This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer File: G6UWeIg5f_nKqET1VP-DfP2_lyI.cer (raw, json) Hash identifier: fUcorP35yj//8J8qW6mwHe5OeeNlR6kygZ8EUOYijUM= Subject key identifier: 1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8087C300278E17C9E8CB5E8008506B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.44.200.0/22 IP: 2a01:7820::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:87:c3:00:27:8e:17:c9:e8:cb:5e:80:08:50:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ba5167888397ff9caa844f554ff837cfdbf9722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1a:c5:f9:a2:c3:5c:09:8a:09:65:a2:49:6c: cd:9e:d0:15:69:8d:5d:b6:d1:66:56:3f:f4:80:1b: d8:f1:90:1f:4d:b2:21:63:aa:08:b7:a3:2d:71:96: 8b:1c:a6:8a:51:ec:e5:e4:12:28:50:0a:cc:ca:80: b8:7b:e2:79:b3:47:76:06:0e:7c:5c:06:5b:72:32: 39:2e:9b:16:4f:c2:3e:76:50:6b:66:15:5f:ac:79: 5a:7f:e8:2f:44:63:c3:c1:87:7c:e3:74:34:3d:75: 66:ad:fe:3c:86:1f:ee:bb:da:93:42:d2:fb:ec:50: b1:8b:48:b4:67:cd:33:44:72:ee:16:77:8a:27:89: 11:1e:37:4a:21:c5:63:43:4a:e0:4d:ba:11:9d:da: 80:40:d7:dd:00:20:07:08:32:ce:5d:d1:9d:4c:e7: 6f:5a:6a:d2:d9:61:5a:da:7e:f1:fd:28:99:3a:3d: ba:99:09:fa:6c:8b:8c:59:86:56:ed:1f:9e:bb:6c: c6:80:87:cb:72:fb:c1:11:57:6e:1e:93:89:dc:9f: be:1b:f0:4c:8b:02:91:e4:8f:54:3f:a9:9f:c9:8f: 78:9e:d8:08:3b:e8:c9:f9:6f:d8:24:e0:88:6c:8f: 63:29:fc:cc:b8:e9:bb:7f:6c:e4:d6:db:3f:77:73: 27:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.200.0/22 IPv6: 2a01:7820::/32 Signature Algorithm: sha256WithRSAEncryption 3b:ae:eb:18:eb:9a:a9:5e:c9:f4:c4:31:67:4f:30:c2:df:ec: ca:4b:c1:da:37:6f:c7:20:43:93:3d:b7:da:53:55:e2:a2:52: 5f:0b:32:bf:c1:aa:37:a7:7a:85:20:2f:82:0e:aa:0a:1e:20: 4d:bb:a9:8c:26:c7:60:55:a2:08:40:eb:f6:c3:eb:1f:fc:37: b5:17:a8:b4:c2:ae:36:8e:17:10:4a:57:ac:89:b1:8c:be:04: 0f:8e:38:d4:01:0d:b6:45:d1:a0:e9:7e:da:a7:b8:68:2f:4a: 3a:20:22:84:c8:c5:38:3f:e6:fa:f5:23:ef:a2:08:59:65:b7: 52:a0:0a:a5:cc:ab:3e:66:2e:4c:26:94:c3:d9:8e:50:45:af: c2:6d:06:76:70:b1:04:f1:eb:27:4d:e5:c8:48:e3:55:a8:a4: 93:00:e3:da:11:aa:df:0d:a5:54:2d:72:ff:b7:e7:b0:ca:7e: fd:bb:4d:3d:de:f5:8d:e0:2f:bc:de:95:62:2b:80:0f:79:d5: 40:59:3d:bd:8c:45:8f:f5:6c:58:81:8d:69:82:1c:e1:4d:5a: 33:e6:fa:93:4e:ac:de:4d:7b:fd:9f:00:72:e7:91:71:9a:a2: 5d:5b:65:39:a1:61:46:b7:2d:27:32:ea:c5:43:03:99:c7:8b: d9:fc:32:d5 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8gIfDACeOF8noy16ACFBrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmE1MTY3ODg4Mzk3ZmY5Y2FhODQ0ZjU1NGZmODM3Y2ZkYmY5NzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhrF+aLDXAmKCWWiSWzNntAVaY1d ttFmVj/0gBvY8ZAfTbIhY6oIt6MtcZaLHKaKUezl5BIoUArMyoC4e+J5s0d2Bg58 XAZbcjI5LpsWT8I+dlBrZhVfrHlaf+gvRGPDwYd843Q0PXVmrf48hh/uu9qTQtL7 7FCxi0i0Z80zRHLuFneKJ4kRHjdKIcVjQ0rgTboRndqAQNfdACAHCDLOXdGdTOdv WmrS2WFa2n7x/SiZOj26mQn6bIuMWYZW7R+eu2zGgIfLcvvBEVduHpOJ3J++G/BM iwKR5I9UP6mfyY94ntgIO+jJ+W/YJOCIbI9jKfzMuOm7f2zk1ts/d3MnnQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFBulFniIOX/5yqhE9VT/g3z9v5ciMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzA2NjQ3 OC1iMDY2LTQ3MzYtYWQ5Zi01M2Y0MWRmZTQwN2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvMDY2NDc4 LWIwNjYtNDczNi1hZDlmLTUzZjQxZGZlNDA3Zi8xL0c2VVdlSWc1Zl9uS3FFVDFW UC1EZlAyX2x5SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSzIMA0EAgACMAcDBQAqAXggMA0GCSqGSIb3 DQEBCwUAA4IBAQA7rusY65qpXsn0xDFnTzDC3+zKS8HaN2/HIEOTPbfaU1XiolJf CzK/wao3p3qFIC+CDqoKHiBNu6mMJsdgVaIIQOv2w+sf/De1F6i0wq42jhcQSles ibGMvgQPjjjUAQ22RdGg6X7ap7hoL0o6ICKEyMU4P+b69SPvoghZZbdSoAqlzKs+ Zi5MJpTD2Y5QRa/CbQZ2cLEE8esnTeXISONVqKSTAOPaEarfDaVULXL/t+ewyn79 u0093vWN4C+83pViK4APedVAWT29jEWP9WxYgY1pghzhTVoz5vqTTqzeTXv9nwBy 55FxmqJdW2U5oWFGty0nMurFQwOZx4vZ/DLV -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:48 2026 by rpki-client