This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer File: qx0OfoGLr5p6-5hmEkKSphqvuMo.cer (raw, json) Hash identifier: Mbi//oT3erGeAGocGiiaXrPkO5LvYUUlqb5VDTD9PH4= Subject key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80C26AEBE8ECE38810541A10CB9C12 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59674 IP: 5.250.240.0 -- 5.250.252.255 IP: 185.67.122.0/23 IP: 2a05:e80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c2:6a:eb:e8:ec:e3:88:10:54:1a:10:cb:9c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9b:8d:67:40:3c:63:31:20:44:4e:e9:a5:71: c8:6e:62:d4:02:cf:2c:6b:55:08:b2:a5:ef:6b:91: 5d:c2:cd:b2:f4:95:5d:42:3a:78:81:13:15:5c:46: e7:ef:9b:b3:3b:56:0f:bc:b2:27:32:b6:b7:e2:b8: 8b:c6:4f:7b:63:b3:70:05:89:3b:30:ae:13:e5:0d: 1f:af:1f:e2:43:f9:02:11:92:1c:e4:0e:03:19:27: 77:ee:78:55:74:fc:98:e1:1b:7a:94:33:89:45:33: 1f:5e:9f:aa:64:dc:9f:0d:3d:19:f3:e7:67:85:4b: e5:e2:b1:76:7e:d7:14:8c:a8:bb:25:90:16:e4:2d: 09:c4:a5:5d:a8:91:ee:75:c7:99:c1:05:4c:52:72: 4b:22:4b:0a:55:aa:7f:e8:d0:24:85:f2:1b:91:92: 3b:4c:88:b9:c2:9e:9f:e0:51:5e:b0:e4:5a:51:93: 63:0c:91:ba:1d:16:2e:1f:ea:f4:3f:c1:30:71:2c: 45:1e:8a:5f:18:86:02:70:62:19:70:39:e4:a6:6c: cd:9d:8f:b7:d5:10:a8:a6:38:55:91:2b:60:41:78: fc:39:8d:56:80:83:46:9b:35:b4:ba:ea:09:b6:97: 95:f6:4c:4c:83:05:c6:9c:55:ff:cb:70:d2:55:27: 74:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.250.240.0-5.250.252.255 185.67.122.0/23 IPv6: 2a05:e80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59674 Signature Algorithm: sha256WithRSAEncryption b2:00:e8:8f:a2:17:da:50:8d:a5:fd:84:2d:24:3c:9d:bc:41: e8:06:9d:ad:6b:1b:30:89:7c:98:9e:6a:1d:07:a3:5c:19:19: 80:89:e3:20:f8:02:90:72:ec:4d:ec:73:c7:d2:86:87:d6:6f: f8:37:55:ba:47:1c:2c:2f:ed:6a:9b:7a:c8:e4:cb:bc:5e:39: bd:bb:7c:56:10:e9:71:97:2f:49:74:60:48:23:27:fe:98:33: a6:40:ba:75:f8:a6:93:aa:70:11:0c:f6:7e:a9:3a:ae:0d:ab: 9d:a3:df:50:e2:03:96:c0:e0:3d:6c:b7:2b:bb:70:40:99:49: 34:b0:f7:34:48:60:81:5e:94:74:80:a4:b3:84:c4:3e:f2:5e: ed:0d:95:99:36:be:b3:73:d0:1b:b3:ab:0f:36:ce:7d:36:e8: b8:af:47:a3:ed:9e:89:9f:46:3c:16:97:2f:4a:2a:64:34:0b: 0c:07:f8:89:37:b3:3f:a1:1b:3d:c1:44:e5:c3:1a:28:ca:dd: 72:80:d3:4b:86:03:47:ed:b4:d7:e3:f1:42:ab:5f:88:f0:be: 03:3e:cf:12:63:0b:50:76:87:ce:f0:a2:7b:c7:35:90:be:6b: 42:18:d4:37:cf:7e:44:01:7a:47:1f:0a:33:d0:5f:e1:a8:1b: af:66:69:2e -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt8gMJq6+js44gQVBoQy5wSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjFkMGU3ZTgxOGJhZjlhN2FmYjk4NjYxMjQyOTJhNjFhYWZiOGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZuNZ0A8YzEgRE7ppXHIbmLUAs8s a1UIsqXva5Fdws2y9JVdQjp4gRMVXEbn75uzO1YPvLInMra34riLxk97Y7NwBYk7 MK4T5Q0frx/iQ/kCEZIc5A4DGSd37nhVdPyY4Rt6lDOJRTMfXp+qZNyfDT0Z8+dn hUvl4rF2ftcUjKi7JZAW5C0JxKVdqJHudceZwQVMUnJLIksKVap/6NAkhfIbkZI7 TIi5wp6f4FFesORaUZNjDJG6HRYuH+r0P8EwcSxFHopfGIYCcGIZcDnkpmzNnY+3 1RCopjhVkStgQXj8OY1WgINGmzW0uuoJtpeV9kxMgwXGnFX/y3DSVSd0BQIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFKsdDn6Bi6+aevuYZhJCkqYar7jKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4LzEyNGMz NS05NTIzLTQzYjctYjdlYi1lYTU5MjY0ZjkwODMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvMTI0YzM1 LTk1MjMtNDNiNy1iN2ViLWVhNTkyNjRmOTA4My8xL3F4ME9mb0dMcjVwNi01aG1F a0tTcGhxdnVNby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUMAwDBAQF+vADBAAF+vwDBAG5Q3owDQQCAAIwBwMF AyoFDoAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAOkaMA0GCSqGSIb3DQEBCwUA A4IBAQCyAOiPohfaUI2l/YQtJDydvEHoBp2taxswiXyYnmodB6NcGRmAieMg+AKQ cuxN7HPH0oaH1m/4N1W6RxwsL+1qm3rI5Mu8Xjm9u3xWEOlxly9JdGBIIyf+mDOm QLp1+KaTqnARDPZ+qTquDaudo99Q4gOWwOA9bLcru3BAmUk0sPc0SGCBXpR0gKSz hMQ+8l7tDZWZNr6zc9Abs6sPNs59Nui4r0ej7Z6Jn0Y8FpcvSipkNAsMB/iJN7M/ oRs9wUTlwxooyt1ygNNLhgNH7bTX4/FCq1+I8L4DPs8SYwtQdofO8KJ7xzWQvmtC GNQ3z35EAXpHHwoz0F/hqBuvZmku -----END CERTIFICATE-----Generated at Mon Jan 26 06:57:55 2026 by rpki-client