This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer File: 6BB04ygiyL7zp9yzEoCCW9J1Rck.cer (raw, json) Hash identifier: PKaekCJTujWm2iIhgENaZTXVQsyvlK7yCKS7fm3vkN4= Subject key identifier: E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA653BF53577382AB94EB056AE0E445 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60815 IP: 185.20.24.0/22 IP: 2a00:4360::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:53:bf:53:57:73:82:ab:94:eb:05:6a:e0:e4:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e81074e32822c8bef3a7dcb31280825bd27545c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:c2:69:4c:f3:7b:e0:d3:f2:e8:cf:b4:eb: 28:b6:ec:92:41:9e:89:82:9a:a3:67:94:ba:c0:7a: 84:a7:f9:05:7e:32:60:95:36:f0:10:34:27:9f:58: e1:ab:ae:ee:03:90:98:91:f9:77:47:47:ce:80:50: 44:cd:c2:2c:df:d0:da:3b:7d:cf:f7:3e:7a:6a:ae: 81:7c:98:13:8d:dd:57:30:1d:3c:31:c3:10:13:6f: d9:c5:12:d8:3a:f4:82:99:ec:ca:23:51:90:a2:40: ea:83:5e:9b:93:b3:5b:df:d9:61:72:d3:50:01:23: 42:36:77:b3:e1:6d:97:3c:8d:44:08:28:e9:cd:44: 40:10:68:43:f1:af:bb:ac:50:23:56:0a:33:d6:50: 14:c4:e9:a9:8a:56:62:d2:35:b4:cf:51:5d:18:d7: 53:c4:0c:7f:e5:04:ca:0c:ae:1b:2d:28:24:6d:86: 78:76:32:ae:81:29:58:a9:e8:9e:58:90:53:e1:5e: f6:c7:c6:52:fd:1b:b5:f0:8a:af:ff:11:9e:f8:55: 17:7a:6a:f2:2e:2a:63:e9:e4:bb:bc:e1:f9:2d:cf: 0a:53:74:5d:1e:02:2d:02:39:76:5c:13:c5:32:16: 5f:e9:a2:15:23:cb:f5:72:98:59:ca:26:42:d7:eb: fd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.20.24.0/22 IPv6: 2a00:4360::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60815 Signature Algorithm: sha256WithRSAEncryption 7f:7f:25:e8:05:b5:4d:4d:34:cb:a2:26:fc:36:33:12:ef:1a: 45:93:0e:9c:b7:ca:cc:e2:43:8d:d4:36:0c:64:2f:80:88:1b: b5:0d:32:96:66:20:63:4f:b7:3d:8d:e6:4f:d3:78:b7:0f:ef: e3:5f:73:e9:5c:de:73:7e:82:e0:0c:c9:70:56:45:20:0e:11: 90:d8:83:56:84:30:59:83:4b:52:37:89:76:37:26:79:4e:45: 12:01:f8:a7:a1:0c:3c:b3:c2:30:8a:85:68:ae:62:90:80:55: a9:a7:82:35:b4:ae:41:23:09:48:a6:db:b9:65:3e:d0:2e:41: ad:aa:dd:fc:7e:62:c2:42:b2:27:d9:c6:77:3c:3e:48:23:c1: 73:d3:ac:a0:bf:9d:f8:fc:40:01:2a:5b:2e:6a:f0:ff:bf:32: fe:0d:d0:1f:b1:82:d0:1c:22:9a:f5:e2:c2:f9:7e:29:81:85: 97:b9:e0:39:ce:3a:a1:06:ac:1b:25:95:73:3e:14:0c:0e:f6: 68:df:24:f9:87:4f:c4:38:6c:fa:6f:30:24:0f:77:5b:f0:ce: 5e:50:a0:e8:c1:77:0e:76:41:3c:52:b8:e6:d4:de:8d:8e:2b: 64:d0:82:1a:bc:b0:87:50:44:6c:5a:6d:e2:57:87:54:96:cd: 68:2b:1d:4a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+plO/U1dzgquU6wVq4ORFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODEwNzRlMzI4MjJjOGJlZjNhN2RjYjMxMjgwODI1YmQyNzU0NWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgfCaUzze+DT8ujPtOsotuySQZ6J gpqjZ5S6wHqEp/kFfjJglTbwEDQnn1jhq67uA5CYkfl3R0fOgFBEzcIs39DaO33P 9z56aq6BfJgTjd1XMB08McMQE2/ZxRLYOvSCmezKI1GQokDqg16bk7Nb39lhctNQ ASNCNnez4W2XPI1ECCjpzURAEGhD8a+7rFAjVgoz1lAUxOmpilZi0jW0z1FdGNdT xAx/5QTKDK4bLSgkbYZ4djKugSlYqeieWJBT4V72x8ZS/Ru18Iqv/xGe+FUXemry Lipj6eS7vOH5Lc8KU3RdHgItAjl2XBPFMhZf6aIVI8v1cphZyiZC1+v9LwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOgQdOMoIsi+86fcsxKAglvSdUXJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwLzg3NGQy Ny1mMmFjLTQ4OTctOTZmNC0zZTRlODRmMzVjZDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvODc0ZDI3 LWYyYWMtNDg5Ny05NmY0LTNlNGU4NGYzNWNkMC8xLzZCQjA0eWdpeUw3enA5eXpF b0NDVzlKMVJjay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuRQYMA0EAgACMAcDBQAqAENgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDtjzANBgkqhkiG9w0BAQsFAAOCAQEAf38l6AW1TU00 y6Im/DYzEu8aRZMOnLfKzOJDjdQ2DGQvgIgbtQ0ylmYgY0+3PY3mT9N4tw/v419z 6Vzec36C4AzJcFZFIA4RkNiDVoQwWYNLUjeJdjcmeU5FEgH4p6EMPLPCMIqFaK5i kIBVqaeCNbSuQSMJSKbbuWU+0C5Brard/H5iwkKyJ9nGdzw+SCPBc9OsoL+d+PxA ASpbLmrw/78y/g3QH7GC0BwimvXiwvl+KYGFl7ngOc46oQasGyWVcz4UDA72aN8k +YdPxDhs+m8wJA93W/DOXlCg6MF3DnZBPFK45tTejY4rZNCCGrywh1BEbFpt4leH VJbNaCsdSg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:09 2026 by rpki-client