This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer File: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer (raw, json) Hash identifier: SbrjoPEVYjjuEixVGZGDDgWqBRxSx1tTYRBEpsODY9o= Subject key identifier: D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77589154B802193D2880C8AC779125DC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205360 IP: 185.221.4.0/22 IP: 2a0b:fec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:91:54:b8:02:19:3d:28:80:c8:ac:77:91:25:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3acd2b7b7473af4350ea1aba83d177585ceedad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d9:b4:cd:0d:f3:95:cb:ad:29:20:9d:58:2b: be:9b:8f:7b:fe:f3:fa:78:2f:fa:b2:6c:b9:77:12: b4:bc:ac:ae:53:17:f3:77:70:76:91:e7:d1:fc:7b: 01:22:12:0b:bb:21:78:f1:8b:28:a6:e5:0e:ac:23: 40:6d:de:f2:2e:7b:e1:6d:c8:f7:71:94:04:0d:98: 24:0b:b7:ea:82:14:5e:12:20:d2:e0:79:74:69:a1: 25:c0:cc:a6:39:ff:95:b9:a7:36:c5:c0:ff:5e:08: d7:d6:ba:ff:22:a7:e3:dc:12:6e:05:3a:1c:d9:2d: 83:44:4c:db:c9:a5:80:74:bf:95:b7:47:10:45:7f: e0:d2:19:0b:70:50:fd:93:95:ea:9a:a6:20:43:9e: f0:39:cc:60:72:4e:a5:94:7b:34:09:13:f1:9c:48: 61:61:df:20:4f:7b:06:12:a7:16:2f:97:04:93:ce: 2b:fe:33:8f:30:82:b0:06:3b:d9:44:3a:2d:e1:e8: 3b:1d:f2:74:ad:0d:a6:b8:f9:70:6e:7e:e4:47:6f: 69:81:db:70:a4:3e:08:32:7e:35:fe:e4:07:79:69: 9d:1e:7d:fb:bb:db:9c:c3:3d:f0:2e:28:62:4f:73: 98:e5:c9:13:21:5b:ee:94:b3:72:3e:ae:2e:5a:f2: 05:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.221.4.0/22 IPv6: 2a0b:fec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205360 Signature Algorithm: sha256WithRSAEncryption 27:bb:c3:c1:c8:36:cb:3d:77:5f:87:89:bf:4d:81:50:03:62: d5:ec:5a:23:12:b1:e5:54:15:ee:60:02:1c:45:4f:91:ee:a6: 97:c3:de:9d:61:99:7c:78:83:98:d7:87:1b:55:67:d7:2f:f3: 95:26:e5:e9:96:ca:c8:7c:4d:0b:c9:bd:ee:7b:b8:87:cf:fa: e6:c3:e6:4c:29:bf:9f:32:14:5c:20:e3:8f:b3:7b:70:ad:6d: d6:41:39:55:ba:07:de:29:67:ed:66:ab:89:9b:ad:fa:18:4a: c1:1b:9d:70:f7:43:a4:11:da:fc:e8:e6:fe:c9:81:da:b3:f3: c2:28:8b:d1:99:e0:2b:23:0a:3e:72:53:74:4a:88:7d:0a:4f: 76:51:79:16:0b:80:7e:5d:fd:05:88:5c:af:3c:da:9b:6a:0c: 09:4e:80:3a:e9:2e:a3:19:b8:51:a8:00:bb:29:10:39:16:7b: e2:9e:e2:7d:a8:16:d9:c3:8e:a6:05:0d:d7:39:34:f3:ad:01: e3:b9:31:eb:c6:ba:53:ca:92:bd:5c:d6:37:14:73:ae:6c:88: f1:4e:74:ac:30:fd:6c:14:d3:ae:f0:7d:f9:aa:3f:94:2d:ae: 1e:8c:d6:a7:2d:63:80:89:23:f9:9d:ad:f5:0d:0b:8d:ec:11: 70:65:de:38 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WJFUuAIZPSiAyKx3kSXcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2FjZDJiN2I3NDczYWY0MzUwZWExYWJhODNkMTc3NTg1Y2VlZGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtm0zQ3zlcutKSCdWCu+m497/vP6 eC/6smy5dxK0vKyuUxfzd3B2kefR/HsBIhILuyF48YsopuUOrCNAbd7yLnvhbcj3 cZQEDZgkC7fqghReEiDS4Hl0aaElwMymOf+Vuac2xcD/XgjX1rr/Iqfj3BJuBToc 2S2DREzbyaWAdL+Vt0cQRX/g0hkLcFD9k5XqmqYgQ57wOcxgck6llHs0CRPxnEhh Yd8gT3sGEqcWL5cEk84r/jOPMIKwBjvZRDot4eg7HfJ0rQ2muPlwbn7kR29pgdtw pD4IMn41/uQHeWmdHn37u9ucwz3wLihiT3OY5ckTIVvulLNyPq4uWvIFRwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNOs0re3Rzr0NQ6hq6g9F3WFzu2tMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1LzQ2YzIw Yy1mMTY2LTQwNDEtYTAxYi0wZWZlYzZlYTc3YzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvNDZjMjBj LWYxNjYtNDA0MS1hMDFiLTBlZmVjNmVhNzdjNi8xLzA2elN0N2RIT3ZRMURxR3Jx RDBYZFlYTzdhMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCud0EMA0EAgACMAcDBQMqC/7AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMiMDANBgkqhkiG9w0BAQsFAAOCAQEAJ7vDwcg2yz13 X4eJv02BUANi1exaIxKx5VQV7mACHEVPke6ml8PenWGZfHiDmNeHG1Vn1y/zlSbl 6ZbKyHxNC8m97nu4h8/65sPmTCm/nzIUXCDjj7N7cK1t1kE5VboH3iln7WariZut +hhKwRudcPdDpBHa/Ojm/smB2rPzwiiL0ZngKyMKPnJTdEqIfQpPdlF5FguAfl39 BYhcrzzam2oMCU6AOukuoxm4UagAuykQORZ74p7ifagW2cOOpgUN1zk0860B47kx 68a6U8qSvVzWNxRzrmyI8U50rDD9bBTTrvB9+ao/lC2uHozWpy1jgIkj+Z2t9Q0L jewRcGXeOA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:33 2026 by rpki-client