This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer File: X6TYBGSXj26_upX3RaMwVyb3LZM.cer (raw, json) Hash identifier: 9ihy2AvQ6fLyrYHrqFGx7Yfod4c4CnM6cwF/zLwPs04= Subject key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79112EF5E64C0472F19B78BD4CE2A5F8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5542 IP: 92.61.176.0/22 IP: 185.123.208.0/22 IP: 2a06:af80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2e:f5:e6:4c:04:72:f1:9b:78:bd:4c:e2:a5:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fa4d80464978f6ebfba95f745a3305726f72d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:19:b7:70:ac:b9:1f:e3:11:8c:ca:0f:51:5a: 84:22:42:58:6f:a2:83:a2:3b:25:e4:e4:ad:f3:88: b3:0d:69:aa:a9:d9:3a:4c:29:ed:4a:b6:f6:74:56: 14:ab:1d:39:54:d2:26:c1:9c:cd:eb:72:09:36:e0: 99:23:8e:ee:8f:4f:ca:fd:19:65:26:46:aa:be:79: b7:63:22:54:14:be:61:0a:b9:56:fc:e0:9e:0d:1a: 07:76:be:cb:c5:44:9d:8d:20:93:aa:3e:22:ff:49: 4e:09:95:79:6a:0c:63:7a:9f:e4:53:81:9e:74:37: 94:63:3a:64:44:62:38:f8:21:7d:95:aa:b4:93:31: 0a:ac:7d:11:ad:c9:2b:5f:08:00:73:6c:c9:e7:bc: 7c:e6:3b:f5:2f:9f:96:d9:fb:46:c9:4f:a8:d5:51: 92:fa:32:3b:c9:fa:ba:3a:45:fa:08:23:82:f1:7b: ed:37:1d:8e:24:f5:5a:3b:b2:48:9a:5f:f7:b5:ba: 98:da:ca:c6:3b:77:0d:77:12:51:69:9f:0f:ea:c7: bd:28:4f:2e:94:ad:8f:f0:05:9e:c1:62:26:0b:38: 3f:be:97:1c:f5:dd:aa:71:d5:7d:f7:f8:0b:99:3d: d9:cd:2a:64:fb:73:ae:1c:61:78:ff:d7:a8:0f:b1: de:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.61.176.0/22 185.123.208.0/22 IPv6: 2a06:af80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5542 Signature Algorithm: sha256WithRSAEncryption 39:ea:8c:ce:18:da:28:64:d1:d7:bf:b5:45:9b:d9:02:b6:38: 9c:c2:3f:3f:52:05:8a:3f:d9:eb:85:5d:46:0f:3b:d9:3d:b5: 4b:a8:1e:1f:20:f8:5c:c8:d1:57:8b:8b:69:b4:b8:70:b9:c5: 52:ab:d1:8b:e3:cd:87:92:9d:8a:4a:00:56:bd:a5:c6:85:6b: 72:57:b2:0a:72:7f:0a:07:ac:d2:53:08:77:69:e0:99:d7:5c: aa:78:7f:14:e3:7b:5d:29:4c:87:80:9a:73:bf:b1:82:55:f4: d6:a9:1d:a7:70:51:26:2c:f0:76:1a:bc:51:89:ec:57:54:02: 21:b3:0e:73:bf:d2:e1:54:52:43:f9:cd:50:9c:8d:3e:df:94: bd:7e:25:77:8e:48:e7:96:47:f0:1e:ea:e7:ba:2d:04:42:0a: 49:90:cc:9b:59:8f:a6:29:b1:80:59:09:b2:77:43:a9:6a:f5: 36:5a:27:58:f9:88:cc:b6:a0:d9:d3:f3:11:a5:7d:1e:d7:42: 1f:d7:63:43:9a:6c:d6:41:e8:48:f4:ff:77:de:2d:82:51:a5: 04:5d:0c:07:20:0c:a4:a3:98:53:17:14:9c:88:a9:80:d9:02: bd:67:2f:7b:1a:c3:29:89:cb:12:eb:ef:f8:1d:8b:17:4f:90: ff:bd:9b:b7 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt5ES715kwEcvGbeL1M4qX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmE0ZDgwNDY0OTc4ZjZlYmZiYTk1Zjc0NWEzMzA1NzI2ZjcyZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhm3cKy5H+MRjMoPUVqEIkJYb6KD ojsl5OSt84izDWmqqdk6TCntSrb2dFYUqx05VNImwZzN63IJNuCZI47uj0/K/Rll Jkaqvnm3YyJUFL5hCrlW/OCeDRoHdr7LxUSdjSCTqj4i/0lOCZV5agxjep/kU4Ge dDeUYzpkRGI4+CF9laq0kzEKrH0RrckrXwgAc2zJ57x85jv1L5+W2ftGyU+o1VGS +jI7yfq6OkX6CCOC8XvtNx2OJPVaO7JIml/3tbqY2srGO3cNdxJRaZ8P6se9KE8u lK2P8AWewWImCzg/vpcc9d2qcdV99/gLmT3ZzSpk+3OuHGF4/9eoD7HejQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFF+k2ARkl49uv7qV90WjMFcm9y2TMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhL2UwNTBi NC05YmEwLTRlODUtOWQ3Ni00ZmE2MjQyYjhhM2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvZTA1MGI0 LTliYTAtNGU4NS05ZDc2LTRmYTYyNDJiOGEzYS8xL1g2VFlCR1NYajI2X3VwWDNS YU13VnliM0xaTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCXD2wAwQCuXvQMA0EAgACMAcDBQMqBq+AMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAhWmMA0GCSqGSIb3DQEBCwUAA4IBAQA56ozO GNooZNHXv7VFm9kCtjicwj8/UgWKP9nrhV1GDzvZPbVLqB4fIPhcyNFXi4tptLhw ucVSq9GL482Hkp2KSgBWvaXGhWtyV7IKcn8KB6zSUwh3aeCZ11yqeH8U43tdKUyH gJpzv7GCVfTWqR2ncFEmLPB2GrxRiexXVAIhsw5zv9LhVFJD+c1QnI0+35S9fiV3 jkjnlkfwHurnui0EQgpJkMybWY+mKbGAWQmyd0OpavU2WidY+YjMtqDZ0/MRpX0e 10If12NDmmzWQehI9P933i2CUaUEXQwHIAyko5hTFxSciKmA2QK9Zy97GsMpicsS 6+/4HYsXT5D/vZu3 -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:22 2026 by rpki-client