This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer File: qpB64Zd8I1J6rWZWoUjHA3LpslY.cer (raw, json) Hash identifier: 8hg9SH8rZesKglLynEFjxVtbK5wn7FSfabmZvXAoSZE= Subject key identifier: AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758C06198DFC56B41F8456C46C13B3A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:67c:c60::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c0:61:98:df:c5:6b:41:f8:45:6c:46:c1:3b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa907ae1977c23527aad6656a148c70372e9b256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a0:8c:20:fa:b7:09:67:0f:c3:3b:e3:22:d3: 42:69:c4:90:12:e8:cb:ed:30:dc:96:42:dd:41:f8: 31:67:ca:01:74:51:58:9c:26:33:8e:44:20:2c:a7: a3:11:8c:f7:b2:41:c7:6e:ca:d7:0c:c0:ae:44:13: 8c:84:62:e9:5c:86:7f:e7:70:0c:bd:8c:59:d1:4a: f2:66:0f:21:36:d0:60:2e:6a:e8:94:0a:36:02:bd: 9d:b0:e8:df:bb:64:1b:b2:b6:0b:95:2f:10:98:39: 08:98:68:33:5c:81:9f:97:35:be:f2:0c:f3:d9:8d: e6:24:7f:b5:09:0b:db:83:bd:00:46:90:6f:04:39: 00:a1:d7:5d:22:38:b5:af:a3:6a:dd:f5:d9:1e:1d: 3f:b3:c8:e8:5b:00:b1:c0:c5:7b:86:6e:d3:8a:9c: fa:3e:15:83:60:89:ce:da:fb:6d:78:fc:28:a4:3d: cf:8d:df:dd:bd:02:2e:0a:e0:9d:1e:58:0a:bd:88: 2b:51:88:11:da:08:66:03:e8:39:0d:ce:10:1c:14: cd:59:dd:81:bf:7a:2c:67:14:e2:05:50:82:e7:45: 12:6f:5f:b3:82:92:aa:a7:c4:1b:fc:23:86:49:12: a2:cb:e1:b8:15:62:0d:9c:9d:fc:8d:07:19:6c:91: ce:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:c60::/48 Signature Algorithm: sha256WithRSAEncryption 95:5a:d8:08:e3:bc:79:df:dd:23:05:bd:f0:87:62:80:a9:1f: 46:be:91:e4:96:2e:e7:12:26:50:21:3a:82:0a:25:02:5f:52: 67:c5:01:41:5a:d7:ab:a3:f1:a6:05:a6:c5:4b:f7:28:2f:a2: dc:8c:18:e1:4a:e2:7e:a1:93:da:c5:5d:13:21:63:a7:ae:7b: 57:f1:2a:9c:5b:35:1f:4d:91:24:40:91:75:b0:15:a0:71:24: c3:40:d4:67:da:0a:71:24:36:fc:c4:a8:a9:e4:4e:f7:7b:31: c2:0e:a0:8b:f3:59:90:3b:51:13:70:8a:1b:07:9a:19:d6:52: ba:ff:2f:fb:cd:8b:1f:56:81:ce:e7:dc:08:6c:33:5c:71:74: c1:f7:a0:6f:ea:e3:5d:69:5e:9d:45:ac:bf:fc:6e:5f:f0:87: 07:b8:50:45:20:e3:1e:be:15:ea:70:b6:06:42:58:bd:19:73: 9a:92:6c:f9:90:66:98:97:dd:49:37:2f:74:4d:7f:92:2d:0b: 3b:ea:c1:31:dc:0e:d6:44:11:90:22:01:37:89:a5:e8:78:d4: 8e:11:e7:5e:da:64:e6:73:53:76:39:fb:7a:ec:4a:5e:fb:81: 9c:62:b6:f1:d7:de:72:f7:f2:a3:ca:aa:24:b0:58:21:fc:1e: 41:3d:3c:4f -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt3WMBhmN/Fa0H4RWxGwTs6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTkwN2FlMTk3N2MyMzUyN2FhZDY2NTZhMTQ4YzcwMzcyZTliMjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaCMIPq3CWcPwzvjItNCacSQEujL 7TDclkLdQfgxZ8oBdFFYnCYzjkQgLKejEYz3skHHbsrXDMCuRBOMhGLpXIZ/53AM vYxZ0UryZg8hNtBgLmrolAo2Ar2dsOjfu2QbsrYLlS8QmDkImGgzXIGflzW+8gzz 2Y3mJH+1CQvbg70ARpBvBDkAodddIji1r6Nq3fXZHh0/s8joWwCxwMV7hm7Tipz6 PhWDYInO2vttePwopD3Pjd/dvQIuCuCdHlgKvYgrUYgR2ghmA+g5Dc4QHBTNWd2B v3osZxTiBVCC50USb1+zgpKqp8Qb/COGSRKiy+G4FWINnJ38jQcZbJHOFQIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFKqQeuGXfCNSeq1mVqFIxwNy6bJWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlLzJhNTNl OC1mMjM2LTQyNDItYTEzYi04ZjVmNzEzYjM3YWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvMmE1M2U4 LWYyMzYtNDI0Mi1hMTNiLThmNWY3MTNiMzdhYS8xL3FwQjY0WmQ4STFKNnJXWldv VWpIQTNMcHNsWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAxgMA0GCSqGSIb3DQEBCwUAA4IBAQCV WtgI47x5390jBb3wh2KAqR9GvpHkli7nEiZQITqCCiUCX1JnxQFBWtero/GmBabF S/coL6LcjBjhSuJ+oZPaxV0TIWOnrntX8SqcWzUfTZEkQJF1sBWgcSTDQNRn2gpx JDb8xKip5E73ezHCDqCL81mQO1ETcIobB5oZ1lK6/y/7zYsfVoHO59wIbDNccXTB 96Bv6uNdaV6dRay//G5f8IcHuFBFIOMevhXqcLYGQli9GXOakmz5kGaYl91JNy90 TX+SLQs76sEx3A7WRBGQIgE3iaXoeNSOEede2mTmc1N2Oft67Epe+4GcYrbx195y 9/KjyqoksFgh/B5BPTxP -----END CERTIFICATE-----Generated at Fri Jan 2 16:58:39 2026 by rpki-client