This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer File: qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer (raw, json) Hash identifier: mPV7cSo0GgCPgz4bkNEmLLXnLHl/kGsTkI56nW5VGvg= Subject key identifier: A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F81949B3F6DD564A788A7963AC05F48 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198491 IP: 195.85.208.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:94:9b:3f:6d:d5:64:a7:88:a7:96:3a:c0:5f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a83084a09eddcf556d19b3b7355c9defe0a278f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:16:90:29:55:b2:27:0f:5a:79:74:f1:c4:c9: 6f:51:c1:24:64:b9:65:d1:b4:a8:1f:4a:c1:1b:54: 67:1a:f9:d0:55:16:b1:f0:b0:50:36:e0:ae:38:75: 37:35:e6:04:9e:3c:72:45:ef:af:30:47:a5:e0:f9: 86:e2:b6:76:2f:13:5d:89:f5:58:5f:f9:6e:17:e8: 11:af:ea:dc:d9:00:36:9b:7c:72:05:97:13:4a:12: f3:0f:34:2d:c4:b8:80:bc:98:59:ca:30:4b:b2:e2: 0b:d5:f6:f7:98:86:7c:71:63:ac:89:44:04:f0:1b: 3e:31:8f:3c:8a:08:60:97:fe:06:e8:08:b6:be:ca: 4b:29:76:a7:5c:67:80:59:7c:19:de:0f:c4:a2:66: ec:99:5e:8c:d8:69:cd:9c:d5:1e:a1:06:f0:3b:54: e5:f7:ba:61:1d:f6:6a:64:7b:a8:05:20:1f:01:7d: f9:23:b6:64:66:d2:a3:f7:ba:eb:44:49:8a:35:3b: 8c:b7:4a:fb:f3:a7:98:0f:ea:f8:12:2d:97:42:44: 58:79:81:12:a4:0c:cb:4d:45:74:f5:f3:3c:f9:c0: 87:90:ba:dc:19:5d:ae:60:c7:39:a5:a7:f0:83:e7: f5:91:d8:60:a9:b4:1d:56:f7:26:26:e5:22:d3:d4: d1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.85.208.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198491 Signature Algorithm: sha256WithRSAEncryption 73:1a:2f:f7:b4:50:bc:c9:ed:4f:59:50:48:55:83:59:e1:01: 43:21:5d:bb:e1:2b:26:b6:0d:31:16:55:a2:36:4c:b1:9a:c1: e4:80:33:a8:89:12:91:09:e7:68:9c:c2:73:df:bc:77:b9:44: 0c:11:9f:1e:04:1d:40:53:0f:99:75:7d:51:f0:bd:0f:2f:11: 18:e0:0e:3c:6c:9e:b0:e7:8b:cd:a8:51:58:62:68:ba:59:94: 28:35:13:66:0e:d2:7c:e3:29:a3:e9:0e:75:1d:00:ad:20:7d: 4d:94:60:12:da:93:85:e0:42:a7:2b:6d:93:08:9f:d9:b7:a4: 72:d6:d6:92:68:78:94:fb:81:23:3c:17:23:22:e1:04:56:5a: 10:3d:e6:4b:ac:5a:48:b7:7e:fa:c2:f1:04:e0:29:14:49:86: e7:5e:47:9c:cf:fb:95:fc:39:32:6f:c8:2a:98:99:59:a7:ca: c1:74:24:56:51:ab:77:03:e2:05:96:a3:24:f8:7b:03:69:cf: 6e:b4:4e:22:a7:48:ce:6c:ec:59:54:57:0f:02:14:f7:8e:6e: b3:e0:8e:08:64:3c:42:05:5e:04:55:03:07:c9:90:1d:90:92: c5:7c:0e:56:db:d1:e5:0b:63:05:21:e1:e8:74:b8:3e:10:fd: 29:f7:d5:7f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/gZSbP23VZKeIp5Y6wF9IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODMwODRhMDllZGRjZjU1NmQxOWIzYjczNTVjOWRlZmUwYTI3OGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBaQKVWyJw9aeXTxxMlvUcEkZLll 0bSoH0rBG1RnGvnQVRax8LBQNuCuOHU3NeYEnjxyRe+vMEel4PmG4rZ2LxNdifVY X/luF+gRr+rc2QA2m3xyBZcTShLzDzQtxLiAvJhZyjBLsuIL1fb3mIZ8cWOsiUQE 8Bs+MY88ighgl/4G6Ai2vspLKXanXGeAWXwZ3g/EombsmV6M2GnNnNUeoQbwO1Tl 97phHfZqZHuoBSAfAX35I7ZkZtKj97rrREmKNTuMt0r786eYD+r4Ei2XQkRYeYES pAzLTUV09fM8+cCHkLrcGV2uYMc5pafwg+f1kdhgqbQdVvcmJuUi09TRTwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKgwhKCe3c9VbRmztzVcne/gonj1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlLzAyMTdl Ni1kMmMzLTQ2ZjgtOGU0OS0zZjE0MzlhMTVmMWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvMDIxN2U2 LWQyYzMtNDZmOC04ZTQ5LTNmMTQzOWExNWYxYi8xL3FEQ0VvSjdkejFWdEdiTzNO VnlkNy1DaWVQVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw1XQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMHWzANBgkqhkiG9w0BAQsFAAOCAQEAcxov97RQvMntT1lQSFWDWeEBQyFdu+Er JrYNMRZVojZMsZrB5IAzqIkSkQnnaJzCc9+8d7lEDBGfHgQdQFMPmXV9UfC9Dy8R GOAOPGyesOeLzahRWGJoulmUKDUTZg7SfOMpo+kOdR0ArSB9TZRgEtqTheBCpytt kwif2bekctbWkmh4lPuBIzwXIyLhBFZaED3mS6xaSLd++sLxBOApFEmG515HnM/7 lfw5Mm/IKpiZWafKwXQkVlGrdwPiBZajJPh7A2nPbrROIqdIzmzsWVRXDwIU945u s+COCGQ8QgVeBFUDB8mQHZCSxXwOVtvR5QtjBSHh6HS4PhD9KffVfw== -----END CERTIFICATE-----Generated at Sat Jan 3 02:33:35 2026 by rpki-client