This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer File: 65M6GrHHFeCzssf_oOEDhFYU03s.cer (raw, json) Hash identifier: BqtmphhlpQHUwc7sLIaEnjKDLQKkVNHWTkJ+aqjl2rM= Subject key identifier: EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B97876823722755E36D1B8164F8C8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61031 IP: 185.69.132.0/22 IP: 185.245.23.0/24 IP: 2001:67c:6dc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:97:87:68:23:72:27:55:e3:6d:1b:81:64:f8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2e:5b:d6:15:90:74:5e:f6:2e:a3:61:69:6b: 84:60:1e:30:f9:0c:ba:00:a6:41:f4:69:bc:a5:f6: 5d:ff:63:4b:7f:fd:a3:45:61:19:e3:53:75:8b:89: 52:2d:f6:47:0b:ac:79:71:a2:4f:72:11:2f:69:54: e7:f6:61:7b:2a:9f:79:1d:af:2f:c5:2d:8f:84:b4: 5e:e4:16:60:d8:8c:b0:8b:ea:9f:33:31:e2:45:fb: 77:83:af:21:fc:12:1e:21:04:13:80:29:9e:bd:0d: 18:06:42:0a:c2:b2:81:fd:83:12:2d:a8:57:31:d1: 01:b4:c2:ec:fb:6a:91:84:0b:c8:1b:07:23:40:dd: 82:b1:08:16:bd:82:fa:7d:02:89:b7:51:f1:6b:91: 09:95:36:8a:dc:5c:7b:49:74:e2:99:cb:a5:1c:8b: 4c:bf:6d:96:e4:99:76:d2:99:1a:7c:1e:74:7a:09: dd:52:40:4b:41:6f:be:63:68:fe:9f:35:29:5a:e1: ee:60:ac:6d:4f:e3:2f:d8:4c:14:b4:44:99:bf:81: e6:08:bd:04:08:a9:fb:3b:13:9b:49:3c:9e:2a:6b: fa:51:cf:8a:98:70:4d:d2:68:ee:f6:bb:93:b5:12: dc:d4:99:9b:43:12:b7:b0:e9:7a:b4:ed:14:81:01: cb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.132.0/22 185.245.23.0/24 IPv6: 2001:67c:6dc::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61031 Signature Algorithm: sha256WithRSAEncryption 60:c6:4a:29:37:7c:c1:85:39:30:11:0a:fa:32:b4:5b:67:2a: 78:45:fa:73:dc:ea:53:79:19:31:99:dc:da:6f:24:63:88:5d: 56:a2:da:81:b8:65:e6:51:75:74:5e:8c:cc:7d:d0:04:81:ee: 04:ac:62:ef:7b:f0:c3:72:4d:c0:67:b8:11:7b:92:df:50:45: 39:4c:bd:83:ab:2a:ea:46:97:d5:03:e2:2a:dc:d6:ee:b4:1f: 0b:a4:02:e3:9a:ca:a2:c8:88:b6:7d:8c:3d:b6:22:70:68:68: 44:72:ca:8f:f4:a2:7a:71:3b:52:68:80:b2:a8:75:ae:d9:d0: 3a:a2:f7:6e:30:8d:00:88:64:44:a0:2d:e4:6f:28:6f:cd:d0: 15:4e:cc:4b:b3:f8:4d:c9:1b:2f:31:28:b8:a2:e9:03:c5:15: 79:19:b2:e5:7c:a3:35:3f:c3:ab:e7:d1:92:12:08:32:38:ef: ce:64:05:2f:d1:4e:aa:59:a2:3e:81:5e:0e:f1:21:b2:f0:19: 93:ce:ed:9d:2a:4f:f9:d7:3a:7f:0c:49:e1:0e:c6:d9:27:0a: eb:d0:31:f3:5d:c7:d7:e2:fc:f8:e4:9b:cd:ff:fc:65:8e:b9: 5b:95:c4:f1:11:d5:02:1b:05:d2:65:f0:b7:71:78:7f:89:9b: 41:de:ce:3e -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt6W5eHaCNyJ1XjbRuBZPjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjkzM2ExYWIxYzcxNWUwYjNiMmM3ZmZhMGUxMDM4NDU2MTRkMzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8S5b1hWQdF72LqNhaWuEYB4w+Qy6 AKZB9Gm8pfZd/2NLf/2jRWEZ41N1i4lSLfZHC6x5caJPchEvaVTn9mF7Kp95Ha8v xS2PhLRe5BZg2Iywi+qfMzHiRft3g68h/BIeIQQTgCmevQ0YBkIKwrKB/YMSLahX MdEBtMLs+2qRhAvIGwcjQN2CsQgWvYL6fQKJt1Hxa5EJlTaK3Fx7SXTimculHItM v22W5Jl20pkafB50egndUkBLQW++Y2j+nzUpWuHuYKxtT+Mv2EwUtESZv4HmCL0E CKn7OxObSTyeKmv6Uc+KmHBN0mju9ruTtRLc1JmbQxK3sOl6tO0UgQHLpwIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFOuTOhqxxxXgs7LH/6DhA4RWFNN7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1LzRjZTNk OC05ZGViLTQyYmYtODk0ZC0yZGQ2ZTExMTNmMzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvNGNlM2Q4 LTlkZWItNDJiZi04OTRkLTJkZDZlMTExM2YzNC8xLzY1TTZHckhIRmVDenNzZl9v T0VEaEZZVTAzcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQCuUWEAwQAufUXMA8EAgACMAkDBwAgAQZ8Btww GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAO5nMA0GCSqGSIb3DQEBCwUAA4IBAQBg xkopN3zBhTkwEQr6MrRbZyp4Rfpz3OpTeRkxmdzabyRjiF1WotqBuGXmUXV0XozM fdAEge4ErGLve/DDck3AZ7gRe5LfUEU5TL2DqyrqRpfVA+Iq3NbutB8LpALjmsqi yIi2fYw9tiJwaGhEcsqP9KJ6cTtSaICyqHWu2dA6ovduMI0AiGREoC3kbyhvzdAV TsxLs/hNyRsvMSi4oukDxRV5GbLlfKM1P8Or59GSEggyOO/OZAUv0U6qWaI+gV4O 8SGy8BmTzu2dKk/51zp/DEnhDsbZJwrr0DHzXcfX4vz45JvN//xljrlblcTxEdUC GwXSZfC3cXh/iZtB3s4+ -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:05 2026 by rpki-client