This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer File: 6Fgzjepq5N27JIUKBwf0OqF5TD8.cer (raw, json) Hash identifier: ZxJH3aOWq+k9LC/g+cC0dv6BL/d3RLnbTIs2pVw04WQ= Subject key identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE0E40085D467937627EE364E43392 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.246.100.0/22 IP: 2a0d:7f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0e:40:08:5d:46:79:37:62:7e:e3:64:e4:33:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5a:1e:e2:fa:de:76:fd:52:94:13:df:9d:0b: 4f:ce:da:d7:bf:90:d1:d0:be:82:e3:da:44:8a:a7: 3a:11:73:47:b2:33:4f:70:e1:ca:5b:21:18:2c:99: 26:f9:dc:aa:65:b0:55:59:90:1d:8a:24:69:ef:37: 2d:b9:75:76:f5:f4:9e:4d:31:5b:5e:6d:16:b8:f7: 09:54:2c:21:97:2c:fd:33:28:72:63:3c:75:76:d1: 36:9d:f2:fa:d7:e1:cb:dd:09:28:7c:9f:c7:13:6b: 1e:54:bc:c3:db:57:5f:69:95:c5:bd:b6:64:43:26: b6:15:64:1f:f6:0d:29:b1:b4:68:e0:0c:42:c6:05: ed:13:ba:02:bd:5d:15:4a:58:bc:9f:6b:94:67:6c: e4:00:52:ea:dd:75:5c:61:fe:90:69:a4:64:1e:fb: 7a:5d:1d:35:fc:d1:1d:ed:19:8b:bc:7d:5e:6c:15: c0:fd:9a:5d:a3:2c:4f:50:49:58:42:11:e5:cf:24: 2e:4b:4c:ef:1b:63:82:97:3f:0c:17:1f:dd:94:0d: 2b:e1:2c:f8:76:63:ad:29:d4:77:48:2c:30:9a:c2: 02:54:f3:0b:dd:b5:6e:ec:3f:85:40:9b:aa:39:d1: b5:a3:6a:32:1e:fd:54:95:7b:ee:83:c7:da:9a:f2: 94:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.246.100.0/22 IPv6: 2a0d:7f80::/29 Signature Algorithm: sha256WithRSAEncryption 83:2f:78:c3:ca:0a:5a:1c:51:98:3d:df:6d:bf:39:7d:e5:22: ff:05:b3:0c:12:be:77:89:23:f4:ea:a9:63:d1:17:43:44:b1: 34:3b:af:c7:a8:1b:e9:6f:e9:3e:4d:9a:70:d6:a4:d2:65:4b: 7a:19:40:1d:a5:2f:ba:0d:3b:43:ff:4d:f2:75:53:a6:be:e8: e8:97:7e:bf:2c:33:e1:fb:eb:81:2c:52:75:33:0b:31:8c:fc: 64:75:fc:5c:e7:70:ef:7a:5e:98:85:0d:1b:7e:32:67:50:8e: 6d:c6:6b:a7:67:9b:58:eb:65:93:54:5e:9c:5e:45:8c:11:be: e1:a1:4c:8c:4d:97:0b:95:63:1f:64:52:78:4b:10:fa:cd:f7: 87:05:b4:fd:d4:75:2a:4b:68:e0:9e:0b:5c:96:55:1b:fa:d6: 7d:77:2d:6c:88:7c:82:31:11:5d:75:42:c3:a6:75:de:c9:71: eb:1c:4e:06:bd:d7:41:73:18:6f:64:e8:cc:f0:91:d7:8f:3d: 14:98:46:fd:d8:81:78:90:e5:f2:a7:55:06:0f:9c:89:10:19: 71:f5:64:d1:48:66:64:15:90:7c:cf:f7:e6:0b:8c:c8:b2:c1: b1:fb:dc:ad:e3:28:88:51:4a:38:e0:94:b8:a3:75:df:30:49: 18:14:7f:3a -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt87g5ACF1GeTdifuNk5DOSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODU4MzM4ZGVhNmFlNGRkYmIyNDg1MGEwNzA3ZjQzYWExNzk0YzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFoe4vredv1SlBPfnQtPztrXv5DR 0L6C49pEiqc6EXNHsjNPcOHKWyEYLJkm+dyqZbBVWZAdiiRp7zctuXV29fSeTTFb Xm0WuPcJVCwhlyz9MyhyYzx1dtE2nfL61+HL3QkofJ/HE2seVLzD21dfaZXFvbZk Qya2FWQf9g0psbRo4AxCxgXtE7oCvV0VSli8n2uUZ2zkAFLq3XVcYf6QaaRkHvt6 XR01/NEd7RmLvH1ebBXA/ZpdoyxPUElYQhHlzyQuS0zvG2OClz8MFx/dlA0r4Sz4 dmOtKdR3SCwwmsICVPML3bVu7D+FQJuqOdG1o2oyHv1UlXvug8famvKUkQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFOhYM43qauTduySFCgcH9DqheUw/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmLzM3NjY2 Mi04N2ViLTRjOTctOTM3My1hMWRjZTZhZDE1MGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvMzc2NjYy LTg3ZWItNGM5Ny05MzczLWExZGNlNmFkMTUwYy8xLzZGZ3pqZXBxNU4yN0pJVUtC d2YwT3FGNVREOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufZkMA0EAgACMAcDBQMqDX+AMA0GCSqGSIb3 DQEBCwUAA4IBAQCDL3jDygpaHFGYPd9tvzl95SL/BbMMEr53iSP06qlj0RdDRLE0 O6/HqBvpb+k+TZpw1qTSZUt6GUAdpS+6DTtD/03ydVOmvujol36/LDPh++uBLFJ1 MwsxjPxkdfxc53Dvel6YhQ0bfjJnUI5txmunZ5tY62WTVF6cXkWMEb7hoUyMTZcL lWMfZFJ4SxD6zfeHBbT91HUqS2jgngtcllUb+tZ9dy1siHyCMRFddULDpnXeyXHr HE4GvddBcxhvZOjM8JHXjz0UmEb92IF4kOXyp1UGD5yJEBlx9WTRSGZkFZB8z/fm C4zIssGx+9yt4yiIUUo44JS4o3XfMEkYFH86 -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:27 2026 by rpki-client