This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer File: 6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer (raw, json) Hash identifier: ogcyjdCD+ZpGuKebg6IC2lYlZ761sp+FubugXXi9ILk= Subject key identifier: E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA39F4EC132FEFDBD9C28CC328F5757 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16243 AS: 203166 IP: 77.222.64.0/19 IP: 87.249.96.0/19 IP: 185.76.16.0/22 IP: 217.114.96.0/20 IP: 2001:1540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:9f:4e:c1:32:fe:fd:bd:9c:28:cc:32:8f:57:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e992a035bffc5a41412c497c1285d1838234ffb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a4:63:8a:b5:ec:3b:2b:1d:86:53:5f:ff:e6: f3:91:5e:a0:c2:0e:c6:62:77:40:92:85:16:06:2f: cc:ac:6f:a6:a6:bc:56:a9:d2:83:ae:4b:cf:28:5f: 51:c0:d1:20:3a:bc:bd:9c:33:a6:b0:fa:12:ec:30: 32:35:44:c1:5d:01:1a:3e:08:c6:f9:40:41:ee:0a: a5:ea:b5:b7:27:50:be:fc:cb:d7:4a:d5:56:13:66: db:75:70:ba:21:7b:9d:ce:97:b8:cf:45:14:e0:63: d4:57:5d:1c:45:be:89:5f:f3:15:40:79:ca:2e:3b: ec:bd:69:5d:12:ec:ae:d3:03:12:8a:f1:b7:64:22: e3:e0:7f:7c:51:a8:ed:8a:46:b3:8b:4d:7a:ff:4d: 7c:ac:cd:dd:29:25:09:d6:77:ea:f4:c8:a6:a3:05: 9b:e3:61:81:97:1c:bf:bb:6a:83:3c:37:e1:9d:4e: 9b:b9:a2:b6:ae:0f:21:35:4a:07:6f:c0:1b:ef:a7: 40:59:b9:b0:88:f1:ed:19:c1:60:9a:30:14:96:84: 84:5d:09:15:75:35:25:cc:34:f3:cd:d0:72:98:da: bf:5c:58:ce:a6:67:d9:db:13:cb:42:e9:d1:15:25: ce:79:19:b7:8b:2e:13:64:4d:5d:5e:7d:61:52:14: 18:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.222.64.0/19 87.249.96.0/19 185.76.16.0/22 217.114.96.0/20 IPv6: 2001:1540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16243 203166 Signature Algorithm: sha256WithRSAEncryption a5:af:80:8a:d5:d7:e2:f7:c7:c9:8e:a3:35:24:fb:dd:d7:2f: 00:b8:d8:bf:82:7a:eb:f0:76:64:a2:bd:69:ec:e6:a8:ec:7c: 71:a0:d0:e5:c0:34:28:b1:b2:8e:54:fd:f1:ba:c7:93:6d:55: 6c:2d:d0:75:73:cd:5e:6b:b5:3d:89:02:1a:2c:e5:29:e7:28: ae:c3:63:10:a6:23:5a:48:6a:48:3f:d4:5a:d1:92:fd:ac:9b: 74:a1:68:98:5f:09:b9:88:51:ad:f6:b5:30:f1:ae:03:d2:27: 61:94:fa:16:d3:f5:8e:b3:cf:f4:ab:6e:7b:41:d2:d7:65:72: f2:eb:c3:b5:bc:88:3f:9c:8c:3c:6a:e8:5b:d7:9d:d8:11:6c: 58:48:ef:7e:ca:f7:7e:af:f3:40:f4:a9:d2:5f:1c:17:ad:2d: fc:51:50:4c:ca:97:0b:9e:56:c9:8a:b0:07:83:d3:96:92:c7: 92:b7:2e:f7:ff:1a:c0:26:54:60:e0:8f:4c:35:50:19:7f:6d: 26:be:7f:7d:5a:01:a9:4a:7f:ac:30:62:b5:de:2a:d1:cb:3c: be:d6:f5:f3:19:ab:61:9a:86:78:57:99:cf:29:73:1d:88:e8: be:63:5a:80:ee:64:45:b9:38:f0:f0:a3:d2:05:b8:5d:0a:a1: 97:ad:5d:2a -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgISAZt7o59OwTL+/b2cKMwyj1dXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTkyYTAzNWJmZmM1YTQxNDEyYzQ5N2MxMjg1ZDE4MzgyMzRmZmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqRjirXsOysdhlNf/+bzkV6gwg7G YndAkoUWBi/MrG+mprxWqdKDrkvPKF9RwNEgOry9nDOmsPoS7DAyNUTBXQEaPgjG +UBB7gql6rW3J1C+/MvXStVWE2bbdXC6IXudzpe4z0UU4GPUV10cRb6JX/MVQHnK LjvsvWldEuyu0wMSivG3ZCLj4H98Uajtikazi016/018rM3dKSUJ1nfq9MimowWb 42GBlxy/u2qDPDfhnU6buaK2rg8hNUoHb8Ab76dAWbmwiPHtGcFgmjAUloSEXQkV dTUlzDTzzdBymNq/XFjOpmfZ2xPLQunRFSXOeRm3iy4TZE1dXn1hUhQYgQIDAQAB o4ICxTCCAsEwHQYDVR0OBBYEFOmSoDW//FpBQSxJfBKF0YOCNP+wMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2LzVmNWY2 Yi0zNWU0LTQzOTEtOTUxOS1iOTdkMzM2ZWEyZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvNWY1ZjZi LTM1ZTQtNDM5MS05NTE5LWI5N2QzMzZlYTJmNS8xLzZaS2dOYl84V2tGQkxFbDhF b1hSZzRJMF83QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQFTd5AAwQFV/lgAwQCuUwQAwQE2XJgMA0EAgAC MAcDBQMgARVAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAj9zAgMDGZ4wDQYJKoZI hvcNAQELBQADggEBAKWvgIrV1+L3x8mOozUk+93XLwC42L+CeuvwdmSivWns5qjs fHGg0OXANCixso5U/fG6x5NtVWwt0HVzzV5rtT2JAhos5SnnKK7DYxCmI1pIakg/ 1FrRkv2sm3ShaJhfCbmIUa32tTDxrgPSJ2GU+hbT9Y6zz/SrbntB0tdlcvLrw7W8 iD+cjDxq6FvXndgRbFhI737K936v80D0qdJfHBetLfxRUEzKlwueVsmKsAeD05aS x5K3Lvf/GsAmVGDgj0w1UBl/bSa+f31aAalKf6wwYrXeKtHLPL7W9fMZq2GahnhX mc8pcx2I6L5jWoDuZEW5OPDwo9IFuF0KoZetXSo= -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:04 2026 by rpki-client