This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer File: q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer (raw, json) Hash identifier: 0sL6ASLAjhv41aDkTxiKG4goiY1L5njsIqsb4rI4m40= Subject key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA7260B4334F35A6995B1F1480D6E75 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34731 IP: 80.76.16.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:26:0b:43:34:f3:5a:69:95:b1:f1:48:0d:6e:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a0:e7:57:a6:03:2b:70:bc:c1:e7:14:4c:11: 55:e4:bc:4b:be:2f:a4:ed:6f:39:0f:62:5e:08:05: 62:76:d0:ca:37:ca:ad:29:40:1b:39:46:f9:ce:0d: 81:d1:a8:30:6e:34:6d:53:22:27:a1:28:15:57:40: c0:7f:48:5b:84:0e:c0:2f:23:e5:58:78:e3:d0:56: 5b:85:06:cb:b7:a6:c6:84:d5:de:e7:1c:45:78:84: 65:40:94:91:08:c9:90:19:64:7a:62:ab:05:87:65: 10:fd:c8:c3:df:41:e0:80:dd:45:78:c6:60:d0:4f: da:14:86:07:e1:32:41:b3:cf:c9:55:23:7f:b9:9f: df:3f:66:51:5c:ec:b9:b7:b1:2d:d6:13:16:3e:25: 72:af:40:05:fd:22:f4:00:40:73:f3:d2:bb:51:74: 75:51:a1:af:0f:5f:64:c9:05:3b:86:c9:39:7b:25: 7b:e6:57:7b:52:9e:11:4e:e6:78:e0:5d:01:42:42: 34:cb:89:92:2f:49:38:1d:bc:53:c4:51:f6:c5:53: 08:d9:ea:6c:dc:08:64:fb:43:4b:b6:b5:1d:fe:c5: 8a:52:a8:f9:99:af:f6:cc:f3:ef:23:17:07:da:67: eb:d9:0b:91:36:cf:a0:bf:ab:a2:c8:eb:90:88:20: ff:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.76.16.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34731 Signature Algorithm: sha256WithRSAEncryption 6a:24:5c:d2:ad:a4:6b:e8:a2:c7:57:1a:86:2c:d5:73:10:c7: 95:b6:8d:c7:8a:5b:67:72:4d:9c:0b:4b:f7:79:2c:a8:ea:97: 8c:ef:af:1a:41:b3:f0:a0:f0:c1:9e:63:db:48:b8:18:11:ec: cf:04:71:a0:5b:7f:76:ab:4f:5b:1d:ab:b6:a5:64:4c:f1:fa: 04:2c:7e:05:16:76:d6:a6:a5:59:ce:8a:07:22:fd:c1:d1:e1: ec:8e:27:e2:7e:1e:f0:1d:d7:d7:f1:2b:29:29:c9:0b:a9:6c: 59:ec:a9:a1:ae:a9:41:16:8c:42:30:7d:43:4a:45:9a:43:53: 88:e6:7f:14:6c:b5:ee:25:ea:7c:97:55:53:ae:60:3c:7b:b1: 5a:0e:34:8a:b8:ec:08:93:8a:89:e6:2a:3d:87:22:0b:43:78: 81:2a:36:4b:4e:52:6c:b5:ec:02:5e:5a:19:17:5f:32:c9:73: df:c7:23:59:7d:4e:27:b1:29:48:8c:da:67:30:ce:95:85:22: 9c:35:b0:94:51:e8:6f:7f:25:d6:65:bd:85:a6:2a:78:89:8f: aa:4c:ad:b9:ea:f8:4c:5e:a9:54:44:08:32:3e:18:c9:6e:8a: 4f:8c:df:0f:16:f0:1f:e2:9e:4a:66:41:bb:ba:a0:dd:b9:d5: fd:cf:54:98 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pyYLQzTzWmmVsfFIDW51MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjUzZWMwZTlhMDUzY2JiZTBlOWEwNzFiY2FkOWU2OGE5OWNjZmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaDnV6YDK3C8wecUTBFV5LxLvi+k 7W85D2JeCAVidtDKN8qtKUAbOUb5zg2B0agwbjRtUyInoSgVV0DAf0hbhA7ALyPl WHjj0FZbhQbLt6bGhNXe5xxFeIRlQJSRCMmQGWR6YqsFh2UQ/cjD30HggN1FeMZg 0E/aFIYH4TJBs8/JVSN/uZ/fP2ZRXOy5t7Et1hMWPiVyr0AF/SL0AEBz89K7UXR1 UaGvD19kyQU7hsk5eyV75ld7Up4RTuZ44F0BQkI0y4mSL0k4HbxTxFH2xVMI2eps 3Ahk+0NLtrUd/sWKUqj5ma/2zPPvIxcH2mfr2QuRNs+gv6uiyOuQiCD/nQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKtT7A6aBTy74OmgcbytnmipnM+oMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3LzYxZjM5 OC05NGY2LTQ0NjgtODVmMy02M2ZjYWFjMzFjYTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvNjFmMzk4 LTk0ZjYtNDQ2OC04NWYzLTYzZmNhYWMzMWNhMy8xL3ExUHNEcG9GUEx2ZzZhQnh2 SzJlYUttY3o2Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQEUEwQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCHqzANBgkqhkiG9w0BAQsFAAOCAQEAaiRc0q2ka+iix1cahizVcxDHlbaNx4pb Z3JNnAtL93ksqOqXjO+vGkGz8KDwwZ5j20i4GBHszwRxoFt/dqtPWx2rtqVkTPH6 BCx+BRZ21qalWc6KByL9wdHh7I4n4n4e8B3X1/ErKSnJC6lsWeypoa6pQRaMQjB9 Q0pFmkNTiOZ/FGy17iXqfJdVU65gPHuxWg40irjsCJOKieYqPYciC0N4gSo2S05S bLXsAl5aGRdfMslz38cjWX1OJ7EpSIzaZzDOlYUinDWwlFHob38l1mW9haYqeImP qkytuer4TF6pVEQIMj4YyW6KT4zfDxbwH+KeSmZBu7qg3bnV/c9UmA== -----END CERTIFICATE-----Generated at Sat Jan 3 02:32:16 2026 by rpki-client