This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qn2enOi8XayPr4gW2aCgqGHbioU.cer File: qn2enOi8XayPr4gW2aCgqGHbioU.cer (raw, json) Hash identifier: LeXUKA366+FXf4Lj61iogWEpUOuSkrk1mL9KDKU0EGk= Subject key identifier: AA:7D:9E:9C:E8:BC:5D:AC:8F:AF:88:16:D9:A0:A0:A8:61:DB:8A:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A59974E0B4F58456331ACF67DE607F6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/qn2enOi8XayPr4gW2aCgqGHbioU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215685 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:97:4e:0b:4f:58:45:63:31:ac:f6:7d:e6:07:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa7d9e9ce8bc5dac8faf8816d9a0a0a861db8a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2f:75:0f:ef:20:6e:63:0a:e0:99:63:2d:8c: bb:37:a3:8d:80:c3:63:3c:2a:fb:89:23:94:ad:6c: aa:29:09:bc:82:d4:e8:7f:66:86:03:d3:c4:e4:4a: a8:f8:7f:a2:ba:bb:b2:f6:c7:2d:c1:91:5c:66:83: ac:32:cd:7e:78:5c:8a:49:99:c6:50:2c:97:30:8a: 74:2b:76:ae:ea:82:78:32:f1:d4:ff:65:f1:9a:81: 6e:cc:4c:4f:3a:30:70:bd:8a:71:17:27:6c:9e:46: b4:c6:7a:56:7c:ac:7b:c9:35:4d:0a:08:48:c9:aa: 54:f0:0c:64:04:84:a7:56:72:77:2d:34:13:84:79: 79:5f:83:0b:a5:00:aa:6a:b5:4c:d5:8e:d2:4c:71: 22:66:3d:7f:0f:3c:e5:ad:bd:be:4f:74:88:c0:7e: 65:fa:db:64:2e:b6:53:04:7b:7e:af:53:70:e6:96: 05:39:c5:bb:be:0c:95:26:63:63:6f:07:3e:60:e8: 88:f5:77:ee:2a:61:88:6f:15:45:96:63:7d:a6:37: 90:4a:f6:40:16:31:23:bc:ea:0e:16:88:b6:f2:88: e5:7a:02:28:26:46:76:41:da:97:eb:f6:ff:67:9b: 53:19:10:c6:85:13:07:47:2a:ae:45:85:3d:a1:4f: 69:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7D:9E:9C:E8:BC:5D:AC:8F:AF:88:16:D9:A0:A0:A8:61:DB:8A:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/qn2enOi8XayPr4gW2aCgqGHbioU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215685 Signature Algorithm: sha256WithRSAEncryption 91:3d:63:1f:bd:73:39:ea:e9:1c:1b:4e:6c:82:09:39:e7:63: d4:b7:cf:b5:5a:8e:c5:5a:2f:78:04:62:08:bd:6d:9c:1f:7b: ea:c8:53:49:6d:40:83:14:87:3f:ce:71:5e:79:a3:7d:dd:0f: 64:aa:31:be:7a:17:87:9f:ff:63:9b:4f:8f:2d:54:b0:62:a6: 7d:a5:0b:48:d8:1a:e7:3d:c7:2c:32:81:32:bc:90:53:b0:bd: bd:0b:0d:52:2e:80:ba:b0:15:36:71:11:ce:2d:7e:3f:ed:3b: dd:ce:48:4c:20:53:9b:70:df:63:1e:88:bf:bb:23:cd:97:31: 72:e0:a1:15:79:93:6b:e5:89:94:da:17:65:38:f4:b9:1b:1c: 9b:d0:2f:b6:d4:7d:a1:88:82:94:34:0a:c5:27:ad:a7:fe:d9: 04:38:47:96:a6:07:35:62:8e:91:28:c9:29:30:61:2d:c2:b1: c3:60:00:31:d3:0f:c6:cf:be:7e:48:6f:01:dd:ae:0c:a4:24: 47:9d:70:cc:f0:5e:8f:05:4c:99:dc:87:53:b3:09:ca:93:d6: bb:f5:df:72:62:1a:07:e6:87:87:58:b7:2a:3d:ca:78:a0:44: b3:9e:09:83:5d:68:9d:7f:76:a8:16:01:20:70:c7:1f:d5:5d: 79:0d:c0:29 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6WZdOC09YRWMxrPZ95gf2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTdkOWU5Y2U4YmM1ZGFjOGZhZjg4MTZkOWEwYTBhODYxZGI4YTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3y91D+8gbmMK4JljLYy7N6ONgMNj PCr7iSOUrWyqKQm8gtTof2aGA9PE5Eqo+H+iuruy9sctwZFcZoOsMs1+eFyKSZnG UCyXMIp0K3au6oJ4MvHU/2XxmoFuzExPOjBwvYpxFydsnka0xnpWfKx7yTVNCghI yapU8AxkBISnVnJ3LTQThHl5X4MLpQCqarVM1Y7STHEiZj1/Dzzlrb2+T3SIwH5l +ttkLrZTBHt+r1Nw5pYFOcW7vgyVJmNjbwc+YOiI9XfuKmGIbxVFlmN9pjeQSvZA FjEjvOoOFoi28ojlegIoJkZ2QdqX6/b/Z5tTGRDGhRMHRyquRYU9oU9ppwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFKp9npzovF2sj6+IFtmgoKhh24qFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4L2UyOGQ1 Yi02OWIxLTQ3NTItOTljYi01NTRhODFjOTA3MTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvZTI4ZDVi LTY5YjEtNDc1Mi05OWNiLTU1NGE4MWM5MDcxMS8xL3FuMmVuT2k4WGF5UHI0Z1cy YUNncUdIYmlvVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNKhTANBgkqhkiG9w0BAQsFAAOCAQEAkT1jH71zOerp HBtObIIJOedj1LfPtVqOxVoveARiCL1tnB976shTSW1AgxSHP85xXnmjfd0PZKox vnoXh5//Y5tPjy1UsGKmfaULSNga5z3HLDKBMryQU7C9vQsNUi6AurAVNnERzi1+ P+073c5ITCBTm3DfYx6Iv7sjzZcxcuChFXmTa+WJlNoXZTj0uRscm9AvttR9oYiC lDQKxSetp/7ZBDhHlqYHNWKOkSjJKTBhLcKxw2AAMdMPxs++fkhvAd2uDKQkR51w zPBejwVMmdyHU7MJypPWu/XfcmIaB+aHh1i3Kj3KeKBEs54Jg11onX92qBYBIHDH H9VdeQ3AKQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:05 2026 by rpki-client