This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer File: qwbI8iR9IgQcguVVZniB5Q-RVKs.cer (raw, json) Hash identifier: mjkjJZdAL9797CLdTlMe4CRBlHA/J0Pm1sz5vhCQAc0= Subject key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F20634152C17BE958BA2B0DC05660 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48821 IP: 45.159.32.0/22 IP: 185.138.52.0/22 IP: 2a07:a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:20:63:41:52:c1:7b:e9:58:ba:2b:0d:c0:56:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab06c8f2247d22041c82e555667881e50f9154ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:d0:c8:13:0b:bb:fd:3d:df:07:ba:84:c0: 01:a1:ca:e7:4c:f3:df:be:04:89:29:e4:ca:f2:26: 66:6d:df:8f:e6:b0:dc:c8:9b:97:49:11:be:27:a7: 1e:9e:8b:e0:0b:13:a9:84:8d:a6:bb:b5:23:1e:42: 02:53:07:f5:09:2d:50:f9:d0:b5:05:e8:74:c0:43: ac:70:cf:5f:d3:9a:06:5f:e7:ac:f4:2e:7f:3f:64: 38:65:2f:40:c7:af:3f:e4:4f:e5:e9:30:28:e6:dc: c2:ed:d2:e7:4d:4a:81:c6:a3:fb:e7:9d:3c:dc:69: c9:07:df:77:a1:ad:e6:00:53:30:c9:15:76:ee:35: 27:f9:98:ea:90:eb:71:02:1a:6c:4e:7d:e3:b8:a2: bd:5f:ca:a2:b1:43:7d:0d:5e:8d:75:e0:e4:29:8c: d1:62:83:fa:29:6f:25:50:a7:b0:41:9d:0a:a6:09: 55:86:e7:e2:5d:25:d0:f0:55:83:b8:4d:af:d7:d6: 2c:68:ec:23:76:a6:a9:0c:e7:1f:77:38:db:e7:be: 8e:29:52:25:08:4c:0d:00:f3:89:7a:39:64:ee:06: 71:18:f8:49:7f:cf:4c:25:fe:86:fd:ac:5d:ca:74: 3e:47:6a:eb:ea:7c:c2:d1:76:bd:0e:3f:e7:ab:43: 62:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.32.0/22 185.138.52.0/22 IPv6: 2a07:a40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48821 Signature Algorithm: sha256WithRSAEncryption a7:da:ce:bc:4a:28:17:7b:e8:f9:af:2e:06:41:8c:bb:e1:50: 9f:b0:ee:ff:39:eb:a3:5e:fd:bb:ff:e9:35:a1:dc:8a:48:3b: 96:28:79:98:5e:e4:4b:ff:4d:4b:ca:e9:37:3b:75:30:55:60: 51:bf:66:96:1e:f6:14:24:67:a6:f4:75:17:76:d1:62:91:95: 2a:4d:3a:d1:cc:14:d2:61:03:d8:8d:99:ef:e2:d8:ca:47:9c: d9:a4:24:75:92:d2:3b:62:ad:f5:bc:29:65:f2:50:3e:a4:c3: 07:8d:1b:a4:6c:9d:3c:a8:73:a8:4a:33:dd:e6:0d:a9:35:ed: ae:25:2a:c2:6e:c4:48:1b:b2:9f:5f:1f:94:a3:6c:67:80:13: 8c:f7:6c:98:08:7e:47:40:95:fb:e4:91:2a:41:a1:74:b7:05: e4:b6:e4:fc:6d:b8:78:75:61:26:53:22:1d:6f:31:cd:dc:b6: 03:17:58:ee:0f:7f:73:77:0f:d8:a5:10:f7:eb:34:83:2d:21: 6d:c3:c1:ab:85:72:75:be:2d:fc:70:23:97:54:65:8b:19:81: 85:db:cb:16:0c:cd:d2:87:9e:6e:21:50:c2:6b:06:72:22:fa: f4:a5:e2:40:75:66:e1:fe:39:4b:81:01:8e:41:3a:e3:9d:87: 5a:4f:a9:03 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5fyBjQVLBe+lYuisNwFZgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjA2YzhmMjI0N2QyMjA0MWM4MmU1NTU2Njc4ODFlNTBmOTE1NGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSHQyBMLu/093we6hMABocrnTPPf vgSJKeTK8iZmbd+P5rDcyJuXSRG+J6cenovgCxOphI2mu7UjHkICUwf1CS1Q+dC1 Beh0wEOscM9f05oGX+es9C5/P2Q4ZS9Ax68/5E/l6TAo5tzC7dLnTUqBxqP75508 3GnJB993oa3mAFMwyRV27jUn+ZjqkOtxAhpsTn3juKK9X8qisUN9DV6NdeDkKYzR YoP6KW8lUKewQZ0KpglVhufiXSXQ8FWDuE2v19YsaOwjdqapDOcfdzjb576OKVIl CEwNAPOJejlk7gZxGPhJf89MJf6G/axdynQ+R2rr6nzC0Xa9Dj/nq0NiPwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFKsGyPIkfSIEHILlVWZ4geUPkVSrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhL2E5NGRl YS0yZmZjLTQwOGQtYWE5ZC0xYWUzNmE0NDY5ZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvYTk0ZGVh LTJmZmMtNDA4ZC1hYTlkLTFhZTM2YTQ0NjlmZC8xL3F3Ykk4aVI5SWdRY2d1VlZa bmlCNVEtUlZLcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLZ8gAwQCuYo0MA0EAgACMAcDBQMqBwpAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC+tTANBgkqhkiG9w0BAQsFAAOCAQEAp9rO vEooF3vo+a8uBkGMu+FQn7Du/znro179u//pNaHcikg7lih5mF7kS/9NS8rpNzt1 MFVgUb9mlh72FCRnpvR1F3bRYpGVKk060cwU0mED2I2Z7+LYykec2aQkdZLSO2Kt 9bwpZfJQPqTDB40bpGydPKhzqEoz3eYNqTXtriUqwm7ESBuyn18flKNsZ4ATjPds mAh+R0CV++SRKkGhdLcF5Lbk/G24eHVhJlMiHW8xzdy2AxdY7g9/c3cP2KUQ9+s0 gy0hbcPBq4Vydb4t/HAjl1RlixmBhdvLFgzN0oeebiFQwmsGciL69KXiQHVm4f45 S4EBjkE6452HWk+pAw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:46 2026 by rpki-client