This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer File: t6nDTT-EPNsDW3wws-hOIkElIsU.cer (raw, json) Hash identifier: 6zUx6ayMMlYnPD1sON459uFQbjf1TFGxDJK5GhUG+YI= Subject key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79113F039B7669A32CD98D9B29ABA3BB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41666 IP: 91.216.79.0/24 IP: 2001:67c:8e4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3f:03:9b:76:69:a3:2c:d9:8d:9b:29:ab:a3:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d3:16:44:17:ab:55:e4:74:f6:df:db:56:7d: c6:e3:55:14:10:c6:cc:0f:e9:b9:84:b0:a0:40:f4: 6e:4e:2f:37:57:a1:a4:a6:0d:ee:ff:27:6a:b0:b4: 65:c9:7f:47:c8:95:d0:2e:50:f7:f4:29:84:f3:b1: 86:6b:1a:09:21:81:ff:93:f6:cb:85:0f:8c:c6:64: 3f:7c:86:eb:9a:ec:ef:75:01:c1:2e:11:7a:70:f6: 68:03:90:32:0f:10:d9:33:67:3f:97:b7:5d:f0:fc: c9:30:b4:cb:89:51:aa:43:11:b6:ce:57:30:09:ad: b7:90:34:b5:92:74:1c:cc:c4:55:45:fd:f7:84:b2: 19:46:01:3e:3d:c2:77:42:82:ff:41:96:35:29:62: 62:d4:b8:27:33:73:66:b0:84:38:61:bc:f4:89:56: 18:82:88:40:be:26:ea:0f:94:4b:af:f6:17:b5:d7: 91:18:61:f0:a5:97:33:7d:ae:2c:ee:8a:12:2e:c6: fd:01:2c:3a:fb:0d:e6:12:77:18:a3:a6:a8:20:13: 7f:45:f8:0d:5f:d4:81:6a:86:f6:c8:ea:e7:50:c9: fa:1c:fb:74:7d:c8:73:b4:8d:2a:3a:15:1e:30:10: 5b:3a:ad:1b:d7:2d:3b:6b:0f:16:eb:57:14:e6:72: 98:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.79.0/24 IPv6: 2001:67c:8e4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41666 Signature Algorithm: sha256WithRSAEncryption 4a:51:ff:6e:7d:8a:d1:81:68:3f:4a:e3:c8:ba:56:71:de:a0: f6:f5:70:31:b9:cb:83:e9:13:9c:e2:c4:33:71:eb:1f:96:12: 3b:b4:ff:2d:fe:24:3a:81:55:49:1e:d3:93:1e:12:6f:92:64: 3c:51:b7:e8:a4:b3:26:23:38:9e:5c:10:9f:ff:c9:9b:d7:84: b6:96:66:75:35:15:73:a4:4d:0a:c3:19:1a:17:8b:3d:74:d6: 0f:e3:84:83:c5:b9:36:1e:33:52:6d:b0:5b:c7:aa:40:ac:12: 75:59:a7:d5:fb:f1:8f:98:1f:51:3d:06:da:c0:4f:fb:46:30: fd:b3:b3:2a:41:ba:0f:19:38:dc:e6:be:a8:9b:ca:60:c7:25: 92:0a:9d:f6:7a:2a:96:92:82:e2:61:ab:96:cd:e6:ba:96:21: 62:29:0b:ae:ac:42:8e:f8:5c:eb:76:37:fc:6b:58:ab:8c:79: 39:ca:c7:ef:d0:85:31:c9:fb:93:49:e5:71:16:82:62:d8:01: 42:6a:d6:4c:08:ad:aa:be:cd:ab:6f:2e:49:30:07:f9:d9:16: 0c:3a:d2:99:5c:a4:ae:1c:4f:65:62:a3:28:5b:da:ef:ab:f9: aa:f0:ef:69:a1:79:6a:cb:05:b9:07:66:f0:74:9f:1f:8f:be: 2f:1a:da:f0 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt5ET8Dm3ZpoyzZjZspq6O7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2E5YzM0ZDNmODQzY2RiMDM1YjdjMzBiM2U4NGUyMjQxMjUyMmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9MWRBerVeR09t/bVn3G41UUEMbM D+m5hLCgQPRuTi83V6Gkpg3u/ydqsLRlyX9HyJXQLlD39CmE87GGaxoJIYH/k/bL hQ+MxmQ/fIbrmuzvdQHBLhF6cPZoA5AyDxDZM2c/l7dd8PzJMLTLiVGqQxG2zlcw Ca23kDS1knQczMRVRf33hLIZRgE+PcJ3QoL/QZY1KWJi1LgnM3NmsIQ4Ybz0iVYY gohAvibqD5RLr/YXtdeRGGHwpZczfa4s7ooSLsb9ASw6+w3mEncYo6aoIBN/RfgN X9SBaob2yOrnUMn6HPt0fchztI0qOhUeMBBbOq0b1y07aw8W61cU5nKYvwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFLepw00/hDzbA1t8MLPoTiJBJSLFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1L2RhODc2 Ny0yNzlhLTQ5M2YtOGIyYS0zYTU3NjgwMjE0MTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvZGE4NzY3 LTI3OWEtNDkzZi04YjJhLTNhNTc2ODAyMTQxOC8xL3Q2bkRUVC1FUE5zRFczd3dz LWhPSWtFbElzVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW9hPMA8EAgACMAkDBwAgAQZ8COQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAKLCMA0GCSqGSIb3DQEBCwUAA4IBAQBKUf9ufYrR gWg/SuPIulZx3qD29XAxucuD6ROc4sQzcesflhI7tP8t/iQ6gVVJHtOTHhJvkmQ8 UbfopLMmIzieXBCf/8mb14S2lmZ1NRVzpE0KwxkaF4s9dNYP44SDxbk2HjNSbbBb x6pArBJ1WafV+/GPmB9RPQbawE/7RjD9s7MqQboPGTjc5r6om8pgxyWSCp32eiqW koLiYauWzea6liFiKQuurEKO+Fzrdjf8a1irjHk5ysfv0IUxyfuTSeVxFoJi2AFC atZMCK2qvs2rby5JMAf52RYMOtKZXKSuHE9lYqMoW9rvq/mq8O9poXlqywW5B2bw dJ8fj74vGtrw -----END CERTIFICATE-----Generated at Mon Jan 26 00:17:51 2026 by rpki-client