This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer File: kGQm9IPDaqzahzIySriK1YAMmi0.cer (raw, json) Hash identifier: VHb5286TZ5tfF1beN3ojCa3bEaNCQ0w5+fLF2OaBLwo= Subject key identifier: 90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758C1878E7D104D82EC0B2014EC5622 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.57.84.0/22 IP: 193.57.132.0/22 IP: 194.4.0.0/21 IP: 194.4.10.0 -- 194.4.13.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c1:87:8e:7d:10:4d:82:ec:0b:20:14:ec:56:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=906426f483c36aacda8732324ab88ad5800c9a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:10:6d:ba:0e:18:df:17:03:26:da:2a:02:08: 8d:f7:f2:4b:5d:d9:ff:20:8f:74:f4:ab:8b:74:7a: fe:6b:ff:77:7d:a9:f0:79:4b:51:06:57:98:ba:d0: cf:a0:c1:7f:18:5a:b6:68:12:b6:15:ef:bc:46:80: 96:a1:73:d6:e8:9c:83:fc:f6:86:e3:90:b9:34:0a: 21:6e:c6:36:74:d3:81:db:e5:e7:4b:40:6b:b1:58: 35:34:3e:2f:2b:ac:f1:4b:a7:d4:7d:32:ae:30:1e: 41:3a:c4:49:13:55:f2:57:6f:1e:fd:ac:a0:79:65: 34:54:53:1e:ca:02:c9:03:39:2b:0c:12:ae:22:3a: de:e9:bc:9e:21:ff:24:46:a2:a8:38:50:9a:be:07: 68:69:f2:52:db:99:33:7d:c4:a7:72:84:03:51:f1: 43:5d:e4:18:28:3a:d9:58:e2:20:99:58:60:4c:9a: 19:12:eb:02:c9:3d:5d:a6:c1:3f:a0:5f:61:b7:9d: fc:6f:28:b8:d9:7c:a1:16:a0:a4:18:45:0c:5a:65: a0:f9:15:7c:4d:05:f5:96:34:ed:14:10:ed:20:aa: 61:cd:56:26:ec:a3:35:be:24:3a:b3:05:84:ee:90: 2e:72:03:58:f7:f3:16:55:d5:ae:21:1c:73:4c:16: 54:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.84.0/22 193.57.132.0/22 194.4.0.0/21 194.4.10.0-194.4.13.255 Signature Algorithm: sha256WithRSAEncryption 10:3b:88:b6:df:e2:19:2f:81:61:75:7f:05:7d:89:e2:b9:0a: f2:4f:f9:bb:ee:d6:6a:f9:1e:80:ec:cb:de:e0:83:4d:91:b4: 09:19:6e:3f:d7:65:b7:40:c3:cd:2c:71:3d:62:9a:0b:4a:2c: b2:ff:38:59:4a:87:8d:66:0a:75:b6:59:71:b6:1d:82:67:3c: 58:c5:3d:16:e2:aa:a1:5e:53:48:d7:99:54:85:d5:ab:21:6f: f1:63:fb:cc:96:b3:fd:9f:71:c4:92:4d:1f:b9:24:04:b0:e0: b3:e5:b8:a2:c3:f3:d0:3d:f5:d9:a3:1e:21:ca:9c:72:25:cc: 32:42:45:63:70:49:c7:15:ca:86:c9:48:aa:16:2d:ec:58:20: 9d:f3:fb:03:6a:aa:ec:82:f8:08:e7:00:a5:1f:3b:0d:71:2b: 9b:d3:45:b2:cb:1f:8b:a7:7c:c1:33:89:02:f2:1a:a3:be:8c: a5:b6:30:50:3d:1c:70:a8:5f:6c:c5:90:9b:dc:0c:61:fb:ec: c6:8f:a4:da:ed:f7:d5:f3:4d:ec:c6:ac:a0:be:f4:6d:ed:29: 00:e9:c7:1c:e5:40:1d:13:80:39:03:ef:d5:aa:0b:9b:7f:2e: b0:8d:c8:80:50:fc:fe:aa:56:af:c5:db:95:2b:57:4a:40:b1: b6:a2:fc:5b -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZt3WMGHjn0QTYLsCyAU7FYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDY0MjZmNDgzYzM2YWFjZGE4NzMyMzI0YWI4OGFkNTgwMGM5YTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxBtug4Y3xcDJtoqAgiN9/JLXdn/ II909KuLdHr+a/93fanweUtRBleYutDPoMF/GFq2aBK2Fe+8RoCWoXPW6JyD/PaG 45C5NAohbsY2dNOB2+XnS0BrsVg1ND4vK6zxS6fUfTKuMB5BOsRJE1XyV28e/ayg eWU0VFMeygLJAzkrDBKuIjre6byeIf8kRqKoOFCavgdoafJS25kzfcSncoQDUfFD XeQYKDrZWOIgmVhgTJoZEusCyT1dpsE/oF9ht538byi42XyhFqCkGEUMWmWg+RV8 TQX1ljTtFBDtIKphzVYm7KM1viQ6swWE7pAucgNY9/MWVdWuIRxzTBZU3wIDAQAB o4ICnjCCApowHQYDVR0OBBYEFJBkJvSDw2qs2ocyMkq4itWADJotMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzLzk0ZDQ0 MS1kOTg3LTQwNjItODljMS05NGM1YWQxN2E3YTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvOTRkNDQx LWQ5ODctNDA2Mi04OWMxLTk0YzVhZDE3YTdhMC8xL2tHUW05SVBEYXF6YWh6SXlT cmlLMVlBTW1pMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF BwEHAQH/BCowKDAmBAIAATAgAwQCwTlUAwQCwTmEAwQDwgQAMAwDBAHCBAoDBAHC BAwwDQYJKoZIhvcNAQELBQADggEBABA7iLbf4hkvgWF1fwV9ieK5CvJP+bvu1mr5 HoDsy97gg02RtAkZbj/XZbdAw80scT1imgtKLLL/OFlKh41mCnW2WXG2HYJnPFjF PRbiqqFeU0jXmVSF1ashb/Fj+8yWs/2fccSSTR+5JASw4LPluKLD89A99dmjHiHK nHIlzDJCRWNwSccVyobJSKoWLexYIJ3z+wNqquyC+AjnAKUfOw1xK5vTRbLLH4un fMEziQLyGqO+jKW2MFA9HHCoX2zFkJvcDGH77MaPpNrt99XzTezGrKC+9G3tKQDp xxzlQB0TgDkD79WqC5t/LrCNyIBQ/P6qVq/F25UrV0pAsbai/Fs= -----END CERTIFICATE-----Generated at Thu Jan 8 23:59:42 2026 by rpki-client