This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer File: 6KhR3a5aZMw4glOVvppQfalat88.cer (raw, json) Hash identifier: /JcrVHbos+y2UB31sZ1CBD9fOftOn/BoZbgZDZ9ie6M= Subject key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BF9B65101B1B3BDA54F8E835D8D492384 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 09:50:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202940 IP: 89.208.0.0/21 IP: 89.208.56.0/21 IP: 89.208.128.0/21 IP: 141.226.120.0/22 IP: 147.234.23.0/24 IP: 147.236.104.0/21 IP: 147.236.116.0 -- 147.236.127.255 IP: 147.236.148.0 -- 147.236.154.255 IP: 147.236.176.0/20 IP: 185.108.80.0/22 IP: 185.149.252.0/22 IP: 185.167.108.0/22 IP: 185.175.32.0/22 IP: 185.180.100.0/22 IP: 185.182.76.0/22 IP: 185.184.244.0/22 IP: 188.191.224.0/21 IP: 217.175.80.0/20 IP: 2a00:7c40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:b6:51:01:b1:b3:bd:a5:4f:8e:83:5d:8d:49:23:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 09:50:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:54:a1:51:58:03:86:2d:41:09:29:13:7b:6a: 2a:f9:3e:7d:73:88:1c:7a:32:47:b4:08:05:d3:89: 26:a8:d2:b0:45:a5:c8:7f:a1:ce:ba:3e:d8:61:10: 9b:22:2d:2a:f3:01:04:d2:bb:0c:1d:6f:86:62:52: c1:1f:93:65:72:5a:66:10:84:ab:12:ff:66:fd:05: c5:0d:01:01:58:b1:35:8a:5b:d0:6b:dc:18:41:6e: ae:91:c7:f6:0c:b0:d6:51:ac:02:f3:2f:96:55:71: 26:70:84:b7:4a:f3:20:6f:6c:c2:fc:09:dc:c1:4a: 9d:07:d9:ea:94:15:d1:4f:1c:bf:97:0a:7a:0f:6c: 9d:a9:a4:8d:b0:74:bf:35:c9:a6:97:a8:95:99:e6: 00:80:bd:d1:82:68:48:cf:94:2f:e4:1c:ed:0e:9d: 6f:e9:d8:a8:d1:44:37:3f:f3:ac:25:e4:e3:0f:b8: 3e:b5:c6:db:4a:ed:85:28:c4:f2:61:99:30:89:1a: e0:60:5c:9c:be:17:08:df:88:fe:a6:0a:0d:c0:7c: 15:21:c0:9c:a0:2e:48:a5:8e:af:d5:a6:35:55:34: 16:6b:29:73:91:5b:52:01:9b:d7:f6:b6:87:7a:b5: 29:c6:69:49:c0:ac:64:ca:83:b7:45:47:7a:76:ea: ac:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.208.0.0/21 89.208.56.0/21 89.208.128.0/21 141.226.120.0/22 147.234.23.0/24 147.236.104.0/21 147.236.116.0-147.236.127.255 147.236.148.0-147.236.154.255 147.236.176.0/20 185.108.80.0/22 185.149.252.0/22 185.167.108.0/22 185.175.32.0/22 185.180.100.0/22 185.182.76.0/22 185.184.244.0/22 188.191.224.0/21 217.175.80.0/20 IPv6: 2a00:7c40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202940 Signature Algorithm: sha256WithRSAEncryption a9:ce:69:16:e7:61:95:31:88:9c:5b:b5:04:4c:60:7a:f7:3b: bc:2f:4e:2e:21:6a:3b:22:75:40:3f:e0:c3:e8:37:f2:b3:e2: 