This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer File: D6vrbvgg09UvBTciM8VB7ksU82E.cer (raw, json) Hash identifier: CfoqQLgli8lLSTLC4I5QPAMUt9douYIpgUcDYI9iVQk= Subject key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C121F2757285693E349A74C159B3FCB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207632 IP: 2001:678:be0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:1f:27:57:28:56:93:e3:49:a7:4c:15:9b:3f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:be:c7:22:c6:29:aa:2f:75:4b:83:d3:41:79: 13:77:5d:34:5c:4a:f0:32:8d:d3:00:c8:2a:7f:a7: 1f:3c:37:e9:fd:66:8a:d3:87:4a:f9:81:76:71:d3: 0a:6b:4c:65:3e:04:75:e2:39:59:47:61:b2:00:da: 93:44:8f:b1:06:d2:3f:e1:7d:10:91:34:aa:58:9d: 0a:16:0c:bd:6b:c5:49:5c:96:b5:9b:90:2c:ed:9c: b9:66:1c:10:7c:7e:1d:8e:3a:4d:61:0a:75:cb:e5: 81:4f:92:90:da:1a:62:61:f6:54:63:21:6f:51:f2: 8f:02:ae:1d:89:2f:5a:58:44:11:a5:93:97:d6:d3: 22:80:74:fc:23:fa:e1:55:f8:8f:4c:6c:62:e7:d7: 69:95:e2:2c:fc:d6:a3:7a:2c:98:c7:bc:f1:15:69: d5:90:83:2a:05:44:e2:7c:cd:78:65:78:4f:40:cd: 56:03:2c:59:27:58:4a:ab:c6:86:ba:46:39:66:78: f4:23:a4:61:73:86:a8:30:a8:e2:fb:07:f4:d9:a7: f3:4d:fe:45:7e:2f:ec:8d:7f:9d:18:f7:18:90:4d: da:ab:dd:a5:34:9f:d1:21:2d:c8:94:c0:5f:fe:d2: 3d:08:24:22:1d:53:d7:61:0f:04:69:51:eb:a3:b2: b4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:be0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207632 Signature Algorithm: sha256WithRSAEncryption 09:48:ba:35:4d:18:68:11:d9:91:a2:b4:60:74:6e:7c:9e:59: af:96:02:85:ae:6b:61:98:f0:a2:4b:9a:29:4c:c9:6a:db:74: a2:c5:da:a5:ef:63:2d:f1:96:21:5f:fa:64:be:2c:62:a5:4b: 39:2a:f8:25:ce:7d:80:c0:ba:98:93:e1:53:d2:9b:bc:27:e9: f2:b6:1d:9d:2a:b1:7b:2b:d6:42:7d:5f:f4:fa:51:23:94:7d: fc:5b:fd:df:30:5c:33:0d:da:f8:d9:e8:1f:7c:23:43:3b:7d: 7b:02:1b:77:8d:13:91:21:c6:61:25:8c:88:0c:bb:a6:df:93: a7:13:d4:73:f3:97:5c:15:91:04:8f:bb:cd:78:a9:31:26:97: c4:c4:0f:9f:f2:1a:a1:be:de:73:04:32:29:cc:74:fd:73:80: 00:23:c3:a1:f5:ff:88:e8:e8:19:aa:3e:33:c9:ac:cd:b9:3f: 9b:b1:73:6a:b6:f5:5e:6b:28:9b:db:36:04:fd:74:fc:b4:ad: a6:c2:f7:9b:c6:7f:7c:69:f3:e6:e3:9e:10:52:34:56:f6:6d: ad:b7:ca:62:06:4f:c0:39:cd:1f:e1:2f:41:28:cf:c9:7a:63: c7:e4:e4:1d:40:4d:50:84:51:d0:33:d7:21:f5:d6:8d:cf:e2: dc:5c:c5:75 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt8Eh8nVyhWk+NJp0wVmz/LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmFiZWI2ZWY4MjBkM2Q1MmYwNTM3MjIzM2M1NDFlZTRiMTRmMzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA077HIsYpqi91S4PTQXkTd100XErw Mo3TAMgqf6cfPDfp/WaK04dK+YF2cdMKa0xlPgR14jlZR2GyANqTRI+xBtI/4X0Q kTSqWJ0KFgy9a8VJXJa1m5As7Zy5ZhwQfH4djjpNYQp1y+WBT5KQ2hpiYfZUYyFv UfKPAq4diS9aWEQRpZOX1tMigHT8I/rhVfiPTGxi59dpleIs/NajeiyYx7zxFWnV kIMqBUTifM14ZXhPQM1WAyxZJ1hKq8aGukY5Znj0I6Rhc4aoMKji+wf02afzTf5F fi/sjX+dGPcYkE3aq92lNJ/RIS3IlMBf/tI9CCQiHVPXYQ8EaVHro7K0SQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFA+r6274INPVLwU3IjPFQe5LFPNhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhL2YzZDgz NC1jZWVkLTRiYmQtYWJlMS01YTM3MTI2NzA1YWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvZjNkODM0 LWNlZWQtNGJiZC1hYmUxLTVhMzcxMjY3MDVhZC8xL0Q2dnJidmdnMDlVdkJUY2lN OFZCN2tzVTgyRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAvgMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMrEDANBgkqhkiG9w0BAQsFAAOCAQEACUi6NU0YaBHZkaK0YHRufJ5Zr5YC ha5rYZjwokuaKUzJatt0osXape9jLfGWIV/6ZL4sYqVLOSr4Jc59gMC6mJPhU9Kb vCfp8rYdnSqxeyvWQn1f9PpRI5R9/Fv93zBcMw3a+NnoH3wjQzt9ewIbd40TkSHG YSWMiAy7pt+TpxPUc/OXXBWRBI+7zXipMSaXxMQPn/Iaob7ecwQyKcx0/XOAACPD ofX/iOjoGao+M8mszbk/m7Fzarb1Xmsom9s2BP10/LStpsL3m8Z/fGnz5uOeEFI0 VvZtrbfKYgZPwDnNH+EvQSjPyXpjx+TkHUBNUIRR0DPXIfXWjc/i3FzFdQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:59:39 2026 by rpki-client