This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer File: v6bpb8p6J4PLlyHrti3htTbBY6k.cer (raw, json) Hash identifier: qdk5X7S0/xyxmuJ6qhnbMJQKiKKFR5HgiY1RXRGjrZU= Subject key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A36B94DC9EA5ED21A04F9482882EC3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.157.80.0/22 IP: 2a07:a440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6b:94:dc:9e:a5:ed:21:a0:4f:94:82:88:2e:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:33:52:47:94:da:eb:ca:c1:65:be:51:c6: da:b7:be:7c:21:9a:25:d4:7f:b1:a6:38:da:a9:93: 16:d0:73:12:b4:ea:87:81:6d:31:5d:bb:b3:2a:c5: c0:9f:42:8c:03:b4:0f:2b:7f:f2:f5:2e:e3:ee:3f: 19:05:20:bb:80:a0:5f:bd:33:b2:55:ac:94:3c:f1: cf:d6:3b:f8:f3:6a:34:4e:60:76:62:4c:23:d1:38: b7:08:a2:09:51:f0:d3:f8:85:65:6e:12:23:90:ff: 1d:71:95:57:20:9c:f9:e2:91:23:06:8c:11:27:da: 9f:67:3f:4c:a0:23:f9:06:34:3a:97:03:c6:9b:ae: ab:54:e0:ec:82:f6:96:d3:65:15:aa:3e:db:76:8d: 63:e9:f3:31:8e:28:05:7c:3e:95:6b:ec:91:65:f7: c3:f6:38:42:60:c4:4b:99:a6:7e:dd:98:8c:d1:d5: b7:93:06:19:ec:73:3b:36:ce:04:93:a3:41:bf:a5: 1c:8d:97:c4:cc:65:b1:9a:ff:fd:b3:b4:a9:c4:77: 24:35:f9:2d:71:e6:4a:2d:1b:6e:9d:50:f2:4b:c7: d3:f9:5f:30:09:39:40:99:f8:35:44:d1:82:c2:e1: fd:37:44:d6:ec:25:46:e2:00:21:9e:3c:41:5c:2c: 5c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.80.0/22 IPv6: 2a07:a440::/29 Signature Algorithm: sha256WithRSAEncryption 34:b4:c8:38:30:c9:f8:a9:49:08:5f:bc:7f:e3:4f:48:9d:20: ee:08:e2:24:16:98:a0:2b:0e:53:67:14:57:13:65:3e:06:f1: f3:b8:37:94:4a:73:d6:4f:b0:2b:a8:a2:90:1f:87:1b:f2:73: 2f:56:c5:6d:85:65:a2:ec:73:30:06:b9:63:e0:50:4f:c1:fe: 37:8f:24:d4:6c:3d:cf:33:c2:d2:33:e3:4f:fb:40:4c:d5:88: 15:ca:34:bc:b3:39:7b:ca:33:5c:79:eb:ba:db:5c:64:f4:5f: 9d:08:5c:91:c0:1f:ad:c4:cc:24:61:bb:63:dd:41:9c:b1:5f: fd:07:19:7f:25:5b:fc:b2:55:bf:cb:dc:27:d3:fa:2e:5e:aa: f4:f3:64:ab:d0:58:fd:4f:0b:cf:35:55:53:a7:76:9a:0b:85: e8:4d:e9:29:48:97:e2:6e:40:ae:2e:cb:02:8c:de:be:d8:b6: c2:90:b7:b5:fa:57:c9:56:4f:3d:e6:06:26:09:70:c6:df:dd: 74:fa:15:ff:75:dd:cd:86:7e:e4:d2:8b:66:6b:f6:ac:dd:45: 6f:17:bc:86:9b:dc:1d:b3:93:02:29:d9:b6:c0:97:93:47:c0: 42:27:94:09:b7:3c:d0:f1:a9:8c:e7:76:1f:69:68:a1:e0:ec: e0:dd:47:d9 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt4o2uU3J6l7SGgT5SCiC7DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmE2ZTk2ZmNhN2EyNzgzY2I5NzIxZWJiNjJkZTFiNTM2YzE2M2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUszUkeU2uvKwWW+Ucbat758IZol 1H+xpjjaqZMW0HMStOqHgW0xXbuzKsXAn0KMA7QPK3/y9S7j7j8ZBSC7gKBfvTOy VayUPPHP1jv482o0TmB2Ykwj0Ti3CKIJUfDT+IVlbhIjkP8dcZVXIJz54pEjBowR J9qfZz9MoCP5BjQ6lwPGm66rVODsgvaW02UVqj7bdo1j6fMxjigFfD6Va+yRZffD 9jhCYMRLmaZ+3ZiM0dW3kwYZ7HM7Ns4Ek6NBv6UcjZfEzGWxmv/9s7SpxHckNfkt ceZKLRtunVDyS8fT+V8wCTlAmfg1RNGCwuH9N0TW7CVG4gAhnjxBXCxcAwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFL+m6W/KeieDy5ch67Yt4bU2wWOpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2Lzg1NmVh NC1kZTVhLTRmMTEtODIyOC04N2JmNmZkYmUxOTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvODU2ZWE0 LWRlNWEtNGYxMS04MjI4LTg3YmY2ZmRiZTE5My8xL3Y2YnBiOHA2SjRQTGx5SHJ0 aTNodFRiQlk2ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZ1QMA0EAgACMAcDBQMqB6RAMA0GCSqGSIb3 DQEBCwUAA4IBAQA0tMg4MMn4qUkIX7x/409InSDuCOIkFpigKw5TZxRXE2U+BvHz uDeUSnPWT7ArqKKQH4cb8nMvVsVthWWi7HMwBrlj4FBPwf43jyTUbD3PM8LSM+NP +0BM1YgVyjS8szl7yjNceeu621xk9F+dCFyRwB+txMwkYbtj3UGcsV/9Bxl/JVv8 slW/y9wn0/ouXqr082Sr0Fj9TwvPNVVTp3aaC4XoTekpSJfibkCuLssCjN6+2LbC kLe1+lfJVk895gYmCXDG3910+hX/dd3Nhn7k0otma/as3UVvF7yGm9wds5MCKdm2 wJeTR8BCJ5QJtzzQ8amM53YfaWih4Ozg3UfZ -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:03 2026 by rpki-client