This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer File: 6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer (raw, json) Hash identifier: 2MkQw31YItwYrgGfQR9DnBENNmgzTPaELaJqFOa4SZQ= Subject key identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A210D437066CF362B141FF1A9F9658 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198268 IP: 178.175.182.0/23 IP: 2a14:2b40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:10:d4:37:06:6c:f3:62:b1:41:ff:1a:9f:96:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:89:ed:50:a5:a9:39:58:da:82:59:05:59:b5: 01:cb:28:cc:7f:f2:88:dd:03:89:54:c5:4b:38:3b: 79:6f:7c:06:63:53:6e:f9:3b:b4:4f:f3:af:40:03: e3:8d:71:a7:6b:26:40:28:3c:24:ad:5a:b9:37:70: 51:e3:0d:ae:e2:6b:ab:f1:13:a4:0a:e3:c7:b8:16: e2:f6:0e:44:7c:e0:5c:0b:12:c3:06:71:c5:ff:69: a2:4e:8d:74:4b:cd:2a:88:c5:e3:f2:53:06:4e:b6: 81:ee:90:12:04:9c:34:6e:b5:a9:31:1b:7c:d4:bc: c9:d8:48:f7:63:c1:b6:fa:99:8a:84:2a:a3:fc:dc: 6e:81:19:cd:6f:cb:ea:c2:7f:5b:6f:76:9a:05:ab: 6d:6b:f3:83:45:a8:2f:02:d5:24:05:6a:b1:26:e7: 07:d7:16:ad:d2:6c:b5:3e:7a:d9:81:4c:f2:2b:5f: d8:c9:fa:94:62:0d:1e:76:97:e0:e6:b4:8c:e7:80: 2c:b0:cd:3f:ad:bc:ff:c3:4d:7c:b8:43:80:1c:d0: fc:10:2c:39:54:ec:5f:c7:24:cd:ec:3b:2f:e8:75: 11:1f:ca:22:a8:30:9b:93:f7:da:d3:c0:33:0e:71: b9:7e:8a:49:ff:b7:20:f8:4c:5e:bc:58:e0:c9:76: 01:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.175.182.0/23 IPv6: 2a14:2b40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198268 Signature Algorithm: sha256WithRSAEncryption 33:5d:f7:36:dd:87:dd:ca:2b:10:4d:63:0c:87:82:9f:ba:01: f3:ba:5f:7a:ad:c4:91:73:db:a1:01:0f:52:6b:fc:44:5a:6e: 7c:58:51:88:8a:a1:7e:a4:13:93:8c:13:10:59:b3:cf:af:8e: 64:4d:22:79:44:4e:55:6b:8f:b6:48:22:88:57:60:df:fc:60: de:f7:22:b5:81:ca:7d:e2:bd:2d:a9:12:99:6b:f5:31:94:b6: 25:4b:1f:99:03:ac:7a:22:57:c4:07:a8:41:a9:1d:ae:ef:d8: af:0b:f2:c1:c6:87:87:e2:15:17:c8:b7:f1:8a:64:a9:e1:6e: 9f:27:d9:a4:01:cf:96:55:9f:84:51:65:06:e5:7f:76:cc:4f: 31:83:0e:0c:b8:6e:a8:5e:ba:9f:a1:3f:fc:f1:23:e2:9f:0a: 4a:22:06:d9:80:5a:81:51:80:96:d3:c9:ac:8e:84:7c:8c:3c: 79:4a:e9:1c:9d:9f:5e:31:8f:f4:d0:d4:af:b9:6c:00:db:3d: d7:18:c8:84:8f:55:c4:48:b4:8c:e7:38:4c:02:58:6e:b0:02: 83:82:1f:af:53:cb:da:63:96:86:af:9d:42:a5:d1:b1:32:dc: 00:d0:58:2b:09:ec:60:47:84:65:e7:73:30:f1:7c:d3:4d:40: 9e:f2:82:83 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4ohDUNwZs82KxQf8an5ZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGY5OWNkODg0ZmI1Y2JhYjNmM2IzNGUxN2E4MGE0OGFkZWMzZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+IntUKWpOVjaglkFWbUByyjMf/KI 3QOJVMVLODt5b3wGY1Nu+Tu0T/OvQAPjjXGnayZAKDwkrVq5N3BR4w2u4mur8ROk CuPHuBbi9g5EfOBcCxLDBnHF/2miTo10S80qiMXj8lMGTraB7pASBJw0brWpMRt8 1LzJ2Ej3Y8G2+pmKhCqj/NxugRnNb8vqwn9bb3aaBatta/ODRagvAtUkBWqxJucH 1xat0my1PnrZgUzyK1/YyfqUYg0edpfg5rSM54AssM0/rbz/w018uEOAHND8ECw5 VOxfxyTN7Dsv6HURH8oiqDCbk/fa08AzDnG5fopJ/7cg+ExevFjgyXYBRQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOj5nNiE+1y6s/OzTheoCkit7D/lMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjL2Q4NWJj Ny01OGE2LTQwN2EtOGFjYi03NTA5ZjdmNGM1YTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvZDg1YmM3 LTU4YTYtNDA3YS04YWNiLTc1MDlmN2Y0YzVhNi8xLzZQbWMySVQ3WExxejg3Tk9G NmdLU0szc1AtVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQBsq+2MA0EAgACMAcDBQMqFCtAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMGfDANBgkqhkiG9w0BAQsFAAOCAQEAM133Nt2H3cor EE1jDIeCn7oB87pfeq3EkXPboQEPUmv8RFpufFhRiIqhfqQTk4wTEFmzz6+OZE0i eUROVWuPtkgiiFdg3/xg3vcitYHKfeK9LakSmWv1MZS2JUsfmQOseiJXxAeoQakd ru/YrwvywcaHh+IVF8i38YpkqeFunyfZpAHPllWfhFFlBuV/dsxPMYMODLhuqF66 n6E//PEj4p8KSiIG2YBagVGAltPJrI6EfIw8eUrpHJ2fXjGP9NDUr7lsANs91xjI hI9VxEi0jOc4TAJYbrACg4Ifr1PL2mOWhq+dQqXRsTLcANBYKwnsYEeEZedzMPF8 001AnvKCgw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:30:25 2026 by rpki-client