This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer File: 6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer (raw, json) Hash identifier: vEuVHpFmtHMJYGq6NZLaQYfL+IoDxpYMWtlHIaCg/Xw= Subject key identifier: E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA44817EF275E2377AB8435F710808 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205275 IP: 85.204.19.0/24 IP: 86.104.13.0/24 IP: 86.105.214.0/24 IP: 86.106.30.0/24 IP: 86.107.23.0/24 IP: 86.107.169.0/24 IP: 89.33.24.0/22 IP: 89.33.44.0/24 IP: 89.34.92.0/24 IP: 89.36.248.0/22 IP: 89.37.57.0/24 IP: 89.37.212.0/22 IP: 89.39.83.0/24 IP: 89.39.246.0/24 IP: 89.40.72.0/24 IP: 89.41.36.0/22 IP: 89.42.216.0/21 IP: 89.44.137.0/24 IP: 89.45.15.0/24 IP: 89.45.83.0/24 IP: 89.47.53.0/24 IP: 89.47.240.0/22 IP: 93.113.152.0/23 IP: 93.115.53.0/24 IP: 94.177.66.0/24 IP: 185.162.64.0/22 IP: 188.209.214.0/24 IP: 188.213.205.0/24 IP: 188.214.210.0/23 IP: 188.214.215.0/24 IP: 188.215.2.0/24 IP: 188.240.20.0/22 IP: 188.241.142.0/24 IP: 188.241.152.0/24 IP: 188.241.155.0/24 IP: 2a13:7140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:44:81:7e:f2:75:e2:37:7a:b8:43:5f:71:08:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ad:ad:2d:02:d6:30:78:b1:0f:67:4c:7a:aa: 0e:81:e1:c6:31:09:f4:c4:6c:4d:8f:02:ec:64:d1: bc:8c:8d:b4:cc:3b:35:a2:c6:de:5a:54:b3:ba:f6: bf:5e:82:ec:9d:af:aa:44:0a:42:e9:6b:0d:03:01: a1:36:99:29:82:db:84:43:be:d5:09:38:37:d3:39: 90:e6:cf:18:8a:87:80:df:b4:1e:0e:59:31:2f:a3: 67:d1:5c:c2:0b:c2:2a:6a:d0:6f:e6:39:34:78:11: 65:0d:43:27:a8:38:95:45:67:58:79:ac:ca:e1:86: b4:c1:aa:9e:e5:de:a5:39:3a:bb:cd:f6:19:27:d2: 35:35:db:93:51:33:59:9f:29:4d:d2:30:4f:54:2c: 68:ca:8b:62:05:5f:09:f8:8a:0a:1d:83:e1:1a:84: 72:98:95:86:c5:b8:ec:1b:50:b7:fc:ed:56:f5:48: 8f:12:2f:57:42:6c:87:37:58:17:fe:eb:d5:10:5c: e0:1b:18:de:e4:c3:61:f5:2f:c7:5d:6e:7d:55:15: 9a:14:5c:08:d0:94:76:ea:87:16:1f:4e:f1:44:f0: 26:4a:46:47:e5:1a:ee:9f:f2:d4:f2:95:64:e8:b3: 3e:2d:e7:8b:77:ad:c7:47:ab:a6:80:5a:7d:e5:ee: 8a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.19.0/24 86.104.13.0/24 86.105.214.0/24 86.106.30.0/24 86.107.23.0/24 86.107.169.0/24 89.33.24.0/22 89.33.44.0/24 89.34.92.0/24 89.36.248.0/22 89.37.57.0/24 89.37.212.0/22 89.39.83.0/24 89.39.246.0/24 89.40.72.0/24 89.41.36.0/22 89.42.216.0/21 89.44.137.0/24 89.45.15.0/24 89.45.83.0/24 89.47.53.0/24 89.47.240.0/22 93.113.152.0/23 93.115.53.0/24 94.177.66.0/24 185.162.64.0/22 188.209.214.0/24 188.213.205.0/24 188.214.210.0/23 188.214.215.0/24 188.215.2.0/24 188.240.20.0/22 188.241.142.0/24 188.241.152.0/24 188.241.155.0/24 IPv6: 2a13:7140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205275 