1d:ab:44:dd:e3:75:7c:e8:c4:13:1e:ff:fa:63:08:0e:38:6b: db:8b:9f:5f:58:e6:92:15:af:cd:f3:0e:eb:fc:c4:42:72:df: 1d:d8:63:a1:c9:13:dd:6d:6a:06:96:10:3b:e2:19:b9:3a:d0: 15:be:48:74:0f:bf:69:1c:0c:3e:31:35:fc:d9:0d:64:48:c7: 0b:40:30:33:52:1d:5d:8f:77:09:f4:e9:df:73:2f:2e:8e:e1: 96:b6:10:15:cb:1c:75:02:eb:2f:4a:6f:b7:6b:f4:f6:e8:10: ab:58:18:cd:6a:6c:d1:db:01:78:3e:bd:fc:5b:ac:e7:ef:44: e4:db:81:21:8d:22:22:05:bc:9b:15:8b:6c:9d:7a:55:58:df: a8:ff:a0:8a:10:a0:69:fb:34:f2:6d:1e:12:64:2b:d8:93:b8: cc:f6:3a:e5:6d:e2:69:61:6b:c3:b5:82:9d:da:dc:f2:75:3a: 82:78:f6:9d:26:3b:4f:cc:da:c5:40:35:7c:33:38:42:3d:dd: 09:e7:89:c9:31:7d:67:4d:ef:4e:7f:c7:4b:a2:3e:ee:05:46: 2a:73:27:ee -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgISAZv5tlEBsbO9pU+Og12NSSOEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MDk1MDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGE4NTFkZGFlNWE2NGNjMzg4MjUzOTViZTlhNTA3ZGE5NWFiN2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFShUVgDhi1BCSkTe2oq+T59c4gc ejJHtAgF04kmqNKwRaXIf6HOuj7YYRCbIi0q8wEE0rsMHW+GYlLBH5NlclpmEISr Ev9m/QXFDQEBWLE1ilvQa9wYQW6ukcf2DLDWUawC8y+WVXEmcIS3SvMgb2zC/Anc wUqdB9nqlBXRTxy/lwp6D2ydqaSNsHS/Ncmml6iVmeYAgL3RgmhIz5Qv5BztDp1v 6dio0UQ3P/OsJeTjD7g+tcbbSu2FKMTyYZkwiRrgYFycvhcI34j+pgoNwHwVIcCc oC5IpY6v1aY1VTQWaylzkVtSAZvX9raHerUpxmlJwKxkyoO3RUd6duqsSwIDAQAB o4IDKTCCAyUwHQYDVR0OBBYEFOioUd2uWmTMOIJTlb6aUH2pWrfPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4LzM2Mzhk Ny0zZWMzLTQ1OTUtYTYzMS0xMTBjODc4ZGNkMjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvMzYzOGQ3 LTNlYzMtNDU5NS1hNjMxLTExMGM4NzhkY2QyOS8xLzZLaFIzYTVhWk13NGdsT1Z2 cHBRZmFsYXQ4OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGnBggrBgEF BQcBBwEB/wSBlzCBlDCBggQCAAEwfAMEA1nQAAMEA1nQOAMEA1nQgAMEAo3ieAME AJPqFwMEA5PsaDAMAwQCk+x0AwQHk+wAMAwDBAKT7JQDBACT7JoDBAST7LADBAK5 bFADBAK5lfwDBAK5p2wDBAK5ryADBAK5tGQDBAK5tkwDBAK5uPQDBAO8v+ADBATZ r1AwDQQCAAIwBwMFAyoAfEAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAxi8MA0G CSqGSIb3DQEBCwUAA4IBAQCpzmkW52GVMYicW7UETGB69zu8L04uIWo7InVAP+DD 6Dfys+Idq0Td43V86MQTHv/6YwgOOGvbi59fWOaSFa/N8w7r/MRCct8d2GOhyRPd bWoGlhA74hm5OtAVvkh0D79pHAw+MTX82Q1kSMcLQDAzUh1dj3cJ9Onfcy8ujuGW thAVyxx1AusvSm+3a/T26BCrWBjNamzR2wF4Pr38W6zn70Tk24EhjSIiBbybFYts nXpVWN+o/6CKEKBp+zTybR4SZCvYk7jM9jrlbeJpYWvDtYKd2tzydTqCePadJjtP zNrFQDV8MzhCPd0J54nJMX1nTe9Of8dLoj7uBUYqcyfu -----END CERTIFICATE-----Generated at Wed Feb 4 22:12:27 2026 by rpki-client