This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer File: s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer (raw, json) Hash identifier: 4FJ/c0w7Xj2lh7pBg5iA0Rjk8MoNt+Sdp+fOrmsMfQE= Subject key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6ACC5647222781725A82B2BBF16D2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 13083 AS: 21044 AS: 34419 AS: 201829 AS: 201917 AS: 203642 IP: 2.57.144.0/22 IP: 5.180.156.0/22 IP: 37.25.128.0/17 IP: 45.9.176.0/22 IP: 45.14.100.0/22 IP: 45.82.24.0/22 IP: 45.144.96.0/22 IP: 45.158.132.0/22 IP: 45.159.132.0/22 IP: 46.108.0.0/16 IP: 46.190.128.0/17 IP: 47.73.0.0/16 IP: 62.213.128.0/19 IP: 80.84.0.0/20 IP: 85.205.0.0/16 IP: 86.104.216.0/22 IP: 89.32.48.0/21 IP: 91.236.240.0/22 IP: 92.114.8.0/21 IP: 108.179.64.0/18 IP: 130.185.112.0/22 IP: 130.195.32.0/20 IP: 130.195.64.0 -- 130.195.191.255 IP: 130.195.200.0/21 IP: 139.47.160.0 -- 139.47.255.255 IP: 145.230.0.0/16 IP: 149.19.128.0 -- 149.19.155.255 IP: 152.89.212.0/22 IP: 161.38.64.0/18 IP: 162.33.128.0/20 IP: 176.115.224.0/21 IP: 176.125.0.0/19 IP: 188.240.84.0/22 IP: 192.125.128.0/17 IP: 195.158.200.0/22 IP: 195.232.128.0 -- 195.233.255.255 IP: 208.53.128.0/18 IP: 2a01:800::/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ac:c5:64:72:22:78:17:25:a8:2b:2b:bf:16:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:e2:b2:d4:bd:4d:de:42:b9:86:a2:04:f1: ae:a1:b0:d1:b2:93:96:0d:b4:0f:a1:ce:97:65:42: fe:3e:04:29:53:ac:11:b2:52:f0:f7:9b:b8:b9:82: 7f:1c:51:1d:cf:3a:49:68:e8:f3:f8:3d:f1:93:9a: 37:6c:8f:9e:b8:e9:bd:64:bf:ae:46:90:b0:88:03: 26:5a:62:c7:18:c2:68:ef:57:ce:3d:57:95:d9:86: ce:28:87:fb:c1:dc:47:b2:e0:0e:be:3b:6e:40:2a: 88:b0:7e:40:97:32:4f:9d:ca:f7:8c:f7:82:8c:bd: 96:08:69:f5:11:a6:2d:ce:00:fb:37:a4:20:b1:84: 44:cb:d0:21:37:b4:e8:75:00:f7:31:43:ea:4b:70: bf:78:bc:65:7b:60:98:f0:f8:ae:32:35:54:61:5c: 52:0b:5c:db:5e:11:ae:7f:f3:4f:bc:cd:38:01:a9: 1c:10:a8:79:f3:de:ab:e0:7e:e0:25:c5:82:83:ea: 9b:92:59:e2:41:e2:2b:bb:9b:c9:bd:e3:8e:2c:1a: 61:e5:b9:15:e4:a9:21:27:29:b3:fb:cf:ad:b9:e9: 7e:6d:5b:b1:50:82:b8:67:58:ec:d5:0a:94:9b:98: f7:73:27:ed:0b:f3:3a:00:11:4d:60:ee:00:c1:fd: 58:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.144.0/22 5.180.156.0/22 37.25.128.0/17 45.9.176.0/22 45.14.100.0/22 45.82.24.0/22 45.144.96.0/22 45.158.132.0/22 45.159.132.0/22 46.108.0.0/16 46.190.128.0/17 47.73.0.0/16 62.213.128.0/19 80.84.0.0/20 85.205.0.0/16 86.104.216.0/22 89.32.48.0/21 91.236.240.0/22 92.114.8.0/21 108.179.64.0/18 130.185.112.0/22 130.195.32.0/20 130.195.64.0-130.195.191.255 130.195.200.0/21 139.47.160.0-139.47.255.255 145.230.0.0/16 149.19.128.0-149.19.155.255 152.89.212.0/22 161.38.64.0/18 162.33.128.0/20 176.115.224.0/21 176.125.0.0/19 188.240.84.0/22 192.125.128.0/17 195.158.200.0/22 195.232.128.0-195.233.255.255 