This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.cer File: Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.cer (raw, json) Hash identifier: Li065Nv2WI7Bg2cq7+IXZtFwUwHKG+9fXUoBFuRaNis= Subject key identifier: 43:B8:B1:3F:7E:2E:49:7E:D1:C7:B0:A3:41:7B:DD:F1:9B:CC:61:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B224E9A1B66CEA3B149C302B4F6A99206 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 15 Dec 2025 13:58:55 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 42691 IP: 192.109.246.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:4e:9a:1b:66:ce:a3:b1:49:c3:02:b4:f6:a9:92:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 15 13:58:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=43b8b13f7e2e497ed1c7b0a3417bddf19bcc611a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:be:86:d5:af:13:7e:b0:71:30:7f:2e:27:34: b1:bb:a2:c4:b8:a0:ba:4a:c5:9a:71:10:54:54:ca: d6:0a:28:31:b2:5d:60:18:f8:41:20:2c:d7:13:17: e7:a9:1f:5c:cf:79:0d:f2:1b:f9:5f:6c:c0:fd:8e: f2:e6:b9:f2:5c:2f:7d:8a:3c:ab:05:b7:dd:04:c0: 09:27:b5:58:2b:b5:33:20:e3:c4:92:3e:15:1e:ef: 01:02:0d:45:63:c5:9d:6f:96:98:b2:a0:c8:77:8e: 07:81:19:56:53:e2:e3:77:4c:77:b7:3c:ac:70:e8: 30:ed:9b:f1:41:cb:c9:f2:e8:1e:96:6a:d1:a0:92: c2:a9:38:bc:1e:65:fa:82:d7:6f:da:2b:fb:c3:7a: 85:5f:73:f3:76:b5:4c:a9:73:78:48:7b:0d:35:41: d1:c1:13:bd:cf:89:0f:6b:5d:41:fb:09:8b:cc:4a: 75:3c:15:b2:18:74:7c:09:6f:21:51:8c:c0:99:33: a3:5d:04:b4:6e:5a:87:18:bd:7c:f0:17:c5:ba:13: 1a:28:d9:95:ef:73:ee:de:4c:e6:90:66:8a:8d:53: c0:2e:aa:57:df:3b:ea:32:ae:2b:af:be:aa:0c:2e: 60:3b:3c:fd:ce:09:79:61:8f:09:7a:f5:61:3d:d2: 1f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B8:B1:3F:7E:2E:49:7E:D1:C7:B0:A3:41:7B:DD:F1:9B:CC:61:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1ac3a0-4716-4be0-8ba2-fa84f3974990/1/Q7ixP34uSX7Rx7CjQXvd8ZvMYRo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.246.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42691 Signature Algorithm: sha256WithRSAEncryption 94:d2:a7:be:d6:ba:5e:4e:36:79:ee:3a:4e:88:f8:43:8a:e0: e9:81:3a:ac:0c:d1:61:7c:0c:39:d2:b9:92:32:12:76:96:da: 48:09:fb:d7:cc:39:7a:5f:43:c4:d9:e3:82:e0:fc:dc:14:d8: 4b:b0:29:8a:08:77:86:23:c5:a5:c7:56:79:c7:52:7a:90:aa: 57:af:a6:80:50:b5:5e:a0:98:8b:07:9f:d1:13:e1:c8:8c:bf: b3:e3:3f:6d:e3:22:04:b8:44:7e:19:86:c2:13:41:4d:3f:63: b1:84:ac:18:55:9e:02:a8:e4:e8:6d:f9:17:4a:98:9e:0c:5f: c8:fe:34:59:2c:b1:56:85:66:66:66:34:5b:0f:cd:eb:d2:2f: ef:46:4c:22:dd:8b:a6:f2:9b:c4:6a:95:f8:62:c8:55:3a:ff: 20:83:06:77:97:ec:5c:71:b6:c3:53:4e:55:45:d5:a3:cc:4a: a2:12:1e:53:ee:5a:38:41:86:15:4c:e0:d7:86:1a:0e:a1:31: f9:96:6d:70:ea:24:e3:e3:fe:7d:28:aa:ea:d6:25:d5:75:97: f8:59:34:18:93:40:17:68:51:91:14:fd:45:cf:d1:96:88:90: 05:f5:75:c8:dd:a1:1a:c5:7a:07:eb:fd:90:9d:42:7b:76:1a: 58:56:84:e9 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZsiTpobZs6jsUnDArT2qZIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE1MTM1ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2I4YjEzZjdlMmU0OTdlZDFjN2IwYTM0MTdiZGRmMTliY2M2MTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr6G1a8TfrBxMH8uJzSxu6LEuKC6 SsWacRBUVMrWCigxsl1gGPhBICzXExfnqR9cz3kN8hv5X2zA/Y7y5rnyXC99ijyr BbfdBMAJJ7VYK7UzIOPEkj4VHu8BAg1FY8Wdb5aYsqDId44HgRlWU+Ljd0x3tzys cOgw7ZvxQcvJ8ugelmrRoJLCqTi8HmX6gtdv2iv7w3qFX3PzdrVMqXN4SHsNNUHR wRO9z4kPa11B+wmLzEp1PBWyGHR8CW8hUYzAmTOjXQS0blqHGL188BfFuhMaKNmV 73Pu3kzmkGaKjVPALqpX3zvqMq4rr76qDC5gOzz9zgl5YY8JevVhPdIfvQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFEO4sT9+Lkl+0cewo0F73fGbzGEaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzFhYzNh MC00NzE2LTRiZTAtOGJhMi1mYTg0ZjM5NzQ5OTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvMWFjM2Ew LTQ3MTYtNGJlMC04YmEyLWZhODRmMzk3NDk5MC8xL1E3aXhQMzR1U1g3Ung3Q2pR WHZkOFp2TVlSby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwG32MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCmwzANBgkqhkiG9w0BAQsFAAOCAQEAlNKnvta6Xk42ee46Toj4Q4rg6YE6rAzR YXwMOdK5kjISdpbaSAn718w5el9DxNnjguD83BTYS7Apigh3hiPFpcdWecdSepCq V6+mgFC1XqCYiwef0RPhyIy/s+M/beMiBLhEfhmGwhNBTT9jsYSsGFWeAqjk6G35 F0qYngxfyP40WSyxVoVmZmY0Ww/N69Iv70ZMIt2LpvKbxGqV+GLIVTr/IIMGd5fs XHG2w1NOVUXVo8xKohIeU+5aOEGGFUzg14YaDqEx+ZZtcOok4+P+fSiq6tYl1XWX +Fk0GJNAF2hRkRT9Rc/RloiQBfV1yN2hGsV6B+v9kJ1Ce3YaWFaE6Q== -----END CERTIFICATE-----Generated at Sun Dec 21 20:30:58 2025 by rpki-client