This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer File: IXt6sGK8gos0jQUwbmU1R0i51tY.cer (raw, json) Hash identifier: Wmpl1iGkfnz8pzf725PtTnvuj2FvQnBv/niabbqAByk= Subject key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA519AFD18280A0FDFB682FE577CCF1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 146.19.59.0/24 IP: 2a10:cbc0::/29 IP: 2a11:e380::/29 IP: 2a12:70c0::/29 IP: 2a13:7e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:19:af:d1:82:80:a0:fd:fb:68:2f:e5:77:cc:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=217b7ab062bc828b348d05306e65354748b9d6d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8c:0b:94:53:59:3d:d9:2e:b0:e3:bb:d6:c1: ec:f7:57:9c:da:bc:bc:e8:49:92:87:a5:b4:8f:cd: 95:a3:6e:51:e0:ff:07:61:76:cf:a8:b1:e1:42:5e: b3:6b:09:4a:b4:f6:a1:ee:d8:68:46:17:55:77:76: 7f:ea:00:03:85:38:f7:4c:fd:0a:ca:e1:71:dc:93: df:69:06:44:aa:dc:0c:4e:1d:fe:d6:77:2a:ea:73: bb:62:88:52:2f:17:13:dc:11:82:dc:cf:43:e9:93: 30:11:d7:a9:14:bb:e5:70:53:d1:c3:f2:06:4e:fc: 00:97:5f:39:8a:8f:8c:88:f2:9f:23:c2:a9:74:da: 36:59:67:13:90:1a:9b:70:b9:45:8f:18:b0:15:8c: a9:1f:a5:16:87:0e:a5:09:a8:8f:1d:1a:20:d0:cb: 36:02:12:69:56:de:c6:50:5e:f6:b9:28:e7:22:26: 44:87:41:42:9d:a4:77:44:37:a5:b7:9c:62:08:99: e4:ee:1a:14:64:fd:fd:f4:c7:cb:bf:f6:bd:c6:96: 69:e1:b5:c6:7c:09:ef:9c:dd:22:45:e1:1f:72:3d: 5f:02:46:9a:7d:08:5f:f1:51:23:a9:7f:53:bd:3f: bd:8b:30:fc:69:1a:fd:93:d3:6a:44:9d:30:d2:2c: f3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.59.0/24 IPv6: 2a10:cbc0::/29 2a11:e380::/29 2a12:70c0::/29 2a13:7e00::/29 Signature Algorithm: sha256WithRSAEncryption 8a:73:56:f4:c7:5e:ec:dd:b0:d0:af:f3:0e:9e:08:ea:94:d4: 00:1f:c5:67:15:86:16:39:6c:2b:66:3e:8d:df:c3:31:bc:9c: 15:c5:6a:45:bd:93:8f:b3:22:30:f4:18:bc:8f:29:39:23:b3: a6:ec:22:60:f1:09:85:1b:b8:16:2c:25:a2:d9:1a:c4:86:1c: e2:e9:a2:e9:84:eb:8a:22:60:00:cc:9f:9e:20:09:dc:f2:49: e0:30:b3:6e:d2:3b:82:d3:48:4e:40:b8:27:a6:2c:61:6d:29: 09:9e:12:f1:2c:d2:db:5b:f8:5a:bd:b5:c2:8a:54:4d:e1:0a: 89:90:be:ff:78:af:0c:f7:d3:59:a8:c6:46:42:b5:84:c1:c0: af:1d:da:43:7e:a6:d0:2b:a1:61:7a:e8:f3:e1:15:dd:0b:86: e7:be:e4:25:e6:13:20:e9:15:b0:c4:c5:f6:ba:dd:28:c7:08: ef:7e:24:e1:87:e7:1e:ec:0d:ee:0e:33:01:2b:22:be:d9:24: 66:4d:8e:0e:5c:4d:3e:a0:49:a9:8f:39:da:92:a9:29:cc:95: 3a:72:93:4e:77:cf:21:53:d5:b8:b7:22:f3:9e:f0:a7:a4:33: 50:95:95:66:6f:c4:9d:af:86:55:7e:c7:c3:c3:38:3c:20:42: d8:98:9f:09 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgISAZt7pRmv0YKAoP37aC/ld8zxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTdiN2FiMDYyYmM4MjhiMzQ4ZDA1MzA2ZTY1MzU0NzQ4YjlkNmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4wLlFNZPdkusOO71sHs91ec2ry8 6EmSh6W0j82Vo25R4P8HYXbPqLHhQl6zawlKtPah7thoRhdVd3Z/6gADhTj3TP0K yuFx3JPfaQZEqtwMTh3+1ncq6nO7YohSLxcT3BGC3M9D6ZMwEdepFLvlcFPRw/IG TvwAl185io+MiPKfI8KpdNo2WWcTkBqbcLlFjxiwFYypH6UWhw6lCaiPHRog0Ms2 AhJpVt7GUF72uSjnIiZEh0FCnaR3RDelt5xiCJnk7hoUZP399MfLv/a9xpZp4bXG fAnvnN0iReEfcj1fAkaafQhf8VEjqX9TvT+9izD8aRr9k9NqRJ0w0izzbwIDAQAB o4ICqDCCAqQwHQYDVR0OBBYEFCF7erBivIKLNI0FMG5lNUdIudbWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2L2E4ZGFk Yy02MTFiLTQwNjMtYWRiNi01NWI2NTljZDgyYmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvYThkYWRj LTYxMWItNDA2My1hZGI2LTU1YjY1OWNkODJiYi8xL0lYdDZzR0s4Z29zMGpRVXdi bVUxUjBpNTF0WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF BwEHAQH/BDQwMjAMBAIAATAGAwQAkhM7MCIEAgACMBwDBQMqEMvAAwUDKhHjgAMF AyoScMADBQMqE34AMA0GCSqGSIb3DQEBCwUAA4IBAQCKc1b0x17s3bDQr/MOngjq lNQAH8VnFYYWOWwrZj6N38MxvJwVxWpFvZOPsyIw9Bi8jyk5I7Om7CJg8QmFG7gW LCWi2RrEhhzi6aLphOuKImAAzJ+eIAnc8kngMLNu0juC00hOQLgnpixhbSkJnhLx LNLbW/havbXCilRN4QqJkL7/eK8M99NZqMZGQrWEwcCvHdpDfqbQK6Fheujz4RXd C4bnvuQl5hMg6RWwxMX2ut0oxwjvfiThh+ce7A3uDjMBKyK+2SRmTY4OXE0+oEmp jznakqkpzJU6cpNOd88hU9W4tyLznvCnpDNQlZVmb8Sdr4ZVfsfDwzg8IELYmJ8J -----END CERTIFICATE-----Generated at Sun Jan 25 20:53:00 2026 by rpki-client