This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer File: 6FZKS1_vRERHffDaWxmSTVLRAJQ.cer (raw, json) Hash identifier: Kd3PlNUcKZDp2DWK8yulASNWK3fEII3T1Hb2nGfCdRk= Subject key identifier: E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECFEE65BAD0E48E98F35C4E3A0804C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47373 IP: 45.134.244.0/22 IP: 2a0e:8440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:fe:e6:5b:ad:0e:48:e9:8f:35:c4:e3:a0:80:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8564a4b5fef4444477df0da5b19924d52d10094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ea:05:f7:6c:bb:9d:b1:7e:68:48:4c:29:9f: 61:4f:e6:e1:01:fa:59:64:f8:11:d3:1d:d5:b8:04: 49:ff:38:17:0c:11:52:5a:b1:dd:76:8f:7e:24:26: be:b9:b3:9c:dd:ce:9b:58:6c:80:14:03:80:42:62: 0e:09:60:0a:74:2b:d3:58:f3:a3:14:2a:0f:d9:49: 73:32:5b:d6:81:d8:54:f4:70:aa:26:f7:fd:6b:7b: 7c:e1:95:10:1e:ff:86:5a:26:c4:e1:b8:b4:1b:64: 61:d5:8f:e4:64:e7:eb:9b:3a:c8:3e:a2:9d:bc:5d: aa:34:62:c1:2b:18:06:ae:30:2c:90:5a:2e:22:f7: 50:f4:ac:11:1a:eb:ac:30:b0:7d:0b:46:fd:23:87: f3:83:09:dc:d6:d0:ee:33:b1:f7:a3:03:22:1f:66: 98:ce:cf:4a:3a:5c:4a:42:61:e4:88:b1:4c:28:99: 8c:0e:2a:e4:cc:b1:28:e8:cf:ef:59:93:a2:bb:31: c5:0d:fa:6b:11:39:54:c6:8c:1c:ae:bf:e4:16:76: bb:be:e9:fa:f5:fb:5f:86:55:77:42:e0:c3:fa:73: ba:35:c4:65:66:b3:b0:38:da:e0:a4:99:41:72:20: 43:a2:37:0b:b9:6c:60:6c:ee:e7:ff:91:88:c4:52: 46:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.244.0/22 IPv6: 2a0e:8440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47373 Signature Algorithm: sha256WithRSAEncryption 9c:0a:5a:89:03:7e:e5:c0:3d:77:61:df:ca:81:88:24:0d:06: 34:3c:8e:19:c6:2c:76:df:ee:1f:08:f6:b5:f2:bd:a5:f2:c2: cf:8e:04:1c:90:ec:b0:62:75:f0:b0:31:c8:bc:f1:51:12:fe: cb:4d:b8:36:d8:58:23:ae:bb:77:02:53:46:34:bf:45:52:e7: 0e:13:89:a7:ed:f0:37:ce:17:6d:79:61:8b:fd:15:06:14:43: db:01:0b:2c:ac:70:ec:02:a2:db:fc:ff:e5:6e:e0:54:bc:b1: c5:6a:b6:e9:53:e5:dd:2a:96:3b:e1:2d:6e:1b:58:88:f6:78: 6b:d6:9f:79:11:61:e4:94:d2:c2:23:e3:2a:92:4d:ed:42:19: e1:4f:16:6b:4e:31:4b:c2:d6:0e:fe:b9:50:f9:a0:33:9a:3d: 95:56:3f:64:b0:a9:ff:7d:21:1c:77:c3:46:fd:ce:a2:55:de: 10:d6:a3:a8:17:1c:61:e8:66:f2:fd:29:e0:44:37:1e:d7:6a: 76:69:d4:7f:59:d6:e6:8a:f6:16:3e:8c:36:26:de:47:00:66: 36:ea:c1:24:70:bb:e8:0a:23:5c:3e:17:a2:88:3e:50:be:d9: e2:df:54:75:ba:01:6c:33:74:98:f8:84:b4:de:e4:23:4c:34: 4c:94:79:d5 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57P7mW60OSOmPNcTjoIBMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODU2NGE0YjVmZWY0NDQ0NDc3ZGYwZGE1YjE5OTI0ZDUyZDEwMDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluoF92y7nbF+aEhMKZ9hT+bhAfpZ ZPgR0x3VuARJ/zgXDBFSWrHddo9+JCa+ubOc3c6bWGyAFAOAQmIOCWAKdCvTWPOj FCoP2UlzMlvWgdhU9HCqJvf9a3t84ZUQHv+GWibE4bi0G2Rh1Y/kZOfrmzrIPqKd vF2qNGLBKxgGrjAskFouIvdQ9KwRGuusMLB9C0b9I4fzgwnc1tDuM7H3owMiH2aY zs9KOlxKQmHkiLFMKJmMDirkzLEo6M/vWZOiuzHFDfprETlUxowcrr/kFna7vun6 9ftfhlV3QuDD+nO6NcRlZrOwONrgpJlBciBDojcLuWxgbO7n/5GIxFJGiQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOhWSktf70RER33w2lsZkk1S0QCUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzNmMzc4 ZS1lOGE3LTRhOWYtODU4Yi01YzQ5YzgyNjRhN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvM2YzNzhl LWU4YTctNGE5Zi04NThiLTVjNDljODI2NGE3Yi8xLzZGWktTMV92UkVSSGZmRGFX eG1TVFZMUkFKUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLYb0MA0EAgACMAcDBQMqDoRAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC5DTANBgkqhkiG9w0BAQsFAAOCAQEAnApaiQN+5cA9 d2HfyoGIJA0GNDyOGcYsdt/uHwj2tfK9pfLCz44EHJDssGJ18LAxyLzxURL+y024 NthYI667dwJTRjS/RVLnDhOJp+3wN84XbXlhi/0VBhRD2wELLKxw7AKi2/z/5W7g VLyxxWq26VPl3SqWO+EtbhtYiPZ4a9afeRFh5JTSwiPjKpJN7UIZ4U8Wa04xS8LW Dv65UPmgM5o9lVY/ZLCp/30hHHfDRv3OolXeENajqBccYehm8v0p4EQ3HtdqdmnU f1nW5or2Fj6MNibeRwBmNurBJHC76AojXD4Xoog+UL7Z4t9UdboBbDN0mPiEtN7k I0w0TJR51Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:03:59 2026 by rpki-client