This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer File: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer (raw, json) Hash identifier: qXTv1zTRDETVmiXXffwbaOI9nAEKkHG0aO2xVZ5A+vU= Subject key identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AE5B3E99BFF2DFB9B8862E155ED1D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205518 AS: 206945 IP: 185.171.8.0/22 IP: 185.203.164.0/22 IP: 185.215.104.0/22 IP: 2a0a:bf00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e5:b3:e9:9b:ff:2d:fb:9b:88:62:e1:55:ed:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e91f272b13c750143c7ec87e0c802aead8ac6e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:36:bd:8c:10:19:49:2c:78:af:c9:4b:7c:49: 08:22:68:89:1e:cd:86:ca:cf:b9:c6:ad:d6:03:31: fb:5c:1b:84:a4:56:82:95:fa:b2:12:7c:05:89:6a: 41:5c:76:e0:85:7b:27:35:66:64:5f:21:8a:be:1d: 35:e5:e0:33:28:ca:6e:fb:37:90:15:ef:1b:47:cc: 7c:d0:4a:2e:bb:3a:da:cd:2f:05:38:53:d8:6a:0c: 37:62:d6:83:f2:4e:71:6b:62:0b:12:10:59:84:67: 02:c2:a7:cb:e7:ac:61:05:10:dd:74:a2:1e:8b:d5: 4b:1d:cf:90:af:28:81:db:88:22:96:ad:cc:2a:cd: a7:54:d6:eb:b3:bb:cb:0a:84:c2:e6:33:a5:d0:39: fe:20:23:b4:c2:25:37:58:53:cb:4f:9d:21:d9:55: 71:44:8c:d3:00:20:dd:9a:0f:6d:0a:8d:63:65:79: 97:e6:e9:26:06:a3:07:90:b5:b3:7b:ff:f1:74:5d: e4:82:f4:f0:90:c6:31:7f:f5:26:b6:95:aa:c0:40: ea:df:91:04:72:e9:cf:2a:f4:18:13:7b:a7:53:f9: 8b:d4:61:a4:45:0c:9c:31:24:d6:76:2d:6a:fa:12: 06:b0:89:46:85:1b:ad:77:f7:bc:6f:22:ba:ca:98: d6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.171.8.0/22 185.203.164.0/22 185.215.104.0/22 IPv6: 2a0a:bf00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205518 206945 Signature Algorithm: sha256WithRSAEncryption 05:e5:64:ab:30:4e:fc:da:a4:17:09:76:5a:6f:fc:61:30:41: fc:36:5c:2f:e9:61:0d:71:7d:9c:2e:0e:84:03:5f:2c:24:39: bc:c9:c5:36:6e:9e:97:0e:85:ad:43:e7:e4:91:b2:f2:af:03: b3:2f:b8:ef:d9:86:b2:6d:ab:65:d7:e5:2a:6d:e9:55:e7:45: 64:09:e3:93:b9:f7:96:63:68:da:87:67:8c:96:97:52:6b:60: 58:fc:98:90:14:0b:0a:e3:29:e0:b8:75:34:14:e8:bd:06:fa: f7:05:a9:86:7e:5e:2a:b4:6b:31:47:fa:b8:c7:fe:53:22:6c: 27:6f:29:30:6f:4c:02:94:34:59:a9:38:27:aa:82:55:89:76: 3b:a5:78:09:2c:bc:65:bf:1c:05:50:cb:2e:c9:f3:29:e5:94: 06:64:28:12:fb:f0:00:fa:d8:d4:73:2e:29:e3:7d:b3:35:f3: 9a:03:7b:d0:49:47:dd:99:cf:f6:03:a9:15:be:e3:2d:6b:75: 13:01:ec:d3:0b:24:38:53:ca:5b:87:05:e1:ce:94:89:e6:b0: c9:c1:8d:a3:a0:6b:ae:34:3b:f9:e5:2b:0b:40:40:f3:28:ef: a8:e7:e2:2c:86:eb:8a:90:b1:26:bf:ea:a6:a0:45:7d:55:34: bc:30:8d:24 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt6WuWz6Zv/LfubiGLhVe0dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTFmMjcyYjEzYzc1MDE0M2M3ZWM4N2UwYzgwMmFlYWQ4YWM2ZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Da9jBAZSSx4r8lLfEkIImiJHs2G ys+5xq3WAzH7XBuEpFaClfqyEnwFiWpBXHbghXsnNWZkXyGKvh015eAzKMpu+zeQ Fe8bR8x80EouuzrazS8FOFPYagw3YtaD8k5xa2ILEhBZhGcCwqfL56xhBRDddKIe i9VLHc+QryiB24gilq3MKs2nVNbrs7vLCoTC5jOl0Dn+ICO0wiU3WFPLT50h2VVx RIzTACDdmg9tCo1jZXmX5ukmBqMHkLWze//xdF3kgvTwkMYxf/UmtpWqwEDq35EE cunPKvQYE3unU/mL1GGkRQycMSTWdi1q+hIGsIlGhRutd/e8byK6ypjW6wIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFOkfJysTx1AUPH7IfgyAKurYrG4HMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjL2Q2MmQy Mi04MmYyLTRiMjAtYmFjNC02MDFhNzI1YTAwZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvZDYyZDIy LTgyZjItNGIyMC1iYWM0LTYwMWE3MjVhMDBmNS8xLzZSOG5LeFBIVUJROGZzaC1E SUFxNnRpc2JnYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuasIAwQCucukAwQCuddoMA0EAgACMAcDBQMq Cr8AMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMizgIDAyhhMA0GCSqGSIb3DQEB CwUAA4IBAQAF5WSrME782qQXCXZab/xhMEH8Nlwv6WENcX2cLg6EA18sJDm8ycU2 bp6XDoWtQ+fkkbLyrwOzL7jv2Yaybatl1+UqbelV50VkCeOTufeWY2jah2eMlpdS a2BY/JiQFAsK4ynguHU0FOi9Bvr3BamGfl4qtGsxR/q4x/5TImwnbykwb0wClDRZ qTgnqoJViXY7pXgJLLxlvxwFUMsuyfMp5ZQGZCgS+/AA+tjUcy4p432zNfOaA3vQ SUfdmc/2A6kVvuMta3UTAezTCyQ4U8pbhwXhzpSJ5rDJwY2joGuuNDv55SsLQEDz KO+o5+IshuuKkLEmv+qmoEV9VTS8MI0k -----END CERTIFICATE-----Generated at Sun Jan 25 23:53:21 2026 by rpki-client