This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer File: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer (raw, json) Hash identifier: Ndgn4zthtFVImktSaWnQl1FYMbMtTZ0zGuJm1UM7+Jw= Subject key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C73C17AC7DCF615C2301EC3EEC1960 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.183.64.0/21 IP: 2a0b:c180::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3c:17:ac:7d:cf:61:5c:23:01:ec:3e:ec:19:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:79:73:32:81:65:72:1d:db:56:df:5b:74:66: 13:23:e6:ab:e1:3a:6c:c0:77:0e:b5:45:3f:60:ee: 0c:3f:ff:b3:9e:ce:ce:46:83:fd:ab:da:32:4c:bc: e7:d3:00:b6:9d:e9:3a:d6:3a:80:a5:62:14:10:81: 48:79:59:64:a0:2b:4a:08:be:0e:f7:9a:95:7c:68: 2a:1e:05:74:36:fa:ad:df:c1:e7:0c:48:a4:58:e4: 76:52:4b:12:88:81:2c:62:eb:5a:98:ed:cb:1b:9e: d8:b3:67:d8:db:6e:a8:d0:1f:1d:67:7b:32:00:17: ea:04:8a:f9:d9:2c:7b:f3:57:44:21:36:2f:23:be: b4:7c:50:de:d4:0b:69:2b:88:f2:0c:4d:d5:23:bc: 1b:85:26:fa:28:b8:ee:c2:9b:41:83:d2:2c:a5:91: c8:c7:be:29:a2:c5:e1:0e:8e:22:c4:7c:c1:80:78: b6:9d:e3:0f:d8:df:55:75:71:34:00:4e:eb:ee:bb: 47:c0:1b:2b:c3:33:28:83:23:b9:7d:cf:d4:ab:ac: 7c:34:ef:c7:4f:49:c9:30:43:2f:8e:de:79:4a:25: 70:e6:eb:ff:40:94:ab:38:b8:d1:b4:89:33:da:db: bb:be:19:03:83:2f:2a:ad:64:e9:b9:5c:a3:d3:65: 86:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.64.0/21 IPv6: 2a0b:c180::/32 Signature Algorithm: sha256WithRSAEncryption a3:5c:f5:ee:d3:fb:02:74:a3:28:c2:f3:73:77:37:25:f0:83: c6:34:74:42:12:b5:ee:90:5c:7f:12:0d:4e:36:b6:86:83:c1: af:e0:36:fd:89:6b:16:85:76:b3:1b:b8:c3:c0:02:a7:16:e6: 96:f3:01:b4:f5:44:a7:da:a7:df:90:90:97:9f:81:ec:14:f7: e1:fe:4f:29:a1:19:04:28:70:47:8a:f5:7d:6f:3e:70:a3:57: 87:56:59:48:56:85:29:b0:f4:02:c8:04:a7:b5:e7:64:e7:46: d1:0b:c4:f1:39:2e:44:82:52:69:19:28:c7:7d:f9:ba:cc:44: 36:ab:ca:b4:7a:db:e8:f8:a1:c4:81:38:09:dc:31:08:a6:08: 5a:0c:e6:c4:51:24:70:89:e1:d4:23:3e:91:87:22:d4:cc:db: f0:da:11:b8:14:a0:eb:29:fb:45:2c:07:60:68:68:ee:bf:ae: 19:66:3d:69:52:fe:3f:19:26:ea:58:9e:97:d2:1d:ff:32:a2: 17:05:6c:4d:69:2c:25:1f:df:7f:f1:a0:c7:6b:ad:23:0f:19: 08:b4:1c:a3:56:b7:09:cc:27:1a:ff:89:85:2b:82:55:0d:1d: 87:10:b6:a9:a4:ee:cc:6c:8f:fb:ee:8e:98:23:20:f7:b0:de: 59:8e:6b:16 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3xzwXrH3PYVwjAew+7BlgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjJlOTVjNDUxOWRlOTIwOGUzZDIyMzMyYWFiZWM2YjFhMmVhNzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXlzMoFlch3bVt9bdGYTI+ar4Tps wHcOtUU/YO4MP/+zns7ORoP9q9oyTLzn0wC2nek61jqApWIUEIFIeVlkoCtKCL4O 95qVfGgqHgV0Nvqt38HnDEikWOR2UksSiIEsYutamO3LG57Ys2fY226o0B8dZ3sy ABfqBIr52Sx781dEITYvI760fFDe1AtpK4jyDE3VI7wbhSb6KLjuwptBg9IspZHI x74posXhDo4ixHzBgHi2neMP2N9VdXE0AE7r7rtHwBsrwzMogyO5fc/Uq6x8NO/H T0nJMEMvjt55SiVw5uv/QJSrOLjRtIkz2tu7vhkDgy8qrWTpuVyj02WGgQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNIulcRRnekgjj0iMyqr7GsaLqdWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzk5MTUz ZC00NzAyLTQzNzUtOGU0NC1mMmU1NGRkZWEzYjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvOTkxNTNk LTQ3MDItNDM3NS04ZTQ0LWYyZTU0ZGRlYTNiMy8xLzBpNlZ4RkdkNlNDT1BTSXpL cXZzYXhvdXAxWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDLrdAMA0EAgACMAcDBQAqC8GAMA0GCSqGSIb3 DQEBCwUAA4IBAQCjXPXu0/sCdKMowvNzdzcl8IPGNHRCErXukFx/Eg1ONraGg8Gv 4Db9iWsWhXazG7jDwAKnFuaW8wG09USn2qffkJCXn4HsFPfh/k8poRkEKHBHivV9 bz5wo1eHVllIVoUpsPQCyASntedk50bRC8TxOS5EglJpGSjHffm6zEQ2q8q0etvo +KHEgTgJ3DEIpghaDObEUSRwieHUIz6RhyLUzNvw2hG4FKDrKftFLAdgaGjuv64Z Zj1pUv4/GSbqWJ6X0h3/MqIXBWxNaSwlH99/8aDHa60jDxkItByjVrcJzCca/4mF K4JVDR2HELappO7MbI/77o6YIyD3sN5ZjmsW -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:52 2026 by rpki-client