Signature Algorithm: sha256WithRSAEncryption 63:f9:ed:5c:34:c5:76:7b:23:23:70:18:33:5f:6e:1c:22:9e: b9:d0:78:36:a4:e2:80:45:7a:7c:48:18:b7:8d:42:f8:b6:29: 40:c5:48:0d:8b:a9:83:5e:28:43:b3:19:3a:4b:15:9e:c3:59: f8:38:9b:10:fc:3e:6f:86:0d:d6:c5:68:ce:2f:ad:b1:e2:ac: 06:ad:dc:cf:f3:31:c7:8e:a2:c7:60:10:a1:0d:00:e3:fc:c8: a0:6b:6f:58:a7:04:fe:42:b2:cd:8f:ed:c7:33:5d:3e:3b:b4: d7:a0:06:5b:f3:88:4f:10:78:07:06:4f:ee:33:0d:ea:e1:1a: e4:fa:37:f4:37:be:89:5c:f4:d7:04:51:28:43:8b:1e:a3:49: 65:43:7f:4f:1f:6a:23:54:3e:99:07:6e:44:c8:c2:43:0e:b4: 49:e0:17:dc:a8:f1:f0:45:86:b9:2d:05:9c:79:e1:ba:92:a6: bd:2e:27:21:74:84:08:5d:ef:dd:06:22:46:d2:58:23:94:ec: 2c:89:62:e5:01:ab:5c:32:45:80:a3:fb:68:bf:c3:fd:38:2b: 91:1a:cf:08:44:7b:f8:b7:c0:84:89:78:f9:30:6a:8e:09:d7: 60:32:6b:5b:89:d3:80:2a:26:90:d2:d0:68:38:db:3c:0b:45: fd:12:f5:f1 -----BEGIN CERTIFICATE----- MIIGdDCCBVygAwIBAgISAZt9ykSBfvJ14jd6uENfcQgIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODMzNDYxZTlkMmJkYWZjYzI5YWQ5MTg5ZmIwYWNmMWYzMzk2MGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq2tLQLWMHixD2dMeqoOgeHGMQn0 xGxNjwLsZNG8jI20zDs1osbeWlSzuva/XoLsna+qRApC6WsNAwGhNpkpgtuEQ77V CTg30zmQ5s8YioeA37QeDlkxL6Nn0VzCC8IqatBv5jk0eBFlDUMnqDiVRWdYeazK 4Ya0waqe5d6lOTq7zfYZJ9I1NduTUTNZnylN0jBPVCxoyotiBV8J+IoKHYPhGoRy mJWGxbjsG1C3/O1W9UiPEi9XQmyHN1gX/uvVEFzgGxje5MNh9S/HXW59VRWaFFwI 0JR26ocWH07xRPAmSkZH5Rrun/LU8pVk6LM+LeeLd63HR6umgFp95e6KcQIDAQAB o4IDgDCCA3wwHQYDVR0OBBYEFOgzRh6dK9r8wprZGJ+wrPHzOWCpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1LzY3MTE5 NC01MWM4LTRiY2YtYmQ4My1hZWZlOGQxNzhlNmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvNjcxMTk0 LTUxYzgtNGJjZi1iZDgzLWFlZmU4ZDE3OGU2YS8xLzZETkdIcDByMnZ6Q210a1lu N0NzOGZNNVlLay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIH+BggrBgEF BQcBBwEB/wSB7jCB6zCB2QQCAAEwgdIDBABVzBMDBABWaA0DBABWadYDBABWah4D BABWaxcDBABWa6kDBAJZIRgDBABZISwDBABZIlwDBAJZJPgDBABZJTkDBAJZJdQD BABZJ1MDBABZJ/YDBABZKEgDBAJZKSQDBANZKtgDBABZLIkDBABZLQ8DBABZLVMD BABZLzUDBAJZL/ADBAFdcZgDBABdczUDBABesUIDBAK5okADBAC80dYDBAC81c0D BAG81tIDBAC81tcDBAC81wIDBAK88BQDBAC88Y4DBAC88ZgDBAC88ZswDQQCAAIw BwMFAyoTcUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAyHbMA0GCSqGSIb3DQEB CwUAA4IBAQBj+e1cNMV2eyMjcBgzX24cIp650Hg2pOKARXp8SBi3jUL4tilAxUgN i6mDXihDsxk6SxWew1n4OJsQ/D5vhg3WxWjOL62x4qwGrdzP8zHHjqLHYBChDQDj /Miga29YpwT+QrLNj+3HM10+O7TXoAZb84hPEHgHBk/uMw3q4Rrk+jf0N76JXPTX BFEoQ4seo0llQ39PH2ojVD6ZB25EyMJDDrRJ4BfcqPHwRYa5LQWceeG6kqa9Lich dIQIXe/dBiJG0lgjlOwsiWLlAatcMkWAo/tov8P9OCuRGs8IRHv4t8CEiXj5MGqO CddgMmtbidOAKiaQ0tBoONs8C0X9EvXx -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:53 2026 by rpki-client