This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer File: 6dJyHy4r0BG4poYK0lcsQFwLVA8.cer (raw, json) Hash identifier: J7BCigqU3nE9zFNFHjIJismE97MB5/TQKDhdWZl/XsU= Subject key identifier: E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F841A4291F4A54AD65840D09968934A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199873 IP: 185.43.192.0/22 IP: 2a01:7020::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:1a:42:91:f4:a5:4a:d6:58:40:d0:99:68:93:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3c:31:38:db:c2:8e:81:18:36:bc:c8:a6:00: 43:81:a5:7d:4f:d6:4d:70:49:a3:76:6c:12:71:6d: 2a:81:8a:b8:1b:c2:92:99:ea:cb:03:76:74:06:ec: 8e:43:26:d2:6b:90:b7:46:ca:3c:7d:60:d8:0f:d3: 2b:1a:fe:73:b6:8c:0e:67:dc:12:82:cb:c6:17:a8: fa:c4:d6:1d:91:6a:cf:1a:4e:d9:95:35:e3:d7:29: 10:0e:3d:cd:35:a8:6d:5b:c4:70:00:0b:3f:6d:f2: 48:46:7d:d4:0f:ea:ee:8e:4f:f0:59:4f:ba:d4:19: 44:ec:f6:a2:5d:fe:2d:40:7b:74:7a:bc:b7:e1:1a: 7d:48:e5:8f:2a:a0:39:54:06:e1:2c:cc:05:ea:8c: ba:70:ac:32:0f:8a:ae:06:0c:23:04:ca:7c:3c:44: 0d:5c:6c:0c:64:a0:1e:cb:cf:fa:08:32:16:39:a9: b7:76:ee:b9:c5:fc:19:8c:8c:b4:54:69:b9:4e:c2: 90:19:66:97:b4:a9:96:f3:0f:0a:8c:6c:db:29:73: 6a:9f:c9:d6:a3:b1:fe:92:b1:e2:6f:39:b8:74:a4: 35:eb:83:83:1c:f2:6c:e3:6e:cc:a4:f6:13:cb:4b: f3:20:bb:24:9f:99:ce:9c:cc:be:b1:24:ab:6e:80: 7f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.43.192.0/22 IPv6: 2a01:7020::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199873 Signature Algorithm: sha256WithRSAEncryption 33:92:30:41:b6:68:de:37:3f:36:9a:3b:26:8a:cb:4e:c0:19: 06:77:37:f9:5b:de:2c:43:b2:cc:e5:d8:50:86:bf:f0:f5:33: f1:ca:41:3f:19:62:d8:95:4e:54:00:11:35:29:ff:00:3c:68: f3:12:31:f8:12:3f:eb:aa:4a:31:e1:55:d1:ff:c1:6d:52:83: b9:d1:4c:25:18:5d:09:ff:58:ba:52:ae:81:7f:58:20:5a:22: 0b:b1:76:a6:72:71:fb:19:51:ec:86:d0:2d:75:e0:9c:aa:53: eb:3f:5c:fa:cb:d7:65:f4:5d:ab:1c:27:59:a5:cc:0a:51:6c: 9b:98:b2:09:ea:94:4f:3d:96:40:82:38:b9:c6:65:5c:1e:e5: 67:ef:d7:a8:91:12:47:04:eb:ef:eb:7c:24:2d:cf:d4:70:f4: 09:61:1d:7b:2f:8d:02:53:52:b1:94:70:71:0a:9e:36:1b:d8: ae:1a:02:aa:32:f7:1a:57:42:f4:53:0f:0c:70:c8:8e:82:23: b2:ac:0e:2e:f0:8e:78:f2:99:55:c6:ef:d4:6b:b4:d0:1f:49: 96:6a:97:62:ce:ca:01:35:04:7d:36:4d:d8:da:ef:df:88:67: 03:d0:cc:e6:e0:b0:6b:c9:8a:23:cf:12:7d:7a:5a:75:d2:8e: b3:f1:5d:7d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/hBpCkfSlStZYQNCZaJNKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWQyNzIxZjJlMmJkMDExYjhhNjg2MGFkMjU3MmM0MDVjMGI1NDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDwxONvCjoEYNrzIpgBDgaV9T9ZN cEmjdmwScW0qgYq4G8KSmerLA3Z0BuyOQybSa5C3Rso8fWDYD9MrGv5ztowOZ9wS gsvGF6j6xNYdkWrPGk7ZlTXj1ykQDj3NNahtW8RwAAs/bfJIRn3UD+rujk/wWU+6 1BlE7PaiXf4tQHt0ery34Rp9SOWPKqA5VAbhLMwF6oy6cKwyD4quBgwjBMp8PEQN XGwMZKAey8/6CDIWOam3du65xfwZjIy0VGm5TsKQGWaXtKmW8w8KjGzbKXNqn8nW o7H+krHibzm4dKQ164ODHPJs427MpPYTy0vzILskn5nOnMy+sSSrboB/QQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOnSch8uK9ARuKaGCtJXLEBcC1QPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkLzM2OGRm MC01YzQxLTQ5ZDMtYTlhOS1jNDU5MDNjM2IzMjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvMzY4ZGYw LTVjNDEtNDlkMy1hOWE5LWM0NTkwM2MzYjMyOS8xLzZkSnlIeTRyMEJHNHBvWUsw bGNzUUZ3TFZBOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSvAMA0EAgACMAcDBQAqAXAgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMMwTANBgkqhkiG9w0BAQsFAAOCAQEAM5IwQbZo3jc/ Npo7JorLTsAZBnc3+VveLEOyzOXYUIa/8PUz8cpBPxli2JVOVAARNSn/ADxo8xIx +BI/66pKMeFV0f/BbVKDudFMJRhdCf9YulKugX9YIFoiC7F2pnJx+xlR7IbQLXXg nKpT6z9c+svXZfRdqxwnWaXMClFsm5iyCeqUTz2WQII4ucZlXB7lZ+/XqJESRwTr 7+t8JC3P1HD0CWEdey+NAlNSsZRwcQqeNhvYrhoCqjL3GldC9FMPDHDIjoIjsqwO LvCOePKZVcbv1Gu00B9JlmqXYs7KATUEfTZN2Nrv34hnA9DM5uCwa8mKI88SfXpa ddKOs/FdfQ== -----END CERTIFICATE-----Generated at Sun Jan 25 07:45:08 2026 by rpki-client