This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.cer (raw, json) Hash identifier: l8lFuUveTBfyJjxcSBFVXk123pJSjhEuz58InRlCZ8M= Subject key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791022DE0EF3F16157954F1E4BEC46E9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41695 IP: 89.21.224.0/19 IP: 134.0.64.0/21 IP: 2a01:420::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:22:de:0e:f3:f1:61:57:95:4f:1e:4b:ec:46:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ca:7b:b6:10:0f:f6:f6:2d:67:e4:45:7d:b3: ac:6e:c1:90:60:91:cf:c9:0b:68:c4:e8:8d:d8:af: 07:90:36:4d:33:81:67:e8:69:bf:26:07:07:77:55: da:ee:00:63:9c:b6:d3:66:67:75:5e:be:b5:fa:f8: 9e:dd:7f:62:4c:45:8a:82:10:ec:c9:f9:e5:d6:fb: 3d:7c:8a:36:51:7e:74:db:46:e1:fd:23:73:be:19: a4:f0:39:4d:fa:38:08:0d:66:7d:41:d1:2d:15:f1: db:f4:65:f1:2d:f8:64:01:62:62:99:3e:87:23:3b: 48:17:d7:ab:6f:e9:cc:91:d8:e3:ec:50:8f:a0:4f: 63:98:5e:f3:10:7f:7c:3e:88:d5:d2:dc:e1:8e:33: 90:90:cd:cb:bb:a6:7f:a9:81:d0:db:f1:55:0c:8d: a0:2a:95:8a:eb:31:f1:af:06:65:16:f5:55:d1:5b: 3a:d9:d3:66:b3:0e:25:77:d5:36:ef:5a:3d:a7:af: 66:33:04:a9:f3:d2:b6:49:15:f4:31:a7:05:12:1c: 1a:b6:b2:97:b9:74:2a:a9:e7:a0:52:29:30:2b:1a: 3a:9d:ee:ce:65:2f:48:ce:01:b8:c2:e2:fc:e7:2a: ea:89:98:9c:7e:40:5f:a6:fe:e3:24:de:6f:b7:4e: e0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.21.224.0/19 134.0.64.0/21 IPv6: 2a01:420::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41695 Signature Algorithm: sha256WithRSAEncryption 0d:fe:95:ba:94:ff:34:63:9c:93:e9:3f:3c:6c:14:9a:e7:f3: 2d:c2:8c:f9:9f:7c:23:d1:fe:c4:93:6d:33:3d:4b:bd:cb:e2: fd:87:18:1d:f4:e6:1a:bc:38:fc:e1:a6:11:cf:fa:34:dd:e3: d8:8d:f3:93:69:04:df:42:5a:57:82:c7:92:52:ee:74:50:46: 0a:c1:0f:cd:c1:e3:5c:52:76:f9:87:b0:cd:d0:7e:ce:e7:08: c0:1c:7e:34:82:90:f6:41:0a:e5:f6:2e:04:16:b9:65:4a:5e: 5b:89:8c:1a:11:c6:f2:1c:e1:38:93:d6:ba:d7:93:c4:8d:16: 8f:de:0e:40:75:d2:2c:11:9e:f5:8b:e1:44:d6:e3:71:07:93: c6:66:ef:01:26:6c:c1:c5:ed:7c:97:45:c3:5a:b7:9a:17:89: 6f:9c:96:fd:c5:17:4a:9d:6f:fb:5c:e6:9b:5a:e6:4a:7d:67: 69:b4:33:4d:a5:e7:06:25:c4:66:56:51:35:d1:9c:10:34:07: 23:6b:cc:4e:d3:f0:ac:7e:b4:56:f8:97:c1:99:99:29:ab:0a: f4:42:7e:95:43:87:95:af:c4:c6:0e:aa:fb:4b:f7:ff:2e:cc: d7:73:c3:26:2a:2c:ed:cb:8b:90:c5:af:eb:84:69:b3:85:e9: a7:9a:12:0a -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5ECLeDvPxYVeVTx5L7EbpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmIwOGJlODAwMTI2NTExY2ZmOGQyNTY5OWQ5YWMxMzZlZDBlYzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Mp7thAP9vYtZ+RFfbOsbsGQYJHP yQtoxOiN2K8HkDZNM4Fn6Gm/JgcHd1Xa7gBjnLbTZmd1Xr61+vie3X9iTEWKghDs yfnl1vs9fIo2UX5020bh/SNzvhmk8DlN+jgIDWZ9QdEtFfHb9GXxLfhkAWJimT6H IztIF9erb+nMkdjj7FCPoE9jmF7zEH98PojV0tzhjjOQkM3Lu6Z/qYHQ2/FVDI2g KpWK6zHxrwZlFvVV0Vs62dNmsw4ld9U271o9p69mMwSp89K2SRX0MacFEhwatrKX uXQqqeegUikwKxo6ne7OZS9IzgG4wuL85yrqiZicfkBfpv7jJN5vt07gJwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFOuwi+gAEmURz/jSVpnZrBNu0OyMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1LzZjMTQy YS0yYjVlLTQxNmItOTRkZS1iYTlkNTFmZTllMmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvNmMxNDJh LTJiNWUtNDE2Yi05NGRlLWJhOWQ1MWZlOWUyYi8xLzY3Q0w2QUFTWlJIUC1OSldt ZG1zRTI3UTdJdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQFWRXgAwQDhgBAMA0EAgACMAcDBQAqAQQgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCi3zANBgkqhkiG9w0BAQsFAAOCAQEADf6V upT/NGOck+k/PGwUmufzLcKM+Z98I9H+xJNtMz1Lvcvi/YcYHfTmGrw4/OGmEc/6 NN3j2I3zk2kE30JaV4LHklLudFBGCsEPzcHjXFJ2+YewzdB+zucIwBx+NIKQ9kEK 5fYuBBa5ZUpeW4mMGhHG8hzhOJPWuteTxI0Wj94OQHXSLBGe9YvhRNbjcQeTxmbv ASZswcXtfJdFw1q3mheJb5yW/cUXSp1v+1zmm1rmSn1nabQzTaXnBiXEZlZRNdGc EDQHI2vMTtPwrH60VviXwZmZKasK9EJ+lUOHla/Exg6q+0v3/y7M13PDJios7cuL kMWv64Rps4Xpp5oSCg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:01 2026 by rpki-client