This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer File: qXJG_EMZM_Cyggztllx4URgLFe4.cer (raw, json) Hash identifier: HpfmfS4iGrSHb4LN6WxXX/deNjYdfhrnPWkiQeuxEfg= Subject key identifier: A9:72:46:FC:43:19:33:F0:B2:82:0C:ED:96:5C:78:51:18:0B:15:EE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA68121409072BA939F4376B53CA1B0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208968 IP: 45.13.20.0/22 IP: 85.190.224.0/22 IP: 185.35.132.0/22 IP: 185.160.100.0/22 IP: 185.170.168.0/22 IP: 185.172.40.0/22 IP: 185.198.220.0/22 IP: 185.211.144.0/22 IP: 185.233.240.0/22 IP: 2a0e:ab00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:81:21:40:90:72:ba:93:9f:43:76:b5:3c:a1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a97246fc431933f0b2820ced965c7851180b15ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e2:0a:a6:5b:4d:fd:80:61:5f:19:98:01:09: 38:ec:80:2d:d7:c4:68:40:b1:73:9d:46:de:1e:54: e8:64:b5:65:3a:7f:92:8d:1e:f2:b6:cb:87:20:12: ff:c2:f9:f1:a9:42:9c:bd:fe:82:e9:a8:66:35:62: 88:0b:ac:e0:e8:04:a7:41:55:3a:d6:27:8e:7f:d2: 75:58:38:d3:32:dd:69:2d:12:81:70:db:76:79:70: 68:bf:35:6d:1f:4f:c8:cd:80:da:a3:54:c8:2a:92: 6e:9b:eb:ae:59:27:e5:5a:fa:2b:29:08:64:5d:b1: 74:fc:f1:98:2f:9d:1a:64:bc:93:93:44:9b:55:da: 10:a6:7a:c4:29:cd:40:bf:21:81:0c:eb:aa:92:b8: 4f:71:f7:5a:a3:7b:ca:4f:56:df:56:43:54:01:0c: 90:23:3d:25:c1:3b:45:83:1f:c3:e0:46:66:cd:fc: a9:bb:c2:33:fe:54:49:87:59:3e:0f:bd:8c:51:0f: a3:b8:5a:e6:b8:ca:35:d5:72:b6:17:51:1c:70:26: 12:99:33:a5:f1:a9:8d:cd:71:ed:c6:57:8f:fc:7e: b5:10:ea:5e:b6:fc:2a:f7:18:30:10:35:a7:08:1e: 77:7d:96:5a:8a:12:9a:34:16:fa:2f:80:65:49:ea: a8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:72:46:FC:43:19:33:F0:B2:82:0C:ED:96:5C:78:51:18:0B:15:EE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.20.0/22 85.190.224.0/22 185.35.132.0/22 185.160.100.0/22 185.170.168.0/22 185.172.40.0/22 185.198.220.0/22 185.211.144.0/22 185.233.240.0/22 IPv6: 2a0e:ab00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208968 Signature Algorithm: sha256WithRSAEncryption 42:54:7c:6c:8a:cb:1c:c8:54:71:14:b6:c3:1b:88:c5:05:ff: dc:02:b0:fb:04:fb:da:3b:38:58:38:d1:a3:a6:05:95:72:10: 3c:06:d7:90:ca:fc:ae:28:b1:ef:1c:78:90:9d:32:18:b5:11: b4:1a:78:15:56:14:35:81:ad:48:44:03:18:3f:47:4b:8f:c0: d6:d5:92:89:b2:40:34:82:84:6f:f0:d3:c7:f1:9c:87:97:ea: c4:40:03:a6:48:05:18:59:92:35:a9:c6:8b:2b:f8:a6:ba:f7: 79:a7:69:92:e4:9c:c8:68:e9:ec:ac:0d:0c:1e:78:69:25:d7: e0:44:50:f0:bd:1b:13:ff:64:ae:96:13:7b:7a:20:c9:8f:0e: 7e:22:ab:1e:09:d2:36:f1:ae:86:3d:19:c5:6b:3a:19:29:7b: 8e:25:26:73:49:7d:8c:fa:ff:08:1e:d7:5a:d8:75:6c:c6:c5: fb:92:ba:0c:88:e2:8e:b2:d6:35:0e:64:5f:0c:fa:d7:52:7f: 67:a0:a8:b4:31:a5:6c:5e:06:aa:fd:ee:60:57:c0:cb:d9:57: c1:22:96:05:f0:f2:e0:93:5e:39:e8:33:3d:f0:27:91:39:16: b4:4f:3f:47:68:35:69:9d:06:bb:d6:72:4f:e7:1c:3f:82:37: 0b:f4:33:7f -----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgISAZt+poEhQJByupOfQ3a1PKGwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTcyNDZmYzQzMTkzM2YwYjI4MjBjZWQ5NjVjNzg1MTE4MGIxNWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+IKpltN/YBhXxmYAQk47IAt18Ro QLFznUbeHlToZLVlOn+SjR7ytsuHIBL/wvnxqUKcvf6C6ahmNWKIC6zg6ASnQVU6 1ieOf9J1WDjTMt1pLRKBcNt2eXBovzVtH0/IzYDao1TIKpJum+uuWSflWvorKQhk XbF0/PGYL50aZLyTk0SbVdoQpnrEKc1AvyGBDOuqkrhPcfdao3vKT1bfVkNUAQyQ Iz0lwTtFgx/D4EZmzfypu8Iz/lRJh1k+D72MUQ+juFrmuMo11XK2F1EccCYSmTOl 8amNzXHtxleP/H61EOpetvwq9xgwEDWnCB53fZZaihKaNBb6L4BlSeqoSQIDAQAB o4IC3zCCAtswHQYDVR0OBBYEFKlyRvxDGTPwsoIM7ZZceFEYCxXuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3Lzc4NjMx OS1mZjVmLTQxMmYtYWE3NC1jYWFkNTE2OTRlOTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvNzg2MzE5 LWZmNWYtNDEyZi1hYTc0LWNhYWQ1MTY5NGU5Ny8xL3FYSkdfRU1aTV9DeWdnenRs bHg0VVJnTEZlNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTA8BAIAATA2AwQCLQ0UAwQCVb7gAwQCuSOEAwQCuaBkAwQCuaqo AwQCuawoAwQCucbcAwQCudOQAwQCuenwMA0EAgACMAcDBQMqDqsAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMwSDANBgkqhkiG9w0BAQsFAAOCAQEAQlR8bIrLHMhU cRS2wxuIxQX/3AKw+wT72js4WDjRo6YFlXIQPAbXkMr8riix7xx4kJ0yGLURtBp4 FVYUNYGtSEQDGD9HS4/A1tWSibJANIKEb/DTx/Gch5fqxEADpkgFGFmSNanGiyv4 prr3eadpkuScyGjp7KwNDB54aSXX4ERQ8L0bE/9krpYTe3ogyY8OfiKrHgnSNvGu hj0ZxWs6GSl7jiUmc0l9jPr/CB7XWth1bMbF+5K6DIjijrLWNQ5kXwz611J/Z6Co tDGlbF4Gqv3uYFfAy9lXwSKWBfDy4JNeOegzPfAnkTkWtE8/R2g1aZ0Gu9ZyT+cc P4I3C/Qzfw== -----END CERTIFICATE-----Generated at Fri Jan 9 08:01:00 2026 by rpki-client