This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer File: qZtHOUN7VflE0iKdFrbm-lmRloc.cer (raw, json) Hash identifier: 4hy7Of+LNOtyzchnuRzBmYRvx5Ypu0+VEvKqjn7JSkA= Subject key identifier: A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A331B15A2D77D17639AD2D4A297F83 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209912 IP: 37.44.232.0/22 IP: 2a09:c200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:31:b1:5a:2d:77:d1:76:39:ad:2d:4a:29:7f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a99b4739437b55f944d2229d16b6e6fa59919687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:47:f3:1d:2e:a1:b6:be:a1:07:17:de:79:bd: 54:86:f4:c6:68:1e:c8:9b:80:8e:52:81:f2:dd:12: d4:1c:9b:d0:90:6b:f1:36:57:9d:77:d1:53:ff:8b: 65:63:99:f8:da:39:7a:8b:b9:c2:c5:5d:85:f0:31: f6:fb:ef:47:2f:92:70:28:56:27:ad:fd:73:e5:9a: 32:f5:3e:2e:a7:f7:cc:cf:16:93:f8:50:df:4a:6c: 0e:17:7e:a5:06:c2:3b:35:92:a0:60:a9:9e:8a:ac: ec:9e:97:6d:9c:74:26:19:d0:4a:08:b5:13:98:01: ad:79:88:f5:ca:02:da:54:5d:d9:eb:59:68:fc:65: 72:46:f1:13:6a:e5:8b:58:24:56:e3:55:80:ad:eb: 40:a7:ea:15:92:fc:49:0f:fa:59:f4:00:91:2f:29: 51:b4:29:93:f9:78:7e:17:e9:5b:63:a4:ef:0a:44: ac:68:81:41:9d:c4:66:80:0e:db:e7:85:27:e3:22: 56:be:0a:83:20:cd:be:a3:07:c4:2e:b9:6d:58:38: ba:70:23:ef:06:04:1a:98:43:7f:99:1f:69:f7:6d: b1:21:50:4f:70:ce:6b:62:fa:09:87:33:5f:11:47: 2e:d1:ac:af:fe:9f:32:17:76:8f:29:9b:d8:d6:03: bc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.232.0/22 IPv6: 2a09:c200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209912 Signature Algorithm: sha256WithRSAEncryption a4:4e:01:62:b8:59:2e:b9:0b:72:08:07:a9:57:9a:48:6c:84: 6f:1c:31:f9:02:e2:17:db:ae:42:11:7d:77:93:85:6e:b4:9c: ef:7f:bf:47:60:0e:33:7a:32:d4:92:7e:cd:9e:11:90:59:97: 8d:5c:65:1c:bf:16:05:ca:9c:63:2e:b2:0c:65:c4:25:39:50: 38:3f:bd:04:6a:4d:ea:ea:1a:d5:28:18:04:51:d3:da:b3:11: 86:dc:88:07:61:c1:fb:cb:17:8f:8e:46:d3:7c:a4:7f:43:6f: e5:25:cb:75:0b:53:f7:e4:9c:58:2b:74:60:3c:74:ca:d2:73: 4a:d4:54:5a:26:8c:a1:8c:6d:e2:13:07:40:b7:e8:5b:f5:68: 80:85:b1:ee:b6:c2:11:04:21:5e:be:78:36:fc:ff:dc:a3:d6: fd:63:12:40:94:f9:41:ac:7a:46:c0:22:d9:39:b3:3a:7c:83: 66:25:8c:9a:b2:5a:76:06:7c:f3:ab:1c:7b:f1:d5:b5:61:28: 7a:fe:96:e4:5a:cd:a5:14:a2:4a:7d:cf:49:bc:8d:ca:a9:a3: 2e:39:be:a0:14:28:35:c9:19:ec:4e:90:c9:0d:ce:dc:01:35: 61:1a:82:dc:7a:36:5b:f0:5b:30:da:c4:d1:95:f8:73:67:29: 5e:f0:bd:20 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4ozGxWi130XY5rS1KKX+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTliNDczOTQzN2I1NWY5NDRkMjIyOWQxNmI2ZTZmYTU5OTE5Njg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskfzHS6htr6hBxfeeb1UhvTGaB7I m4COUoHy3RLUHJvQkGvxNledd9FT/4tlY5n42jl6i7nCxV2F8DH2++9HL5JwKFYn rf1z5Zoy9T4up/fMzxaT+FDfSmwOF36lBsI7NZKgYKmeiqzsnpdtnHQmGdBKCLUT mAGteYj1ygLaVF3Z61lo/GVyRvETauWLWCRW41WAretAp+oVkvxJD/pZ9ACRLylR tCmT+Xh+F+lbY6TvCkSsaIFBncRmgA7b54Un4yJWvgqDIM2+owfELrltWDi6cCPv BgQamEN/mR9p922xIVBPcM5rYvoJhzNfEUcu0ayv/p8yF3aPKZvY1gO8KwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKmbRzlDe1X5RNIinRa25vpZkZaHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwL2E0MTE0 ZS1kYjE0LTQ0YjQtOWIyNS1lNDc1NjRjZDBiYWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvYTQxMTRl LWRiMTQtNDRiNC05YjI1LWU0NzU2NGNkMGJhZS8xL3FadEhPVU43VmZsRTBpS2RG cmJtLWxtUmxvYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCJSzoMA0EAgACMAcDBQMqCcIAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMz+DANBgkqhkiG9w0BAQsFAAOCAQEApE4BYrhZLrkL cggHqVeaSGyEbxwx+QLiF9uuQhF9d5OFbrSc73+/R2AOM3oy1JJ+zZ4RkFmXjVxl HL8WBcqcYy6yDGXEJTlQOD+9BGpN6uoa1SgYBFHT2rMRhtyIB2HB+8sXj45G03yk f0Nv5SXLdQtT9+ScWCt0YDx0ytJzStRUWiaMoYxt4hMHQLfoW/VogIWx7rbCEQQh Xr54Nvz/3KPW/WMSQJT5Qax6RsAi2TmzOnyDZiWMmrJadgZ886sce/HVtWEoev6W 5FrNpRSiSn3PSbyNyqmjLjm+oBQoNckZ7E6QyQ3O3AE1YRqC3Ho2W/BbMNrE0ZX4 c2cpXvC9IA== -----END CERTIFICATE-----Generated at Thu Jan 8 23:59:39 2026 by rpki-client