This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer File: v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer (raw, json) Hash identifier: LKahwUAA5JoeiegDnWQqzwBaToZ1nVrUg3M/pmr7dis= Subject key identifier: BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAF0777AB35651D9E55350509B3D78 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21232 IP: 62.32.0.0/19 IP: 77.74.56.0/21 IP: 79.142.128.0/20 IP: 82.192.224.0/19 IP: 93.184.16.0/20 IP: 185.31.248.0/22 IP: 185.41.132.0/22 IP: 185.45.236.0/22 IP: 185.64.184.0/22 IP: 185.110.72.0/22 IP: 185.110.88.0/22 IP: 185.110.184.0/22 IP: 185.119.36.0/22 IP: 185.132.16.0/22 IP: 195.216.64.0/19 IP: 213.160.32.0/19 IP: 213.188.32.0/19 IP: 2001:1558::/32 IP: 2a01:228::/32 IP: 2a01:52a0::/32 IP: 2a01:5660::/32 IP: 2a02:5c0::/32 IP: 2a04:5640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f0:77:7a:b3:56:51:d9:e5:53:50:50:9b:3d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfabf5a474afe7212331670e831e119da38f284f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:68:54:24:04:13:07:37:94:96:ee:21:d9:f7: 41:ff:05:d1:8f:c1:6f:0c:db:34:c9:bc:b0:e6:55: 74:71:67:a3:d3:80:08:70:87:2a:bb:f6:d1:34:61: 9e:03:d0:7b:34:d9:f1:5d:a0:47:e0:0a:97:e6:f0: 90:9a:13:66:24:c3:29:ec:5a:69:f9:5e:b3:47:e8: 0e:89:fa:d3:5c:59:51:b2:3f:95:41:1b:f5:1c:e4: 55:39:a6:fe:63:d3:ce:c6:d3:55:f5:8c:1f:a3:d5: bc:de:7b:dc:a8:a4:1c:41:e1:58:4c:9b:71:a8:40: 9d:f6:ce:d5:ab:09:e5:7a:7d:91:14:77:dc:f9:e1: b9:db:e6:81:18:57:cc:37:07:91:49:55:03:37:1f: 10:3a:04:51:d1:0d:6e:fa:99:68:8b:50:bd:13:c5: f7:fc:2b:57:de:d4:dd:24:43:ce:22:78:7a:72:e2: 23:05:4b:97:98:43:d3:24:c5:7c:1f:be:ee:98:c5: 0b:ef:38:90:72:36:e8:9e:25:7d:f7:94:ad:d3:00: 41:74:35:c0:79:8b:6b:16:47:88:ce:ac:50:d2:38: d2:96:b2:f2:be:8b:dd:4c:04:ba:4f:26:44:66:43: 3e:0c:6e:d3:90:b8:7b:22:d9:12:04:77:e3:54:59: 20:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.32.0.0/19 77.74.56.0/21 79.142.128.0/20 82.192.224.0/19 93.184.16.0/20 185.31.248.0/22 185.41.132.0/22 185.45.236.0/22 185.64.184.0/22 185.110.72.0/22 185.110.88.0/22 185.110.184.0/22 185.119.36.0/22 185.132.16.0/22 195.216.64.0/19 213.160.32.0/19 213.188.32.0/19 IPv6: 2001:1558::/32 2a01:228::/32 2a01:52a0::/32 2a01:5660::/32 2a02:5c0::/32 2a04:5640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21232 Signature Algorithm: sha256WithRSAEncryption 54:89:cc:e9:51:7c:7e:11:4d:8c:47:37:4f:37:73:51:8f:92: eb:0e:df:96:3d:ab:2b:10:26:31:6d:dc:f4:57:4f:43:f9:3f: d6:71:89:e1:39:ae:aa:02:09:b5:70:86:a0:39:42:90:15:4e: 78:10:0c:d0:a5:c6:a4:09:71:75:f5:87:4a:52:e7:93:b6:61: 2a:12:02:70:ef:87:af:05:e9:bf:67:a6:4e:ba:37:d5:a1:41: 09:da:1b:0e:07:ea:ff:82:41:54:e7:2e:7e:eb:4d:72:72:80: 7a:33:e4:de:eb:92:fd:bd:4a:32:53:dd:4d:7b:c8:48:88:a7: 42:74:76:b3:d4:67:f0:64:a6:fb:98:29:62:11:34:ca:4f:8c: 7a:32:4e:62:59:b7:0b:bc:57:7e:b9:f6:ad:11:ae:60:06:d1: c3:b6:8d:9c:f2:48:6a:1b:55:1d:26:4c:5f:40:67:a1:4f:e7: 71:b2:34:a1:17:66:0d:16:c5:cb:8c:11:99:b5:28:f0:a3:ac: 89:46:db:4e:fe:cd:d4:13:a7:29:b0:53:1e:24:50:94:03:3f: 55:71:70:91:3a:64:6b:c8:8b:bf:99:fc:87:2d:9f:ce:f1:d2: f0:23:bf:4c:21:c8:f1:94:31:4d:d4:53:1b:9b:9d:09:72:3b: 21:c2:e7:9e -----BEGIN CERTIFICATE----- MIIGKDCCBRCgAwIBAgISAZt26vB3erNWUdnlU1BQmz14MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmFiZjVhNDc0YWZlNzIxMjMzMTY3MGU4MzFlMTE5ZGEzOGYyODRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mhUJAQTBzeUlu4h2fdB/wXRj8Fv DNs0ybyw5lV0cWej04AIcIcqu/bRNGGeA9B7NNnxXaBH4AqX5vCQmhNmJMMp7Fpp +V6zR+gOifrTXFlRsj+VQRv1HORVOab+Y9POxtNV9Ywfo9W83nvcqKQcQeFYTJtx qECd9s7Vqwnlen2RFHfc+eG52+aBGFfMNweRSVUDNx8QOgRR0Q1u+ploi1C9E8X3 /CtX3tTdJEPOInh6cuIjBUuXmEPTJMV8H77umMUL7ziQcjboniV995St0wBBdDXA eYtrFkeIzqxQ0jjSlrLyvovdTAS6TyZEZkM+DG7TkLh7ItkSBHfjVFkg6wIDAQAB o4IDNDCCAzAwHQYDVR0OBBYEFL+r9aR0r+chIzFnDoMeEZ2jjyhPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxLzAxODhk YS0zNjU1LTQ4MmQtODgxYi1mZWJiYzRhM2I0NWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvMDE4OGRh LTM2NTUtNDgyZC04ODFiLWZlYmJjNGEzYjQ1Yi8xL3Y2djFwSFN2NXlFak1XY09n eDRSbmFPUEtFOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGzBggrBgEF BQcBBwEB/wSBozCBoDBsBAIAATBmAwQFPiAAAwQDTUo4AwQET46AAwQFUsDgAwQE XbgQAwQCuR/4AwQCuSmEAwQCuS3sAwQCuUC4AwQCuW5IAwQCuW5YAwQCuW64AwQC uXckAwQCuYQQAwQFw9hAAwQF1aAgAwQF1bwgMDAEAgACMCoDBQAgARVYAwUAKgEC KAMFACoBUqADBQAqAVZgAwUAKgIFwAMFAyoEVkAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICUvAwDQYJKoZIhvcNAQELBQADggEBAFSJzOlRfH4RTYxHN083c1GPkusO 35Y9qysQJjFt3PRXT0P5P9ZxieE5rqoCCbVwhqA5QpAVTngQDNClxqQJcXX1h0pS 55O2YSoSAnDvh68F6b9npk66N9WhQQnaGw4H6v+CQVTnLn7rTXJygHoz5N7rkv29 SjJT3U17yEiIp0J0drPUZ/BkpvuYKWIRNMpPjHoyTmJZtwu8V3659q0RrmAG0cO2 jZzySGobVR0mTF9AZ6FP53GyNKEXZg0WxcuMEZm1KPCjrIlG207+zdQTpymwUx4k UJQDP1VxcJE6ZGvIi7+Z/Ictn87x0vAjv0whyPGUMU3UUxubnQlyOyHC554= -----END CERTIFICATE-----Generated at Mon Jan 26 11:09:33 2026 by rpki-client