This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer File: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer (raw, json) Hash identifier: ohVcIYi+WBsaZs550Z1k5aOdTJorBkPKezUcJUKLxO0= Subject key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7B71A1E09806F4BC8B25F3401783A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41807 IP: 195.8.206.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b7:1a:1e:09:80:6f:4b:c8:b2:5f:34:01:78:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:92:93:d1:dc:fa:91:e5:50:d1:f8:27:94:1c: 38:4b:66:47:8c:30:34:84:4b:82:7a:d8:1a:97:c0: e2:75:93:74:8f:1c:15:95:7d:30:6f:45:d1:05:b8: 97:93:8b:db:e6:22:ec:77:f3:6b:a5:2e:be:c0:f8: 8d:c8:17:89:e0:c5:e1:b2:17:27:ec:0f:1d:9b:9d: 2b:65:8a:7d:55:08:ca:d7:f7:0c:d8:20:4f:18:67: 80:dc:92:16:09:d5:31:4d:15:79:7a:82:19:e4:92: 3e:d8:8f:3d:70:42:05:ca:95:ac:17:b2:82:31:20: c7:83:a3:d9:f7:56:1a:eb:9e:50:39:89:46:a2:6a: 1d:44:a6:a6:c6:74:d6:48:7b:3c:f4:4e:f5:5c:18: a2:f9:d9:29:0b:23:4f:b8:22:a8:b4:fe:f3:e3:21: 72:7d:42:f1:c9:d2:6b:25:9d:47:66:fb:da:3d:8d: 78:41:69:e7:4f:9a:c8:ce:1e:12:25:e7:b4:01:53: 5f:1b:80:d8:b9:a7:56:a8:64:ca:a0:f6:3b:e2:7c: d2:ae:78:f1:de:36:fd:12:85:c3:d2:66:87:24:95: 8e:ec:e5:58:f4:99:11:48:2e:7c:bf:02:35:83:46: 88:b2:94:1d:04:04:d8:4d:ab:d0:bc:46:88:11:b9: 06:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.8.206.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41807 Signature Algorithm: sha256WithRSAEncryption 73:06:2a:77:da:0a:ad:0d:e9:db:5b:36:2b:b2:99:54:68:d0: 47:66:7f:1d:75:db:83:cc:fd:39:80:0b:c3:d7:7c:e0:bc:8f: 1d:3c:12:73:e2:e5:fe:a9:df:08:86:8c:ca:9f:f7:4c:90:1e: 8d:80:a0:c3:e4:55:fe:87:35:06:bb:e6:aa:0a:09:fa:a7:5e: b3:a2:0f:eb:3c:c6:d4:64:3f:26:3f:28:21:f2:20:51:c9:25: 84:55:2e:c7:90:3c:12:28:9f:db:42:fb:9d:6e:86:f4:67:40: ca:f9:15:3a:78:2a:26:fa:e3:78:b3:65:ed:58:c9:5b:81:42: 8b:80:dc:85:4d:0f:76:05:ee:b2:aa:62:58:f2:dd:d0:a3:cb: a5:d5:54:f8:4f:03:ff:36:d7:ca:e7:b3:73:85:06:45:1a:26: 1b:89:69:a6:0d:b3:68:7c:51:ca:fc:f0:9f:ef:8f:24:00:4f: 4b:a4:48:fd:d7:91:35:12:4e:2b:b6:ec:ea:7b:b0:4f:c7:da: 13:8b:6a:2a:cd:71:42:4f:5d:ac:08:10:75:4c:0e:b9:0a:75: 74:3e:dc:89:54:40:b2:98:de:5b:ed:df:d8:e5:42:bd:52:8e: 25:4d:73:a4:da:63:a7:88:b6:a7:1b:95:8d:99:89:5a:a9:b5: a3:78:18:af -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6x7caHgmAb0vIsl80AXg6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTc1MDNiODNmYTA5YTc1YmNiOTEwNzU0MDBmODMwN2E2NjdiOGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JKT0dz6keVQ0fgnlBw4S2ZHjDA0 hEuCetgal8DidZN0jxwVlX0wb0XRBbiXk4vb5iLsd/NrpS6+wPiNyBeJ4MXhshcn 7A8dm50rZYp9VQjK1/cM2CBPGGeA3JIWCdUxTRV5eoIZ5JI+2I89cEIFypWsF7KC MSDHg6PZ91Ya655QOYlGomodRKamxnTWSHs89E71XBii+dkpCyNPuCKotP7z4yFy fULxydJrJZ1HZvvaPY14QWnnT5rIzh4SJee0AVNfG4DYuadWqGTKoPY74nzSrnjx 3jb9EoXD0maHJJWO7OVY9JkRSC58vwI1g0aIspQdBATYTavQvEaIEbkGvQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOp1A7g/oJp1vLkQdUAPgwemZ7jtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5L2M0MjE2 MC1kNmY0LTQ4MmMtYmY2Mi02MjE0MGIyMDJlYjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvYzQyMTYw LWQ2ZjQtNDgyYy1iZjYyLTYyMTQwYjIwMmViNC8xLzZuVUR1RC1nbW5XOHVSQjFR QS1EQjZabnVPMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwwjOMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCjTzANBgkqhkiG9w0BAQsFAAOCAQEAcwYqd9oKrQ3p21s2K7KZVGjQR2Z/HXXb g8z9OYALw9d84LyPHTwSc+Ll/qnfCIaMyp/3TJAejYCgw+RV/oc1BrvmqgoJ+qde s6IP6zzG1GQ/Jj8oIfIgUcklhFUux5A8Eiif20L7nW6G9GdAyvkVOngqJvrjeLNl 7VjJW4FCi4DchU0PdgXusqpiWPLd0KPLpdVU+E8D/zbXyuezc4UGRRomG4lppg2z aHxRyvzwn++PJABPS6RI/deRNRJOK7bs6nuwT8faE4tqKs1xQk9drAgQdUwOuQp1 dD7ciVRAspjeW+3f2OVCvVKOJU1zpNpjp4i2pxuVjZmJWqm1o3gYrw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:52:38 2026 by rpki-client