This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer File: wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer (raw, json) Hash identifier: 5HqiT1h7w3bTbusxzUi0u0pJ4HBtVWkm9aQqcc2rhAU= Subject key identifier: C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE503CB24F9FBB4B4EAE32EB7E954F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41680 IP: 194.88.4.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:50:3c:b2:4f:9f:bb:4b:4e:ae:32:eb:7e:95:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:28:14:ed:43:45:f6:be:b0:5a:f8:be:c6:f6: 59:4f:c8:5b:08:5e:24:89:7b:17:61:2c:8f:50:f8: ad:3a:2d:bc:78:1f:8d:23:8e:15:c2:b1:dd:79:9c: 7c:ae:88:b5:df:68:27:86:20:32:1f:ac:1b:ad:bf: 6d:78:59:a6:b0:f4:6e:e3:fa:3b:6d:68:48:16:7f: d3:10:d2:85:ee:6e:00:a4:f3:2e:82:75:b1:b4:09: ee:72:0a:07:39:3a:09:4d:6c:f0:c6:3f:56:72:ab: 4c:c8:a8:a9:32:d9:13:be:7e:90:b4:f4:69:d0:51: 2e:cf:9d:45:24:9f:be:44:5b:a7:5f:02:fb:49:a0: d2:76:35:19:23:f1:8a:83:0e:67:16:27:88:44:31: 98:9e:96:32:c1:70:0a:df:5f:98:22:a2:ae:7e:38: 46:a0:20:17:74:81:cc:bc:24:76:0d:ba:ac:a7:91: b2:f0:4a:98:04:c9:93:f0:80:6b:85:7c:9e:2e:00: 1e:bd:de:74:b8:e4:d7:08:e2:14:9f:20:15:02:4d: 16:16:42:e2:2b:ea:ba:47:b7:54:0a:bb:25:83:e9: e3:06:ab:38:0f:ee:53:54:e5:c0:07:18:1a:f8:c7: 6e:ea:f3:45:d0:ac:a2:2b:a7:73:50:87:97:e4:fa: 06:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.88.4.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41680 Signature Algorithm: sha256WithRSAEncryption 92:fb:d1:7f:8a:fd:0b:d2:43:53:71:60:06:17:de:7d:98:e4: 6f:34:2b:e5:16:97:b8:44:9b:5d:74:d1:6e:ec:e8:55:cc:31: 70:62:14:64:f8:7f:75:d2:2b:74:f8:74:f3:ff:fa:73:2e:24: e0:1a:0f:2c:5c:28:0c:57:76:0c:12:5c:17:b3:1b:ca:20:57: 12:cd:ec:3d:cd:07:8a:5c:8f:d2:8a:32:9a:c6:36:11:44:ce: ff:35:b2:4b:e1:f7:a4:ca:3f:dd:a8:9e:3a:b0:a1:cc:ba:f4: cc:f5:f0:5e:7c:3f:f2:82:07:ed:26:81:5d:ce:00:fc:61:c7: 62:ea:e4:bd:1d:83:d6:65:33:6f:72:dc:d0:d6:cc:c8:84:ad: 46:f1:d2:f7:07:23:5f:ee:85:06:e6:f0:65:b6:55:c8:02:16: 55:b3:74:21:43:fb:85:55:d0:c4:32:cb:69:a6:89:f4:51:fe: 90:cf:fb:7f:de:2b:6e:4f:bd:bf:50:e2:5a:0b:88:c6:63:2c: 2c:1b:5f:16:dd:df:c4:e1:a3:ba:d5:56:67:0c:c7:86:d6:03: 2d:75:bf:e3:92:2c:06:76:ff:4f:8b:5e:4a:4c:2e:a0:28:c7: 1e:44:40:57:33:a6:6c:e2:c6:5e:66:0f:42:ad:d7:50:4f:25: 8c:62:4b:48 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87lA8sk+fu0tOrjLrfpVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmFjOGY3MDk2MWQyZGM3M2UyZmUzYTc5OTA4MzJlOTNkNDk1NjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqygU7UNF9r6wWvi+xvZZT8hbCF4k iXsXYSyPUPitOi28eB+NI44VwrHdeZx8roi132gnhiAyH6wbrb9teFmmsPRu4/o7 bWhIFn/TENKF7m4ApPMugnWxtAnucgoHOToJTWzwxj9WcqtMyKipMtkTvn6QtPRp 0FEuz51FJJ++RFunXwL7SaDSdjUZI/GKgw5nFieIRDGYnpYywXAK31+YIqKufjhG oCAXdIHMvCR2Dbqsp5Gy8EqYBMmT8IBrhXyeLgAevd50uOTXCOIUnyAVAk0WFkLi K+q6R7dUCrslg+njBqs4D+5TVOXABxga+Mdu6vNF0KyiK6dzUIeX5PoGiQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMKsj3CWHS3HPi/jp5kIMuk9SVYRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkLzk1NmZk Mi0wZGQzLTRkNGYtOGIzNy1jNmQ4NmExYjA4ZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvOTU2ZmQy LTBkZDMtNGQ0Zi04YjM3LWM2ZDg2YTFiMDhlMC8xL3dxeVBjSllkTGNjLUwtT25t UWd5NlQxSlZoRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwlgEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCi0DANBgkqhkiG9w0BAQsFAAOCAQEAkvvRf4r9C9JDU3FgBhfefZjkbzQr5RaX uESbXXTRbuzoVcwxcGIUZPh/ddIrdPh08//6cy4k4BoPLFwoDFd2DBJcF7MbyiBX Es3sPc0HilyP0ooymsY2EUTO/zWyS+H3pMo/3aieOrChzLr0zPXwXnw/8oIH7SaB Xc4A/GHHYurkvR2D1mUzb3Lc0NbMyIStRvHS9wcjX+6FBubwZbZVyAIWVbN0IUP7 hVXQxDLLaaaJ9FH+kM/7f94rbk+9v1DiWguIxmMsLBtfFt3fxOGjutVWZwzHhtYD LXW/45IsBnb/T4teSkwuoCjHHkRAVzOmbOLGXmYPQq3XUE8ljGJLSA== -----END CERTIFICATE-----Generated at Fri Jan 2 08:16:25 2026 by rpki-client