This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6IPR0jE6FOhln2BKZdZc45o_gms.cer
File:                     6IPR0jE6FOhln2BKZdZc45o_gms.cer (raw, json)
Hash identifier:          FSNY4F0MDZS7EFGmOOx7O9j9eE3DJ8X2Jju6s8Qmp3E=
Subject key identifier:   E8:83:D1:D2:31:3A:14:E8:65:9F:60:4A:65:D6:5C:E3:9A:3F:82:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7834A15DA834DB7C0A17E2D28F581349
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.folf.systems/repo/Folf-Systems/0/E883D1D2313A14E8659F604A65D65CE39A3F826B.mft
caRepository:             rsync://rpki.folf.systems/repo/Folf-Systems/0/
Notify URL:               https://rpki.folf.systems/rrdp/notification.xml
Certificate not before:   Thu 01 Jan 2026 06:17:53 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 200360
                          IP: 2001:67c:b38::/48
                          IP: 2001:67c:b3c::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:a1:5d:a8:34:db:7c:0a:17:e2:d2:8f:58:13:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:17:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e883d1d2313a14e8659f604a65d65ce39a3f826b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:99:40:c6:3a:5c:02:2d:77:f7:89:6c:9a:
                    c7:86:6a:0a:6a:55:e9:1a:46:1b:43:a3:83:1f:96:
                    b4:11:db:c6:00:57:3c:59:cd:23:4b:1c:ef:20:57:
                    60:4a:85:8c:27:33:df:75:ab:19:53:05:9b:29:30:
                    ae:7e:8b:90:a2:98:4f:f4:24:49:2f:d0:d6:29:9b:
                    22:30:97:5c:90:5b:a3:50:3b:85:84:da:16:67:8c:
                    6f:2d:c7:75:1d:e9:2a:11:e6:9c:1b:29:7b:aa:d8:
                    d0:2f:e1:dd:1b:38:20:1b:10:41:35:f4:b5:d0:73:
                    13:03:72:bf:ac:d7:69:92:be:d6:f8:3d:eb:ce:b1:
                    6a:54:0b:7d:f4:f4:d2:ef:cc:24:ba:87:ff:36:4a:
                    57:13:be:a1:7d:39:6f:54:d6:e4:18:d9:3b:d1:cd:
                    0f:01:e2:e4:2d:da:38:10:cf:69:02:9d:ae:3a:59:
                    50:38:73:67:5f:6f:25:be:80:b6:34:6f:db:4d:2d:
                    eb:ae:9a:ae:d6:a3:b2:a0:ec:22:64:c9:1e:9a:d4:
                    8a:e9:68:d1:fb:ad:c1:c6:43:a9:3d:5e:46:91:42:
                    cb:30:96:90:73:fc:ec:3e:26:36:8e:24:48:cc:2a:
                    5b:4d:7c:0c:fc:db:20:ae:6c:84:17:7e:c6:16:a2:
                    e3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:83:D1:D2:31:3A:14:E8:65:9F:60:4A:65:D6:5C:E3:9A:3F:82:6B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.folf.systems/repo/Folf-Systems/0/
                RPKI Manifest - URI:rsync://rpki.folf.systems/repo/Folf-Systems/0/E883D1D2313A14E8659F604A65D65CE39A3F826B.mft
                RPKI Notify - URI:https://rpki.folf.systems/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:b38::/48
                  2001:67c:b3c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200360

    Signature Algorithm: sha256WithRSAEncryption
         97:0f:52:eb:86:d5:1a:8a:d1:41:a8:32:d4:d9:a8:b7:b8:5e:
         74:d5:28:e5:04:23:15:5a:6b:c2:a2:1a:05:2c:c0:39:34:bb:
         80:12:98:ab:d7:b5:8d:b7:c1:3a:7d:e7:1b:4b:24:7c:f2:72:
         ea:43:7c:19:83:ea:45:b1:2e:ff:bd:1a:47:f2:a7:b1:1f:18:
         1c:63:0b:45:99:95:aa:d3:47:03:26:cc:57:3e:f6:71:16:0c:
         45:57:9f:17:55:fb:bf:a7:94:ec:13:b2:54:27:9a:b3:39:86:
         ec:f6:9f:b8:7c:df:a4:98:bd:74:15:77:06:04:80:9b:32:f2:
         bb:fd:04:b1:2d:a0:81:07:cb:dc:dd:ed:e7:0e:b8:0d:7d:85:
         94:19:0e:1f:30:03:ff:54:0a:fe:02:79:a6:e4:39:ae:e0:eb:
         bb:5f:be:07:4f:a0:16:10:55:d9:b6:14:39:f5:cc:65:db:70:
         03:75:37:50:3d:82:d1:12:1b:4b:4c:30:3a:ae:19:2d:af:83:
         1d:67:24:9f:a9:a3:91:59:6b:4f:cf:84:6b:e7:49:b5:22:64:
         02:6e:b1:8a:7e:1e:58:cc:f3:41:cd:18:dc:8a:d3:d5:be:78:
         2e:cb:05:33:72:72:c1:47:2f:b9:7b:e5:66:e0:65:00:4b:f5:
         b6:8b:01:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 15:03:52 2026 by rpki-client