This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer File: fqigEMxtfJMg4BLqHR424KdhwTg.cer (raw, json) Hash identifier: FWN59C8fx4J4CSBaLuo/Su1vU+WyYI+/JVIYquUE09M= Subject key identifier: 7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E83476D8366926041BE314A6EF6AE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51765 AS: 204187 IP: 85.136.176.0/22 IP: 91.221.66.0/23 IP: 91.233.116.0/23 IP: 194.34.132.0/22 IP: 2a0c:f040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:83:47:6d:83:66:92:60:41:be:31:4a:6e:f6:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:06:00:90:3e:3f:bb:ef:14:6d:3e:90:10:8c: c8:50:b6:31:d5:e9:e7:03:20:8d:30:8d:de:e5:9f: 3e:c1:3f:67:25:0a:45:2b:a1:9c:41:95:51:d0:e2: 05:2c:70:6a:6c:10:2e:e1:c2:c1:15:7a:74:ab:d9: f9:74:48:a2:56:2e:31:d5:17:d0:b5:87:64:d3:38: 27:5f:a6:d0:53:f4:6e:1b:75:e8:f2:71:2c:2e:2a: 0d:a6:75:d8:e0:e2:38:8a:d5:2e:d6:d1:bc:00:b9: 53:2a:91:02:da:71:3c:61:4d:6b:13:f4:1d:3f:b1: 1c:e6:05:58:1c:f4:1c:05:05:35:70:ad:c8:74:72: 61:8e:3b:f0:81:ab:29:ae:20:2f:92:a1:46:a1:2b: 19:b7:2d:b0:f8:dd:d2:78:ce:7c:d7:f1:65:f1:0a: b6:eb:05:7d:67:27:1b:60:d7:62:b4:dc:82:dc:92: fb:72:ab:10:7e:2d:20:6b:e6:24:22:40:e0:39:8d: 8b:d8:c3:ab:91:8e:f5:32:2b:8f:e6:0f:48:bd:b4: b6:2e:40:a2:be:88:36:65:33:4c:66:b8:70:35:93: ae:8c:0c:88:d8:27:23:98:53:7c:da:a4:51:e6:13: 59:45:76:60:34:e6:d4:8a:b9:c6:90:8b:c1:28:63: 0f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.136.176.0/22 91.221.66.0/23 91.233.116.0/23 194.34.132.0/22 IPv6: 2a0c:f040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51765 204187 Signature Algorithm: sha256WithRSAEncryption 5c:89:94:d2:67:78:dd:d9:31:f9:a3:c1:8f:3d:78:69:2b:60: 97:cf:d4:08:b1:63:6e:bb:fc:25:2d:dc:52:d0:54:07:1f:e3: 96:f1:8b:22:5d:1b:2c:20:c8:7a:c3:7e:5c:91:37:30:7a:5e: 04:2e:b7:10:6e:f6:3b:b6:f9:b6:e0:df:fc:6d:d3:3d:d2:29: 7e:1c:3a:76:bb:e9:1a:4f:10:30:87:75:2f:6c:e8:4b:74:77: b2:08:6b:d2:c8:11:22:dd:b8:e5:50:7c:0b:2b:2f:26:79:1a: 13:c6:d3:7f:c3:3c:4d:67:51:5c:52:16:c3:ea:82:ea:1a:ff: 2b:12:3f:1a:09:fc:e7:56:c1:dc:4c:57:b4:e0:bb:9c:85:21: 4a:b2:44:22:b6:5d:bf:6a:bd:3b:1d:80:bc:20:04:83:e9:3e: b5:99:8f:0f:4d:16:82:ad:7e:72:e9:c8:3f:f4:18:f5:79:ee: 63:96:97:8f:39:7d:67:7f:15:d0:57:11:88:29:0b:48:3f:45: cf:da:12:c9:b3:a0:4b:df:6a:e9:bf:5c:a4:cf:5e:79:50:f2: d2:7d:61:e6:f6:ce:b9:00:17:81:06:19:49:7a:90:14:82:3a: e9:00:75:34:23:60:a7:d3:9c:54:a0:40:33:28:2a:0e:8d:b3: 74:b5:1d:3c -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt5foNHbYNmkmBBvjFKbvauMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWE4YTAxMGNjNmQ3YzkzMjBlMDEyZWExZDFlMzZlMGE3NjFjMTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAYAkD4/u+8UbT6QEIzIULYx1enn AyCNMI3e5Z8+wT9nJQpFK6GcQZVR0OIFLHBqbBAu4cLBFXp0q9n5dEiiVi4x1RfQ tYdk0zgnX6bQU/RuG3Xo8nEsLioNpnXY4OI4itUu1tG8ALlTKpEC2nE8YU1rE/Qd P7Ec5gVYHPQcBQU1cK3IdHJhjjvwgaspriAvkqFGoSsZty2w+N3SeM581/Fl8Qq2 6wV9ZycbYNditNyC3JL7cqsQfi0ga+YkIkDgOY2L2MOrkY71MiuP5g9IvbS2LkCi vog2ZTNMZrhwNZOujAyI2CcjmFN82qRR5hNZRXZgNObUirnGkIvBKGMPNwIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFH6ooBDMbXyTIOAS6h0eNuCnYcE4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlL2JhYTg2 ZS03ZmM2LTQ0MmYtYWRlMS00NWJlZmJmMWVmN2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvYmFhODZl LTdmYzYtNDQyZi1hZGUxLTQ1YmVmYmYxZWY3Zi8xL2ZxaWdFTXh0ZkpNZzRCTHFI UjQyNEtkaHdUZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCVYiwAwQBW91CAwQBW+l0AwQCwiKEMA0EAgAC MAcDBQMqDPBAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDKNQIDAx2bMA0GCSqG SIb3DQEBCwUAA4IBAQBciZTSZ3jd2TH5o8GPPXhpK2CXz9QIsWNuu/wlLdxS0FQH H+OW8YsiXRssIMh6w35ckTcwel4ELrcQbvY7tvm24N/8bdM90il+HDp2u+kaTxAw h3UvbOhLdHeyCGvSyBEi3bjlUHwLKy8meRoTxtN/wzxNZ1FcUhbD6oLqGv8rEj8a CfznVsHcTFe04LuchSFKskQitl2/ar07HYC8IASD6T61mY8PTRaCrX5y6cg/9Bj1 ee5jlpePOX1nfxXQVxGIKQtIP0XP2hLJs6BL32rpv1ykz155UPLSfWHm9s65ABeB BhlJepAUgjrpAHU0I2Cn05xUoEAzKCoOjbN0tR08 -----END CERTIFICATE-----Generated at Sat Jan 3 02:32:27 2026 by rpki-client