This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer (raw, json) Hash identifier: b4hHp6gmP0Xbt+4hkMX4nWhPRNNvWkLL6fT70vmMnuk= Subject key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF159C5F92E14AAA08A7D6891D3B91A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57597 AS: 200588 IP: 176.221.80.0/21 IP: 2a03:63a0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:59:c5:f9:2e:14:aa:a0:8a:7d:68:91:d3:b9:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa8551e851e69db165c6c632af45f21715512939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:21:e6:e2:5a:98:88:54:b1:05:2c:c1:72: 42:99:db:91:0d:46:6f:e9:ce:0b:8a:d6:bc:66:e3: 26:77:f6:5b:72:7a:d6:c4:7e:72:fa:fa:f7:c3:bd: b4:64:aa:8a:6f:96:6c:0e:b5:be:b3:18:94:b0:44: 64:0e:1e:06:84:f4:82:5d:61:2b:69:bd:50:91:ca: 66:e9:ce:e3:1c:bd:cd:eb:7d:79:a3:79:16:2a:4c: 41:89:bc:f2:ab:32:d1:5a:f1:5a:c3:15:79:2d:bf: 76:7a:7e:5c:b0:33:68:80:f9:ea:d9:18:1e:e7:05: 2f:c4:0e:9c:95:e2:5d:06:8c:43:a3:c5:e8:a7:a8: ea:f8:e2:00:ca:a2:fd:75:18:04:71:1f:28:4b:8c: 51:60:f6:f9:f2:3b:4b:47:f5:17:d3:51:62:b0:de: bb:4e:ab:24:37:9f:7a:3f:0e:c0:ed:02:69:ed:70: 89:f8:4a:ad:c7:9a:a7:b9:c3:a5:5d:c5:3d:36:2e: de:f4:e4:7d:02:e9:99:e9:c1:23:1c:c1:b0:79:48: b8:de:72:65:e4:f1:17:fb:08:9a:bf:8c:e6:4f:a0: b1:7c:72:43:db:7a:85:09:c7:b3:fb:1f:76:39:80: 75:db:8a:8f:85:4b:17:7b:df:0f:cb:74:32:bd:be: 71:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.221.80.0/21 IPv6: 2a03:63a0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57597 200588 Signature Algorithm: sha256WithRSAEncryption 81:38:87:17:ad:19:bb:14:b8:9e:a2:65:5d:f7:4e:dd:54:7b: fb:d0:81:c1:c1:e5:eb:f6:4f:bb:50:77:62:ff:ab:04:c6:ec: a8:b7:5e:0d:4e:21:25:3d:04:e0:65:b5:be:6c:ac:7b:e1:02: 1b:35:8a:1d:e9:b0:b9:81:31:a5:05:c0:ed:55:1c:55:3c:16: b6:ef:2a:a9:c8:bf:50:44:c4:2b:8b:6e:64:6f:78:2c:c5:3f: f8:26:98:02:0a:c3:c3:6a:c7:75:64:b2:ea:80:2d:cd:30:a3: d0:b3:ea:12:26:8e:2e:80:34:cd:36:b7:a2:88:b7:4e:94:2d: a1:d0:f4:93:51:28:35:12:ef:1f:2a:df:4d:00:bd:f5:a4:07: 5b:66:7a:64:9f:7f:c0:61:69:3c:47:30:d8:1a:3e:3e:77:9d: 76:b8:9d:54:a1:97:43:a4:f7:20:a7:d4:ee:0b:4b:00:56:43: e9:ac:d2:6d:b8:5d:1b:25:5f:33:7e:84:ed:7d:dd:c4:59:d7: f5:db:13:4a:93:29:ed:50:a3:52:48:a1:9f:fe:85:cf:60:b6: 3a:33:74:e3:ca:eb:10:25:25:e6:de:5f:4b:e9:1f:68:29:4b: 20:84:8e:93:54:b6:a7:c8:e5:63:80:d1:2f:a7:94:db:25:a6: 8b:f5:d2:d4 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt/8VnF+S4UqqCKfWiR07kaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTg1NTFlODUxZTY5ZGIxNjVjNmM2MzJhZjQ1ZjIxNzE1NTEyOTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNQh5uJamIhUsQUswXJCmduRDUZv 6c4Lita8ZuMmd/ZbcnrWxH5y+vr3w720ZKqKb5ZsDrW+sxiUsERkDh4GhPSCXWEr ab1Qkcpm6c7jHL3N6315o3kWKkxBibzyqzLRWvFawxV5Lb92en5csDNogPnq2Rge 5wUvxA6cleJdBoxDo8Xop6jq+OIAyqL9dRgEcR8oS4xRYPb58jtLR/UX01FisN67 TqskN596Pw7A7QJp7XCJ+Eqtx5qnucOlXcU9Ni7e9OR9AumZ6cEjHMGweUi43nJl 5PEX+wiav4zmT6CxfHJD23qFCcez+x92OYB124qPhUsXe98Py3Qyvb5x/wIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFKqFUehR5p2xZcbGMq9F8hcVUSk5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyL2RlOTYx NS0wYmMwLTRlNWUtODMxOC1mYjFkOTkyZGUwMDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvZGU5NjE1 LTBiYzAtNGU1ZS04MzE4LWZiMWQ5OTJkZTAwMS8xL3FvVlI2RkhtbmJGbHhzWXly MFh5RnhWUktUay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDsN1QMA0EAgACMAcDBQMqA2OgMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwDg/QIDAw+MMA0GCSqGSIb3DQEBCwUAA4IBAQCBOIcX rRm7FLieomVd907dVHv70IHBweXr9k+7UHdi/6sExuyot14NTiElPQTgZbW+bKx7 4QIbNYod6bC5gTGlBcDtVRxVPBa27yqpyL9QRMQri25kb3gsxT/4JpgCCsPDasd1 ZLLqgC3NMKPQs+oSJo4ugDTNNreiiLdOlC2h0PSTUSg1Eu8fKt9NAL31pAdbZnpk n3/AYWk8RzDYGj4+d512uJ1UoZdDpPcgp9TuC0sAVkPprNJtuF0bJV8zfoTtfd3E Wdf12xNKkyntUKNSSKGf/oXPYLY6M3TjyusQJSXm3l9L6R9oKUsghI6TVLanyOVj gNEvp5TbJaaL9dLU -----END CERTIFICATE-----Generated at Mon Jan 26 04:47:09 2026 by rpki-client