This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer File: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer (raw, json) Hash identifier: lFGkHWDmcmtUeMnwBuXCqYP6e7QCocJ39VO1PmxOYz4= Subject key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C66E36A13B728C3CE1FAD2BFA77CCA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8808 AS: 41059 AS: 41313 IP: 31.211.128.0/19 IP: 46.35.160.0/19 IP: 79.110.120.0/21 IP: 80.95.16.0/21 IP: 93.152.234.0/23 IP: 93.152.240.0/21 IP: 93.175.244.0/22 IP: 95.158.128.0/18 IP: 151.252.192.0/20 IP: 185.1.40.0/24 IP: 185.18.228.0/22 IP: 185.40.164.0/22 IP: 212.21.128.0/19 IP: 2001:7f8:98::/48 IP: 2a00:e200::/32 IP: 2a0d:3b40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6e:36:a1:3b:72:8c:3c:e1:fa:d2:bf:a7:7c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:df:21:55:f0:2e:3b:a4:d5:0e:e6:27:50:6b: 70:5d:c0:88:55:58:f8:ae:bf:80:87:68:c3:36:e0: 98:81:33:82:c0:f9:fd:5a:34:11:91:7f:81:44:18: 9e:2c:d5:2e:80:33:52:2b:98:e3:2c:bb:34:f8:15: 3e:ae:44:5e:ae:39:55:b2:1a:17:84:b3:ee:20:3d: 63:f8:e1:f1:c2:f6:aa:69:05:88:d2:24:7b:38:ae: 26:1f:f1:1c:b7:77:b5:f8:f7:3b:36:45:66:e9:13: 55:6c:f0:02:4a:9f:02:f5:e5:c2:d3:cc:cf:f5:60: 0a:0c:a0:56:a4:81:59:2d:a2:8f:89:dc:b4:e7:f2: 8f:39:76:a5:86:4b:2f:5b:e0:81:89:fb:58:cb:cb: ef:69:95:f4:8d:f9:9c:cf:d1:52:52:63:c1:7d:83: 81:52:e2:77:07:9d:cb:b0:3e:a5:82:e5:a2:99:18: 11:53:de:55:2a:53:75:0d:b0:43:30:c4:d9:4d:df: 63:b4:04:f2:3e:7f:71:bc:72:20:6c:18:cd:a1:0e: bc:a3:01:34:92:ea:40:2f:87:e4:c7:31:60:c0:48: 4e:58:00:b7:22:2a:9a:6e:3b:8f:e3:f0:9f:bd:a4: cf:61:22:14:2d:41:e3:d3:e7:67:0b:40:9f:1d:d8: 44:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.211.128.0/19 46.35.160.0/19 79.110.120.0/21 80.95.16.0/21 93.152.234.0/23 93.152.240.0/21 93.175.244.0/22 95.158.128.0/18 151.252.192.0/20 185.1.40.0/24 185.18.228.0/22 185.40.164.0/22 212.21.128.0/19 IPv6: 2001:7f8:98::/48 2a00:e200::/32 2a0d:3b40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8808 41059 41313 Signature Algorithm: sha256WithRSAEncryption 43:0d:38:1d:4a:98:02:80:72:dc:d9:13:d1:de:d9:b1:43:7e: 33:d9:e4:60:e0:62:00:c0:dd:f7:18:14:3f:b0:67:d6:39:be: bf:e2:1d:92:6d:0f:5f:f4:eb:e2:12:01:db:d0:72:79:e1:d1: 