This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer File: 1-6DtkuyUMh3LIZ03842QfhgyRL0.cer (raw, json) Hash identifier: tx9T6jjyMz7+u75ZaObt2bNpN1ZkwmrjvfBLvXa05Uc= Subject key identifier: FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E2C4512532AB533FC0642BC39FA81 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 1299 AS: 1833 AS: 8233 AS: 8532 AS: 8837 IP: 2.255.192.0/18 IP: 62.115.0.0/16 IP: 80.91.240.0/20 IP: 80.239.128.0/17 IP: 185.223.8.0/22 IP: 195.12.224.0/19 IP: 213.155.128.0/19 IP: 213.248.64.0/18 IP: 2001:2030::/28 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:2c:45:12:53:2a:b5:33:fc:06:42:bc:39:fa:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fba0ed92ec94321dcb219d37f38d907e183244bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:20:7d:9f:bc:7c:3f:5e:bc:58:ea:6c:b7:67: 93:64:19:39:e7:52:64:e4:e1:15:4c:eb:02:39:52: 2a:63:cb:82:c4:3b:26:2c:91:3d:68:c0:b7:25:16: e8:4c:59:9f:72:de:57:c6:3b:c7:dc:db:8e:c0:81: 04:fb:de:5f:a9:3b:17:99:bf:59:36:c8:2e:d9:bd: 67:8c:73:43:39:df:8f:ac:2c:22:79:63:e8:b6:86: 97:8e:84:14:10:6d:12:f2:2c:6e:37:28:8d:c5:ff: 42:6f:17:b5:60:46:0f:c7:51:41:a2:e8:d6:37:e6: 51:eb:75:6f:e7:f9:5b:43:8e:0b:12:b9:51:f2:09: a6:f7:b5:d5:fa:03:38:48:a3:19:8a:1a:ee:2d:ea: e6:21:ac:f6:42:93:9d:f3:c1:40:4b:19:23:50:79: 94:f5:bf:d0:96:45:21:f4:7a:a4:19:8a:90:d9:3a: b6:92:d4:f1:13:39:ae:e5:f0:f1:96:08:01:44:86: df:15:3c:85:ca:14:6e:14:e7:56:6b:87:4c:e5:ea: 50:f7:0c:71:6f:aa:d4:56:58:f1:2e:f8:ce:76:cc: 2e:96:e6:1c:d0:2a:fc:58:8b:e7:4d:98:c6:0f:7b: aa:d4:df:99:8a:9b:38:60:fe:ef:91:c2:95:6f:84: 44:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.255.192.0/18 62.115.0.0/16 80.91.240.0/20 80.239.128.0/17 185.223.8.0/22 195.12.224.0/19 213.155.128.0/19 213.248.64.0/18 IPv6: 2001:2030::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1299 1833 8233 8532 8837 Signature Algorithm: sha256WithRSAEncryption b2:05:7d:c2:69:c9:96:80:06:79:69:5d:c3:90:e4:5e:dc:23: 0e:e4:14:1b:69:f5:49:b6:8d:64:35:a1:dc:ec:09:2c:ec:d8: 59:0f:df:f8:5e:00:3b:d1:dc:07:80:e1:78:6e:ed:30:ae:9c: 5b:05:7c:3e:fa:03:6a:e3:8d:ee:8b:61:da:52:17:92:ef:c4: 70:90:62:85:a7:8c:4b:2d:16:aa:de:f8:48:f6:21:0e:7a:0b: 2f:35:e7:ed:e0:8e:ff:7b:c6:18:6e:b0:fd:aa:1b:4c:93:5b: 8e:3e:0d:df:9b:26:15:98:a1:f0:1c:48:2a:cf:8a:b3:43:39: 1a:11:3a:85:67:f7:2d:80:e5:56:f0:30:68:e3:50:89:db:fc: 4b:a0:42:f5:55:46:46:b3:aa:e3:60:c2:b8:f1:8f:81:27:20: 90:73:56:02:98:2f:b5:d7:79:f7:4a:14:5c:b1:10:30:14:16: 56:5b:f8:12:a6:2f:ab:5d:d0:95:f5:47:7a:b4:f8:af:e8:f3: 4a:13:7d:7a:66:0e:98:c3:2e:2a:a7:98:01:6d:ac:d2:f4:e8: cf:86:b8:ba:cd:a9:53:5d:0e:f3:71:0a:46:c9:0f:7d:b2:fc: c0:51:a3:f9:79:34:0c:eb:62:5c:bf:d9:0b:d3:0d:72:37:bc: e8:23:5b:f4 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgISAZt5fixFElMqtTP8BkK8OfqBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmEwZWQ5MmVjOTQzMjFkY2IyMTlkMzdmMzhkOTA3ZTE4MzI0NGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCB9n7x8P168WOpst2eTZBk551Jk 5OEVTOsCOVIqY8uCxDsmLJE9aMC3JRboTFmfct5XxjvH3NuOwIEE+95fqTsXmb9Z Nsgu2b1njHNDOd+PrCwieWPotoaXjoQUEG0S8ixuNyiNxf9Cbxe1YEYPx1FBoujW N+ZR63Vv5/lbQ44LErlR8gmm97XV+gM4SKMZihruLermIaz2QpOd88FASxkjUHmU 9b/QlkUh9HqkGYqQ2Tq2ktTxEzmu5fDxlggBRIbfFTyFyhRuFOdWa4dM5epQ9wxx b6rUVljxLvjOdswuluYc0Cr8WIvnTZjGD3uq1N+Zips4YP7vkcKVb4REnwIDAQAB o4IC6DCCAuQwHQYDVR0OBBYEFPug7ZLslDIdyyGdN/ONkH4YMkS9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0LzU5MzQ4 Mi1kNzYyLTQ0MDktYjg1MC0yMGM0NGE4MWY5NzcvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvNTkzNDgy LWQ3NjItNDQwOS1iODUwLTIwYzQ0YTgxZjk3Ny8xLzEtNkR0a3V5VU1oM0xJWjAz ODQyUWZoZ3lSTDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBXBggrBgEF BQcBBwEB/wRIMEYwNQQCAAEwLwMEBgL/wAMDAD5zAwQEUFvwAwQHUO+AAwQCud8I AwQFwwzgAwQF1ZuAAwQG1fhAMA0EAgACMAcDBQQgASAwMCkGCCsGAQUFBwEIAQH/ BBowGKAWMBQCAgUTAgIHKQICICkCAiFUAgIihTANBgkqhkiG9w0BAQsFAAOCAQEA sgV9wmnJloAGeWldw5DkXtwjDuQUG2n1SbaNZDWh3OwJLOzYWQ/f+F4AO9HcB4Dh eG7tMK6cWwV8PvoDauON7oth2lIXku/EcJBihaeMSy0Wqt74SPYhDnoLLzXn7eCO /3vGGG6w/aobTJNbjj4N35smFZih8BxIKs+Ks0M5GhE6hWf3LYDlVvAwaONQidv8 S6BC9VVGRrOq42DCuPGPgScgkHNWApgvtdd590oUXLEQMBQWVlv4EqYvq13QlfVH erT4r+jzShN9emYOmMMuKqeYAW2s0vToz4a4us2pU10O83EKRskPfbL8wFGj+Xk0 DOtiXL/ZC9MNcje86CNb9A== -----END CERTIFICATE-----Generated at Wed Jan 21 02:12:23 2026 by rpki-client