This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer File: 6_q_pigGP2uOmIhWb18_z6eYxiE.cer (raw, json) Hash identifier: Y5auBjtILlcD73u90G9ukVPyhmnrwO/ooY063A2AJoo= Subject key identifier: EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12A497DBF7720007A9F01294A572CE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 80.79.144.0/20 IP: 185.125.156.0/22 IP: 2a06:b900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a4:97:db:f7:72:00:07:a9:f0:12:94:a5:72:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:30:71:c7:ee:a7:60:89:ff:7c:3f:37:1e:7e: 61:bf:43:67:35:92:43:47:54:db:d8:3a:4c:fc:68: b9:bc:d5:b3:39:52:ba:bf:da:71:ef:a8:07:82:4e: 72:ee:0f:8c:90:df:6d:59:5e:77:1e:06:5c:f3:96: 5f:04:26:1b:19:19:ee:21:86:80:b7:67:72:85:ce: b8:de:54:03:3c:0f:3e:ee:00:c9:6d:bb:a6:b9:7c: 75:ed:45:0a:48:c5:bd:c9:39:ca:bd:0d:82:5a:f3: 17:3a:a7:e1:a7:e4:33:a7:cc:36:2d:a0:86:01:31: 9b:83:37:86:1f:61:7c:a8:0e:cd:4b:78:d0:cb:66: 81:09:16:b7:cb:cf:69:00:50:95:1b:a2:cf:05:53: 1b:ec:36:5b:c1:28:48:9c:f0:98:e1:03:57:52:48: a9:d1:32:6c:85:ae:a1:4c:b0:22:d5:2b:f8:ee:b0: 7c:97:83:a8:bd:8b:3a:ad:d5:08:03:b1:ba:88:32: 49:20:86:8a:e0:02:0b:0f:1c:6e:5b:5c:24:3d:66: 60:5a:32:fe:3e:1c:a3:67:1d:dd:06:82:3d:d7:f6: 4b:38:74:d6:7a:4d:cd:64:b3:76:bd:e6:29:6a:b7: d2:3a:cc:b9:fc:e8:fc:7b:f0:aa:72:57:b1:e6:f6: c7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.79.144.0/20 185.125.156.0/22 IPv6: 2a06:b900::/29 Signature Algorithm: sha256WithRSAEncryption 35:aa:7d:38:ec:ac:7a:f6:68:38:4a:84:67:f0:d7:1a:be:da: 5c:f3:40:a7:9c:10:52:75:c1:26:f5:58:6d:d5:a7:7c:12:e3: 49:a5:55:c5:3a:9c:37:82:c2:5a:0e:84:56:3e:a6:e4:ed:30: 11:1e:97:03:fa:44:4c:e1:7d:bb:95:95:a8:f3:f0:99:78:88: 7e:f1:3b:04:d8:ea:3b:06:29:f0:1a:f0:07:a2:47:3f:52:1c: f8:bf:96:d6:10:69:24:48:86:a3:ab:32:a1:54:42:ef:e7:c0: 84:f9:fe:78:31:6c:94:8f:e7:73:ad:66:ce:cd:46:66:dd:5e: 6b:c8:ca:45:24:0b:80:32:ff:37:28:28:f3:32:7f:0f:d9:27: 18:21:38:da:ea:b3:9d:bb:63:2a:de:98:e0:f1:d7:29:34:6b: 47:73:27:75:49:7b:5b:65:21:89:c8:d9:34:57:f3:e2:46:ce: f7:ce:53:73:91:86:51:0c:70:e9:4c:44:15:b7:93:74:da:f0: 6b:de:85:90:6d:33:a0:5d:0a:29:e4:34:37:25:7b:27:01:34: 8a:03:ac:cc:a8:e8:dc:e1:22:da:1a:9d:9a:73:07:49:6c:94: 68:77:84:1e:8d:89:c7:8d:2e:d2:28:85:f9:cc:7c:72:b2:4c: bb:d1:24:54 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt8EqSX2/dyAAep8BKUpXLOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmZhYmZhNjI4MDYzZjZiOGU5ODg4NTY2ZjVmM2ZjZmE3OThjNjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTBxx+6nYIn/fD83Hn5hv0NnNZJD R1Tb2DpM/Gi5vNWzOVK6v9px76gHgk5y7g+MkN9tWV53HgZc85ZfBCYbGRnuIYaA t2dyhc643lQDPA8+7gDJbbumuXx17UUKSMW9yTnKvQ2CWvMXOqfhp+Qzp8w2LaCG ATGbgzeGH2F8qA7NS3jQy2aBCRa3y89pAFCVG6LPBVMb7DZbwShInPCY4QNXUkip 0TJsha6hTLAi1Sv47rB8l4OovYs6rdUIA7G6iDJJIIaK4AILDxxuW1wkPWZgWjL+ PhyjZx3dBoI91/ZLOHTWek3NZLN2veYparfSOsy5/Oj8e/Cqclex5vbH8QIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFOv6v6YoBj9rjpiIVm9fP8+nmMYhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkL2EzYTMx MS0zNzg0LTQ4MTgtYWJmOS1lNWZkNmU5ODQyYWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvYTNhMzEx LTM3ODQtNDgxOC1hYmY5LWU1ZmQ2ZTk4NDJhYi8xLzZfcV9waWdHUDJ1T21JaFdi MThfejZlWXhpRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEUE+QAwQCuX2cMA0EAgACMAcDBQMqBrkAMA0G CSqGSIb3DQEBCwUAA4IBAQA1qn047Kx69mg4SoRn8Ncavtpc80CnnBBSdcEm9Vht 1ad8EuNJpVXFOpw3gsJaDoRWPqbk7TARHpcD+kRM4X27lZWo8/CZeIh+8TsE2Oo7 BinwGvAHokc/Uhz4v5bWEGkkSIajqzKhVELv58CE+f54MWyUj+dzrWbOzUZm3V5r yMpFJAuAMv83KCjzMn8P2ScYITja6rOdu2Mq3pjg8dcpNGtHcyd1SXtbZSGJyNk0 V/PiRs73zlNzkYZRDHDpTEQVt5N02vBr3oWQbTOgXQop5DQ3JXsnATSKA6zMqOjc 4SLaGp2acwdJbJRod4QejYnHjS7SKIX5zHxysky70SRU -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:00 2026 by rpki-client