This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer File: 6KhR3a5aZMw4glOVvppQfalat88.cer (raw, json) Hash identifier: 34MM6aNUNlmPfOEoQdfK36Qm9gUU6/DClU5NE+X/+RI= Subject key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1279C41F2361F5BA51C793630117A3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202940 IP: 89.208.0.0/21 IP: 89.208.56.0/21 IP: 89.208.128.0/21 IP: 141.226.120.0/22 IP: 147.234.23.0/24 IP: 147.236.104.0/21 IP: 147.236.116.0 -- 147.236.127.255 IP: 147.236.148.0 -- 147.236.155.255 IP: 147.236.176.0/20 IP: 185.108.80.0/22 IP: 185.149.252.0/22 IP: 185.167.108.0/22 IP: 185.175.32.0/22 IP: 185.180.100.0/22 IP: 185.182.76.0/22 IP: 185.184.244.0/22 IP: 188.191.224.0/21 IP: 217.175.80.0/20 IP: 2a00:7c40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:79:c4:1f:23:61:f5:ba:51:c7:93:63:01:17:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:54:a1:51:58:03:86:2d:41:09:29:13:7b:6a: 2a:f9:3e:7d:73:88:1c:7a:32:47:b4:08:05:d3:89: 26:a8:d2:b0:45:a5:c8:7f:a1:ce:ba:3e:d8:61:10: 9b:22:2d:2a:f3:01:04:d2:bb:0c:1d:6f:86:62:52: c1:1f:93:65:72:5a:66:10:84:ab:12:ff:66:fd:05: c5:0d:01:01:58:b1:35:8a:5b:d0:6b:dc:18:41:6e: ae:91:c7:f6:0c:b0:d6:51:ac:02:f3:2f:96:55:71: 26:70:84:b7:4a:f3:20:6f:6c:c2:fc:09:dc:c1:4a: 9d:07:d9:ea:94:15:d1:4f:1c:bf:97:0a:7a:0f:6c: 9d:a9:a4:8d:b0:74:bf:35:c9:a6:97:a8:95:99:e6: 00:80:bd:d1:82:68:48:cf:94:2f:e4:1c:ed:0e:9d: 6f:e9:d8:a8:d1:44:37:3f:f3:ac:25:e4:e3:0f:b8: 3e:b5:c6:db:4a:ed:85:28:c4:f2:61:99:30:89:1a: e0:60:5c:9c:be:17:08:df:88:fe:a6:0a:0d:c0:7c: 15:21:c0:9c:a0:2e:48:a5:8e:af:d5:a6:35:55:34: 16:6b:29:73:91:5b:52:01:9b:d7:f6:b6:87:7a:b5: 29:c6:69:49:c0:ac:64:ca:83:b7:45:47:7a:76:ea: ac:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.208.0.0/21 89.208.56.0/21 89.208.128.0/21 141.226.120.0/22 147.234.23.0/24 147.236.104.0/21 147.236.116.0-147.236.127.255 147.236.148.0-147.236.155.255 147.236.176.0/20 185.108.80.0/22 185.149.252.0/22 185.167.108.0/22 185.175.32.0/22 185.180.100.0/22 185.182.76.0/22 185.184.244.0/22 188.191.224.0/21 217.175.80.0/20 IPv6: 2a00:7c40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202940 Signature Algorithm: sha256WithRSAEncryption 75:2e:db:d7:d2:7c:88:82:48:98:1c:51:de:b6:be:17:34:b7: 1b:7f:89:6d:6c:6b:19:dd:4f:40:0e:ec:08:7d:75:d9:74:02: da:bc:8f:b6:e4:20:24:32:ca:a0:32:5b:08:fb:ed:85:9f:42: