This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer File: 6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer (raw, json) Hash identifier: /IWBkA8M52rfDeu0YMg2vMGIV8w4sQ0HJPHZ9VS2mEA= Subject key identifier: E9:05:74:70:FD:56:F1:B7:73:B2:E4:0A:BA:EE:79:F9:96:6E:44:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA03F2EAE338C788BD3FDE5FF44836 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58323 IP: 31.193.108.0/22 IP: 130.255.20.0/22 IP: 164.138.192.0/21 IP: 195.177.244.0/23 IP: 2a00:bac0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:03:f2:ea:e3:38:c7:88:bd:3f:de:5f:f4:48:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9057470fd56f1b773b2e40abaee79f9966e4436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:74:e8:03:98:66:74:3b:6d:51:42:58:ae:2f: 88:cb:0b:f5:f6:b4:ec:fe:c3:61:59:d0:af:c6:dd: cf:e0:9b:16:7d:b5:bf:0b:63:73:23:68:7f:a1:f2: 53:dc:fb:1b:b9:2b:59:ee:1b:06:8b:12:0a:72:bd: a6:6b:4d:eb:71:fc:1c:a0:e8:63:29:35:80:1d:20: d3:be:8e:cc:a0:3f:51:7e:8f:c3:45:63:2f:90:2b: d6:da:5e:39:35:cc:ec:51:bf:59:8a:38:fa:7f:3b: 35:f0:48:be:06:72:c8:3c:5d:46:55:22:d7:a8:0a: 13:b2:19:e7:52:af:89:cb:9d:4e:18:82:49:ed:5c: f0:04:66:2d:ca:dd:6b:74:25:36:27:db:d8:da:c5: fe:d9:36:b8:19:5f:9c:b6:de:b5:7f:82:4f:d7:b4: 99:a4:e4:b4:32:df:0e:35:8b:ec:13:51:82:ed:4a: 2c:69:78:d7:ec:1e:70:48:80:5a:cf:77:91:9b:17: b2:54:fa:75:f3:b0:8a:2d:c0:ec:aa:b6:da:48:9a: 3b:f3:ba:b0:4b:53:d8:78:8c:90:68:33:67:44:ff: b2:e3:b2:46:0f:ec:0d:79:50:d4:b1:a5:e1:4d:d8: 17:68:ba:fe:55:ec:52:2a:e8:28:fd:72:98:82:07: a7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:05:74:70:FD:56:F1:B7:73:B2:E4:0A:BA:EE:79:F9:96:6E:44:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.108.0/22 130.255.20.0/22 164.138.192.0/21 195.177.244.0/23 IPv6: 2a00:bac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58323 Signature Algorithm: sha256WithRSAEncryption 91:66:54:dc:db:5f:85:a7:47:fa:8e:53:f0:10:8f:07:de:3a: f2:26:54:eb:86:9e:c8:f1:94:2e:11:2c:69:a3:97:06:ec:c9: 37:38:e9:be:a2:9f:53:27:57:13:b1:5d:eb:7c:10:71:39:5e: 73:a7:26:0b:0b:b9:d7:84:aa:a6:5a:13:ff:c6:24:e6:02:17: d6:70:e7:4d:eb:b8:8c:c6:f7:c1:29:ca:76:1d:1a:bc:ba:2d: ef:49:6f:6d:dd:f9:d8:76:d8:51:e6:07:ff:b4:46:04:6f:c8: 49:16:8b:e2:f9:6d:6b:db:37:a3:8d:20:94:ce:07:95:dd:80: 04:5a:2f:9d:1d:a1:82:d3:2e:5e:b6:32:af:fc:34:fe:c3:e0: d2:b2:f7:4b:62:58:b6:c3:f3:81:b6:e2:5b:f8:e0:44:df:8d: c7:1c:80:7f:7a:bf:09:5b:c9:c7:b9:6a:25:8d:6a:e3:89:8f: b5:fc:ee:dc:d1:96:1b:6d:d5:18:42:d1:d1:f8:99:4f:ec:39: 81:d3:22:49:d5:85:95:3f:74:5f:15:15:ae:5e:52:96:3c:00: 5b:97:fb:86:9e:de:82:c0:0c:ae:6c:28:27:70:1b:b4:2c:b4: ce:d8:c8:ad:c1:c3:4e:f7:27:82:a1:b1:f6:46:19:8f:b8:5b: 04:f6:81:c7 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt9ygPy6uM4x4i9P95f9Eg2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTA1NzQ3MGZkNTZmMWI3NzNiMmU0MGFiYWVlNzlmOTk2NmU0NDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnToA5hmdDttUUJYri+Iywv19rTs /sNhWdCvxt3P4JsWfbW/C2NzI2h/ofJT3PsbuStZ7hsGixIKcr2ma03rcfwcoOhj KTWAHSDTvo7MoD9Rfo/DRWMvkCvW2l45NczsUb9Zijj6fzs18Ei+BnLIPF1GVSLX qAoTshnnUq+Jy51OGIJJ7VzwBGYtyt1rdCU2J9vY2sX+2Ta4GV+ctt61f4JP17SZ pOS0Mt8ONYvsE1GC7UosaXjX7B5wSIBaz3eRmxeyVPp187CKLcDsqrbaSJo787qw S1PYeIyQaDNnRP+y47JGD+wNeVDUsaXhTdgXaLr+VexSKugo/XKYggenuQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFOkFdHD9VvG3c7LkCrruefmWbkQ2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwLzQ1Nzcy YS1hMTBmLTQyOWQtYjVkYi05MjE4ZjkyZjMwMzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvNDU3NzJh LWExMGYtNDI5ZC1iNWRiLTkyMThmOTJmMzAzNi8xLzZRVjBjUDFXOGJkenN1UUt1 dTU1LVpadVJEWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCH8FsAwQCgv8UAwQDpIrAAwQBw7H0MA0EAgAC MAcDBQAqALrAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDj0zANBgkqhkiG9w0B AQsFAAOCAQEAkWZU3NtfhadH+o5T8BCPB9468iZU64aeyPGULhEsaaOXBuzJNzjp vqKfUydXE7Fd63wQcTlec6cmCwu514SqploT/8Yk5gIX1nDnTeu4jMb3wSnKdh0a vLot70lvbd352HbYUeYH/7RGBG/ISRaL4vlta9s3o40glM4Hld2ABFovnR2hgtMu XrYyr/w0/sPg0rL3S2JYtsPzgbbiW/jgRN+NxxyAf3q/CVvJx7lqJY1q44mPtfzu 3NGWG23VGELR0fiZT+w5gdMiSdWFlT90XxUVrl5SljwAW5f7hp7egsAMrmwoJ3Ab tCy0ztjIrcHDTvcngqGx9kYZj7hbBPaBxw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:14:50 2026 by rpki-client