This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer File: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer (raw, json) Hash identifier: iLQJc6dRUOM4EcaWreyhv9I6s6K+FKuBeQpqe5rxcbc= Subject key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834E322722552E67DB3F547BDB48627 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47549 AS: 198332 IP: 93.159.200.0/21 IP: 2a0d:7880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e3:22:72:25:52:e6:7d:b3:f5:47:bd:b4:86:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:87:59:1f:49:7a:f7:4d:c9:7f:dc:40:28:ce: 6b:48:30:92:d8:39:a5:1f:86:5c:bc:6d:88:88:ef: 18:51:97:75:08:74:9b:d9:07:fc:48:06:ce:f1:1a: af:2c:0a:ac:09:eb:44:51:d6:a8:f3:b7:ef:1d:89: d1:dd:df:04:12:21:98:86:64:38:d1:a5:ff:04:cf: e5:06:25:66:3f:8d:50:5e:76:b7:49:b6:07:df:d8: f9:b7:22:a2:e0:d7:7a:cc:6f:84:b8:95:3b:0a:67: 5b:29:2e:5e:d4:c6:0f:13:26:51:66:c2:18:5a:86: f8:b6:d3:16:e6:7d:c3:8f:37:a3:93:fc:69:ce:f6: e8:12:93:21:b7:22:66:5d:a2:d2:75:0e:5a:62:62: fa:52:45:31:17:a0:b0:1e:5b:a4:53:d8:9b:8b:b6: f6:8d:c5:c1:e0:d1:d2:58:f5:4f:53:7b:a6:5f:51: a4:2f:3d:b8:a9:be:db:ff:38:95:39:b4:78:50:33: 22:1a:9c:1c:6b:e7:d8:1b:9e:a0:eb:d3:ae:ad:9d: a6:1d:a6:09:0e:36:47:37:cc:dd:2f:36:a3:9c:a7: 0c:cc:f9:30:b1:59:26:16:00:a5:14:27:8b:16:d7: 02:45:54:51:bf:83:e0:6a:eb:4c:93:3d:2e:13:85: fa:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.159.200.0/21 IPv6: 2a0d:7880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47549 198332 Signature Algorithm: sha256WithRSAEncryption 69:43:12:85:b9:c9:11:c4:62:79:6e:cb:1e:6e:8a:64:fc:e0: 8c:55:0c:a0:1a:75:21:a5:70:a3:34:08:55:fe:da:ce:a1:7b: ca:5b:05:3f:19:27:b8:4f:2e:86:ac:54:e6:cf:35:e8:05:4d: 16:b8:02:a8:27:55:5e:77:8b:77:b8:e4:e6:da:26:b3:82:d3: 21:5d:49:ca:16:11:66:f4:40:26:8e:74:1b:bc:21:6e:de:49: e7:4c:7c:42:df:bd:38:8f:16:47:71:a1:d1:c7:97:db:e1:cc: b9:af:90:d4:a5:4b:aa:2a:2c:de:b2:69:ff:01:d2:cd:47:30: ad:84:20:d6:04:57:de:65:c5:77:d1:40:39:b2:c8:ab:fc:32: 63:77:03:98:1d:73:2f:a1:43:ef:1f:7f:11:76:10:f9:02:ec: d8:53:10:72:cf:57:a1:9a:b3:5f:b9:3d:a4:97:53:26:e4:98: 5a:36:1c:a6:6b:95:c4:26:94:75:05:da:dc:df:22:19:fe:93: 89:14:2f:8d:13:d4:fa:31:24:3b:f4:07:b1:87:a6:7b:db:ad: 43:52:8f:4c:a8:50:c1:84:e1:33:53:46:0d:24:78:6e:9c:95: 83:e0:c5:a7:67:f4:cd:34:a5:37:c8:82:00:08:1b:10:f2:5b: cd:17:53:07 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt4NOMiciVS5n2z9Ue9tIYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTI1ZmFjNGE1ZDk1YjQxYTA3MmViYmY0ZjAzNWQwOWIzYWE1OWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIdZH0l6903Jf9xAKM5rSDCS2Dml H4ZcvG2IiO8YUZd1CHSb2Qf8SAbO8RqvLAqsCetEUdao87fvHYnR3d8EEiGYhmQ4 0aX/BM/lBiVmP41QXna3SbYH39j5tyKi4Nd6zG+EuJU7CmdbKS5e1MYPEyZRZsIY Wob4ttMW5n3Djzejk/xpzvboEpMhtyJmXaLSdQ5aYmL6UkUxF6CwHlukU9ibi7b2 jcXB4NHSWPVPU3umX1GkLz24qb7b/ziVObR4UDMiGpwca+fYG56g69OurZ2mHaYJ DjZHN8zdLzajnKcMzPkwsVkmFgClFCeLFtcCRVRRv4PgautMkz0uE4X6bwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFNEl+sSl2VtBoHLrv08DXQmzqlnHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzhjZWEx Zi00NWU0LTQyMDEtYmViYy0wZGVkMDZlNDBhNzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvOGNlYTFm LTQ1ZTQtNDIwMS1iZWJjLTBkZWQwNmU0MGE3NS8xLzBTWDZ4S1haVzBHZ2N1dV9U d05kQ2JPcVdjYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDXZ/IMA0EAgACMAcDBQMqDXiAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwC5vQIDAwa8MA0GCSqGSIb3DQEBCwUAA4IBAQBpQxKF uckRxGJ5bssebopk/OCMVQygGnUhpXCjNAhV/trOoXvKWwU/GSe4Ty6GrFTmzzXo BU0WuAKoJ1Ved4t3uOTm2iazgtMhXUnKFhFm9EAmjnQbvCFu3knnTHxC3704jxZH caHRx5fb4cy5r5DUpUuqKizesmn/AdLNRzCthCDWBFfeZcV30UA5ssir/DJjdwOY HXMvoUPvH38RdhD5AuzYUxByz1ehmrNfuT2kl1Mm5JhaNhyma5XEJpR1Bdrc3yIZ /pOJFC+NE9T6MSQ79Aexh6Z7261DUo9MqFDBhOEzU0YNJHhunJWD4MWnZ/TNNKU3 yIIACBsQ8lvNF1MH -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:57 2026 by rpki-client