This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer File: 6HVGTomBbvALA2lQIBin5Zzi02w.cer (raw, json) Hash identifier: AbjMvs3Lzo7zBVnUqQYDHIcUfFHgFofq+DN1b+HDgW8= Subject key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB0B5978A502AED57173A80BD6A675 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29470 AS: 57304 AS: 198947 AS: 199966 IP: 46.46.128.0/18 IP: 79.133.176.0/23 IP: 87.245.192.0/20 IP: 139.45.224.0/19 IP: 185.22.180.0/22 IP: 185.40.128.0/22 IP: 185.134.72.0/22 IP: 2a00:65e0::/32 IP: 2a01:4ee0::/32 IP: 2a02:2d9::/32 IP: 2a02:24b0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0b:59:78:a5:02:ae:d5:71:73:a8:0b:d6:a6:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e875464e89816ef00b0369502018a7e59ce2d36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:90:74:1d:69:46:0e:c5:53:2f:8a:75:ff:8c: 64:12:46:2c:5f:8e:7b:4d:d2:23:37:2f:e6:12:6b: 09:31:cf:f7:4c:96:ea:57:42:f2:6c:f1:41:d9:40: 08:c5:61:f6:67:9f:12:6a:a4:da:e9:b8:b4:c0:b4: d1:b7:e0:1d:c5:e1:b5:85:09:08:79:02:d3:66:6e: 58:73:52:7c:86:85:24:06:6f:c7:58:57:2e:39:25: 2b:2a:44:39:9e:ef:c0:54:35:6b:de:0d:7c:ed:93: a1:a9:ce:11:37:39:9e:f1:d0:3f:0d:e5:bb:14:6f: 1c:1d:76:27:9b:b5:66:cb:f2:80:e3:d7:bd:fc:d8: 4c:b2:ed:18:33:c7:25:60:6c:93:dc:fb:f2:41:de: a3:0f:89:f2:83:5f:42:43:b2:40:64:ee:99:36:55: 68:c6:a3:ec:02:2f:ec:70:72:12:f8:d8:10:cc:7b: ab:50:6b:d0:68:ce:fc:8b:5e:a9:24:ae:c0:ef:78: 39:b1:a8:e5:a8:46:11:11:fd:1d:48:ad:e6:f5:fc: 07:e8:bc:4f:01:02:3c:f7:04:14:69:f7:31:13:eb: 81:a7:9e:1f:9f:c3:06:a7:74:d7:6a:c6:63:66:e4: 03:bf:56:c2:75:62:e2:66:e3:c6:f7:d3:fe:79:25: d4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.46.128.0/18 79.133.176.0/23 87.245.192.0/20 139.45.224.0/19 185.22.180.0/22 185.40.128.0/22 185.134.72.0/22 IPv6: 2a00:65e0::/32 2a01:4ee0::/32 2a02:2d9::/32 2a02:24b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29470 57304 198947 199966 Signature Algorithm: sha256WithRSAEncryption 33:48:81:8f:57:0f:bf:3a:b7:92:70:85:8a:83:3e:f5:0e:28: f5:69:1f:69:cc:6f:bd:cf:cd:39:93:57:9b:c7:c7:82:96:38: 40:a6:c4:7c:82:ad:38:fa:86:e3:39:f5:70:ee:bf:4a:e6:e0: a1:43:5c:b0:cd:c7:ad:f4:5d:85:2b:d8:7a:d1:ff:b3:5e:3c: 31:20:b6:0b:be:db:ec:b5:f7:c4:06:08:8c:60:82:e4:c1:4d: ec:b1:c4:f0:72:08:6d:d1:f2:c2:4f:46:0c:c3:5e:d8:ac:ce: 13:05:78:e8:bc:4e:00:8f:e4:31:a6:6d:b3:37:a1:3f:c8:c6: 5e:4e:11:e3:a1:04:3e:3a:49:29:60:a5:00:70:b6:06:1d:60: 26:2d:eb:80:13:90:47:a5:d3:75:0d:99:32:0b:04:4e:1b:c4: bc:77:c7:cd:bb:7a:67:11:17:2a:87:16:15:d7:ea:de:a1:2c: 47:8b:49:76:ef:50:a6:c3:8e:5a:4b:bd:72:01:e3:86:bb:84: 4c:d3:c7:eb:b6:f1:1e:6f:c4:a7:0f:0d:4a:01:7f:7f:88:36: d8:9e:84:6e:79:91:77:f9:68:ea:36:fa:9a:8f:20:d1:5d:53: 89:b1:82:d8:4b:05:a6:78:80:5b:13:e3:b0:b5:38:00:1f:0f: a6:47:f5:e5 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgISAZt26wtZeKUCrtVxc6gL1qZ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODc1NDY0ZTg5ODE2ZWYwMGIwMzY5NTAyMDE4YTdlNTljZTJkMzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pB0HWlGDsVTL4p1/4xkEkYsX457 TdIjNy/mEmsJMc/3TJbqV0LybPFB2UAIxWH2Z58SaqTa6bi0wLTRt+AdxeG1hQkI eQLTZm5Yc1J8hoUkBm/HWFcuOSUrKkQ5nu/AVDVr3g187ZOhqc4RNzme8dA/DeW7 FG8cHXYnm7Vmy/KA49e9/NhMsu0YM8clYGyT3PvyQd6jD4nyg19CQ7JAZO6ZNlVo xqPsAi/scHIS+NgQzHurUGvQaM78i16pJK7A73g5sajlqEYREf0dSK3m9fwH6LxP AQI89wQUafcxE+uBp54fn8MGp3TXasZjZuQDv1bCdWLiZuPG99P+eSXU+wIDAQAB o4IC9jCCAvIwHQYDVR0OBBYEFOh1Rk6JgW7wCwNpUCAYp+Wc4tNsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3L2MzMDY5 ZS01ZmZjLTRjOGMtOTFkYy0zMWQxOTdmMTM5ZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvYzMwNjll LTVmZmMtNGM4Yy05MWRjLTMxZDE5N2YxMzlkOC8xLzZIVkdUb21CYnZBTEEybFFJ QmluNVp6aTAydy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGCCsGAQUF BwEHAQH/BFgwVjAwBAIAATAqAwQGLi6AAwQBT4WwAwQEV/XAAwQFiy3gAwQCuRa0 AwQCuSiAAwQCuYZIMCIEAgACMBwDBQAqAGXgAwUAKgFO4AMFACoCAtkDBQAqAiSw MCgGCCsGAQUFBwEIAQH/BBkwF6AVMBMCAnMeAgMA39gCAwMJIwIDAw0eMA0GCSqG SIb3DQEBCwUAA4IBAQAzSIGPVw+/OreScIWKgz71Dij1aR9pzG+9z805k1ebx8eC ljhApsR8gq04+objOfVw7r9K5uChQ1ywzcet9F2FK9h60f+zXjwxILYLvtvstffE BgiMYILkwU3sscTwcght0fLCT0YMw17YrM4TBXjovE4Aj+Qxpm2zN6E/yMZeThHj oQQ+OkkpYKUAcLYGHWAmLeuAE5BHpdN1DZkyCwROG8S8d8fNu3pnERcqhxYV1+re oSxHi0l271Cmw45aS71yAeOGu4RM08frtvEeb8SnDw1KAX9/iDbYnoRueZF3+Wjq NvqajyDRXVOJsYLYSwWmeIBbE+OwtTgAHw+mR/Xl -----END CERTIFICATE-----Generated at Mon Jan 26 07:10:16 2026 by rpki-client