This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer File: quibwwl3aKzWfC3XR9O-Gtty6Zc.cer (raw, json) Hash identifier: 1yFAIkstHaBp9PbjTMlQrq4wHh0TwcTWF835e46E9fc= Subject key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C804C15F0CCADC16448979052986D79 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41656 IP: 91.200.73.0/24 IP: 194.145.203.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:4c:15:f0:cc:ad:c1:64:48:97:90:52:98:6d:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aae89bc3097768acd67c2dd747d3be1adb72e997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:fc:25:79:08:ab:3d:43:cf:f2:b2:22:b3:fa: 2b:91:18:01:0d:d2:76:c6:6d:3f:75:ab:0c:bb:57: 91:06:39:6b:4c:25:3c:7b:12:0c:27:92:ce:cd:ec: bd:84:8f:8c:b3:7b:bc:a5:6c:55:e1:d3:c8:c0:07: 5c:7c:00:48:20:b1:0e:d9:9f:cf:5c:54:72:59:0c: 30:19:ce:91:c4:49:6c:fe:ac:c2:ec:c4:bf:6b:bb: f3:e4:d8:61:b0:cd:08:6d:3c:12:b1:ec:8e:5c:48: ee:ea:c9:62:dc:cb:c6:f6:c6:bf:86:3b:86:6c:32: bf:38:d2:5c:fc:e7:ae:02:13:94:a3:38:bf:0f:95: 1a:0f:da:cc:81:96:66:e6:7d:ff:24:14:75:81:6e: 66:33:fa:c3:ed:ed:4c:c1:1e:fb:6b:a1:59:3f:32: d4:7d:6d:86:61:7e:31:02:1a:4a:20:f4:6d:94:ba: 35:3a:9b:bb:3c:2b:a2:a2:0d:c9:86:25:f4:59:91: c4:31:9d:91:8b:95:d8:f8:93:b6:46:61:4b:a6:7f: 5a:c3:4d:29:42:d2:cb:0c:db:8b:b1:81:70:12:92: 84:ec:b0:b3:8b:1b:3d:6f:2f:2b:6a:98:44:b7:d9: 58:a0:1f:d9:4e:53:3e:ac:60:c2:33:c0:25:6a:e0: 11:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.73.0/24 194.145.203.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41656 Signature Algorithm: sha256WithRSAEncryption 29:e8:db:32:12:a4:bb:aa:0a:50:18:a9:d3:50:c2:75:4b:e3: 3b:ca:b3:f7:c5:bb:20:1c:7c:7a:cc:89:5f:ae:8d:30:c6:d1: b6:58:f0:2a:e6:c0:0b:38:11:fa:db:49:cc:b9:e0:30:d2:ac: 81:dc:77:c1:0d:1f:56:3a:cb:c8:9e:38:bd:77:ff:3c:5b:f2: 4a:02:36:61:60:5f:d6:fb:0e:03:ae:cb:86:a0:a9:97:df:a9: 8f:2b:c9:29:a3:32:0c:d9:84:b5:7a:57:cf:98:fa:8f:2d:2f: 84:cd:1d:af:93:9f:24:9b:6d:80:c0:23:85:e5:7e:3b:11:64: 06:7a:02:29:92:05:43:53:59:7b:7a:a4:53:8a:3a:be:0b:47: 73:01:cd:bf:78:7e:7f:3a:62:5b:a0:2c:38:63:24:ec:f2:8d: 4b:07:58:e6:9f:a1:c8:d6:46:d8:52:ee:e2:f5:fc:d1:43:d1: 7d:11:4e:fa:34:5a:20:4b:9b:fb:06:7f:e7:56:a3:a0:a7:c1: e8:2e:9e:bf:c9:80:45:f6:a6:c6:7c:8c:2c:97:b7:b4:54:94: 8c:6c:66:46:85:16:3c:48:5c:06:90:a8:c2:0d:86:63:8b:66: b6:5f:6c:0b:bd:dd:ab:9d:32:8e:1f:ba:f7:5b:03:4e:ec:18: 45:e2:b2:fe -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt8gEwV8MytwWRIl5BSmG15MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWU4OWJjMzA5Nzc2OGFjZDY3YzJkZDc0N2QzYmUxYWRiNzJlOTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vwleQirPUPP8rIis/orkRgBDdJ2 xm0/dasMu1eRBjlrTCU8exIMJ5LOzey9hI+Ms3u8pWxV4dPIwAdcfABIILEO2Z/P XFRyWQwwGc6RxEls/qzC7MS/a7vz5NhhsM0IbTwSseyOXEju6sli3MvG9sa/hjuG bDK/ONJc/OeuAhOUozi/D5UaD9rMgZZm5n3/JBR1gW5mM/rD7e1MwR77a6FZPzLU fW2GYX4xAhpKIPRtlLo1Opu7PCuiog3JhiX0WZHEMZ2Ri5XY+JO2RmFLpn9aw00p QtLLDNuLsYFwEpKE7LCzixs9by8raphEt9lYoB/ZTlM+rGDCM8AlauAR3QIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFKrom8MJd2is1nwt10fTvhrbcumXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzMyZTY1 MC0wY2VjLTQyNjItYmM5My1lM2RkNzc2NDg5YTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvMzJlNjUw LTBjZWMtNDI2Mi1iYzkzLWUzZGQ3NzY0ODlhMS8xL3F1aWJ3d2wzYUt6V2ZDM1hS OU8tR3R0eTZaYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW8hJAwQAwpHLMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCiuDANBgkqhkiG9w0BAQsFAAOCAQEAKejbMhKku6oKUBip01DCdUvj O8qz98W7IBx8esyJX66NMMbRtljwKubACzgR+ttJzLngMNKsgdx3wQ0fVjrLyJ44 vXf/PFvySgI2YWBf1vsOA67LhqCpl9+pjyvJKaMyDNmEtXpXz5j6jy0vhM0dr5Of JJttgMAjheV+OxFkBnoCKZIFQ1NZe3qkU4o6vgtHcwHNv3h+fzpiW6AsOGMk7PKN SwdY5p+hyNZG2FLu4vX80UPRfRFO+jRaIEub+wZ/51ajoKfB6C6ev8mARfamxnyM LJe3tFSUjGxmRoUWPEhcBpCowg2GY4tmtl9sC73dq50yjh+691sDTuwYReKy/g== -----END CERTIFICATE-----Generated at Mon Jan 26 11:46:15 2026 by rpki-client