This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer File: 6ogLzDAqXbosNRpv054KizkipTU.cer (raw, json) Hash identifier: X+Xrf++MVim+WY6dBEw6yxLiG2OTZaTRVLvD6kUeaCc= Subject key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED2F0497262E6F431C132923B894BC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25421 IP: 193.35.248.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2f:04:97:26:2e:6f:43:1c:13:29:23:b8:94:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9a:b9:8c:01:3b:de:3a:83:54:21:aa:e9:a5: ae:f4:a6:ba:89:e6:ff:d5:a4:f4:f1:59:49:31:9b: 36:82:53:63:80:d2:4f:5f:3e:96:23:ff:26:6d:b2: b5:05:72:a2:3a:c2:f9:a7:5d:45:9c:00:6b:42:e2: 14:b3:4f:86:fc:14:36:bc:19:8c:eb:be:55:bb:56: 4d:97:bb:4b:45:97:1d:38:af:8c:84:72:28:b9:97: 25:e8:48:bd:47:b0:a3:13:0a:d6:1f:7a:41:57:b4: b4:83:04:ae:e1:db:ed:62:76:40:06:03:51:3d:ba: ab:0a:11:46:a6:5a:b6:9b:19:12:b3:ce:97:c1:ad: 7f:16:e7:de:85:41:ee:b3:41:7c:cc:60:29:25:7a: 10:99:8c:c1:3c:59:8a:37:e7:04:61:ca:5e:05:19: a9:85:62:b8:f1:2f:56:59:34:ba:2c:a7:7c:e2:24: 90:0f:25:de:9a:86:ca:ac:4e:99:8f:00:c8:09:89: 11:62:00:1b:0d:b2:1f:61:35:c7:83:14:31:58:43: 10:15:98:3c:df:c8:18:8f:35:4e:1d:f6:17:bb:05: 35:ef:6c:3d:33:56:de:55:24:6f:eb:67:64:f0:89: 9f:4b:6c:cb:a6:39:e0:82:e3:be:73:95:8f:bf:23: 97:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.35.248.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25421 Signature Algorithm: sha256WithRSAEncryption 9a:20:7f:24:77:33:ee:cd:5e:3b:e4:b3:b4:d1:d2:15:49:da: 6b:e6:38:46:b0:2e:30:7a:f1:00:80:b4:9f:9a:c6:ac:3a:94: d6:a9:85:0d:1d:3c:c4:6e:25:bd:b4:61:0f:a8:3f:ff:ca:87: a5:2c:74:e4:a7:5c:af:19:93:80:16:3d:ed:b7:e6:cf:88:e0: ab:67:8c:cc:18:06:3d:37:e4:39:56:6b:d7:c9:46:ca:5f:40: 1f:6f:14:97:31:c2:99:e8:e4:42:eb:fd:05:82:33:62:ec:bd: 49:61:3e:27:f9:4c:7c:f3:a9:9e:01:0d:7a:7d:f0:4e:ca:78: 43:df:63:67:73:c4:4c:0e:31:41:5f:43:11:f5:60:c5:03:06: 90:72:97:fc:49:2c:a1:fb:93:02:fe:80:ec:35:71:e6:91:f8: bd:23:11:bd:45:53:d7:8e:e8:c3:a5:97:1b:29:43:54:63:08: aa:67:8b:71:48:2d:41:1c:f9:d1:8a:ef:38:be:8d:03:5d:13: 3e:78:ba:fc:40:6a:1e:7d:da:4a:d7:38:92:d8:91:90:60:b9: 8a:db:ec:c0:47:c2:97:c5:14:05:1c:35:b9:56:10:92:71:1a: a8:b3:cf:0f:36:5a:28:d7:3a:57:7e:e1:bb:21:4f:c0:f9:3c: ab:6a:af:87 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt57S8ElyYub0McEykjuJS8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTg4MGJjYzMwMmE1ZGJhMmMzNTFhNmZkMzllMGE4YjM5MjJhNTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Jq5jAE73jqDVCGq6aWu9Ka6ieb/ 1aT08VlJMZs2glNjgNJPXz6WI/8mbbK1BXKiOsL5p11FnABrQuIUs0+G/BQ2vBmM 675Vu1ZNl7tLRZcdOK+MhHIouZcl6Ei9R7CjEwrWH3pBV7S0gwSu4dvtYnZABgNR PbqrChFGplq2mxkSs86Xwa1/FufehUHus0F8zGApJXoQmYzBPFmKN+cEYcpeBRmp hWK48S9WWTS6LKd84iSQDyXemobKrE6ZjwDICYkRYgAbDbIfYTXHgxQxWEMQFZg8 38gYjzVOHfYXuwU172w9M1beVSRv62dk8ImfS2zLpjngguO+c5WPvyOXVQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFOqIC8wwKl26LDUab9OeCos5IqU1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkLzJiNzI5 Zi0wOGE3LTRjOTMtOGJjOS04MTVjNWYyNzY1ZDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvMmI3Mjlm LTA4YTctNGM5My04YmM5LTgxNWM1ZjI3NjVkMC8xLzZvZ0x6REFxWGJvc05ScHYw NTRLaXpraXBUVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDwSP4MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AmNNMA0GCSqGSIb3DQEBCwUAA4IBAQCaIH8kdzPuzV475LO00dIVSdpr5jhGsC4w evEAgLSfmsasOpTWqYUNHTzEbiW9tGEPqD//yoelLHTkp1yvGZOAFj3tt+bPiOCr Z4zMGAY9N+Q5VmvXyUbKX0AfbxSXMcKZ6ORC6/0FgjNi7L1JYT4n+Ux886meAQ16 ffBOynhD32Nnc8RMDjFBX0MR9WDFAwaQcpf8SSyh+5MC/oDsNXHmkfi9IxG9RVPX jujDpZcbKUNUYwiqZ4txSC1BHPnRiu84vo0DXRM+eLr8QGoefdpK1ziS2JGQYLmK 2+zAR8KXxRQFHDW5VhCScRqos88PNloo1zpXfuG7IU/A+Tyraq+H -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:29 2026 by rpki-client