This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer File: 6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer (raw, json) Hash identifier: ppDXcn67pfB35JLCqtvBd6iyHWzstk6/CPtOPaDUVxI= Subject key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF22193AE091D0545A015B3935958D0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49556 AS: 207724 IP: 158.255.78.0/24 IP: 2a13:5ac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:21:93:ae:09:1d:05:45:a0:15:b3:93:59:58:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e938f9182b7da44003591eeae2560f8451b3393a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d2:37:32:4b:70:22:11:e8:86:d8:57:95:f3: 00:7f:e7:be:f9:55:46:e7:b9:2a:31:81:fa:a0:d3: 32:5a:37:a2:ad:b5:10:aa:c8:94:e3:c2:3a:59:b6: f7:27:29:75:e5:63:1e:c3:e9:59:89:91:0a:4c:58: 50:1a:30:92:33:9b:33:c1:35:81:11:cf:99:a9:8d: e0:88:b4:d0:86:37:6d:52:cf:6d:8c:ff:6d:1d:01: d0:32:eb:39:1f:aa:6d:01:96:f5:85:40:b5:16:f8: 20:80:12:38:7c:27:f6:f0:0d:3d:b9:19:79:87:3f: ca:06:d1:ad:43:e6:0b:df:94:fb:0f:4e:1a:83:6d: 94:07:17:d6:4a:82:73:e1:bd:9a:9d:f8:44:f0:e4: df:8b:13:e0:f1:be:56:26:98:84:66:ec:09:ac:cc: bc:ef:10:56:7f:ae:43:17:ff:1d:fb:d2:73:2a:9c: 13:89:f0:0e:a5:01:de:4e:35:86:a0:5c:e6:86:59: e7:c6:89:50:37:76:9c:7d:ab:17:69:3a:df:37:c2: 5c:51:44:6f:9e:83:bd:4f:d2:21:3e:fb:0b:40:0a: e3:fe:4b:8b:a9:fb:a3:e6:64:83:ee:6a:d1:47:af: 86:de:b7:f2:5a:f2:c8:cf:74:bf:fd:1e:70:8a:cb: 48:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.255.78.0/24 IPv6: 2a13:5ac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49556 207724 Signature Algorithm: sha256WithRSAEncryption 01:65:bc:7c:bf:69:2b:0a:3d:42:25:ba:eb:d4:67:45:61:ae: 92:c6:0e:3c:72:8e:67:bb:a1:2d:52:ab:56:1f:e9:02:ac:f5: 71:63:75:aa:03:9f:a8:fa:00:12:80:3a:a6:0e:d4:ee:d7:51: bd:15:62:9c:a5:2e:4f:4f:73:cf:fe:24:a9:1e:12:71:89:8d: 79:73:0b:75:60:e6:c7:08:97:7c:7e:65:2a:5f:6c:98:7e:45: 0d:44:c0:3e:86:06:84:04:e1:e0:c7:85:bc:bb:c9:1a:20:05: 5a:20:7d:d6:58:5a:65:5e:58:4e:23:69:b6:de:56:79:58:2a: 1b:69:3b:82:a2:de:bc:2c:a3:0a:73:09:ca:cf:43:fb:c2:86: c8:3e:2f:3b:1d:93:0f:f3:fe:e6:f8:ea:7f:ea:f1:82:3f:70: 52:e6:be:f3:65:6f:15:1e:f3:eb:fe:71:dd:e5:3d:c8:6f:ba: e2:80:9b:cb:5c:fd:84:24:86:57:00:4f:6f:56:58:35:9a:ca: 84:b1:0d:a6:38:97:66:e5:f1:fa:c8:68:cc:d2:5a:56:2c:46: f7:97:d1:ff:26:f7:5b:5f:96:5a:c7:64:af:43:ee:bf:60:5d: f3:64:3f:76:f5:0c:d1:6f:97:14:b2:13:6e:46:6e:8d:ab:67: 6e:4d:b4:fb -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt/8iGTrgkdBUWgFbOTWVjQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTM4ZjkxODJiN2RhNDQwMDM1OTFlZWFlMjU2MGY4NDUxYjMzOTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9I3MktwIhHohthXlfMAf+e++VVG 57kqMYH6oNMyWjeirbUQqsiU48I6Wbb3Jyl15WMew+lZiZEKTFhQGjCSM5szwTWB Ec+ZqY3giLTQhjdtUs9tjP9tHQHQMus5H6ptAZb1hUC1FvgggBI4fCf28A09uRl5 hz/KBtGtQ+YL35T7D04ag22UBxfWSoJz4b2anfhE8OTfixPg8b5WJpiEZuwJrMy8 7xBWf65DF/8d+9JzKpwTifAOpQHeTjWGoFzmhlnnxolQN3acfasXaTrfN8JcUURv noO9T9IhPvsLQArj/kuLqfuj5mSD7mrRR6+G3rfyWvLIz3S//R5wistIrwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFOk4+RgrfaRAA1ke6uJWD4RRszk6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmL2VhOTQw Mi1iZTRkLTQ5ZjMtODFmYi00ZGY3MjhjNThkMTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvZWE5NDAy LWJlNGQtNDlmMy04MWZiLTRkZjcyOGM1OGQxNy8xLzZUajVHQ3Q5cEVBRFdSN3E0 bFlQaEZHek9Uby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAnv9OMA0EAgACMAcDBQMqE1rAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwDBlAIDAytsMA0GCSqGSIb3DQEBCwUAA4IBAQABZbx8 v2krCj1CJbrr1GdFYa6Sxg48co5nu6EtUqtWH+kCrPVxY3WqA5+o+gASgDqmDtTu 11G9FWKcpS5PT3PP/iSpHhJxiY15cwt1YObHCJd8fmUqX2yYfkUNRMA+hgaEBOHg x4W8u8kaIAVaIH3WWFplXlhOI2m23lZ5WCobaTuCot68LKMKcwnKz0P7wobIPi87 HZMP8/7m+Op/6vGCP3BS5r7zZW8VHvPr/nHd5T3Ib7rigJvLXP2EJIZXAE9vVlg1 msqEsQ2mOJdm5fH6yGjM0lpWLEb3l9H/JvdbX5Zax2SvQ+6/YF3zZD929QzRb5cU shNuRm6Nq2duTbT7 -----END CERTIFICATE-----Generated at Sun Jan 25 23:53:31 2026 by rpki-client