This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer File: qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer (raw, json) Hash identifier: lEtLXfB6Gn1TEwDrDIcUoeCVB90WoFHrusFzvaZagIU= Subject key identifier: AA:4D:72:EC:DC:15:37:8B:E7:17:BB:4C:A0:97:10:70:D5:76:49:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1565D7BD8FFFD10C158AB7041C50D2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215662 IP: 45.85.152.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 21:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:65:d7:bd:8f:ff:d1:0c:15:8a:b7:04:1c:50:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa4d72ecdc15378be717bb4ca0971070d57649a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:54:e2:10:87:c4:94:e2:41:8a:76:83:54:a5: 1e:48:30:d7:9c:04:be:01:be:f7:96:cd:2b:c6:26: a8:8c:fa:66:9a:e7:86:7a:b9:c3:2f:bd:1f:f8:81: a7:16:10:36:10:31:5b:bb:af:74:d3:f5:5c:a8:d7: 4c:bf:e2:e6:24:d8:ea:fc:08:16:95:ad:60:0f:49: 65:0c:34:0c:f7:85:7f:1e:43:50:73:24:55:1f:a7: cd:58:82:3c:b6:4a:9e:aa:12:dc:56:db:1c:f3:a8: dc:ac:c0:eb:ce:74:19:9e:27:ec:2c:14:79:0e:25: 5c:81:bb:be:40:e7:ee:d2:60:60:f7:8c:db:c7:7b: 3f:2b:a5:95:5e:d1:c7:f3:8a:db:69:cf:55:68:a2: 8f:8d:62:cf:1d:19:3d:43:32:be:d7:20:5a:e0:e3: f5:77:30:ea:16:c7:9d:1d:28:da:14:eb:fd:cf:85: 81:b2:ee:09:52:73:ef:47:70:32:bd:ad:26:12:9e: ec:d8:6d:b4:14:dd:0d:db:b7:9e:5f:b3:39:67:d0: a7:c8:14:45:37:9a:94:cd:e2:1f:5c:a0:66:f3:64: a3:c6:3a:57:f1:0d:04:c8:15:2c:a8:c5:37:f1:27: f3:e1:51:d0:85:8e:1a:e5:37:23:4a:f9:90:39:ad: 8f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4D:72:EC:DC:15:37:8B:E7:17:BB:4C:A0:97:10:70:D5:76:49:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.152.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215662 Signature Algorithm: sha256WithRSAEncryption 2d:6f:4d:4c:9b:c0:47:cb:95:51:ff:c5:6d:86:da:5b:41:f7: f4:d5:bd:b0:d6:f8:78:d5:b8:56:a5:31:94:a5:22:f3:b3:c6: 07:e6:d5:83:da:7b:e2:e9:b6:1c:68:c6:06:bd:ec:7d:ce:65: 27:0d:ac:52:3f:d5:8d:55:d1:6f:86:1a:81:a5:96:fa:f7:35: b0:c5:88:91:d9:8a:c9:b7:5e:ff:a4:99:3b:11:5a:fa:7b:78: 36:13:c5:67:7b:0a:37:89:c6:ae:b8:c1:6c:f1:14:cf:de:0c: d7:44:0f:9a:8f:25:75:59:c3:13:4f:6d:f1:6d:8a:05:0e:e4: 82:33:19:23:98:4a:29:fa:29:7d:fb:11:dc:be:79:15:e7:ce: 78:1b:5e:43:bb:9b:1e:24:4a:86:7a:1c:51:c8:99:b0:93:ca: 98:2b:8a:18:db:18:3a:80:9e:60:bf:2f:49:9a:e2:99:8c:ed: 69:be:d6:d8:16:71:c2:c4:a4:37:1a:4c:79:eb:44:c4:66:5b: 31:66:c5:58:89:4f:91:0d:cc:8d:3b:dd:48:e7:e4:4f:3c:87: 53:4a:5d:6c:58:ce:c2:9d:29:6c:ab:06:a4:1c:77:ee:55:5a: 2f:89:8f:34:ff:ff:95:5b:05:86:ed:b7:25:c9:73:17:e4:9b: 87:88:30:b4 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/FWXXvY//0QwVircEHFDSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTRkNzJlY2RjMTUzNzhiZTcxN2JiNGNhMDk3MTA3MGQ1NzY0OWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFTiEIfElOJBinaDVKUeSDDXnAS+ Ab73ls0rxiaojPpmmueGernDL70f+IGnFhA2EDFbu6900/VcqNdMv+LmJNjq/AgW la1gD0llDDQM94V/HkNQcyRVH6fNWII8tkqeqhLcVtsc86jcrMDrznQZnifsLBR5 DiVcgbu+QOfu0mBg94zbx3s/K6WVXtHH84rbac9VaKKPjWLPHRk9QzK+1yBa4OP1 dzDqFsedHSjaFOv9z4WBsu4JUnPvR3Ayva0mEp7s2G20FN0N27eeX7M5Z9CnyBRF N5qUzeIfXKBm82SjxjpX8Q0EyBUsqMU38Sfz4VHQhY4a5TcjSvmQOa2P6wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKpNcuzcFTeL5xe7TKCXEHDVdkmjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4LzUwN2E1 Ny00YTYyLTRiOTUtYjFhMy1iNDA1NzYyMWJiYTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvNTA3YTU3 LTRhNjItNGI5NS1iMWEzLWI0MDU3NjIxYmJhNi8xL3FrMXk3TndWTjR2bkY3dE1v SmNRY05WMlNhTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLVWYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNKbjANBgkqhkiG9w0BAQsFAAOCAQEALW9NTJvAR8uVUf/FbYbaW0H39NW9sNb4 eNW4VqUxlKUi87PGB+bVg9p74um2HGjGBr3sfc5lJw2sUj/VjVXRb4YagaWW+vc1 sMWIkdmKybde/6SZOxFa+nt4NhPFZ3sKN4nGrrjBbPEUz94M10QPmo8ldVnDE09t 8W2KBQ7kgjMZI5hKKfopffsR3L55FefOeBteQ7ubHiRKhnocUciZsJPKmCuKGNsY OoCeYL8vSZrimYztab7W2BZxwsSkNxpMeetExGZbMWbFWIlPkQ3MjTvdSOfkTzyH U0pdbFjOwp0pbKsGpBx37lVaL4mPNP//lVsFhu23JclzF+Sbh4gwtA== -----END CERTIFICATE-----Generated at Tue Jan 13 03:37:10 2026 by rpki-client