This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.cer File: 6Bzv-nMF-mZ4iXrtu70hZN8Aipw.cer (raw, json) Hash identifier: 1OC4sB5hMPbDcquJS4vwlzUEW8EhZ9t0vLYuJsXpHVo= Subject key identifier: E8:1C:EF:FA:73:05:FA:66:78:89:7A:ED:BB:BD:21:64:DF:00:8A:9C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECB3DFFCA35B06DE67AB4214C800A9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202827 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b3:df:fc:a3:5b:06:de:67:ab:42:14:c8:00:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e81ceffa7305fa6678897aedbbbd2164df008a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:a6:2c:94:73:40:4e:a8:ba:b6:ca:99:37: 21:77:55:31:82:19:a5:e5:18:7a:c8:2d:48:f1:7a: cc:16:a8:36:cc:3a:6c:a5:7f:e8:fb:49:ad:03:f3: 8e:dd:85:95:4c:3e:5d:ce:6f:6b:37:c5:68:ed:45: 55:30:30:c0:3d:b3:11:18:87:f4:36:0b:97:33:6d: 66:2f:08:71:bf:04:a8:3c:7d:65:49:42:6b:95:0a: cc:fd:5a:db:48:e5:76:40:bf:4a:ce:2b:84:40:1d: 4b:45:fd:75:84:85:2c:65:9a:21:a0:4e:a1:39:89: cf:1c:e5:7a:04:26:76:be:80:5d:52:41:94:2e:06: cf:e6:f6:0a:00:61:68:01:9f:75:b6:22:0f:dd:f0: c7:82:fe:81:5a:d8:15:82:b5:04:39:cd:4b:ff:28: c1:72:b6:7a:9c:1c:33:79:22:78:d9:d1:1f:96:8c: 86:85:d6:6a:f9:fe:79:88:6b:f4:0a:7b:a5:5e:5b: de:8c:40:d4:59:19:3d:b3:1d:cc:42:6c:ec:76:6a: 6f:55:ae:3f:25:73:5a:50:82:4a:42:1c:a7:c3:30: be:7b:00:9d:a9:96:6c:cf:3b:95:3d:0a:67:3c:3d: 26:25:ad:fc:4f:77:e7:c0:fe:c8:34:e5:e5:4c:3a: 33:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1C:EF:FA:73:05:FA:66:78:89:7A:ED:BB:BD:21:64:DF:00:8A:9C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202827 Signature Algorithm: sha256WithRSAEncryption 5e:09:82:ce:d8:0e:8d:c9:be:4c:fd:cf:8b:a4:25:f2:cc:56: 54:73:27:56:c5:71:e3:7c:6c:5b:bc:1c:d6:92:46:d3:b9:86: c7:eb:14:0d:d8:38:0c:74:88:c2:c3:76:3c:38:b4:cb:6b:ef: f2:34:4b:20:78:a8:30:31:10:00:3a:ea:c6:e8:e3:3e:b5:14: 4a:c8:f4:36:cb:ad:9c:b5:17:2c:a4:12:cb:ab:7b:21:1e:65: 7c:1a:6a:aa:22:3e:8d:50:a2:30:f1:eb:f9:e2:d4:32:dd:d9: 2e:f7:0a:2f:4a:af:bc:cf:43:53:c4:2a:55:52:e9:46:98:26: 07:e6:3c:a4:12:a7:81:af:78:19:9c:da:ab:87:f6:58:64:1e: eb:88:72:51:c8:b6:d5:fe:d9:19:fe:c1:85:ea:b3:a9:af:2e: 2c:9f:1b:d8:42:a5:b4:f3:dd:fe:5a:8e:a9:cb:e8:92:13:03: 15:b9:c7:e6:64:d3:6e:9a:67:94:94:13:40:59:0f:3a:af:db: 77:4a:65:6e:a5:81:e6:6a:07:02:03:62:d7:3e:47:a4:b1:63: 2e:e5:06:21:c0:b5:0f:57:20:46:55:8b:32:21:b9:65:dc:d2: 77:2c:95:13:ba:4a:f7:5f:f9:fa:5b:e2:55:2c:57:90:55:7a: 08:1b:de:f2 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt57LPf/KNbBt5nq0IUyACpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODFjZWZmYTczMDVmYTY2Nzg4OTdhZWRiYmJkMjE2NGRmMDA4YTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod2mLJRzQE6ourbKmTchd1Uxghml 5Rh6yC1I8XrMFqg2zDpspX/o+0mtA/OO3YWVTD5dzm9rN8Vo7UVVMDDAPbMRGIf0 NguXM21mLwhxvwSoPH1lSUJrlQrM/VrbSOV2QL9KziuEQB1LRf11hIUsZZohoE6h OYnPHOV6BCZ2voBdUkGULgbP5vYKAGFoAZ91tiIP3fDHgv6BWtgVgrUEOc1L/yjB crZ6nBwzeSJ42dEfloyGhdZq+f55iGv0CnulXlvejEDUWRk9sx3MQmzsdmpvVa4/ JXNaUIJKQhynwzC+ewCdqZZszzuVPQpnPD0mJa38T3fnwP7INOXlTDozXwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFOgc7/pzBfpmeIl67bu9IWTfAIqcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyL2EyOWQx Ny1iNTk4LTQ0MjctYmE2OC0yYWFkYzg2MzFmMmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvYTI5ZDE3 LWI1OTgtNDQyNy1iYTY4LTJhYWRjODYzMWYyYS8xLzZCenYtbk1GLW1aNGlYcnR1 NzBoWk44QWlwdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMYSzANBgkqhkiG9w0BAQsFAAOCAQEAXgmCztgOjcm+ TP3Pi6Ql8sxWVHMnVsVx43xsW7wc1pJG07mGx+sUDdg4DHSIwsN2PDi0y2vv8jRL IHioMDEQADrqxujjPrUUSsj0NsutnLUXLKQSy6t7IR5lfBpqqiI+jVCiMPHr+eLU Mt3ZLvcKL0qvvM9DU8QqVVLpRpgmB+Y8pBKnga94GZzaq4f2WGQe64hyUci21f7Z Gf7Bheqzqa8uLJ8b2EKltPPd/lqOqcvokhMDFbnH5mTTbppnlJQTQFkPOq/bd0pl bqWB5moHAgNi1z5HpLFjLuUGIcC1D1cgRlWLMiG5ZdzSdyyVE7pK91/5+lviVSxX kFV6CBve8g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:22 2026 by rpki-client