This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer File: 6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer (raw, json) Hash identifier: dedF3A4CJvfaDl7QZYLbhbqgaLQftfREcR9sTogfh2I= Subject key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB49C6F2D5761C5700B8947151E4AC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208453 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:49:c6:f2:d5:76:1c:57:00:b8:94:71:51:e4:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b5:f7:a2:f3:17:a7:b7:21:88:26:c3:05:c2: 34:75:d2:67:c8:32:5b:c3:32:73:f7:c4:97:d9:b6: 24:71:50:75:fa:63:0c:3e:b5:a0:30:d1:86:3e:1d: 5d:8a:26:6d:80:b3:19:44:41:54:f1:cd:0e:2d:8d: 95:a5:7e:2f:07:c5:27:65:6e:5f:4b:ab:c7:b7:a6: bd:95:c8:3b:e4:83:71:2b:9f:dc:8d:45:39:1c:7f: 4a:3b:20:68:ce:e2:66:8a:1d:dd:ca:31:45:03:9e: b2:77:cf:70:a1:94:75:e4:8a:2d:31:35:54:00:ce: 17:83:a7:8d:44:07:03:ea:a6:cc:11:fb:dd:7e:01: 01:ed:0a:cb:27:86:f4:e6:93:e1:b9:58:21:50:13: 24:d2:57:ce:84:f9:8a:3d:ce:9f:c5:e6:c2:a0:64: 0b:a1:0f:ce:df:dd:d3:1f:5a:2f:cb:f4:f6:e9:31: 67:e6:97:e4:be:8b:a1:46:e0:1a:05:22:fa:dd:ec: 2d:f0:cb:90:e9:a4:d8:06:f7:9f:cb:d2:ca:ce:0d: 43:c3:f3:c6:3b:f1:bf:62:6d:06:41:41:16:81:18: 04:3c:bb:e9:80:0d:4e:74:e4:37:7e:74:ab:ff:15: 76:d6:b7:c5:db:39:73:d0:ec:39:f2:2c:ba:c4:ea: 50:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208453 Signature Algorithm: sha256WithRSAEncryption 9a:94:21:21:a1:7a:af:e5:91:48:86:3f:92:e0:a9:a2:55:51: 56:9f:06:43:fb:6d:69:48:c1:a7:09:6e:26:5a:06:c4:1f:98: c6:ee:89:45:3d:a1:1b:7f:f5:ea:88:f0:c6:67:81:75:8e:5b: 75:b8:07:84:e6:e3:13:c1:ac:54:43:60:fc:19:c9:37:67:4d: 12:f6:2a:e0:45:eb:9a:13:7e:f8:45:7c:02:b0:98:63:cb:a0: 28:74:e9:34:ed:85:83:5b:c1:ff:a7:d3:05:84:fc:40:a2:7e: 47:d2:89:d0:ed:62:f1:02:a7:a2:9c:ee:4f:d0:f2:a8:1a:38: 30:8e:1c:87:cc:cb:a1:04:20:a2:c0:70:00:09:c5:cd:e1:0f: 4c:d8:9f:d5:09:7b:8d:b8:30:a8:a8:d4:4b:ed:c3:0e:9a:d4: 2e:8c:44:da:ef:34:85:39:5f:02:d2:51:b9:04:11:44:73:43: 8a:1d:0f:da:1d:2d:5d:6d:3d:40:ce:41:37:6b:de:71:dc:a5: 0b:81:ec:f2:82:dc:fd:e5:8d:80:90:71:0f:d2:e2:22:42:52: 9a:ce:dc:84:43:36:5f:44:40:0b:90:33:1d:bb:1a:1a:50:3e: 34:77:e0:68:99:da:4f:d5:3d:08:67:b9:62:b2:f2:53:41:a1: f1:87:4b:f2 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt260nG8tV2HFcAuJRxUeSsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGJjOTg3NjE3NGQ5YTczODVmY2U5MzQzZTJiYjdkOThmNTIzYjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbX3ovMXp7chiCbDBcI0ddJnyDJb wzJz98SX2bYkcVB1+mMMPrWgMNGGPh1diiZtgLMZREFU8c0OLY2VpX4vB8UnZW5f S6vHt6a9lcg75INxK5/cjUU5HH9KOyBozuJmih3dyjFFA56yd89woZR15IotMTVU AM4Xg6eNRAcD6qbMEfvdfgEB7QrLJ4b05pPhuVghUBMk0lfOhPmKPc6fxebCoGQL oQ/O393TH1ovy/T26TFn5pfkvouhRuAaBSL63ewt8MuQ6aTYBvefy9LKzg1Dw/PG O/G/Ym0GQUEWgRgEPLvpgA1OdOQ3fnSr/xV21rfF2zlz0Ow58iy6xOpQMwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFOi8mHYXTZpzhfzpND4rt9mPUjsRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxNDc2 ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzE0 NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFjMTFiLzAvRThCQzk4NzYxNzRE OUE3Mzg1RkNFOTM0M0UyQkI3RDk4RjUyM0IxMS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDLkUw DQYJKoZIhvcNAQELBQADggEBAJqUISGheq/lkUiGP5LgqaJVUVafBkP7bWlIwacJ biZaBsQfmMbuiUU9oRt/9eqI8MZngXWOW3W4B4Tm4xPBrFRDYPwZyTdnTRL2KuBF 65oTfvhFfAKwmGPLoCh06TTthYNbwf+n0wWE/ECifkfSidDtYvECp6Kc7k/Q8qga ODCOHIfMy6EEIKLAcAAJxc3hD0zYn9UJe424MKio1Evtww6a1C6MRNrvNIU5XwLS UbkEEURzQ4odD9odLV1tPUDOQTdr3nHcpQuB7PKC3P3ljYCQcQ/S4iJCUprO3IRD Nl9EQAuQMx27GhpQPjR34GiZ2k/VPQhnuWKy8lNBofGHS/I= -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:17 2026 by rpki-client