This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer File: quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer (raw, json) Hash identifier: aAPK66CGoMUgSy/6KNzVIe/bDpfDpUvTaNCAadaerZ0= Subject key identifier: AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9F6417BA796CDBA0BF9BE261F2930 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34081 IP: 31.14.163.0/24 IP: 84.33.0.0/18 IP: 84.33.192.0/18 IP: 172.83.81.0/24 IP: 193.188.28.0/22 IP: 217.70.144.0/20 IP: 2001:1a38::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f6:41:7b:a7:96:cd:ba:0b:f9:be:26:1f:29:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2b:9b:f4:6c:c5:0e:9d:b8:10:21:aa:e6:ff: ad:76:8f:8c:f1:94:76:4c:76:8c:c3:ea:32:1e:06: 7a:92:50:67:26:30:68:94:8b:05:9f:05:71:25:9b: 0b:98:e2:67:36:32:60:57:97:75:81:1c:2e:0f:a9: d1:23:4a:0a:68:b8:19:6e:0d:e4:4a:82:22:ee:c2: 95:6a:3e:37:97:fd:de:da:1b:ad:31:c4:5d:f2:1b: 95:6c:19:fe:36:72:58:6d:4f:6c:94:db:c1:51:5c: a6:e6:c1:5f:ce:b6:a0:03:a4:2a:d2:4d:46:22:25: 30:c3:2b:cc:31:d7:6e:3c:2a:2b:84:7e:b0:37:78: cc:35:71:52:b8:6a:74:f7:6b:c8:9c:ae:04:86:3e: f1:e8:17:fb:e8:92:05:b4:4c:3e:56:7b:11:95:75: bf:8b:96:5d:e6:6d:ab:7b:37:40:5b:42:00:43:72: c4:95:94:49:7b:27:3d:86:27:b1:89:64:24:f8:ae: 64:aa:a0:42:cf:88:e6:30:0c:c4:c4:02:90:28:22: e1:ba:02:63:23:23:c7:4e:91:04:80:9d:8b:50:bf: c9:61:7f:fa:a3:b7:dd:88:60:bf:e0:b1:58:62:9f: ab:1a:74:44:0a:e6:78:ac:c3:2c:c2:70:88:b7:5c: 3d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.163.0/24 84.33.0.0/18 84.33.192.0/18 172.83.81.0/24 193.188.28.0/22 217.70.144.0/20 IPv6: 2001:1a38::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34081 Signature Algorithm: sha256WithRSAEncryption a4:19:17:71:b7:c7:3a:dd:02:6d:a0:86:01:d6:37:6a:52:61: 35:a2:fd:a3:08:cb:d9:76:d5:35:9f:fe:07:bb:8e:5a:bc:53: 33:8a:4b:cf:c5:f3:b9:bd:53:33:a8:b0:b7:5f:ba:ef:c9:07: 14:37:1f:50:26:8f:ec:21:1d:4b:2e:5e:44:ee:46:8b:73:7e: 68:6b:64:e0:36:3a:71:55:a3:e2:88:01:63:37:9b:d4:09:c7: 3e:1e:9e:30:79:4f:ab:f5:21:8b:67:58:ae:1e:21:23:03:38: cd:cd:da:55:c7:9a:b9:ed:94:f6:cd:a9:68:5e:ab:2e:7e:92: 5d:c4:27:a8:af:c5:4d:ba:92:de:e8:06:34:6d:94:97:7f:14: f0:9d:7f:53:89:cd:a1:06:e4:39:37:56:e8:19:8c:d6:e7:cc: c2:89:ea:d3:23:5b:e3:80:15:b0:ac:f5:af:45:6b:c1:ec:1d: 7a:ed:33:6d:51:5d:6c:8d:21:73:19:64:03:de:27:dc:b3:3e: 93:68:e9:a3:cd:dd:3d:1c:37:70:38:91:8c:94:ba:f0:90:af: 61:16:98:15:50:58:ab:b8:59:50:45:0d:d4:34:10:34:bc:cf: ca:e3:22:d3:e8:a6:24:0b:f7:43:f7:73:b7:8b:94:24:eb:a7: f0:da:37:77 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt9yfZBe6eWzboL+b4mHykwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWViYzliZmVmMmI0ZDIzZjE5NTEzYmZkNGQ2MGJiNzk4ZjVhNTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Cub9GzFDp24ECGq5v+tdo+M8ZR2 THaMw+oyHgZ6klBnJjBolIsFnwVxJZsLmOJnNjJgV5d1gRwuD6nRI0oKaLgZbg3k SoIi7sKVaj43l/3e2hutMcRd8huVbBn+NnJYbU9slNvBUVym5sFfzragA6Qq0k1G IiUwwyvMMdduPCorhH6wN3jMNXFSuGp092vInK4Ehj7x6Bf76JIFtEw+VnsRlXW/ i5Zd5m2rezdAW0IAQ3LElZRJeyc9hiexiWQk+K5kqqBCz4jmMAzExAKQKCLhugJj IyPHTpEEgJ2LUL/JYX/6o7fdiGC/4LFYYp+rGnRECuZ4rMMswnCIt1w9hQIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFKrryb/vK00j8ZUTv9TWC7eY9aWdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjL2ZiMTI4 OS00ZDE0LTQwZjAtOTY3OS0xMWFmYjQ5OTJlZWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvZmIxMjg5 LTRkMTQtNDBmMC05Njc5LTExYWZiNDk5MmVlZi8xL3F1dkp2LThyVFNQeGxST18x TllMdDVqMXBaMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQAHw6jAwQGVCEAAwQGVCHAAwQArFNRAwQCwbwc AwQE2UaQMA0EAgACMAcDBQAgARo4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCF ITANBgkqhkiG9w0BAQsFAAOCAQEApBkXcbfHOt0CbaCGAdY3alJhNaL9owjL2XbV NZ/+B7uOWrxTM4pLz8Xzub1TM6iwt1+678kHFDcfUCaP7CEdSy5eRO5Gi3N+aGtk 4DY6cVWj4ogBYzeb1AnHPh6eMHlPq/Uhi2dYrh4hIwM4zc3aVceaue2U9s2paF6r Ln6SXcQnqK/FTbqS3ugGNG2Ul38U8J1/U4nNoQbkOTdW6BmM1ufMwonq0yNb44AV sKz1r0Vrwewdeu0zbVFdbI0hcxlkA94n3LM+k2jpo83dPRw3cDiRjJS68JCvYRaY FVBYq7hZUEUN1DQQNLzPyuMi0+imJAv3Q/dzt4uUJOun8No3dw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:25:36 2026 by rpki-client