fb:bd:32:44:ba:8e:b3:75:e1:44:48:b1:3d:0a:28:cc:ab:04: 1d:d1:7e:98:f3:42:a9:e0:3b:98:1e:a3:ca:cc:d3:84:f9:0b: a6:f8:06:60:b2:b1:8c:dd:89:3a:5e:24:9b:06:bb:40:8b:36: 2e:35:2f:f2:65:5a:95:71:a6:7d:19:2a:f8:e0:26:37:f5:35: c0:9f:4c:51:b1:76:bc:82:7a:76:7b:37:8c:5d:d6:2f:da:75: 1b:0d:c6:41:c1:99:fa:79:72:14:4b:75:ef:8c:75:fe:73:6c: 99:a2:48:ad:81:5f:da:69:db:6d:6c:b6:31:ad:91:0a:d0:04: 3e:fb:c7:4a:f4:94:97:e3:41:e7:0c:14:82:38:b3:8b:f6:76: f8:f4:fb:86:19:e0:b6:b0:55:7b:88:9f:2f:d5:92:d2:a4:08: 59:98:08:79:04:f7:bf:d4:f0:be:45:c0:9d:c5:c3:9c:5e:55: d5:10:2f:79:a8:56:e7:9d:f5:43:d0:cf:9e:3d:20:3f:bd:a2: e5:92:e4:0e -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgISAZt8EnnEHyNh9bpRx5NjARejMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGE4NTFkZGFlNWE2NGNjMzg4MjUzOTViZTlhNTA3ZGE5NWFiN2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFShUVgDhi1BCSkTe2oq+T59c4gc ejJHtAgF04kmqNKwRaXIf6HOuj7YYRCbIi0q8wEE0rsMHW+GYlLBH5NlclpmEISr Ev9m/QXFDQEBWLE1ilvQa9wYQW6ukcf2DLDWUawC8y+WVXEmcIS3SvMgb2zC/Anc wUqdB9nqlBXRTxy/lwp6D2ydqaSNsHS/Ncmml6iVmeYAgL3RgmhIz5Qv5BztDp1v 6dio0UQ3P/OsJeTjD7g+tcbbSu2FKMTyYZkwiRrgYFycvhcI34j+pgoNwHwVIcCc oC5IpY6v1aY1VTQWaylzkVtSAZvX9raHerUpxmlJwKxkyoO3RUd6duqsSwIDAQAB o4IDKTCCAyUwHQYDVR0OBBYEFOioUd2uWmTMOIJTlb6aUH2pWrfPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4LzM2Mzhk Ny0zZWMzLTQ1OTUtYTYzMS0xMTBjODc4ZGNkMjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvMzYzOGQ3 LTNlYzMtNDU5NS1hNjMxLTExMGM4NzhkY2QyOS8xLzZLaFIzYTVhWk13NGdsT1Z2 cHBRZmFsYXQ4OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGnBggrBgEF BQcBBwEB/wSBlzCBlDCBggQCAAEwfAMEA1nQAAMEA1nQOAMEA1nQgAMEAo3ieAME AJPqFwMEA5PsaDAMAwQCk+x0AwQHk+wAMAwDBAKT7JQDBAKT7JgDBAST7LADBAK5 bFADBAK5lfwDBAK5p2wDBAK5ryADBAK5tGQDBAK5tkwDBAK5uPQDBAO8v+ADBATZ r1AwDQQCAAIwBwMFAyoAfEAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAxi8MA0G CSqGSIb3DQEBCwUAA4IBAQB1LtvX0nyIgkiYHFHetr4XNLcbf4ltbGsZ3U9ADuwI fXXZdALavI+25CAkMsqgMlsI++2Fn0L7vTJEuo6zdeFESLE9CijMqwQd0X6Y80Kp 4DuYHqPKzNOE+Qum+AZgsrGM3Yk6XiSbBrtAizYuNS/yZVqVcaZ9GSr44CY39TXA n0xRsXa8gnp2ezeMXdYv2nUbDcZBwZn6eXIUS3XvjHX+c2yZokitgV/aadttbLYx rZEK0AQ++8dK9JSX40HnDBSCOLOL9nb49PuGGeC2sFV7iJ8v1ZLSpAhZmAh5BPe/ 1PC+RcCdxcOcXlXVEC95qFbnnfVD0M+ePSA/vaLlkuQO -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:37 2026 by rpki-client