This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer File: mT6BRnbzLyZHccetdnpN-H08Y-I.cer (raw, json) Hash identifier: B0HR1GOqwUZa6DZT9Fw2RqGzaY8P/nAlLFiAX63Kg6A= Subject key identifier: 99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AD2EFF6071A50C8D08ABC225C39B9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58015 AS: 206659 AS: 213484 IP: 194.153.159.192/26 IP: 2001:7f8:ff::/48 IP: 2a0d:b080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d2:ef:f6:07:1a:50:c8:d0:8a:bc:22:5c:39:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=993e814676f32f264771c7ad767a4df87d3c63e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:41:6b:92:18:ea:07:2f:2b:bd:e3:a8:90:7d: 27:15:96:03:2a:7a:fe:14:3e:70:d5:b4:33:22:e4: 1c:75:ab:35:5e:ca:b8:5f:7b:8f:33:d2:a1:b5:9d: 2e:6d:56:f2:88:8a:f1:2d:00:09:7a:9d:cc:7c:9d: af:47:fd:3d:52:85:5f:cb:db:3c:5d:c2:b1:56:23: c7:aa:05:6a:cd:43:cb:a4:ed:11:55:37:78:13:cb: fa:77:d3:ef:9a:23:26:0e:33:c5:88:26:f5:e3:0e: 3c:b8:dd:f3:43:f1:a9:04:90:12:e1:f0:28:f5:7c: 33:a7:21:9e:fe:24:e8:ec:d7:c9:66:48:46:ba:0d: 1d:57:98:18:e8:be:0e:5a:0e:f9:a7:4f:d1:3f:50: 21:57:d7:57:6c:a6:de:2d:83:03:d0:3c:6f:0a:d1: 23:55:cd:34:ed:6e:b5:61:c9:a4:5f:25:61:76:f7: be:83:f5:91:91:10:b6:5b:b9:63:9c:81:4e:c2:a9: 01:28:21:81:72:b1:c2:b0:d1:44:d7:4b:4b:8f:9c: 6a:71:b7:0b:dd:41:08:8e:f5:63:09:37:e4:9f:c9: 4d:75:31:bd:e9:3e:68:f4:16:51:bd:e6:10:dc:cf: de:8f:0e:1c:44:d8:34:b2:f9:05:72:b0:53:6b:fa: 22:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.153.159.192/26 IPv6: 2001:7f8:ff::/48 2a0d:b080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58015 206659 213484 Signature Algorithm: sha256WithRSAEncryption 5e:7e:7e:bf:22:54:11:ca:13:f8:9c:14:30:55:0d:b9:c1:76: 3a:17:8c:65:c8:dc:6a:3d:18:ea:47:2a:14:40:99:8a:d5:0b: fc:79:ee:a1:b5:d5:e3:3a:37:12:14:af:b6:40:6b:5a:4c:f9: 54:4e:4c:ec:7f:40:61:7b:da:20:e7:84:5f:c1:4e:35:df:ce: 8a:c6:6a:1f:a9:06:ae:ba:36:52:5a:ba:0e:d5:dc:04:60:56: 22:03:f6:43:da:68:51:6b:45:24:f9:7a:26:e5:46:a7:01:d7: 66:c8:73:ff:5b:f2:aa:be:54:61:d1:ef:fd:80:9c:df:92:0b: 4e:2c:8c:21:7f:2d:2a:e6:eb:51:81:99:1f:42:d3:75:86:5f: 3d:62:e4:76:0a:15:3a:72:d1:ef:80:8a:b1:79:64:90:28:45: 0d:ac:8b:9a:35:6d:99:3d:d2:68:72:57:bd:e9:3a:52:14:9a: 68:e7:70:21:f6:7b:8d:87:df:d7:09:62:73:89:d7:7c:33:7d: d0:59:92:e9:ce:f7:fe:c3:73:d7:23:06:b2:87:e7:98:10:d2: 10:62:e4:8d:57:5f:e8:5e:67:40:24:3d:ee:4b:87:04:ce:11: 1e:38:c4:82:90:2a:53:84:6a:71:9d:6e:37:7a:e1:a7:e4:22: fd:0d:d0:f6 -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt6WtLv9gcaUMjQirwiXDm5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTNlODE0Njc2ZjMyZjI2NDc3MWM3YWQ3NjdhNGRmODdkM2M2M2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80FrkhjqBy8rveOokH0nFZYDKnr+ FD5w1bQzIuQcdas1Xsq4X3uPM9KhtZ0ubVbyiIrxLQAJep3MfJ2vR/09UoVfy9s8 XcKxViPHqgVqzUPLpO0RVTd4E8v6d9PvmiMmDjPFiCb14w48uN3zQ/GpBJAS4fAo 9XwzpyGe/iTo7NfJZkhGug0dV5gY6L4OWg75p0/RP1AhV9dXbKbeLYMD0DxvCtEj Vc007W61YcmkXyVhdve+g/WRkRC2W7ljnIFOwqkBKCGBcrHCsNFE10tLj5xqcbcL 3UEIjvVjCTfkn8lNdTG96T5o9BZRveYQ3M/ejw4cRNg0svkFcrBTa/oiawIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFJk+gUZ28y8mR3HHrXZ6Tfh9PGPiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1L2MzMjFm NS1kNjExLTQyMTgtYWYxZi00OGNiMGZjYjkwYzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvYzMyMWY1 LWQ2MTEtNDIxOC1hZjFmLTQ4Y2IwZmNiOTBjMy8xL21UNkJSbmJ6THlaSGNjZXRk bnBOLUgwOFktSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDgGCCsGAQUF BwEHAQH/BCkwJzANBAIAATAHAwUGwpmfwDAWBAIAAjAQAwcAIAEH+AD/AwUDKg2w gDAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMA4p8CAwMnQwIDA0HsMA0GCSqGSIb3 DQEBCwUAA4IBAQBefn6/IlQRyhP4nBQwVQ25wXY6F4xlyNxqPRjqRyoUQJmK1Qv8 ee6htdXjOjcSFK+2QGtaTPlUTkzsf0Bhe9og54RfwU41386KxmofqQauujZSWroO 1dwEYFYiA/ZD2mhRa0Uk+Xom5UanAddmyHP/W/KqvlRh0e/9gJzfkgtOLIwhfy0q 5utRgZkfQtN1hl89YuR2ChU6ctHvgIqxeWSQKEUNrIuaNW2ZPdJocle96TpSFJpo 53Ah9nuNh9/XCWJzidd8M33QWZLpzvf+w3PXIwayh+eYENIQYuSNV1/oXmdAJD3u S4cEzhEeOMSCkCpThGpxnW43euGn5CL9DdD2 -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:11 2026 by rpki-client