This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer File: rqAyAc2mqK295P6ARuxl-WrGqWw.cer (raw, json) Hash identifier: PSDMHVi/nD4DwrhAa95QPnpOBB0BWES9CcpZ4WflTQE= Subject key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC20BA2A6D3903A08BE696AC6BA014 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47274 IP: 91.204.8.0/22 IP: 195.62.80.0/23 IP: 2001:678:3e4::/48 IP: 2001:67c:1b34::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:20:ba:2a:6d:39:03:a0:8b:e6:96:ac:6b:a0:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ba:31:be:d2:b1:66:2d:db:a9:d8:2c:80:b1: d2:6f:d0:be:db:72:83:27:f0:39:e0:24:83:9f:2f: 4d:11:c0:85:ed:f9:73:0f:dc:f8:5c:4b:a1:c7:a8: 05:28:18:3a:de:44:3a:a2:4f:d8:72:79:6f:96:15: 81:a4:50:25:58:03:8d:9b:39:9c:63:97:d1:23:bd: c0:d8:1b:f8:0f:88:62:6d:8e:16:97:24:f8:b7:b4: 7a:21:12:8d:a3:86:99:66:f4:7f:76:8e:49:3e:7f: 00:ce:3b:3a:35:74:3a:d8:c4:22:e2:fe:f0:00:b2: f1:63:60:c6:7b:ad:e1:04:d8:28:ff:bd:ab:2c:d0: f1:07:08:86:b9:ff:12:8a:09:2d:e1:91:48:62:05: 8d:44:38:ac:17:4a:ec:b1:29:4d:98:33:bf:58:63: 48:63:de:2e:83:54:f6:67:da:e8:12:41:ce:b5:35: 7d:ec:25:72:b0:56:b9:95:1a:40:53:7f:cc:92:96: 07:1a:19:b5:69:53:e1:8f:b7:3c:a3:2a:85:06:3d: 91:25:c9:69:81:ed:b0:50:70:d8:da:5c:f7:55:9f: c8:a3:44:41:71:58:3f:07:d9:bd:3a:05:ac:5c:b3: 9a:17:0d:97:90:f0:73:3b:92:01:65:86:8e:0c:0f: d6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.204.8.0/22 195.62.80.0/23 IPv6: 2001:678:3e4::/48 2001:67c:1b34::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47274 Signature Algorithm: sha256WithRSAEncryption 4b:fd:36:d6:71:60:43:8f:d2:d7:da:08:e5:0b:69:bc:cd:12: 23:84:e0:8d:33:bb:e6:d4:d3:9b:5b:05:64:73:20:0f:76:da: 90:86:2b:0b:52:09:16:4a:15:ae:5d:17:a3:23:45:02:19:9b: 2e:e5:2a:e9:bb:86:3e:af:60:1d:76:dc:f4:c0:ec:5e:52:13: 00:cb:a1:49:41:f7:f5:b0:1e:75:48:a5:bb:e6:10:97:37:16: 7e:81:bc:a2:58:16:09:7f:b7:a8:a7:14:14:6a:bc:de:a6:6b: 16:cb:af:2a:4a:e3:4e:76:c2:54:d4:90:00:cc:96:3f:c7:f7: 29:99:5f:63:01:c7:d2:89:96:c2:fe:e8:bc:89:e8:d9:07:01: 12:e6:a5:3a:70:a9:dd:f9:60:61:c9:3a:65:7e:3a:d6:f8:0a: 6b:5f:91:e6:4f:e9:20:a9:1c:cf:31:93:99:04:12:05:7f:4e: 63:80:d5:42:04:e3:5f:29:15:f3:33:61:00:18:a9:f3:36:3c: ab:98:7a:87:ee:e9:de:b9:06:a6:83:66:44:14:7e:cb:8a:d7: 6d:97:8a:53:7b:5c:b4:61:9f:4f:70:b0:28:7b:b1:7f:7d:f7: 5f:af:4c:1c:d2:ff:90:24:9f:45:a2:82:fb:d7:4f:41:6a:65: 81:69:c0:89 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt57CC6Km05A6CL5pasa6AUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWEwMzIwMWNkYTZhOGFkYmRlNGZlODA0NmVjNjVmOTZhYzZhOTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLoxvtKxZi3bqdgsgLHSb9C+23KD J/A54CSDny9NEcCF7flzD9z4XEuhx6gFKBg63kQ6ok/YcnlvlhWBpFAlWAONmzmc Y5fRI73A2Bv4D4hibY4WlyT4t7R6IRKNo4aZZvR/do5JPn8Azjs6NXQ62MQi4v7w ALLxY2DGe63hBNgo/72rLNDxBwiGuf8Sigkt4ZFIYgWNRDisF0rssSlNmDO/WGNI Y94ug1T2Z9roEkHOtTV97CVysFa5lRpAU3/MkpYHGhm1aVPhj7c8oyqFBj2RJclp ge2wUHDY2lz3VZ/Io0RBcVg/B9m9OgWsXLOaFw2XkPBzO5IBZYaODA/WCQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFK6gMgHNpqitveT+gEbsZflqxqlsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5L2RkMDlk Yy0yNDcyLTQ1MTctOWUyZC1lYTQxMmYyMWUyMzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvZGQwOWRj LTI0NzItNDUxNy05ZTJkLWVhNDEyZjIxZTIzMC8xL3JxQXlBYzJtcUsyOTVQNkFS dXhsLVdyR3FXdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD8GCCsGAQUF BwEHAQH/BDAwLjASBAIAATAMAwQCW8wIAwQBwz5QMBgEAgACMBIDBwAgAQZ4A+QD BwAgAQZ8GzQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDALiqMA0GCSqGSIb3DQEB CwUAA4IBAQBL/TbWcWBDj9LX2gjlC2m8zRIjhOCNM7vm1NObWwVkcyAPdtqQhisL UgkWShWuXRejI0UCGZsu5Srpu4Y+r2Addtz0wOxeUhMAy6FJQff1sB51SKW75hCX NxZ+gbyiWBYJf7eopxQUarzepmsWy68qSuNOdsJU1JAAzJY/x/cpmV9jAcfSiZbC /ui8iejZBwES5qU6cKnd+WBhyTplfjrW+AprX5HmT+kgqRzPMZOZBBIFf05jgNVC BONfKRXzM2EAGKnzNjyrmHqH7uneuQamg2ZEFH7Litdtl4pTe1y0YZ9PcLAoe7F/ ffdfr0wc0v+QJJ9FooL7109BamWBacCJ -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:10 2026 by rpki-client