This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer File: qC-5s0GMRYzbxs_WhFFL4krQw8k.cer (raw, json) Hash identifier: 9owSuMXOncONQtqasG9/MXxUooK8vLSW8JX3TFRUSYE= Subject key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6A98D65C0664875A6B3B68674FB80 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 64428 IP: 185.165.40.0/22 IP: 2a0b:d8c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a9:8d:65:c0:66:48:75:a6:b3:b6:86:74:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:80:bc:d2:6f:66:12:27:2b:6d:ad:c5:2b:e1: 0b:8d:94:dd:77:a0:ce:39:4e:f8:fd:46:78:fd:f0: 29:70:9b:2b:1d:f2:7f:95:7b:f4:73:68:92:c3:1a: 25:1e:79:62:ec:3e:30:de:17:d6:3c:f0:92:e2:9f: c8:e1:00:6d:9b:db:42:16:f3:01:aa:56:05:e4:92: 67:a7:b7:b1:ec:75:b8:94:aa:b3:8a:aa:02:3b:28: 9f:ac:51:ca:65:e3:f9:f5:4a:82:60:fa:ca:c7:88: d4:15:f1:4a:54:41:24:af:02:d1:ab:8a:4b:ce:2d: ca:2a:86:c6:d1:77:75:0e:be:82:1a:77:56:0b:76: b4:94:be:63:f9:7c:cb:f7:aa:73:f5:22:dc:96:4e: 32:b4:24:27:9c:23:e5:29:5c:99:a5:fa:ec:55:fd: 82:27:6c:56:90:5b:77:60:eb:8b:17:61:86:6f:c8: 14:17:da:00:19:e4:5a:2a:6b:40:4b:e4:81:46:0b: 9a:0d:7b:11:96:36:a1:db:22:ac:dc:51:a2:9e:c2: bd:7a:fd:b3:35:a2:c0:9b:ba:7c:10:44:25:84:dd: 4e:56:0e:7f:7f:13:3d:9a:f6:02:98:7f:e0:67:d8: ef:ad:e4:8c:30:78:6c:3e:e4:0d:0f:8a:4e:fd:bf: 62:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.40.0/22 IPv6: 2a0b:d8c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64428 Signature Algorithm: sha256WithRSAEncryption 77:0f:ff:fe:91:75:9f:6e:7e:7a:47:57:fc:fa:29:4b:9e:fd: b9:e1:04:bc:5e:45:2a:93:e1:6e:fa:f2:2f:09:08:45:bc:29: d7:0d:ee:56:42:d9:b4:d4:f2:bd:4e:9a:0a:33:a9:54:60:13: 3e:67:0e:e8:55:05:a0:55:b0:58:5d:9f:c1:e2:b1:24:e6:ad: d6:bc:f0:30:88:24:bd:31:d2:cc:3d:4a:2a:2f:1e:14:21:a2: 95:f7:c1:92:34:8b:7b:c4:62:15:05:ab:8c:2a:af:0c:ac:76: 45:79:9a:f8:00:fe:72:42:3f:75:8a:df:04:e7:f2:41:80:2d: b8:56:6b:db:40:0e:7d:7f:f0:de:6b:75:01:62:c7:27:9e:9f: 38:ad:f5:c2:a0:1d:92:78:0d:76:36:19:6b:0d:a2:79:2d:e7: ba:6b:35:32:e4:e0:9b:5f:c9:7e:85:1a:2e:43:e2:38:a5:62: d1:58:79:74:8e:53:81:db:6f:5f:84:4a:48:06:81:6e:d2:67: eb:cb:15:86:d6:53:14:f0:15:08:16:e9:2c:f6:d8:58:b3:fc: 2f:30:7c:69:52:e8:3a:93:22:37:8c:f5:ce:ec:80:42:9f:f9: d0:5b:a5:d4:cd:d4:49:29:48:91:58:6e:f2:bb:9d:a4:0e:aa: 72:c4:47:40 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pqmNZcBmSHWms7aGdPuAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODJmYjliMzQxOGM0NThjZGJjNmNmZDY4NDUxNGJlMjRhZDBjM2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4C80m9mEicrba3FK+ELjZTdd6DO OU74/UZ4/fApcJsrHfJ/lXv0c2iSwxolHnli7D4w3hfWPPCS4p/I4QBtm9tCFvMB qlYF5JJnp7ex7HW4lKqziqoCOyifrFHKZeP59UqCYPrKx4jUFfFKVEEkrwLRq4pL zi3KKobG0Xd1Dr6CGndWC3a0lL5j+XzL96pz9SLclk4ytCQnnCPlKVyZpfrsVf2C J2xWkFt3YOuLF2GGb8gUF9oAGeRaKmtAS+SBRguaDXsRljah2yKs3FGinsK9ev2z NaLAm7p8EEQlhN1OVg5/fxM9mvYCmH/gZ9jvreSMMHhsPuQND4pO/b9i0QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKgvubNBjEWM28bP1oRRS+JK0MPJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiLzhiN2Zl OS01ZGYyLTQ3M2UtODAxOC1iMjYzNDFkMzhjM2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvOGI3ZmU5 LTVkZjItNDczZS04MDE4LWIyNjM0MWQzOGMzZi8xL3FDLTVzMEdNUll6YnhzX1do RkZMNGtyUXc4ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuaUoMA0EAgACMAcDBQMqC9jAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwD7rDANBgkqhkiG9w0BAQsFAAOCAQEAdw///pF1n25+ ekdX/PopS579ueEEvF5FKpPhbvryLwkIRbwp1w3uVkLZtNTyvU6aCjOpVGATPmcO 6FUFoFWwWF2fweKxJOat1rzwMIgkvTHSzD1KKi8eFCGilffBkjSLe8RiFQWrjCqv DKx2RXma+AD+ckI/dYrfBOfyQYAtuFZr20AOfX/w3mt1AWLHJ56fOK31wqAdkngN djYZaw2ieS3nums1MuTgm1/JfoUaLkPiOKVi0Vh5dI5TgdtvX4RKSAaBbtJn68sV htZTFPAVCBbpLPbYWLP8LzB8aVLoOpMiN4z1zuyAQp/50Ful1M3USSlIkVhu8rud pA6qcsRHQA== -----END CERTIFICATE-----Generated at Mon Jan 12 13:43:50 2026 by rpki-client