This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer File: 6lUOVOR2bVdl0PPQYd8ddNpViXM.cer (raw, json) Hash identifier: QtudKZ5tw/2/Nl4H/2rV5kyKxG9o2pE6I6LRqGDq1i8= Subject key identifier: EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C745A7396A0CC20A84A1A6626252E3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210422 IP: 80.68.154.0/24 IP: 2a12:9f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:45:a7:39:6a:0c:c2:0a:84:a1:a6:62:62:52:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea550e54e4766d5765d0f3d061df1d74da558973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:23:90:a9:75:64:46:17:f8:90:78:25:f0: 5b:1e:5e:d7:5c:f6:2b:9c:f1:93:d5:56:53:48:83: 98:29:57:26:90:eb:83:09:cc:42:dd:ee:b5:6d:a7: 3e:1c:b6:b5:0b:c6:b4:e4:b5:a6:12:7e:f4:cb:8b: 2e:9f:18:7f:94:fd:e4:05:e6:1e:1b:93:b3:98:15: bf:0b:3d:f2:11:91:ec:38:d6:44:ce:ef:61:db:62: 78:61:c1:ea:71:80:6d:0b:12:7a:d0:51:15:74:92: 8c:1d:a3:7f:4c:51:e3:a5:4d:3c:87:06:95:72:01: ac:f2:8a:80:dc:af:bc:24:06:c3:d4:b0:1a:1f:34: d8:59:79:40:6c:fb:3a:cc:ed:9d:fb:a8:1f:13:bc: 9b:53:e2:f2:c8:4b:6d:04:81:88:06:15:2f:8d:b2: 6e:c0:0d:9b:ad:e1:ce:0c:78:a2:38:3a:6a:c0:02: 80:45:f5:1a:35:45:85:26:96:7c:02:36:a7:d1:9e: 6e:44:a2:90:54:c4:5b:93:2c:81:70:bb:68:93:e4: 31:7a:46:b7:04:7c:de:89:b9:d1:45:07:3b:93:75: e6:e4:35:74:c1:15:18:98:cd:01:ac:c0:29:13:fb: ca:95:27:f4:4c:28:f0:32:5f:ee:d0:6e:56:97:93: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.68.154.0/24 IPv6: 2a12:9f80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210422 Signature Algorithm: sha256WithRSAEncryption 37:46:ba:a8:06:4f:39:a1:a9:b9:70:96:36:43:d6:50:4a:87: 66:9f:fe:29:1b:39:98:cd:6c:f4:c1:04:13:75:3a:22:43:e4: 28:44:07:e8:53:8b:d6:b7:4d:fd:76:2c:e0:65:6c:f5:7d:3c: 6b:0e:fa:09:00:d3:21:5d:33:b8:c0:ef:7b:57:c6:88:2d:3d: c5:64:b9:b9:db:21:26:73:88:a6:01:a8:ce:01:46:8b:3b:a1: b0:03:08:c7:61:ce:05:9b:cc:02:de:ec:10:69:62:53:c6:6e: 9c:cc:40:1b:89:f6:77:03:0e:1c:25:76:3b:4e:02:fa:22:d1: bd:7a:78:06:2f:6d:34:0e:0a:ef:10:eb:4e:24:f4:f8:15:5b: 35:ef:0a:3c:f8:a6:7f:23:f9:af:00:40:89:b0:b5:f2:26:e6: 11:66:34:9b:bf:e0:1f:e3:11:b6:72:67:8b:cf:8e:b4:6b:1f: b9:a1:3d:ff:ea:b3:58:32:d4:2f:5c:7a:80:67:34:13:87:d3: 4a:c1:f1:6a:6a:9d:c8:1b:09:ad:31:09:8b:fb:4d:60:64:1f: e2:f3:38:47:35:0c:6f:a7:bd:89:2b:1d:e7:78:8a:f1:6e:04: 62:93:36:0c:75:01:85:a4:b8:78:b0:cd:1c:e9:ab:dc:82:d5: 5a:d3:9e:84 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3x0WnOWoMwgqEoaZiYlLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTU1MGU1NGU0NzY2ZDU3NjVkMGYzZDA2MWRmMWQ3NGRhNTU4OTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8QjkKl1ZEYX+JB4JfBbHl7XXPYr nPGT1VZTSIOYKVcmkOuDCcxC3e61bac+HLa1C8a05LWmEn70y4sunxh/lP3kBeYe G5OzmBW/Cz3yEZHsONZEzu9h22J4YcHqcYBtCxJ60FEVdJKMHaN/TFHjpU08hwaV cgGs8oqA3K+8JAbD1LAaHzTYWXlAbPs6zO2d+6gfE7ybU+LyyEttBIGIBhUvjbJu wA2breHODHiiODpqwAKARfUaNUWFJpZ8Ajan0Z5uRKKQVMRbkyyBcLtok+Qxeka3 BHzeibnRRQc7k3Xm5DV0wRUYmM0BrMApE/vKlSf0TCjwMl/u0G5Wl5NqmwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOpVDlTkdm1XZdDz0GHfHXTaVYlzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzY4ZjYz Ny0zMTIxLTQwZjctYjc4Zi05YzlmMjA5MDMyOWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvNjhmNjM3 LTMxMjEtNDBmNy1iNzhmLTljOWYyMDkwMzI5YS8xLzZsVU9WT1IyYlZkbDBQUFFZ ZDhkZE5wVmlYTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAUESaMA0EAgACMAcDBQMqEp+AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM19jANBgkqhkiG9w0BAQsFAAOCAQEAN0a6qAZPOaGp uXCWNkPWUEqHZp/+KRs5mM1s9MEEE3U6IkPkKEQH6FOL1rdN/XYs4GVs9X08aw76 CQDTIV0zuMDve1fGiC09xWS5udshJnOIpgGozgFGizuhsAMIx2HOBZvMAt7sEGli U8ZunMxAG4n2dwMOHCV2O04C+iLRvXp4Bi9tNA4K7xDrTiT0+BVbNe8KPPimfyP5 rwBAibC18ibmEWY0m7/gH+MRtnJni8+OtGsfuaE9/+qzWDLUL1x6gGc0E4fTSsHx amqdyBsJrTEJi/tNYGQf4vM4RzUMb6e9iSsd53iK8W4EYpM2DHUBhaS4eLDNHOmr 3ILVWtOehA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:43:04 2026 by rpki-client