This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer File: qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer (raw, json) Hash identifier: sAgAjckHbgP8WAg+eV/DTTEaTsqloox2yDdq+FCFNWE= Subject key identifier: AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE958AB4E6902CAD7E6788A7CAD7B26EF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 04 Dec 2025 12:31:33 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 198183 IP: 130.255.88.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:58:ab:4e:69:02:ca:d7:e6:78:8a:7c:ad:7b:26:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 4 12:31:33 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aa358cc061e36be03a4ed92ad671780f06589be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5a:4e:94:ef:67:2f:bc:18:99:ab:6c:9c:08: cf:06:cd:43:3c:94:31:d9:7e:aa:aa:69:ae:52:0a: d9:20:f3:2c:76:06:b4:c5:9e:61:f3:1b:ac:4f:d3: 4d:31:89:14:32:30:17:d5:df:cf:53:d6:12:db:b8: 89:b9:27:8b:e3:46:20:43:fa:73:25:cb:5f:65:06: 0b:17:a5:dd:81:15:8e:13:b2:04:2e:57:2c:e4:63: ab:d5:93:2d:20:da:2a:de:80:ae:d9:a8:de:f8:6b: be:ca:7a:41:b0:47:9c:34:ce:a7:3d:c6:49:38:85: fe:66:d1:4c:5f:ac:f2:b7:4c:98:9c:ee:ab:7c:f8: d3:0d:f1:ad:9c:64:55:23:e5:e0:fe:ce:30:5c:f4: 7d:d1:0e:e4:1b:5f:6d:c3:2a:ac:20:4a:36:81:4e: 3f:98:f6:94:0a:f2:23:f9:44:f0:d0:cd:69:54:1e: ed:dc:55:62:6c:a4:28:12:16:73:a9:1a:e9:cb:36: 0e:27:ce:ab:9b:bb:2d:78:02:3b:bd:6e:8d:e4:9f: ec:b4:8f:3f:0e:0f:87:0b:1c:9a:6c:f0:b2:9b:71: dd:27:61:a2:32:cc:94:ec:93:e0:62:8a:8f:9d:6a: ac:c2:79:80:8a:56:5e:a8:f2:60:ec:3a:b7:d6:fc: db:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.255.88.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198183 Signature Algorithm: sha256WithRSAEncryption 89:50:19:d6:f7:37:6a:b4:06:48:2c:06:f0:f0:9b:d3:d7:b1: 2c:8d:16:94:f7:b4:f7:87:eb:a9:03:1d:84:46:06:78:b0:32: 37:74:7c:93:fc:01:1c:b1:aa:8f:b0:eb:df:81:ee:20:01:13: 9a:6f:13:bd:d2:ea:80:71:0f:be:e1:3d:ff:f0:64:ad:0a:4f: 45:80:d2:06:b0:7e:a5:3f:ab:40:ea:f5:2a:47:2a:70:e8:19: 31:e3:e6:85:f7:6e:04:96:72:32:ea:98:fb:82:5d:d2:fb:69: 37:74:b9:1e:a7:6b:29:ed:31:62:e8:fd:19:d6:f8:1e:19:b8: cc:c2:2f:e6:d8:db:8a:71:ef:97:75:3d:eb:b3:81:a5:c2:e9: 68:cf:6b:92:a8:71:f5:99:81:6c:06:fb:4a:89:2a:5d:af:f0: dd:2a:0a:c3:3a:d5:8f:2a:95:ab:b0:3c:ee:41:b8:d8:2a:6a: 01:31:f8:04:c7:94:09:8c:a5:90:e5:b5:56:85:66:82:96:75: c5:a9:20:c3:c0:2b:11:6d:cc:c8:45:f4:45:b5:da:47:df:32: a1:93:5e:e0:d1:bd:84:c2:63:0e:4a:3f:a6:2e:ff:7e:62:7f: a5:9f:4d:1f:57:ef:6b:53:be:5c:b9:9a:23:31:0b:ca:6e:ec: 15:f2:2c:22 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZrpWKtOaQLK1+Z4inyteybvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA0MTIzMTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTM1OGNjMDYxZTM2YmUwM2E0ZWQ5MmFkNjcxNzgwZjA2NTg5YmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFpOlO9nL7wYmatsnAjPBs1DPJQx 2X6qqmmuUgrZIPMsdga0xZ5h8xusT9NNMYkUMjAX1d/PU9YS27iJuSeL40YgQ/pz JctfZQYLF6XdgRWOE7IELlcs5GOr1ZMtINoq3oCu2aje+Gu+ynpBsEecNM6nPcZJ OIX+ZtFMX6zyt0yYnO6rfPjTDfGtnGRVI+Xg/s4wXPR90Q7kG19twyqsIEo2gU4/ mPaUCvIj+UTw0M1pVB7t3FVibKQoEhZzqRrpyzYOJ86rm7steAI7vW6N5J/stI8/ Dg+HCxyabPCym3HdJ2GiMsyU7JPgYoqPnWqswnmAilZeqPJg7Dq31vzb/QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKo1jMBh42vgOk7ZKtZxeA8GWJvjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzA4YjJj Ny01OTA3LTQzNWYtOGVlNi1hYmRhYTJiYTJjN2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvMDhiMmM3 LTU5MDctNDM1Zi04ZWU2LWFiZGFhMmJhMmM3Zi8xL3FqV013R0hqYS1BNlR0a3Ex bkY0RHdaWW0tTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCgv9YMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMGJzANBgkqhkiG9w0BAQsFAAOCAQEAiVAZ1vc3arQGSCwG8PCb09exLI0WlPe0 94frqQMdhEYGeLAyN3R8k/wBHLGqj7Dr34HuIAETmm8TvdLqgHEPvuE9//BkrQpP RYDSBrB+pT+rQOr1KkcqcOgZMePmhfduBJZyMuqY+4Jd0vtpN3S5HqdrKe0xYuj9 Gdb4Hhm4zMIv5tjbinHvl3U967OBpcLpaM9rkqhx9ZmBbAb7SokqXa/w3SoKwzrV jyqVq7A87kG42CpqATH4BMeUCYylkOW1VoVmgpZ1xakgw8ArEW3MyEX0RbXaR98y oZNe4NG9hMJjDko/pi7/fmJ/pZ9NH1fva1O+XLmaIzELym7sFfIsIg== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:23 2025 by rpki-client