This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer File: gqSUodrlSHPfot61bQMTNAdqyVs.cer (raw, json) Hash identifier: Bay3CASpcE72iWllTnPq3nf0QqAi3UTL7EIlbK0vkvo= Subject key identifier: 82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1582BC813FC3303B6A58B0E84F05A5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197606 AS: 215764 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:82:bc:81:3f:c3:30:3b:6a:58:b0:e8:4f:05:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82a494a1dae54873dfa2deb56d031334076ac95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:c9:41:6a:f8:f1:b1:9d:9c:19:5b:f6:8f: 8f:35:e5:7b:91:4f:e1:00:ed:02:bd:e2:6c:fa:76: 12:2e:c9:37:0a:76:83:7d:aa:51:be:af:43:83:31: da:b0:df:f8:8e:5f:1e:64:32:69:67:ee:42:34:c6: 2b:49:62:0f:7e:11:09:a1:d3:07:90:f0:50:f2:b6: a6:61:72:93:5c:2f:4f:ea:d4:a9:bf:58:26:06:1e: 1f:29:7b:41:fb:f6:1c:12:29:3e:bf:30:6e:57:d2: 47:72:dd:c6:50:9c:80:cb:6d:e3:86:67:9e:92:fa: 0f:53:96:09:ec:db:b4:3f:5d:69:0c:79:9c:1b:1a: 80:9d:5e:48:88:75:45:40:23:c7:5f:b4:e4:8d:50: 15:64:c5:d2:7e:5e:a9:46:27:5b:ff:fa:3b:39:c9: 18:38:71:95:33:1e:a7:52:df:f5:33:da:4c:b3:1b: b0:8c:88:9d:86:3b:37:ac:a3:e9:9d:02:a2:7c:bc: 33:76:55:29:3e:08:df:55:d6:33:13:1d:75:55:64: d2:1e:69:7f:62:94:f2:d1:b0:6a:10:3a:25:60:42: 9d:a3:8a:85:c4:54:e0:f9:c6:fe:7e:45:fa:4e:70: 85:27:16:d6:97:0e:c9:10:b9:8b:57:5d:bf:82:52: f8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 197606 215764 Signature Algorithm: sha256WithRSAEncryption 26:4d:26:c4:8b:14:3d:d0:ad:b8:e4:fb:46:a1:c1:69:3d:8d: 0b:2d:67:5e:ec:f8:55:26:57:5d:33:2d:07:4a:42:6a:bb:2a: 00:a3:35:b0:49:7b:f0:04:9a:0e:95:4e:27:b0:62:ab:1d:2b: 9a:69:38:fb:eb:9b:81:4e:41:81:9a:66:be:c8:23:8d:cc:44: 78:75:c0:fd:f2:6d:2b:29:1d:3a:55:35:50:08:10:73:8d:b8: b1:21:f1:b6:45:6b:70:2d:9b:f7:5d:46:71:70:78:76:50:7c: ec:07:11:60:3a:3a:8e:64:30:69:99:82:9a:d9:c2:fd:d3:4b: da:67:69:6e:53:8f:5f:43:5f:57:05:11:db:c7:f3:36:00:3a: 9a:a3:15:d9:5a:5c:7e:bf:9b:b4:40:53:b2:f2:64:2f:72:30: 9f:cc:d8:7d:07:d7:23:b7:68:ea:19:a4:1d:12:b3:92:c8:a4: 17:01:33:3f:fd:e3:02:09:bb:02:a2:c0:be:51:fd:ec:0c:5a: 2c:72:ea:e6:4d:ab:a8:dc:87:c1:57:38:06:a9:41:60:e0:e7: 5d:2d:a3:53:79:66:93:74:56:3d:de:45:1a:c5:62:d1:3e:86: d0:9e:c4:99:64:84:cf:e4:b3:9b:5e:2d:fb:43:1f:ed:20:ab: d4:64:8c:6c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/FYK8gT/DMDtqWLDoTwWlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmE0OTRhMWRhZTU0ODczZGZhMmRlYjU2ZDAzMTMzNDA3NmFjOTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw23JQWr48bGdnBlb9o+PNeV7kU/h AO0CveJs+nYSLsk3CnaDfapRvq9DgzHasN/4jl8eZDJpZ+5CNMYrSWIPfhEJodMH kPBQ8ramYXKTXC9P6tSpv1gmBh4fKXtB+/YcEik+vzBuV9JHct3GUJyAy23jhmee kvoPU5YJ7Nu0P11pDHmcGxqAnV5IiHVFQCPHX7TkjVAVZMXSfl6pRidb//o7OckY OHGVMx6nUt/1M9pMsxuwjIidhjs3rKPpnQKifLwzdlUpPgjfVdYzEx11VWTSHml/ YpTy0bBqEDolYEKdo4qFxFTg+cb+fkX6TnCFJxbWlw7JELmLV12/glL4oQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIKklKHa5Uhz36LetW0DEzQHaslbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmL2VhZjEw Ny02NzIzLTRkNDYtOWUwYy1jMGJkMDIwMTQ5NzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvZWFmMTA3 LTY3MjMtNGQ0Ni05ZTBjLWMwYmQwMjAxNDk3MS8xL2dxU1VvZHJsU0hQZm90NjFi UU1UTkFkcXlWcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMD5gIDA0rUMA0GCSqGSIb3DQEBCwUAA4IBAQAmTSbE ixQ90K245PtGocFpPY0LLWde7PhVJlddMy0HSkJquyoAozWwSXvwBJoOlU4nsGKr HSuaaTj765uBTkGBmma+yCONzER4dcD98m0rKR06VTVQCBBzjbixIfG2RWtwLZv3 XUZxcHh2UHzsBxFgOjqOZDBpmYKa2cL900vaZ2luU49fQ19XBRHbx/M2ADqaoxXZ Wlx+v5u0QFOy8mQvcjCfzNh9B9cjt2jqGaQdErOSyKQXATM//eMCCbsCosC+Uf3s DFoscurmTauo3IfBVzgGqUFg4OddLaNTeWaTdFY93kUaxWLRPobQnsSZZITP5LOb Xi37Qx/tIKvUZIxs -----END CERTIFICATE-----Generated at Sun Jan 11 23:33:50 2026 by rpki-client