This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer File: C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer (raw, json) Hash identifier: yH35KEkLC3I+ZLceLsiNB+wRfVWDhYjH/s/9Z2O35t8= Subject key identifier: 0B:A1:1A:46:C4:4E:EC:F9:0C:62:31:F8:45:6C:C7:02:AE:93:80:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BA33A37EB98888568F3B5DABE357107BA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 09 Jan 2026 14:47:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216403 IP: 185.55.81.0/24 IP: 2a13:bac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:3a:37:eb:98:88:85:68:f3:b5:da:be:35:71:07:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 9 14:47:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ba11a46c44eecf90c6231f8456cc702ae938076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b5:70:01:06:4b:fc:9f:93:42:8e:31:41:61: fd:72:07:51:eb:a9:94:75:94:ec:67:3b:2f:ca:fa: 6f:6c:af:34:65:d3:65:5e:21:65:2a:62:df:d9:c2: e5:bb:ef:33:81:5f:14:e5:0d:7f:0f:90:6a:67:33: 61:0b:c4:96:b4:d2:14:4f:03:60:15:e6:75:b6:7f: 65:08:18:41:58:67:8d:fb:92:31:d2:59:19:21:d9: 90:a0:a7:64:52:9e:ce:a5:08:aa:ef:e6:f9:1b:c7: ac:47:98:2b:59:5b:f9:db:f7:f7:89:a9:e4:e8:70: 0d:5f:f0:5c:d3:e8:ce:74:02:8a:7f:d6:9a:4f:49: 37:58:86:30:c1:b0:18:fa:3e:5f:e0:10:c5:fb:52: 3d:78:76:64:30:5a:0d:bd:fb:f3:a4:90:56:a5:23: 68:94:42:0a:c6:a0:44:61:ba:1d:1a:40:9c:a1:92: 0b:65:89:b0:a6:36:f0:9e:6a:f6:bc:b6:62:e6:57: 4a:fb:2b:42:24:f7:5c:21:8e:0d:f2:2f:ae:64:d9: 80:8e:b8:ac:a2:0f:92:aa:75:ec:9a:d3:20:7f:89: ba:c4:24:70:0c:39:5c:82:96:5b:2a:57:f3:9e:40: ad:0f:7d:02:85:33:04:2e:39:e6:b3:24:0a:0f:49: 18:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A1:1A:46:C4:4E:EC:F9:0C:62:31:F8:45:6C:C7:02:AE:93:80:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.55.81.0/24 IPv6: 2a13:bac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216403 Signature Algorithm: sha256WithRSAEncryption 04:78:57:df:39:f3:f4:b5:3c:25:23:58:39:9b:9f:f6:98:3e: 54:62:ef:0f:53:82:4e:02:59:91:b2:09:73:89:22:30:74:e2: c4:43:61:79:a6:0f:32:6d:9a:fd:5f:eb:c3:66:28:2c:e1:1c: 7e:16:42:0e:60:5b:1d:40:72:5d:f4:8e:e7:be:43:45:10:88: d9:6c:d9:27:10:25:37:c6:cf:2b:04:d3:ec:f2:f6:c6:fc:95: 42:e0:54:6e:fe:b2:00:10:90:e2:f4:e4:14:0e:2c:0f:68:9b: d7:12:04:b4:fa:f6:0b:5c:8a:01:7a:ed:99:5b:dc:ef:0f:9a: 8d:9a:b3:76:a1:31:b3:f8:45:fb:66:e8:a7:35:e5:bd:54:6d: 92:b1:6c:e8:f6:2b:7a:94:7c:28:53:3a:95:96:41:57:60:1d: 91:85:d2:67:62:34:e0:54:f0:02:b7:8a:61:72:fa:73:52:4c: bb:fe:c6:91:6a:cc:70:19:2b:94:e5:0b:af:ae:8d:4c:2f:76: 32:07:cd:00:8a:36:75:ca:f2:a7:08:d8:a3:19:a3:e0:dd:55: ea:98:a5:27:7c:67:e3:04:64:bf:77:dd:d2:d5:49:ce:14:01: 86:1a:f4:95:99:e6:0c:86:7e:3c:ea:6c:4a:08:64:75:40:3c: 3d:d0:c6:85 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZujOjfrmIiFaPO12r41cQe6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA5MTQ0NzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmExMWE0NmM0NGVlY2Y5MGM2MjMxZjg0NTZjYzcwMmFlOTM4MDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrVwAQZL/J+TQo4xQWH9cgdR66mU dZTsZzsvyvpvbK80ZdNlXiFlKmLf2cLlu+8zgV8U5Q1/D5BqZzNhC8SWtNIUTwNg FeZ1tn9lCBhBWGeN+5Ix0lkZIdmQoKdkUp7OpQiq7+b5G8esR5grWVv52/f3iank 6HANX/Bc0+jOdAKKf9aaT0k3WIYwwbAY+j5f4BDF+1I9eHZkMFoNvfvzpJBWpSNo lEIKxqBEYbodGkCcoZILZYmwpjbwnmr2vLZi5ldK+ytCJPdcIY4N8i+uZNmAjris og+SqnXsmtMgf4m6xCRwDDlcgpZbKlfznkCtD30ChTMELjnmsyQKD0kYWQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAuhGkbETuz5DGIx+EVsxwKuk4B2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5LzU4NWU4 ZS0xZDE5LTRiNDAtOWRjYS0yNzRjZmIwOTZlZDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvNTg1ZThl LTFkMTktNGI0MC05ZGNhLTI3NGNmYjA5NmVkMi8xL0M2RWFSc1JPN1BrTVlqSDRS V3pIQXE2VGdIWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuTdRMA0EAgACMAcDBQMqE7rAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNNUzANBgkqhkiG9w0BAQsFAAOCAQEABHhX3znz9LU8 JSNYOZuf9pg+VGLvD1OCTgJZkbIJc4kiMHTixENheaYPMm2a/V/rw2YoLOEcfhZC DmBbHUByXfSO575DRRCI2WzZJxAlN8bPKwTT7PL2xvyVQuBUbv6yABCQ4vTkFA4s D2ib1xIEtPr2C1yKAXrtmVvc7w+ajZqzdqExs/hF+2bopzXlvVRtkrFs6PYrepR8 KFM6lZZBV2AdkYXSZ2I04FTwAreKYXL6c1JMu/7GkWrMcBkrlOULr66NTC92MgfN AIo2dcrypwjYoxmj4N1V6pilJ3xn4wRkv3fd0tVJzhQBhhr0lZnmDIZ+POpsSghk dUA8PdDGhQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:36 2026 by rpki-client