This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer File: QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer (raw, json) Hash identifier: RxhMmf6vZ/6mHLVMN3foU5NZPjsWNWpLFw1SRcETnkY= Subject key identifier: 42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B2248DA61B80E346AC70AC53C94985718 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 15 Dec 2025 13:52:38 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 57707 IP: 171.25.220.0 -- 171.25.222.255 IP: 2001:678:88c::/48 IP: 2a11:db80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:48:da:61:b8:0e:34:6a:c7:0a:c5:3c:94:98:57:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 15 13:52:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b5:d0:21:18:60:80:07:ec:51:23:88:d0:21: 3e:96:d9:ed:c9:8b:8a:b6:ed:13:9e:11:cd:7d:c0: 17:c5:35:90:dd:29:86:f9:34:b6:a4:c0:4d:33:2b: 15:20:d5:84:19:6c:95:7c:75:01:18:2b:ce:f2:46: 36:3f:6e:cc:65:1f:7a:59:2e:ad:50:33:c4:f9:59: 23:64:35:c1:7b:12:71:05:cb:9d:9b:84:d5:bc:12: 63:23:4a:17:da:1e:0c:df:c9:cb:a5:b8:02:3a:b0: 3c:83:db:34:b4:29:01:13:cb:7f:22:1a:d5:bf:fd: b1:dd:8e:58:d3:a9:b0:9e:de:fd:b0:02:21:05:e7: af:dd:25:de:60:b2:a3:48:37:ad:d2:49:ad:02:f1: d5:d5:79:8d:7e:71:7b:c3:ce:bd:8b:cc:fa:07:92: ac:28:5e:0c:44:54:20:02:a1:93:23:70:62:20:3e: 2e:d1:6d:b0:5d:bb:34:97:b1:d4:d3:7f:81:11:e9: e8:0d:ff:24:f1:98:e7:f6:0d:5e:26:a4:36:ba:78: ee:eb:b1:ac:62:83:2d:47:4e:4e:17:d6:ad:d8:da: 1b:e9:69:59:61:0c:6c:34:ad:61:6e:62:7b:ff:22: 65:9c:db:ca:ba:5c:96:43:b8:63:68:db:17:0f:39: 46:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.25.220.0-171.25.222.255 IPv6: 2001:678:88c::/48 2a11:db80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57707 Signature Algorithm: sha256WithRSAEncryption 3a:0a:4e:d3:3a:28:a8:44:ef:b9:26:0b:1b:73:e4:54:4a:8b: 92:74:1e:ac:73:5d:50:5c:f4:c3:dc:27:24:60:3c:eb:ed:7e: ac:82:75:eb:b3:ce:9a:07:e4:4b:18:2b:7f:dd:76:e6:61:eb: be:a8:08:d7:3d:a8:67:33:ec:20:cb:6d:61:3b:7a:cf:1a:eb: 8d:5f:ab:c8:b4:a4:74:86:55:d4:57:cb:ec:6a:98:76:5f:e4: b1:33:8b:77:f1:14:d3:0f:0d:2c:96:3f:4f:61:5a:fe:67:6b: 42:9b:08:2d:35:11:b5:4d:23:4a:5e:78:9d:3d:33:b6:f4:df: 02:a4:83:3e:39:51:00:8d:6e:d1:f5:58:3a:bd:60:6a:51:85: 20:30:f9:83:38:a2:38:6a:d2:97:08:60:8e:fd:6c:17:90:6d: 51:bd:cc:60:de:f5:b8:15:c1:d6:7d:44:b5:1e:be:32:31:52: 7d:a4:ce:48:08:d2:ee:27:ac:6e:fa:c1:10:9e:70:85:a8:1a: cd:cc:28:d6:ae:ea:27:5a:be:77:2e:10:e5:62:d4:d0:16:19: 2a:51:b6:38:ae:50:9a:c0:ac:da:03:42:17:b0:84:74:96:9f: 2d:2c:a8:3f:d9:75:a9:16:e7:70:b9:a7:21:08:ca:3f:7c:63: bc:e4:17:6c -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZsiSNphuA40ascKxTyUmFcYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE1MTM1MjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmQ5ZWM1ZTIyOGI0YWY3ZjAzYzM0NWJjMzk2N2Y1MWQ2ZmY4YTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7XQIRhggAfsUSOI0CE+ltntyYuK tu0TnhHNfcAXxTWQ3SmG+TS2pMBNMysVINWEGWyVfHUBGCvO8kY2P27MZR96WS6t UDPE+VkjZDXBexJxBcudm4TVvBJjI0oX2h4M38nLpbgCOrA8g9s0tCkBE8t/IhrV v/2x3Y5Y06mwnt79sAIhBeev3SXeYLKjSDet0kmtAvHV1XmNfnF7w869i8z6B5Ks KF4MRFQgAqGTI3BiID4u0W2wXbs0l7HU03+BEenoDf8k8Zjn9g1eJqQ2unju67Gs YoMtR05OF9at2Nob6WlZYQxsNK1hbmJ7/yJlnNvKulyWQ7hjaNsXDzlGhwIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFELZ7F4ii0r38Dw0W8OWf1HW/4oJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyL2RkZTM1 MS03OWEyLTQzYTQtODFiOS02YzliNDhiZGJmZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZGRlMzUx LTc5YTItNDNhNC04MWI5LTZjOWI0OGJkYmZlNS8xL1F0bnNYaUtMU3Zmd1BEUmJ3 NVpfVWRiX2lnay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD8GCCsGAQUF BwEHAQH/BDAwLjAUBAIAATAOMAwDBAKrGdwDBACrGd4wFgQCAAIwEAMHACABBngI jAMFAyoR24AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAOFrMA0GCSqGSIb3DQEB CwUAA4IBAQA6Ck7TOiioRO+5Jgsbc+RUSouSdB6sc11QXPTD3CckYDzr7X6sgnXr s86aB+RLGCt/3XbmYeu+qAjXPahnM+wgy21hO3rPGuuNX6vItKR0hlXUV8vsaph2 X+SxM4t38RTTDw0slj9PYVr+Z2tCmwgtNRG1TSNKXnidPTO29N8CpIM+OVEAjW7R 9Vg6vWBqUYUgMPmDOKI4atKXCGCO/WwXkG1Rvcxg3vW4FcHWfUS1Hr4yMVJ9pM5I CNLuJ6xu+sEQnnCFqBrNzCjWruonWr53LhDlYtTQFhkqUbY4rlCawKzaA0IXsIR0 lp8tLKg/2XWpFudwuachCMo/fGO85Bds -----END CERTIFICATE-----Generated at Sat Dec 20 22:44:51 2025 by rpki-client