This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q0U2TkncOhW-_yacOjKzwFQci2Y.cer File: q0U2TkncOhW-_yacOjKzwFQci2Y.cer (raw, json) Hash identifier: 7iTvKtu2uogld8L9387IjprYQJ/jBeR38JfpEgVDeUU= Subject key identifier: AB:45:36:4E:49:DC:3A:15:BE:FF:26:9C:3A:32:B3:C0:54:1C:8B:66 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7835478ACA37057CDF5BEE0820CF8D31 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56513 IP: 91.224.172.0/23 IP: 2001:67c:548::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:47:8a:ca:37:05:7c:df:5b:ee:08:20:cf:8d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab45364e49dc3a15beff269c3a32b3c0541c8b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9d:5d:04:d1:32:51:5a:68:71:7b:9b:b2:0c: e6:bc:54:08:de:15:fc:c4:d2:d0:10:de:97:e2:39: 91:1f:8e:a6:3d:36:60:b2:73:bf:1d:6c:59:a2:04: 5a:30:c4:8b:10:5d:c7:be:ed:13:0b:8a:83:9d:d0: f7:3d:2c:fc:16:b2:fa:76:3f:1b:ca:9d:ae:77:68: 44:48:58:16:2a:83:18:96:62:93:0e:57:94:16:8c: 61:92:73:9f:93:a6:59:9c:d3:af:67:81:86:9e:40: f2:d4:ee:8f:3c:ec:42:51:0f:48:ee:06:1d:03:be: 14:3d:e1:d4:56:79:91:56:5f:38:28:54:6f:5c:08: 18:9e:1b:a7:9f:0c:f1:cd:4b:b7:bb:7d:02:36:2a: ba:78:d2:c8:a5:34:20:89:e1:4a:96:f3:ce:00:d7: 82:b9:9f:af:25:be:bd:73:03:e6:63:12:d3:64:6d: bd:cc:94:09:9e:d1:05:43:4d:9a:2d:29:c6:3c:b3: 19:da:7c:e4:4d:62:1d:a0:d6:7c:9f:9f:fb:f0:0b: 7e:3b:4e:09:31:f2:67:51:c0:51:eb:7e:1d:b8:8e: 68:ec:0a:1f:3c:0e:7f:90:e8:c8:19:53:8e:06:e1: 3b:61:c5:2a:e5:8d:5d:1c:60:ee:10:68:ee:74:29: 77:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:45:36:4E:49:DC:3A:15:BE:FF:26:9C:3A:32:B3:C0:54:1C:8B:66 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.172.0/23 IPv6: 2001:67c:548::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56513 Signature Algorithm: sha256WithRSAEncryption 00:b6:4b:1c:e6:fb:61:79:0d:7f:b1:c4:0b:7c:34:b2:3c:d0: e9:c4:01:5e:24:26:5c:b5:96:2d:9e:9f:b4:e3:8f:e0:3e:e3: 29:e8:a8:2e:94:ea:d5:d8:83:7e:a7:7b:df:ff:06:9b:57:ea: dd:4e:0b:96:62:3d:92:ab:eb:f4:97:28:d0:e5:8e:4c:e9:12: 6e:67:e5:3f:e2:07:78:fa:c4:e9:6c:dd:e1:b9:08:28:6b:8c: 5f:c4:f2:21:7f:a2:69:e6:0e:60:2a:f0:74:67:73:b9:e7:1e: ab:9d:0e:a1:fc:98:90:ea:33:7e:c3:f9:38:d6:9d:5f:ee:f1: 12:21:de:09:40:fa:5f:ec:05:ad:0f:44:c3:87:91:55:8f:ba: 80:e3:0f:f5:85:9b:a5:01:54:34:46:d6:2c:75:ff:16:11:b5: 5a:dd:54:b9:11:de:5f:ca:2d:3e:b9:dc:36:78:81:96:f0:83: b0:91:43:f5:ab:64:01:0c:ee:38:9b:68:c4:09:5c:68:15:db: a7:9d:19:b5:27:72:a4:9b:2b:44:56:81:2f:c2:19:e9:16:52: a1:f1:b4:59:9a:d2:b2:3d:9d:8e:9e:3f:de:52:03:a1:45:d0: 5a:dd:39:74:c8:54:82:2f:20:4d:fb:ce:10:f3:1f:99:a6:63: c1:0b:27:5a -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt4NUeKyjcFfN9b7gggz40xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjQ1MzY0ZTQ5ZGMzYTE1YmVmZjI2OWMzYTMyYjNjMDU0MWM4YjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp1dBNEyUVpocXubsgzmvFQI3hX8 xNLQEN6X4jmRH46mPTZgsnO/HWxZogRaMMSLEF3Hvu0TC4qDndD3PSz8FrL6dj8b yp2ud2hESFgWKoMYlmKTDleUFoxhknOfk6ZZnNOvZ4GGnkDy1O6PPOxCUQ9I7gYd A74UPeHUVnmRVl84KFRvXAgYnhunnwzxzUu3u30CNiq6eNLIpTQgieFKlvPOANeC uZ+vJb69cwPmYxLTZG29zJQJntEFQ02aLSnGPLMZ2nzkTWIdoNZ8n5/78At+O04J MfJnUcBR634duI5o7AofPA5/kOjIGVOOBuE7YcUq5Y1dHGDuEGjudCl3nQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFKtFNk5J3DoVvv8mnDoys8BUHItmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3LzVhYWYy NS05NzQ4LTQ1OTItYTQ5Ny1mOGJkMjUwNDU0ZWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvNWFhZjI1 LTk3NDgtNDU5Mi1hNDk3LWY4YmQyNTA0NTRlYi8xL3EwVTJUa25jT2hXLV95YWNP akt6d0ZRY2kyWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBW+CsMA8EAgACMAkDBwAgAQZ8BUgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDANzBMA0GCSqGSIb3DQEBCwUAA4IBAQAAtksc5vth eQ1/scQLfDSyPNDpxAFeJCZctZYtnp+044/gPuMp6KgulOrV2IN+p3vf/wabV+rd TguWYj2Sq+v0lyjQ5Y5M6RJuZ+U/4gd4+sTpbN3huQgoa4xfxPIhf6Jp5g5gKvB0 Z3O55x6rnQ6h/JiQ6jN+w/k41p1f7vESId4JQPpf7AWtD0TDh5FVj7qA4w/1hZul AVQ0RtYsdf8WEbVa3VS5Ed5fyi0+udw2eIGW8IOwkUP1q2QBDO44m2jECVxoFdun nRm1J3KkmytEVoEvwhnpFlKh8bRZmtKyPZ2Onj/eUgOhRdBa3Tl0yFSCLyBN+84Q 8x+ZpmPBCyda -----END CERTIFICATE-----Generated at Sun Jan 11 17:51:24 2026 by rpki-client