This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer File: 6--V-MTFVIJt6POK1rup-3SAKCQ.cer (raw, json) Hash identifier: JgvP5VH5N+2OZPGce+vCHNxv0H4dS0AV+hcgZ7Fa+vc= Subject key identifier: EB:EF:95:F8:C4:C5:54:82:6D:E8:F3:8A:D6:BB:A9:FB:74:80:28:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79108BB8918A7C0E354EB39DDBB607F6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15763 IP: 85.22.0.0/16 IP: 156.67.58.0/24 IP: 185.151.100.0/22 IP: 212.29.32.0/19 IP: 2a03:f580::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:8b:b8:91:8a:7c:0e:35:4e:b3:9d:db:b6:07:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebef95f8c4c554826de8f38ad6bba9fb74802824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:50:55:84:06:16:84:cd:73:da:28:9a:e6:0a: e1:b7:79:91:b2:44:10:86:6f:a6:e1:6d:57:49:9c: 33:e9:d3:6f:45:01:f1:0c:3b:36:36:6c:aa:cb:cd: 4a:31:70:7e:65:0d:d7:6f:7c:75:d7:d0:ec:be:d3: 7c:5f:3d:45:3d:b4:b3:27:cf:aa:d1:f9:af:9f:33: 59:9b:02:09:cd:24:8e:72:3e:34:f8:ce:eb:78:83: 8d:b2:21:56:02:10:64:af:29:f1:5e:06:ca:99:ed: 64:22:7d:2f:0c:d7:46:8e:49:c8:e9:4b:98:e0:b9: 49:0d:e6:c7:70:d0:b2:77:e9:5d:dc:67:aa:0b:06: e9:ca:a4:04:70:f1:e4:f3:66:07:f9:24:d9:a1:93: 18:4b:dc:dd:51:9b:8c:b7:fa:33:d1:36:cf:5f:de: 39:0d:9e:4e:d4:1e:05:e9:d4:da:82:dd:cb:90:cb: 53:c2:3c:99:36:f0:0a:ff:3d:e7:be:3a:5e:d8:40: f5:f4:bd:88:ca:ee:7d:c3:ce:95:be:3e:85:14:7c: f0:56:96:eb:ac:c8:33:a1:01:fb:7a:a8:7b:1c:a2: 3b:2e:14:65:09:4d:e8:96:23:c7:d2:ce:17:25:e5: aa:fc:e7:37:2d:11:bd:97:96:f1:9f:53:86:92:73: 5a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EF:95:F8:C4:C5:54:82:6D:E8:F3:8A:D6:BB:A9:FB:74:80:28:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.22.0.0/16 156.67.58.0/24 185.151.100.0/22 212.29.32.0/19 IPv6: 2a03:f580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15763 Signature Algorithm: sha256WithRSAEncryption 61:c6:c9:29:e4:cc:59:c9:f2:34:85:d7:09:41:42:ab:af:6e: 6c:9e:b9:81:2e:02:5f:3e:2c:04:60:30:2b:96:ec:bf:6d:ee: a3:25:58:86:d1:a1:eb:84:c1:02:71:53:83:f8:bc:80:32:9b: 68:3c:c3:e8:b5:dc:61:ee:86:3d:21:3a:6f:f2:bf:8c:6f:86: 2f:ac:c5:cc:7f:d9:67:0e:d5:5d:59:ad:3e:ea:3b:2c:ac:fb: 39:23:99:e7:ff:d3:63:ac:be:2f:a8:a5:53:bf:d1:da:cd:3e: 91:e4:3d:ad:18:83:ef:48:42:69:dd:4d:18:6d:3c:f0:17:a3: 10:47:56:68:a5:1f:cc:6d:02:52:f1:21:99:04:f2:2b:9a:d5: 42:00:0d:ed:4c:fb:0f:2a:bd:f2:fd:08:d5:46:a0:a1:11:f8: d0:45:ab:b9:1f:34:6a:76:6a:18:2e:88:ae:34:d3:f0:dc:84: b7:0b:49:cb:f0:52:4b:2f:55:b2:f1:88:02:40:60:1e:65:64: 8b:01:fe:e5:5d:21:cb:86:24:18:51:51:6c:57:32:55:ec:f6: 5b:c7:45:41:a3:a1:25:5e:05:7e:a8:e7:21:97:c3:fd:73:b0: 7b:09:7d:cc:64:80:1c:60:3e:8d:1c:4a:e4:46:8c:75:c0:16: 34:12:87:79 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZt5EIu4kYp8DjVOs53btgf2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmVmOTVmOGM0YzU1NDgyNmRlOGYzOGFkNmJiYTlmYjc0ODAyODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVBVhAYWhM1z2iia5grht3mRskQQ hm+m4W1XSZwz6dNvRQHxDDs2Nmyqy81KMXB+ZQ3Xb3x119DsvtN8Xz1FPbSzJ8+q 0fmvnzNZmwIJzSSOcj40+M7reIONsiFWAhBkrynxXgbKme1kIn0vDNdGjknI6UuY 4LlJDebHcNCyd+ld3GeqCwbpyqQEcPHk82YH+STZoZMYS9zdUZuMt/oz0TbPX945 DZ5O1B4F6dTagt3LkMtTwjyZNvAK/z3nvjpe2ED19L2Iyu59w86Vvj6FFHzwVpbr rMgzoQH7eqh7HKI7LhRlCU3oliPH0s4XJeWq/Oc3LRG9l5bxn1OGknNaYQIDAQAB o4ICvzCCArswHQYDVR0OBBYEFOvvlfjExVSCbejzita7qft0gCgkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxL2YxNDU3 Zi02MjFmLTQ3OTYtODYwZS05YTM1MGZkMWE0YWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvZjE0NTdm LTYyMWYtNDc5Ni04NjBlLTlhMzUwZmQxYTRhZC8xLzYtLVYtTVRGVklKdDZQT0sx cnVwLTNTQUtDUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD8GCCsGAQUF BwEHAQH/BDAwLjAdBAIAATAXAwMAVRYDBACcQzoDBAK5l2QDBAXUHSAwDQQCAAIw BwMFACoD9YAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICPZMwDQYJKoZIhvcNAQEL BQADggEBAGHGySnkzFnJ8jSF1wlBQquvbmyeuYEuAl8+LARgMCuW7L9t7qMlWIbR oeuEwQJxU4P4vIAym2g8w+i13GHuhj0hOm/yv4xvhi+sxcx/2WcO1V1ZrT7qOyys +zkjmef/02Osvi+opVO/0drNPpHkPa0Yg+9IQmndTRhtPPAXoxBHVmilH8xtAlLx IZkE8iua1UIADe1M+w8qvfL9CNVGoKER+NBFq7kfNGp2ahguiK400/DchLcLScvw UksvVbLxiAJAYB5lZIsB/uVdIcuGJBhRUWxXMlXs9lvHRUGjoSVeBX6o5yGXw/1z sHsJfcxkgBxgPo0cSuRGjHXAFjQSh3k= -----END CERTIFICATE-----Generated at Sun Jan 25 18:24:29 2026 by rpki-client