This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer File: zQPRPdJvAESig_xqEedWoqK1aRs.cer (raw, json) Hash identifier: T8j2rE/+T0I8CkFQVFSGXT6tXluiIz1PORZ68JtE8fI= Subject key identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECC604EF2BF2D583272AE6DB74E0DF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.227.79.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c6:04:ef:2b:f2:d5:83:27:2a:e6:db:74:e0:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:13:45:9c:9b:34:1f:76:df:2b:8c:f6:60:8a: 12:ee:e1:1b:4b:95:5b:8e:d3:e8:57:4d:22:a8:0f: 20:c9:67:c6:be:6d:9c:08:1c:aa:aa:06:c2:46:0b: fe:a6:2a:74:a2:9e:f8:5f:57:a0:19:aa:35:11:ea: 48:f3:90:55:66:61:57:4e:71:fb:3e:b5:ca:aa:85: 76:f1:86:36:30:cd:cb:2e:bc:bb:d2:e6:30:fa:e9: 8a:9e:d3:cb:a9:74:32:75:b9:b3:8b:c0:75:77:5b: dc:71:29:f2:45:f0:9c:2c:5e:72:2d:35:20:3c:fd: f8:0c:f9:aa:71:10:a6:ae:df:dc:71:ef:4e:43:92: 9c:a6:e7:72:0f:4e:54:9b:e2:ac:75:3a:8a:79:11: 92:6c:b2:89:5e:25:44:48:80:5e:80:b5:0b:bc:aa: 91:29:ae:c3:c0:11:d4:57:22:ad:89:b2:9d:d8:98: 34:a6:80:33:56:51:c2:83:3f:60:e5:b5:2d:75:f3: d4:d0:59:bc:d6:44:31:1b:b3:b0:44:85:ed:ac:51: 6b:59:1f:a3:c8:ca:1c:cf:13:7e:1c:5c:fc:6f:9d: f8:b1:1e:8e:c2:49:7a:30:2b:0f:4a:98:c5:67:53: c0:59:a9:84:53:42:8d:81:3d:53:a7:05:59:f4:f9: 6c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.227.79.0/24 Signature Algorithm: sha256WithRSAEncryption 81:e4:48:7a:25:5b:58:53:d8:af:24:20:9b:e9:47:a7:0b:c9: 07:ba:27:f2:69:61:d5:71:00:9d:52:3a:20:dc:77:81:2e:f8: 47:40:26:55:58:99:7e:f4:4b:50:a8:88:11:6f:5c:6c:ca:3f: cd:59:15:1d:aa:8f:6e:90:1c:9f:70:f8:c2:10:22:7d:9c:3d: ac:6f:9b:d8:fe:c7:4a:48:f5:47:73:e3:41:98:93:4a:4c:e0: ee:0d:35:1c:0b:9a:32:04:11:61:c6:8e:ec:dd:97:69:0d:f6: 00:56:8d:e9:d3:8f:d5:cb:10:11:dc:13:1e:0d:2c:d6:d5:10: 1e:88:17:ca:ef:36:ea:b0:50:6d:29:ec:20:62:24:df:bf:2e: ed:ab:d7:f7:16:45:31:f2:08:89:f3:4d:61:e0:b7:1d:98:58: a8:b9:fc:77:50:68:92:9f:ab:83:b9:46:d8:35:02:5c:27:70: 94:47:d4:ae:ac:f9:7f:5a:66:b5:5e:34:26:3f:82:47:f0:71: 7f:7a:5e:45:98:9e:26:d6:73:44:cd:8a:56:32:9e:3a:c6:2e: 04:15:c0:db:65:ef:46:34:ee:e6:96:b2:e1:0d:23:31:c3:d2: bf:66:78:d9:d1:82:78:bf:6f:84:05:6c:12:72:9b:0f:17:06: fa:f7:2d:ed -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt57MYE7yvy1YMnKubbdODfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDAzZDEzZGQyNmYwMDQ0YTI4M2ZjNmExMWU3NTZhMmEyYjU2OTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+BNFnJs0H3bfK4z2YIoS7uEbS5Vb jtPoV00iqA8gyWfGvm2cCByqqgbCRgv+pip0op74X1egGao1EepI85BVZmFXTnH7 PrXKqoV28YY2MM3LLry70uYw+umKntPLqXQydbmzi8B1d1vccSnyRfCcLF5yLTUg PP34DPmqcRCmrt/cce9OQ5KcpudyD05Um+KsdTqKeRGSbLKJXiVESIBegLULvKqR Ka7DwBHUVyKtibKd2Jg0poAzVlHCgz9g5bUtdfPU0Fm81kQxG7OwRIXtrFFrWR+j yMoczxN+HFz8b534sR6Owkl6MCsPSpjFZ1PAWamEU0KNgT1TpwVZ9PlsRQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFM0D0T3SbwBEooP8ahHnVqKitWkbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiL2NmZDQx ZS0zOThkLTRmMWItOTk5NS0xYTNmZjUzMmJjMjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvY2ZkNDFl LTM5OGQtNGYxYi05OTk1LTFhM2ZmNTMyYmMyMC8xL3pRUFJQZEp2QUVTaWdfeHFF ZWRXb3FLMWFScy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAueNPMA0GCSqGSIb3DQEBCwUAA4IBAQCB5Eh6 JVtYU9ivJCCb6UenC8kHuifyaWHVcQCdUjog3HeBLvhHQCZVWJl+9EtQqIgRb1xs yj/NWRUdqo9ukByfcPjCECJ9nD2sb5vY/sdKSPVHc+NBmJNKTODuDTUcC5oyBBFh xo7s3ZdpDfYAVo3p04/VyxAR3BMeDSzW1RAeiBfK7zbqsFBtKewgYiTfvy7tq9f3 FkUx8giJ801h4LcdmFioufx3UGiSn6uDuUbYNQJcJ3CUR9SurPl/Wma1XjQmP4JH 8HF/el5FmJ4m1nNEzYpWMp46xi4EFcDbZe9GNO7mlrLhDSMxw9K/ZnjZ0YJ4v2+E BWwScpsPFwb69y3t -----END CERTIFICATE-----Generated at Mon Jan 26 05:35:57 2026 by rpki-client