This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer File: C6yCgEcArTZTi_hvNMBz6XFDDaU.cer (raw, json) Hash identifier: nwQcbU3c4pjNs3aB4HE+k+R9dA14GgNp1LqGPvbfYjs= Subject key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC88D95004B0093BBA0DC67183DEE4E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8674 AS: 20943 AS: 29216 AS: 39840 AS: 39870 -- 39871 AS: 52005 AS: 56908 AS: 57021 IP: 77.72.224.0/21 IP: 83.143.176.0/21 IP: 185.1.230.0/24 IP: 185.42.136.0/22 IP: 194.58.192.0/20 IP: 194.146.105.0 -- 194.146.108.255 IP: 194.153.157.0/25 IP: 195.69.116.0/22 IP: 195.245.240.0/24 IP: 212.237.192.0/21 IP: 213.32.232.0/21 IP: 2001:67c:1010::/47 IP: 2001:67c:254c::/48 IP: 2001:67c:2550::/48 IP: 2001:67c:2554::/48 IP: 2001:67c:2558::/48 IP: 2001:7f8:d::/48 IP: 2001:7f8:122::/48 IP: 2001:7fe::/32 IP: 2a01:3f0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8d:95:00:4b:00:93:bb:a0:dc:67:18:3d:ee:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bac82804700ad36538bf86f34c073e971430da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:07:bb:04:6c:0c:b7:48:62:f3:66:a4:14:49: 94:d0:77:6b:ed:0d:14:24:1e:5c:86:da:6c:e9:0c: 4e:69:01:e5:0f:da:aa:ea:6f:2b:f1:84:6a:fe:b5: 13:24:15:74:c0:81:54:9e:85:f2:f0:5d:58:3e:65: 4b:1d:88:09:e8:b5:70:67:df:51:4d:0d:ad:72:ff: 5e:62:3a:8a:d3:46:7a:52:b5:8e:03:ff:11:78:70: 40:be:90:34:1f:9b:36:8d:78:59:68:8a:5e:a6:71: 8f:dd:d0:73:9d:36:1f:67:c9:b2:de:74:61:95:f6: 3f:45:be:37:a7:c5:8c:7a:69:67:2c:52:81:46:0d: f1:7e:5f:a5:9b:e8:47:d5:7a:d8:95:d9:f3:ff:48: 30:2b:a1:e2:82:07:d9:17:50:92:1a:6a:1d:4c:f5: d6:b6:e0:42:10:bd:89:9a:8e:86:7b:34:98:46:7c: 84:bc:e0:4b:2a:36:40:f0:12:3c:82:81:3c:72:03: 8f:0f:72:ff:de:f7:1f:88:a5:7a:5f:8e:5d:ce:6a: 57:80:76:4c:55:2f:a4:b9:fd:14:b7:8f:c5:6c:fe: e6:3e:03:38:0c:e8:0b:9d:e0:f7:cd:48:cb:6e:7d: 38:d5:c0:6c:28:b2:4f:c3:c1:85:6a:43:9e:e6:c3: 0b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.224.0/21 83.143.176.0/21 185.1.230.0/24 185.42.136.0/22 194.58.192.0/20 194.146.105.0-194.146.108.255 194.153.157.0/25 195.69.116.0/22 195.245.240.0/24 212.237.192.0/21 213.32.232.0/21 IPv6: 2001:67c:1010::/47 2001:67c:254c::/48 2001:67c:2550::/48 2001:67c:2554::/48 2001:67c:2558::/48 2001:7f8:d::/48 2001:7f8:122::/48 2001:7fe::/32 2a01:3f0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8674 20943 29216 39840 39870-39871 52005 56908 57021 Signature Algorithm: sha256WithRSAEncryption 95:98:78:bf:5d:91:52:13:4c:b8:3e:fa:99:06:9e:f1:50:d8: 