208.53.128.0/18 IPv6: 2a01:800::/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13083 21044 34419 201829 201917 203642 Signature Algorithm: sha256WithRSAEncryption 84:bc:db:4b:ad:a9:8e:03:2e:9a:f8:87:22:94:0e:9a:26:16: 03:89:02:0d:6f:2d:a3:9a:15:08:38:cb:1e:aa:11:73:75:90: 06:09:af:50:e3:1b:df:f9:2a:65:f2:4e:f9:d5:54:26:2b:ed: 18:e9:56:9e:56:83:a4:d5:13:f7:14:91:bd:36:c5:70:56:fc: d3:84:54:4f:85:9f:0c:4d:94:e3:1e:64:d7:0a:4c:c3:f9:d6: 47:50:2a:69:17:17:15:2e:cb:46:a3:75:ce:f2:8b:f1:7d:18: 4c:cc:aa:5d:7c:d0:96:8e:bc:75:fd:4c:e6:af:61:4c:3f:fd: 6c:36:0c:1a:b8:86:3f:15:25:1b:15:ed:08:1f:bf:a1:92:58: fe:0c:0b:b7:bb:c7:ca:aa:a8:87:e1:32:64:48:7e:0e:ab:f8: 0d:c4:a2:f9:bc:8f:b4:11:db:3c:22:d9:4f:c8:22:81:e1:d0: fa:18:ee:23:37:ef:32:e8:00:e3:b8:4a:c6:73:d6:ff:62:81: 7e:54:24:02:cf:de:56:8e:e3:6d:4f:64:9d:b1:25:6a:0c:7c: 4a:e5:39:12:9d:1d:bb:e5:53:76:1c:99:ea:68:a7:3a:1c:3d: 00:3f:d8:17:69:b8:5d:76:7d:bd:b1:c9:2c:79:3f:34:ba:64: c1:eb:f5:34 -----BEGIN CERTIFICATE----- MIIGszCCBZugAwIBAgISAZt+pqzFZHIieBclqCsrvxbSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2E1ZDk5ODYzZGIyZTQ5YjQ0ZjZjMzI0ZWIwNDM4OGZjNzUxNWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY3istS9Td5CuYaiBPGuobDRspOW DbQPoc6XZUL+PgQpU6wRslLw95u4uYJ/HFEdzzpJaOjz+D3xk5o3bI+euOm9ZL+u RpCwiAMmWmLHGMJo71fOPVeV2YbOKIf7wdxHsuAOvjtuQCqIsH5AlzJPncr3jPeC jL2WCGn1EaYtzgD7N6QgsYREy9AhN7TodQD3MUPqS3C/eLxle2CY8PiuMjVUYVxS C1zbXhGuf/NPvM04AakcEKh5896r4H7gJcWCg+qbklniQeIru5vJveOOLBph5bkV 5KkhJymz+8+tuel+bVuxUIK4Z1js1QqUm5j3cyftC/M6ABFNYO4Awf1YUwIDAQAB o4IDvzCCA7swHQYDVR0OBBYEFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4LzI5ZTli Yy1iMTkwLTQwOWUtODZiMC1lZWM1ZDUwZWZhOTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvMjllOWJj LWIxOTAtNDA5ZS04NmIwLWVlYzVkNTBlZmE5NC8xL3M2WFptR1BiTGttMFQyd3lU ckJEaVB4MUZkSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBJQYIKwYB BQUHAQcBAf8EggEUMIIBEDCB/wQCAAEwgfgDBAICOZADBAIFtJwDBAclGYADBAIt CbADBAItDmQDBAItUhgDBAItkGADBAItnoQDBAItn4QDAwAubAMEBy6+gAMDAC9J AwQFPtWAAwQEUFQAAwMAVc0DBAJWaNgDBANZIDADBAJb7PADBANccggDBAZss0AD BAKCuXADBASCwyAwDAMEBoLDQAMEBoLDgAMEA4LDyDALAwQFiy+gAwMEiyADAwCR 5jAMAwQHlROAAwQClROYAwQCmFnUAwQGoSZAAwQEoiGAAwQDsHPgAwQFsH0AAwQC vPBUAwQHwH2AAwQCw57IMAsDBAfD6IADAwHD6AMEBtA1gDAMBAIAAjAGAwQAKgEI MDEGCCsGAQUFBwEIAQH/BCIwIKAeMBwCAjMbAgJSNAIDAIZzAgMDFGUCAwMUvQID Axt6MA0GCSqGSIb3DQEBCwUAA4IBAQCEvNtLramOAy6a+IcilA6aJhYDiQINby2j mhUIOMseqhFzdZAGCa9Q4xvf+Spl8k751VQmK+0Y6VaeVoOk1RP3FJG9NsVwVvzT hFRPhZ8MTZTjHmTXCkzD+dZHUCppFxcVLstGo3XO8ovxfRhMzKpdfNCWjrx1/Uzm r2FMP/1sNgwauIY/FSUbFe0IH7+hklj+DAu3u8fKqqiH4TJkSH4Oq/gNxKL5vI+0 Eds8ItlPyCKB4dD6GO4jN+8y6ADjuErGc9b/YoF+VCQCz95WjuNtT2SdsSVqDHxK 5TkSnR275VN2HJnqaKc6HD0AP9gXabhddn29sckseT80umTB6/U0 -----END CERTIFICATE-----Generated at Sun Jan 25 22:19:58 2026 by rpki-client