This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer File: 6_OFztCQ2_HQRHNOEqJw7muEHJY.cer (raw, json) Hash identifier: BjU0f65XHli3Nya6g/Ln+fN2ynGAVGMdSKTufo+DA9w= Subject key identifier: EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DF0EE032CFDD8D21B2D3E0AB6EB63 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.141.88.0/22 IP: 2a0e:cb40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f0:ee:03:2c:fd:d8:d2:1b:2d:3e:0a:b6:eb:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebf385ced090dbf1d044734e12a270ee6b841c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d9:97:88:4c:76:a0:6d:34:61:92:16:82:e0: 1c:c5:84:55:ee:f0:32:08:8b:fb:e2:21:06:42:e3: b8:66:e2:95:6c:53:f1:fe:21:e9:d8:66:df:f9:bb: b8:8f:5e:bf:f3:6a:7a:83:74:68:0d:04:36:a0:af: 1a:e7:2d:62:fc:f3:e1:8a:13:3a:03:98:37:69:38: e0:5a:5d:87:83:79:d5:1b:c3:58:de:9a:11:1e:e2: 11:67:bf:66:3b:3f:43:0d:0c:a8:7c:ed:3c:a2:a2: 7d:89:36:cb:54:c5:80:9e:39:34:6d:ff:73:83:c3: 34:6a:bd:0c:a0:f5:bc:99:06:e4:5b:97:c4:03:db: ed:fe:e1:80:ab:e4:48:1b:ef:aa:76:59:94:b6:21: ea:f8:76:bb:7b:06:b3:e2:c2:9a:62:97:24:62:75: a4:d5:36:48:79:04:c6:c7:8d:30:48:cc:7b:c8:66: ff:2d:84:3b:52:41:cb:dd:cb:4b:cf:12:6d:c0:12: a0:db:98:0c:c5:0b:82:b3:93:f4:d4:36:42:8c:30: 3d:9b:9b:3e:4f:cf:f7:34:be:d9:65:7b:93:91:64: 9b:3f:70:3a:03:51:ca:6e:f3:8e:79:c8:4d:ce:9e: 90:87:54:89:05:ec:4d:9c:77:4b:a8:95:f1:2b:df: 78:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.88.0/22 IPv6: 2a0e:cb40::/29 Signature Algorithm: sha256WithRSAEncryption 2b:0c:50:4a:44:94:87:5e:02:f8:f0:2f:c7:95:16:e7:da:a3: b8:48:26:32:47:48:96:b7:14:81:24:fc:59:33:b0:f9:f8:64: 3a:41:78:47:27:66:10:b8:6f:28:f8:0e:93:bb:39:b1:fe:a4: 95:8a:00:86:c7:79:e0:27:67:3d:75:db:aa:84:8f:bc:67:74: a7:b6:e2:97:6e:8a:32:af:d0:53:3f:80:a3:f1:4f:e2:08:09: 44:7b:51:97:23:67:93:16:b7:9e:e3:82:da:c3:6e:92:42:39: 45:71:b6:86:1d:3b:02:a8:d8:f1:77:5a:30:3c:ce:d6:4e:d3: 30:81:5a:22:b3:09:6e:92:04:e3:8c:dc:8f:c6:70:9a:c6:bb: 28:5a:ff:7e:72:af:a1:fa:bb:aa:9e:5f:25:ad:e4:e5:8c:9d: 13:6d:34:a5:f1:b4:ef:7e:5e:04:87:6d:5f:20:74:8c:b2:e4: 75:e0:56:76:03:d8:18:43:a5:ed:fa:f0:9b:f8:4e:4e:2f:20: 97:0c:6e:8e:30:88:f7:0e:5a:a4:37:29:31:9e:a4:e0:2e:63: 45:ac:95:7c:19:5b:55:0b:06:28:83:e8:1d:67:ca:d9:5e:29: 88:1d:13:92:94:01:9a:43:0c:56:03:fb:01:99:7b:f8:cf:d1: ef:47:5b:8b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5ffDuAyz92NIbLT4KtutjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmYzODVjZWQwOTBkYmYxZDA0NDczNGUxMmEyNzBlZTZiODQxYzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldmXiEx2oG00YZIWguAcxYRV7vAy CIv74iEGQuO4ZuKVbFPx/iHp2Gbf+bu4j16/82p6g3RoDQQ2oK8a5y1i/PPhihM6 A5g3aTjgWl2Hg3nVG8NY3poRHuIRZ79mOz9DDQyofO08oqJ9iTbLVMWAnjk0bf9z g8M0ar0MoPW8mQbkW5fEA9vt/uGAq+RIG++qdlmUtiHq+Ha7ewaz4sKaYpckYnWk 1TZIeQTGx40wSMx7yGb/LYQ7UkHL3ctLzxJtwBKg25gMxQuCs5P01DZCjDA9m5s+ T8/3NL7ZZXuTkWSbP3A6A1HKbvOOechNzp6Qh1SJBexNnHdLqJXxK994fQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFOvzhc7QkNvx0ERzThKicO5rhByWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjLzFhOWUx NC03ZmI0LTQ4OWItOTBiZS00NjVkMjIzYjIzMmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvMWE5ZTE0 LTdmYjQtNDg5Yi05MGJlLTQ2NWQyMjNiMjMyZS8xLzZfT0Z6dENRMl9IUVJITk9F cUp3N211RUhKWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLY1YMA0EAgACMAcDBQMqDstAMA0GCSqGSIb3 DQEBCwUAA4IBAQArDFBKRJSHXgL48C/HlRbn2qO4SCYyR0iWtxSBJPxZM7D5+GQ6 QXhHJ2YQuG8o+A6Tuzmx/qSVigCGx3ngJ2c9dduqhI+8Z3SntuKXbooyr9BTP4Cj 8U/iCAlEe1GXI2eTFree44Law26SQjlFcbaGHTsCqNjxd1owPM7WTtMwgVoiswlu kgTjjNyPxnCaxrsoWv9+cq+h+ruqnl8lreTljJ0TbTSl8bTvfl4Eh21fIHSMsuR1 4FZ2A9gYQ6Xt+vCb+E5OLyCXDG6OMIj3DlqkNykxnqTgLmNFrJV8GVtVCwYog+gd Z8rZXimIHROSlAGaQwxWA/sBmXv4z9HvR1uL -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:58 2026 by rpki-client