This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer File: 1-6Cw8f3WQBTlBXuEihmiOehJ290.cer (raw, json) Hash identifier: ezkgL+vph3E8BxdtE/YoWxThf04mqEjpnoYZhMIpWhA= Subject key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC9028FA2C11781BBDC111791B1E9CB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201737 IP: 62.3.17.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:02:8f:a2:c1:17:81:bb:dc:11:17:91:b1:e9:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:eb:4c:1a:82:5f:15:50:fc:08:60:4a:3a:84: d1:6c:17:91:7c:20:de:ac:08:24:f5:5c:d2:1b:a4: 07:f4:a6:4e:d0:dc:41:1b:39:1b:ec:64:e6:dd:5b: c0:8b:40:89:2f:fd:a5:4e:e2:ba:bc:6b:13:68:bb: 83:c8:d8:c3:b3:1a:51:2c:47:94:b2:e5:71:54:5a: 91:75:27:a1:91:34:e5:21:78:96:59:f0:0e:55:67: 0a:94:88:f9:11:b7:ef:1b:b2:82:b0:29:fb:17:ed: b4:89:84:e4:0b:81:f5:74:71:d5:15:1f:1d:67:22: 55:21:bc:c7:2c:e1:05:19:bd:58:c9:ae:c2:66:19: a6:df:1f:c2:ab:c6:5b:b8:fa:a1:f3:1c:ab:a2:03: e2:1a:74:ad:95:02:c4:01:e3:c1:a8:0a:48:cd:3a: b1:ff:74:b2:68:b7:e7:8b:2e:63:a4:02:0c:2b:a4: 70:46:a3:92:6e:7a:39:f7:30:17:66:e0:cc:ce:a6: 32:9f:dd:53:47:5f:d6:09:2b:ce:2d:d1:04:64:35: 29:a0:a8:83:7a:b0:ac:0f:3d:0c:38:9b:a9:21:75: e3:e3:b1:af:9d:e1:6b:be:8a:11:88:d5:3f:33:81: 2a:c1:6d:c4:45:a8:5e:c8:94:70:c9:67:6d:6d:da: bb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.17.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201737 Signature Algorithm: sha256WithRSAEncryption 68:57:ed:0f:95:50:6e:cd:9e:67:7f:a2:f3:24:5c:85:04:47: 6f:88:ab:2e:54:5f:63:2c:06:fa:11:15:3b:59:48:94:61:db: 9b:7f:ab:38:d7:18:23:ae:e2:87:25:f1:dc:60:b6:37:69:83: dc:e5:c5:c1:51:da:20:7f:32:ea:69:73:31:be:03:63:91:c1: 27:f9:bb:95:e1:52:18:c3:61:e2:f6:d8:4a:05:b8:96:c9:87: de:96:28:c5:b0:96:00:f1:da:c8:f4:dc:54:26:85:9b:06:b3: 1c:b4:9a:6d:73:bb:f3:f1:24:e2:63:1c:14:c0:cd:78:64:66: c2:de:fa:3f:d0:4d:1b:51:44:3b:b1:0b:1e:6f:d8:d1:13:03: 86:b0:10:c4:77:63:a5:e4:be:32:25:8f:24:33:44:c7:a6:2b: b0:43:a1:06:9f:a5:f4:d2:29:01:0d:62:dc:3a:cb:5b:7c:8a: 3f:10:dd:ec:4f:0d:81:96:01:37:8b:f2:5f:5e:c0:98:30:19: f4:be:eb:6b:21:3b:4d:7a:db:44:21:8d:41:8d:40:44:70:1c: 72:4f:2a:fe:3a:7d:2c:1c:7e:34:3f:cb:81:a1:ef:33:55:12: d3:73:ca:7f:10:a8:6e:2c:6d:df:91:c7:59:7c:d2:06:25:0f: 2d:77:d5:46 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt6yQKPosEXgbvcEReRsenLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmEwYjBmMWZkZDY0MDE0ZTUwNTdiODQ4YTE5YTIzOWU4NDlkYmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OtMGoJfFVD8CGBKOoTRbBeRfCDe rAgk9VzSG6QH9KZO0NxBGzkb7GTm3VvAi0CJL/2lTuK6vGsTaLuDyNjDsxpRLEeU suVxVFqRdSehkTTlIXiWWfAOVWcKlIj5EbfvG7KCsCn7F+20iYTkC4H1dHHVFR8d ZyJVIbzHLOEFGb1Yya7CZhmm3x/Cq8ZbuPqh8xyrogPiGnStlQLEAePBqApIzTqx /3SyaLfniy5jpAIMK6RwRqOSbno59zAXZuDMzqYyn91TR1/WCSvOLdEEZDUpoKiD erCsDz0MOJupIXXj47GvneFrvooRiNU/M4EqwW3ERaheyJRwyWdtbdq7OQIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPugsPH91kAU5QV7hIoZojnoSdvdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1L2ZkNjk3 Ny04YWFlLTQ4ODktYmU2Zi1jNzExNjk3ZmQzYzMvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvZmQ2OTc3 LThhYWUtNDg4OS1iZTZmLWM3MTE2OTdmZDNjMy8xLzEtNkN3OGYzV1FCVGxCWHVF aWhtaU9laEoyOTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAD4DETAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDFAkwDQYJKoZIhvcNAQELBQADggEBAGhX7Q+VUG7Nnmd/ovMkXIUER2+Iqy5U X2MsBvoRFTtZSJRh25t/qzjXGCOu4ocl8dxgtjdpg9zlxcFR2iB/MuppczG+A2OR wSf5u5XhUhjDYeL22EoFuJbJh96WKMWwlgDx2sj03FQmhZsGsxy0mm1zu/PxJOJj HBTAzXhkZsLe+j/QTRtRRDuxCx5v2NETA4awEMR3Y6XkvjIljyQzRMemK7BDoQaf pfTSKQENYtw6y1t8ij8Q3exPDYGWATeL8l9ewJgwGfS+62shO01620QhjUGNQERw HHJPKv46fSwcfjQ/y4Gh7zNVEtNzyn8QqG4sbd+Rx1l80gYlDy131UY= -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:16 2026 by rpki-client