This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6vl4jJlRMNcOrEbAayJmctJdQYU.cer File: 6vl4jJlRMNcOrEbAayJmctJdQYU.cer (raw, json) Hash identifier: 9lwknAu9ZkmnecWD6KqXrdGbVOH2h6seyKG0tH0dhSI= Subject key identifier: EA:F9:78:8C:99:51:30:D7:0E:AC:46:C0:6B:22:66:72:D2:5D:41:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35CEF62527FC5674A83A2F69775EB2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 176.10.88.0/24 IP: 2a01:9260::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ce:f6:25:27:fc:56:74:a8:3a:2f:69:77:5e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eaf9788c995130d70eac46c06b226672d25d4185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ab:42:48:38:29:49:b8:38:b7:99:85:f5:d3: 1e:fa:3c:f0:b6:a8:cb:8a:02:22:b2:f7:ba:8f:01: a1:44:74:98:0c:c6:3b:f7:d1:31:6d:e6:71:31:b4: 90:a6:6f:54:71:fc:16:dd:3f:d3:1f:0c:34:62:c7: e1:c0:de:11:e3:09:e4:ea:9d:71:dd:f3:7f:41:96: b6:bc:d2:84:47:25:d2:5e:69:a1:af:98:51:7b:e9: 10:13:98:06:b8:7c:d6:8f:74:ad:37:36:1f:71:12: 44:1f:be:8e:79:a0:c6:44:09:84:52:24:a2:eb:58: cf:b5:5f:60:76:11:7f:f8:5d:4e:a6:db:76:91:52: 25:57:b1:b0:35:eb:4b:0c:55:ef:54:3c:31:77:84: 70:59:76:ec:88:e7:18:7b:a9:d9:01:25:49:2b:15: c3:d0:36:da:3b:a6:8a:4d:3d:2c:22:d5:9f:2d:21: 80:f5:fa:7f:03:c3:2d:c7:47:3c:ad:eb:2f:23:b3: e9:94:60:9c:08:24:f9:9a:b1:a8:6a:65:50:69:52: dc:85:a3:56:cb:2c:85:ff:29:f3:ab:7a:7f:35:97: 42:14:c6:05:ab:f8:25:c2:d1:a7:30:d8:07:86:58: 15:e2:d2:bc:65:7d:2c:71:a6:00:52:86:b6:1f:8a: 40:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F9:78:8C:99:51:30:D7:0E:AC:46:C0:6B:22:66:72:D2:5D:41:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.10.88.0/24 IPv6: 2a01:9260::/32 Signature Algorithm: sha256WithRSAEncryption 8b:b5:15:e8:8a:86:04:fe:be:97:6a:e6:84:c6:04:48:3c:86: 89:88:7d:b5:d3:3d:6a:f2:70:cd:26:b1:2f:59:9c:30:a1:1d: 6b:ec:e9:66:b6:3a:37:99:97:73:5c:f5:88:b3:7c:27:66:90: 4d:d9:74:e7:33:c3:d6:9a:1c:c1:c3:63:5b:1f:97:d2:67:2d: e5:1f:6a:36:29:b5:ff:8a:a5:31:ab:2f:3a:5b:78:b9:ba:67: 80:23:d3:16:8c:18:6a:ac:fa:94:67:4b:d9:67:61:0e:82:3e: 96:7e:c2:0a:f9:cd:67:58:2b:be:23:31:fc:55:27:13:c1:41: c9:4b:81:9f:d4:06:7a:d1:ed:e2:0a:95:3b:9c:e9:08:3c:8d: 95:22:ef:20:a7:92:39:6b:f3:c2:69:1f:66:0c:0f:7d:40:55: cf:58:c4:be:70:03:b2:26:e0:3b:33:e6:57:d3:60:54:05:52: 28:a3:83:9a:97:16:35:94:f2:c3:f4:28:d8:b0:4d:0c:15:64: e8:88:6a:e4:3a:d9:a5:54:bb:88:95:a3:0d:8d:d7:92:8f:d6: 01:92:dc:57:c0:f0:46:2a:67:83:e4:e6:af:27:48:26:e6:77: f2:33:b3:94:e2:3d:fc:bf:9b:ef:76:bb:88:f7:b7:dd:16:56: 91:90:58:2e -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7Nc72JSf8VnSoOi9pd16yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWY5Nzg4Yzk5NTEzMGQ3MGVhYzQ2YzA2YjIyNjY3MmQyNWQ0MTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6tCSDgpSbg4t5mF9dMe+jzwtqjL igIisve6jwGhRHSYDMY799ExbeZxMbSQpm9UcfwW3T/THww0YsfhwN4R4wnk6p1x 3fN/QZa2vNKERyXSXmmhr5hRe+kQE5gGuHzWj3StNzYfcRJEH76OeaDGRAmEUiSi 61jPtV9gdhF/+F1Optt2kVIlV7GwNetLDFXvVDwxd4RwWXbsiOcYe6nZASVJKxXD 0DbaO6aKTT0sItWfLSGA9fp/A8Mtx0c8resvI7PplGCcCCT5mrGoamVQaVLchaNW yyyF/ynzq3p/NZdCFMYFq/glwtGnMNgHhlgV4tK8ZX0scaYAUoa2H4pA7QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFOr5eIyZUTDXDqxGwGsiZnLSXUGFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3LzU1OTZi MC1hOGE3LTQ1YjAtYjI0NS0wZmU3YTBlZTZiZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvNTU5NmIw LWE4YTctNDViMC1iMjQ1LTBmZTdhMGVlNmJkMy8xLzZ2bDRqSmxSTU5jT3JFYkFh eUptY3RKZFFZVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAsApYMA0EAgACMAcDBQAqAZJgMA0GCSqGSIb3 DQEBCwUAA4IBAQCLtRXoioYE/r6XauaExgRIPIaJiH210z1q8nDNJrEvWZwwoR1r 7Olmtjo3mZdzXPWIs3wnZpBN2XTnM8PWmhzBw2NbH5fSZy3lH2o2KbX/iqUxqy86 W3i5umeAI9MWjBhqrPqUZ0vZZ2EOgj6WfsIK+c1nWCu+IzH8VScTwUHJS4Gf1AZ6 0e3iCpU7nOkIPI2VIu8gp5I5a/PCaR9mDA99QFXPWMS+cAOyJuA7M+ZX02BUBVIo o4OalxY1lPLD9CjYsE0MFWToiGrkOtmlVLuIlaMNjdeSj9YBktxXwPBGKmeD5Oav J0gm5nfyM7OU4j38v5vvdruI97fdFlaRkFgu -----END CERTIFICATE-----Generated at Mon Jan 26 02:14:46 2026 by rpki-client