2b:20:16:c6:1e:0f:4a:2c:c9:5d:85:72:4c:c0:7a:97:d4:e2: 2c:a9:5a:d4:60:21:8c:cb:4a:04:10:f4:b2:91:22:79:ee:9c: 11:65:44:45:9f:4f:a4:c4:9d:86:ec:5d:72:1d:4d:3c:aa:02: 07:ad:16:f2:05:79:8f:4c:57:34:65:c9:aa:37:60:bb:92:f1: ec:47:fe:86:35:ac:c4:42:61:57:20:2b:fc:92:72:a0:f5:29: 72:4f:27:1a:7c:33:19:d3:48:cf:ec:18:ad:dd:be:bc:b0:db: 1f:44:61:54:74:8b:78:6e:69:d9:03:4a:0f:7d:60:c4:08:7f: b7:94:0f:6f:03:e1:c7:cd:50:9a:d9:14:98:b4:e0:9c:b0:05: 33:99:f6:25:6b:62:56:96:20:38:10:19:c2:5e:ab:5c:9b:fb: 0d:b4:56:65:2e:de:8f:7d:6f:cd:59:fc:fc:fa:db:de:32:5d: 12:f4:5f:9e:5b:4f:53:3b:ba:57:c0:1b:71:95:ba:a7:ae:5c: b0:a0:5b:6b -----BEGIN CERTIFICATE----- MIIGBTCCBO2gAwIBAgISAZt3xm42oTtyjDzh+tK/p3zKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmVjOTAzMGM3MGEzZDQxOTJkNTljMjhkY2M4ZDU0NzY5NDM0MGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx98hVfAuO6TVDuYnUGtwXcCIVVj4 rr+Ah2jDNuCYgTOCwPn9WjQRkX+BRBieLNUugDNSK5jjLLs0+BU+rkRerjlVshoX hLPuID1j+OHxwvaqaQWI0iR7OK4mH/Ect3e1+Pc7NkVm6RNVbPACSp8C9eXC08zP 9WAKDKBWpIFZLaKPidy05/KPOXalhksvW+CBiftYy8vvaZX0jfmcz9FSUmPBfYOB UuJ3B53LsD6lguWimRgRU95VKlN1DbBDMMTZTd9jtATyPn9xvHIgbBjNoQ68owE0 kupAL4fkxzFgwEhOWAC3IiqabjuP4/CfvaTPYSIULUHj0+dnC0CfHdhEsQIDAQAB o4IDETCCAw0wHQYDVR0OBBYEFOvskDDHCj1BktWcKNzI1UdpQ0CzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E1LzM3MmI4 Ny05NWY0LTRjOTgtYTZmNC00YTZmODY4MzI2NWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUvMzcyYjg3 LTk1ZjQtNGM5OC1hNmY0LTRhNmY4NjgzMjY1Yy8xLzYteVFNTWNLUFVHUzFad28z TWpWUjJsRFFMTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGGBggrBgEF BQcBBwEB/wR3MHUwVAQCAAEwTgMEBR/TgAMEBS4joAMEA09ueAMEA1BfEAMEAV2Y 6gMEA12Y8AMEAl2v9AMEBl+egAMEBJf8wAMEALkBKAMEArkS5AMEArkopAMEBdQV gDAdBAIAAjAXAwcAIAEH+ACYAwUAKgDiAAMFAyoNO0AwIwYIKwYBBQUHAQgBAf8E FDASoBAwDgICImgCAwCgYwIDAKFhMA0GCSqGSIb3DQEBCwUAA4IBAQBDDTgdSpgC gHLc2RPR3tmxQ34z2eRg4GIAwN33GBQ/sGfWOb6/4h2SbQ9f9OviEgHb0HJ54dEr IBbGHg9KLMldhXJMwHqX1OIsqVrUYCGMy0oEEPSykSJ57pwRZURFn0+kxJ2G7F1y HU08qgIHrRbyBXmPTFc0ZcmqN2C7kvHsR/6GNazEQmFXICv8knKg9SlyTycafDMZ 00jP7Bit3b68sNsfRGFUdIt4bmnZA0oPfWDECH+3lA9vA+HHzVCa2RSYtOCcsAUz mfYla2JWliA4EBnCXqtcm/sNtFZlLt6PfW/NWfz8+tveMl0S9F+eW09TO7pXwBtx lbqnrlywoFtr -----END CERTIFICATE-----Generated at Sun Jan 25 09:20:27 2026 by rpki-client