMA0GCSqGSIb3DQEBCwUAA4IBAQAPjvSZ QGtPmvh4omFgAfsrCKYKk8BH7E9TenYquDkKOFQU1YhoEzUglNcIYWQhlYaaBCt2 V81fuNPuctE+6Ap1Z/2VfNidhZo+nhx7OFhF0qQVVp9LTj/orxZ92UjJLH+6SeSW x0Pz/CktGKPt6RbVXtm8ctoocuVGwMu2XhCjuDyj4I2XU1TY3kShIOvAGbXs4ZQd ZohTA/1h0uTVRmQRp/rQLlBIuQmYP2lgiFga+jAAcFPANxmGj7VXFzCqFIOOq/yk 6wreDqhqwlURfN0eYnfnKlgEYJr8WmqYbE9THX/OlKVT1kVl6qtEdpJGQDVYNw6v C50d5pFSLGALr3SY -----END CERTIFICATE-----Generated at Mon Jan 26 05:35:52 2026 by rpki-client