This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer File: qyftHOpDIcScPKEPOv-v29rVMsI.cer (raw, json) Hash identifier: QChDYeVF/lOs1cjdtlYTGvE9TxC/biDsr4fSrJPWKhs= Subject key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80D07558AC79B2FA18B9953E48CA56 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202870 IP: 5.152.128.0/22 IP: 45.3.56.0/22 IP: 45.133.154.0/23 IP: 103.129.61.0/24 IP: 104.167.28.0/22 IP: 185.55.208.0/22 IP: 185.152.44.0/22 IP: 2a07:7e80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d0:75:58:ac:79:b2:fa:18:b9:95:3e:48:ca:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e5:b1:78:fc:18:60:dd:e5:5b:b3:a4:8f:0d: eb:8b:18:0f:9c:a8:1e:06:4b:06:50:77:f7:df:8d: f9:3c:9a:18:1b:6c:f1:a2:18:6a:3f:f1:04:57:09: 08:78:56:89:46:4b:b7:5f:e6:22:1a:c1:9d:c9:0b: ca:3c:75:4a:f7:d2:f2:31:b5:3c:8a:36:ac:d9:51: c8:ba:37:99:36:51:e0:19:57:a8:bd:4c:f4:be:9d: 28:d6:d2:df:8d:11:02:a5:07:b5:3f:fa:0d:b8:75: 2c:eb:bc:9b:07:79:39:b8:76:e5:91:12:35:d3:69: 36:04:05:16:86:fb:c5:18:6a:3b:04:76:ac:65:2d: 8f:98:96:4a:0f:6d:3d:b2:ba:30:da:a4:f8:b0:c0: 7c:97:b9:2d:71:3a:df:d4:05:5b:d0:d4:07:6d:50: d8:90:86:ab:2a:0f:39:8d:50:ae:19:23:17:c0:6e: 6f:4c:b8:7b:47:eb:6f:c7:9d:37:a1:ea:3d:3a:2b: 8f:e5:92:29:06:87:03:07:8c:2f:c3:ba:73:f1:b4: 37:d3:cb:8c:ba:0f:f0:60:6f:52:c7:db:c6:85:74: 88:31:bf:0a:7e:8c:ba:3a:0c:46:b9:ee:dc:d0:f5: 97:36:94:a2:3d:37:7d:18:b6:6a:63:e7:df:54:48: 45:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.152.128.0/22 45.3.56.0/22 45.133.154.0/23 103.129.61.0/24 104.167.28.0/22 185.55.208.0/22 185.152.44.0/22 IPv6: 2a07:7e80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202870 Signature Algorithm: sha256WithRSAEncryption ae:2b:70:75:56:2f:9f:45:55:1b:28:4e:4b:eb:8c:e7:60:f0: 8d:3e:2e:d3:dc:c7:59:fa:5e:e2:ba:11:7e:75:26:cb:cb:08: 82:70:73:b4:b3:1b:25:8a:99:70:63:d1:0c:c2:07:29:be:94: ef:45:8c:be:77:90:9b:27:ea:11:8b:31:05:51:b1:e3:9e:72: 55:5e:48:4b:29:e9:9d:67:fe:dc:05:67:ec:c8:24:d1:ff:36: ad:a1:2f:8d:a1:bc:c8:de:fe:ae:88:b7:0d:f5:93:9a:52:11: 3a:ef:52:2c:ba:40:10:f9:40:91:5a:4b:58:ba:a0:65:e3:24: 92:51:7c:8c:7e:12:3c:9d:6b:39:75:0b:ef:58:3b:5b:e8:9a: 4c:2c:65:51:3e:7b:4b:ef:b7:f9:26:05:63:78:83:f0:b3:a0: 77:64:16:79:b1:2c:28:65:1d:55:54:c5:e4:89:42:08:b9:8d: 4b:c8:dd:28:cf:b2:50:94:5e:05:23:c5:08:3c:43:f0:44:3a: a7:85:29:13:41:42:78:30:6e:09:91:ad:05:fd:b3:16:34:65: 86:c7:23:13:f9:ed:10:82:e3:4d:97:06:45:0c:98:4c:3e:24: f3:07:d1:f2:f3:8a:98:8e:8f:6f:d8:6e:d8:eb:29:79:65:04: 80:fb:f7:82 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt8gNB1WKx5svoYuZU+SMpWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjI3ZWQxY2VhNDMyMWM0OWMzY2ExMGYzYWZmYWZkYmRhZDUzMmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeWxePwYYN3lW7Okjw3rixgPnKge BksGUHf33435PJoYG2zxohhqP/EEVwkIeFaJRku3X+YiGsGdyQvKPHVK99LyMbU8 ijas2VHIujeZNlHgGVeovUz0vp0o1tLfjRECpQe1P/oNuHUs67ybB3k5uHblkRI1 02k2BAUWhvvFGGo7BHasZS2PmJZKD209srow2qT4sMB8l7ktcTrf1AVb0NQHbVDY kIarKg85jVCuGSMXwG5vTLh7R+tvx503oeo9OiuP5ZIpBocDB4wvw7pz8bQ308uM ug/wYG9Sx9vGhXSIMb8Kfoy6OgxGue7c0PWXNpSiPTd9GLZqY+ffVEhFOwIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFKsn7RzqQyHEnDyhDzr/r9va1TLCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyLzg2NTQ5 MC03OGU3LTQzYjQtYjJmZC0xZDBiZjUyMDhmOTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvODY1NDkw LTc4ZTctNDNiNC1iMmZkLTFkMGJmNTIwOGY5MC8xL3F5ZnRIT3BESWNTY1BLRVBP di12MjlyVk1zSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQCBZiAAwQCLQM4AwQBLYWaAwQAZ4E9AwQCaKcc AwQCuTfQAwQCuZgsMA0EAgACMAcDBQMqB36AMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMYdjANBgkqhkiG9w0BAQsFAAOCAQEAritwdVYvn0VVGyhOS+uM52DwjT4u 09zHWfpe4roRfnUmy8sIgnBztLMbJYqZcGPRDMIHKb6U70WMvneQmyfqEYsxBVGx 455yVV5ISynpnWf+3AVn7Mgk0f82raEvjaG8yN7+roi3DfWTmlIROu9SLLpAEPlA kVpLWLqgZeMkklF8jH4SPJ1rOXUL71g7W+iaTCxlUT57S++3+SYFY3iD8LOgd2QW ebEsKGUdVVTF5IlCCLmNS8jdKM+yUJReBSPFCDxD8EQ6p4UpE0FCeDBuCZGtBf2z FjRlhscjE/ntEILjTZcGRQyYTD4k8wfR8vOKmI6Pb9hu2OspeWUEgPv3gg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:54:50 2026 by rpki-client