89:45:31:45:94:a1:00:c6:51:bb:1e:77:43:1f:2c:57:9b:0d: 6c:05:b2:f2:c8:c8:39:ef:94:69:7c:92:ca:8d:7c:ba:f5:34: d1:90:04:96:7f:ed:bb:bc:27:15:5e:8e:9d:51:96:b2:be:96: 24:15:8b:3f:38:bc:ce:11:ea:6c:06:d2:a7:e7:29:b2:44:06: 7a:04:ba:d0:fe:67:2a:3a:4e:ad:b1:f3:58:42:b5:b1:b9:68: e8:a9:7c:97:6e:ae:64:f5:91:bc:c3:53:b5:a4:a3:75:77:1b: d3:1e:31:d0:6e:d8:53:80:d2:dc:d5:30:f3:15:38:c0:cb:23: 35:de:b4:00:bb:13:6b:95:27:f0:9e:68:72:7f:f8:5b:31:2f: 8d:a1:bb:a0:8c:46:f2:b1:93:6e:7b:70:1b:27:13:0d:d8:f0: 89:cb:d3:23:f4:8a:15:b2:13:c0:49:f1:aa:8d:8a:fd:e4:9a: f1:81:34:89:76:e0:7a:ae:cc:f4:2e:84:f3:ed:3b:ee:67:c1: 03:62:a3:0d:93:3d:d9:bd:c9:c2:cb:5d:d1:42:59:f9:fa:7f: ea:ec:e9:fb:a5:68:a6:c6:9e:cc:ea:30:ad:9d:7b:52:cb:4e: 32:df:06:08 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgISAZt6yI2VAEsAk7ug3GcYPe5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmFjODI4MDQ3MDBhZDM2NTM4YmY4NmYzNGMwNzNlOTcxNDMwZGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAe7BGwMt0hi82akFEmU0Hdr7Q0U JB5chtps6QxOaQHlD9qq6m8r8YRq/rUTJBV0wIFUnoXy8F1YPmVLHYgJ6LVwZ99R TQ2tcv9eYjqK00Z6UrWOA/8ReHBAvpA0H5s2jXhZaIpepnGP3dBznTYfZ8my3nRh lfY/Rb43p8WMemlnLFKBRg3xfl+lm+hH1XrYldnz/0gwK6HiggfZF1CSGmodTPXW tuBCEL2Jmo6GezSYRnyEvOBLKjZA8BI8goE8cgOPD3L/3vcfiKV6X45dzmpXgHZM VS+kuf0Ut4/FbP7mPgM4DOgLneD3zUjLbn041cBsKLJPw8GFakOe5sMLcQIDAQAB o4IDZDCCA2AwHQYDVR0OBBYEFAusgoBHAK02U4v4bzTAc+lxQw2lMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2E3Mjg5 MS1kZTJmLTQxNTYtYTAxMS00M2Y2NGJjZWE5OWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvYTcyODkx LWRlMmYtNDE1Ni1hMDExLTQzZjY0YmNlYTk5ZC8xL0M2eUNnRWNBclRaVGlfaHZO TUJ6NlhGRERhVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIG7BggrBgEF BQcBBwEB/wSBqzCBqDBRBAIAATBLAwQDTUjgAwQDU4+wAwQAuQHmAwQCuSqIAwQE wjrAMAwDBADCkmkDBADCkmwDBQfCmZ0AAwQCw0V0AwQAw/XwAwQD1O3AAwQD1SDo MFMEAgACME0DBwEgAQZ8EBADBwAgAQZ8JUwDBwAgAQZ8JVADBwAgAQZ8JVQDBwAg AQZ8JVgDBwAgAQf4AA0DBwAgAQf4ASIDBQAgAQf+AwUDKgED8DBBBggrBgEFBQcB CAEB/wQyMDCgLjAsAgIh4gICUc8CAnIgAgMAm6AwCgIDAJu+AgMAm78CAwDLJQID AN5MAgMA3r0wDQYJKoZIhvcNAQELBQADggEBAJWYeL9dkVITTLg++pkGnvFQ2IlF MUWUoQDGUbsed0MfLFebDWwFsvLIyDnvlGl8ksqNfLr1NNGQBJZ/7bu8JxVejp1R lrK+liQViz84vM4R6mwG0qfnKbJEBnoEutD+Zyo6Tq2x81hCtbG5aOipfJdurmT1 kbzDU7Wko3V3G9MeMdBu2FOA0tzVMPMVOMDLIzXetAC7E2uVJ/CeaHJ/+FsxL42h u6CMRvKxk257cBsnEw3Y8InL0yP0ihWyE8BJ8aqNiv3kmvGBNIl24HquzPQuhPPt O+5nwQNiow2TPdm9ycLLXdFCWfn6f+rs6fulaKbGnszqMK2de1LLTjLfBgg= -----END CERTIFICATE-----Generated at Sun Jan 25 17:17:09 2026 by rpki-client