This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer File: 6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer (raw, json) Hash identifier: 2Dh6mQM+yOByQjKZbjo5TN6duAuPzM+VDS8fWBlCdyk= Subject key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EADF0D9599BCED72E15BF326B62B29 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50391 IP: 213.5.132.0/24 IP: 2a11:29c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:df:0d:95:99:bc:ed:72:e1:5b:f3:26:b6:2b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e96d85996e9354d1005e44c781d38adcf1082873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:36:09:98:c6:3e:ef:20:cf:b5:dc:a0:4f:bd: 64:e2:71:4c:a9:47:1f:78:a7:36:1f:29:45:b1:02: 9f:2b:f4:31:4b:3b:ca:d1:3f:f0:ff:bc:f7:d0:b4: 5b:a1:f5:ec:82:2a:bc:a5:b6:1b:c2:00:7d:93:44: 2c:02:52:28:9d:17:85:61:88:68:0e:c3:fd:25:7b: 12:ad:b9:68:90:06:4c:b1:f0:f2:7a:0b:a9:a4:79: aa:6c:af:7e:ec:4e:91:cd:db:29:6c:48:87:95:05: 3c:56:30:39:9e:ff:8d:ee:d1:2f:ed:6b:ca:5a:d4: 63:be:e3:62:07:a9:d5:24:43:57:32:74:41:cb:0d: 4c:0a:09:fa:9f:24:c4:34:f0:2e:5c:6d:81:3d:51: fe:0d:b6:2a:f3:b6:08:56:97:39:de:95:8d:bb:96: 39:b1:6d:de:cb:1e:62:ae:c0:b2:32:3e:21:ea:da: b7:14:9a:da:fe:de:90:d3:e7:54:3c:ce:96:5e:68: 32:37:f7:18:b6:ad:fc:9d:5e:b7:61:0f:da:4c:68: b0:c5:58:90:a3:fd:76:3c:b1:84:f7:2a:30:4f:f2: 56:c3:01:c7:83:26:2f:73:c2:1b:04:f5:99:86:a4: e7:fd:c8:f0:87:0e:d9:2e:8d:85:ec:3b:b7:18:6e: f4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.5.132.0/24 IPv6: 2a11:29c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50391 Signature Algorithm: sha256WithRSAEncryption 43:82:bc:a8:76:52:66:85:84:7b:00:a9:39:9a:6e:0d:d7:a9: fa:7d:a0:15:8f:32:46:8b:c0:ed:1e:b4:72:c8:69:8c:25:18: 63:b2:a9:a2:27:07:de:de:3b:24:84:ae:87:be:09:2a:4c:b2: 61:08:de:7b:ff:20:ad:66:84:eb:c5:aa:15:5f:13:cb:0b:1e: f3:8c:3a:1a:04:62:cc:bc:91:06:b3:24:23:77:db:3a:b1:85: 2f:b8:dd:6a:39:86:09:4d:f3:16:e7:28:98:2e:18:40:66:f1: 46:a8:68:41:32:0a:2f:59:f8:a4:75:25:bb:96:46:2d:6a:ff: d3:21:cc:66:33:7f:2e:95:eb:9a:2b:30:f4:ba:6e:07:62:66: 57:05:5c:f5:48:cb:78:22:6c:94:a7:94:11:9d:71:4d:11:19: cd:7c:76:48:8b:97:de:66:f2:d6:aa:b3:a4:97:c5:66:e5:14: 19:c8:4d:ed:58:4b:74:ed:4c:9c:fe:ce:f0:c3:83:a9:42:d3: 8c:d1:96:c4:9e:3b:70:8c:b3:90:a3:56:21:80:16:aa:d8:d1: 15:87:b6:3b:93:e2:e9:3e:a2:a4:d1:bb:50:c7:6c:05:ae:13: da:9c:2c:b6:9f:94:de:c3:69:c2:f9:9e:e5:36:01:8a:f0:0a: 33:29:74:24 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgISAZt26t8NlZm87XLhW/MmtispMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTZkODU5OTZlOTM1NGQxMDA1ZTQ0Yzc4MWQzOGFkY2YxMDgyODczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTYJmMY+7yDPtdygT71k4nFMqUcf eKc2HylFsQKfK/QxSzvK0T/w/7z30LRbofXsgiq8pbYbwgB9k0QsAlIonReFYYho DsP9JXsSrblokAZMsfDyeguppHmqbK9+7E6RzdspbEiHlQU8VjA5nv+N7tEv7WvK WtRjvuNiB6nVJENXMnRByw1MCgn6nyTENPAuXG2BPVH+DbYq87YIVpc53pWNu5Y5 sW3eyx5irsCyMj4h6tq3FJra/t6Q0+dUPM6WXmgyN/cYtq38nV63YQ/aTGiwxViQ o/12PLGE9yowT/JWwwHHgyYvc8IbBPWZhqTn/cjwhw7ZLo2F7Du3GG70AwIDAQAB o4ICyzCCAscwHQYDVR0OBBYEFOlthZluk1TRAF5Ex4HTitzxCChzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzgxMTE1 YmM2LTEwZjYtNGFmMy1iYTA5LThiNjg3YTU2ZmJmNS8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODEx MTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvRTk2RDg1OTk2RTkz NTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgME ANUFhDANBAIAAjAHAwUDKhEpwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAxNcw DQYJKoZIhvcNAQELBQADggEBAEOCvKh2UmaFhHsAqTmabg3Xqfp9oBWPMkaLwO0e tHLIaYwlGGOyqaInB97eOySEroe+CSpMsmEI3nv/IK1mhOvFqhVfE8sLHvOMOhoE Ysy8kQazJCN32zqxhS+43Wo5hglN8xbnKJguGEBm8UaoaEEyCi9Z+KR1JbuWRi1q /9MhzGYzfy6V65orMPS6bgdiZlcFXPVIy3gibJSnlBGdcU0RGc18dkiLl95m8taq s6SXxWblFBnITe1YS3TtTJz+zvDDg6lC04zRlsSeO3CMs5CjViGAFqrY0RWHtjuT 4uk+oqTRu1DHbAWuE9qcLLaflN7DacL5nuU2AYrwCjMpdCQ= -----END CERTIFICATE-----Generated at Sun Jan 25 12:08:45 2026 by rpki-client