This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer File: 6HFybEwQPg60LC8Oi12ocz-n7-0.cer (raw, json) Hash identifier: LnTQ1PuGLHUC5OxEXYDz0b4y/tdf1cTnQqev/q2x/Iw= Subject key identifier: E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA528D3CCD029DC3C3043830CDAE0B4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41617 IP: 195.138.210.0/24 IP: 2001:67c:2dec::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:28:d3:cc:d0:29:dc:3c:30:43:83:0c:da:e0:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:82:ca:14:ff:76:da:de:09:a4:f9:73:78:ca: e1:8a:89:8f:95:19:82:29:20:7f:21:79:67:0e:68: 97:4c:7a:5f:24:9e:b3:0c:e5:1e:09:89:ed:6a:d8: ad:31:92:09:4f:3b:ef:f6:80:48:10:6f:c9:b6:4e: 86:87:86:3b:56:99:c2:0b:51:e2:e5:79:ba:e6:3e: 9d:bd:a2:9e:b2:ed:9f:ac:d2:89:c1:1e:b5:2f:19: d3:5e:d8:5a:b0:7c:82:16:89:0a:bb:e4:28:d8:b4: 58:89:7a:72:0a:b8:ad:ce:63:da:43:71:ff:d4:ef: 9d:b7:24:56:2e:59:9c:e5:0d:3b:58:77:2b:9a:2e: 4f:2b:65:3e:aa:03:aa:a5:3c:16:92:79:d3:f0:be: 35:3b:23:fb:ea:b9:b2:36:2d:d1:71:55:c8:69:41: c6:23:03:2d:1b:04:d7:43:00:1b:d8:40:5b:da:a6: 6b:b6:48:c6:87:f8:e1:26:80:60:5f:c0:84:a5:bf: 49:c4:6d:74:e0:39:e7:91:66:bb:ac:a7:9e:5e:eb: 3c:17:f3:5a:09:db:91:fb:b3:a7:c3:a1:8f:39:d9: b6:8e:6b:36:22:91:3d:26:e9:09:21:12:cc:b0:47: 43:63:48:16:64:7b:c6:a9:47:72:fa:17:6a:69:86: 99:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.138.210.0/24 IPv6: 2001:67c:2dec::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41617 Signature Algorithm: sha256WithRSAEncryption 8a:28:8e:58:75:ca:b5:30:1e:d8:3a:0c:e7:ec:81:41:75:09: e6:1b:3e:0b:d9:bc:ab:6e:f3:86:8a:75:6d:87:a1:10:15:ed: 2c:d9:fe:60:7a:c5:ec:7f:88:2b:aa:26:c2:6a:5e:36:57:8b: 6f:2c:b4:04:ee:b3:87:fa:73:47:3a:81:7c:c8:56:c3:93:ac: 2f:73:cf:1d:1a:7e:8c:a6:ef:91:84:d3:30:32:88:49:33:5e: 2a:a8:21:87:ec:5d:49:39:76:3e:32:64:70:e9:20:b4:0a:54: 85:a7:9c:bd:4a:5a:72:49:43:5c:0c:b6:26:6d:3e:eb:03:9f: 37:cc:6f:2a:ef:fe:d0:8e:53:c9:73:69:9d:95:45:84:a8:26: 67:ab:fa:c6:4e:c2:fe:3d:59:5d:08:a1:df:af:1c:12:87:26: 5c:4e:5d:48:e6:38:0f:ae:5e:61:63:cc:85:3e:2d:1f:62:88: 93:e3:e3:a4:7c:5d:05:c0:2d:a0:63:4f:13:95:7b:5d:4f:7c: 94:84:b4:30:dc:b3:4e:d3:38:9d:74:fd:75:7f:ff:c1:45:d9: c6:78:ae:d4:f4:c0:0f:00:b0:5f:85:13:da:e3:33:b3:e5:82: c3:34:20:31:e4:88:7f:99:37:fb:0f:21:d2:b7:5d:73:a3:fc: 59:96:0f:1f -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt+pSjTzNAp3DwwQ4MM2uC0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODcxNzI2YzRjMTAzZTBlYjQyYzJmMGU4YjVkYTg3MzNmYTdlZmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24LKFP922t4JpPlzeMrhiomPlRmC KSB/IXlnDmiXTHpfJJ6zDOUeCYntatitMZIJTzvv9oBIEG/Jtk6Gh4Y7VpnCC1Hi 5Xm65j6dvaKesu2frNKJwR61LxnTXthasHyCFokKu+Qo2LRYiXpyCritzmPaQ3H/ 1O+dtyRWLlmc5Q07WHcrmi5PK2U+qgOqpTwWknnT8L41OyP76rmyNi3RcVXIaUHG IwMtGwTXQwAb2EBb2qZrtkjGh/jhJoBgX8CEpb9JxG104DnnkWa7rKeeXus8F/Na CduR+7Onw6GPOdm2jms2IpE9JukJIRLMsEdDY0gWZHvGqUdy+hdqaYaZFQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFOhxcmxMED4OtCwvDotdqHM/p+/tMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0L2NkNWM4 MS1kMjA1LTQwZGMtYTg1Yi1mNzQ0ZmRjODNjZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvY2Q1Yzgx LWQyMDUtNDBkYy1hODViLWY3NDRmZGM4M2NmNS8xLzZIRnliRXdRUGc2MExDOE9p MTJvY3otbjctMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAw4rSMA8EAgACMAkDBwAgAQZ8LewwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAKKRMA0GCSqGSIb3DQEBCwUAA4IBAQCKKI5Ydcq1 MB7YOgzn7IFBdQnmGz4L2byrbvOGinVth6EQFe0s2f5gesXsf4grqibCal42V4tv LLQE7rOH+nNHOoF8yFbDk6wvc88dGn6Mpu+RhNMwMohJM14qqCGH7F1JOXY+MmRw 6SC0ClSFp5y9SlpySUNcDLYmbT7rA583zG8q7/7QjlPJc2mdlUWEqCZnq/rGTsL+ PVldCKHfrxwShyZcTl1I5jgPrl5hY8yFPi0fYoiT4+OkfF0FwC2gY08TlXtdT3yU hLQw3LNO0ziddP11f//BRdnGeK7U9MAPALBfhRPa4zOz5YLDNCAx5Ih/mTf7DyHS t11zo/xZlg8f -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:24 2026 by rpki-client