This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer File: 6MSDt1wtsc-f9OlMeg_fDbAADwA.cer (raw, json) Hash identifier: bsf+v/irI6VE6Z9+PmqUJSWh8099NkGbihjhaskeZ78= Subject key identifier: E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A25D5E060028538C502B5772BF3046 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50096 IP: 194.110.252.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:5d:5e:06:00:28:53:8c:50:2b:57:72:bf:30:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:09:e5:48:63:85:62:54:9c:a9:55:be:80: 21:69:a7:b2:9d:03:dc:06:be:08:c4:1a:2e:87:7d: 7a:9f:67:2a:78:05:e1:5f:1d:ec:35:ff:ef:08:74: 53:ab:68:0d:1c:46:78:95:19:a0:dc:26:3f:26:08: e3:eb:d4:32:ce:9a:49:f3:4d:2f:e4:50:c3:a2:f2: a9:4b:f5:b5:fe:dd:a7:70:d5:c0:42:de:93:18:d6: a9:ab:7e:3e:43:42:a2:bd:66:6b:c0:16:40:98:38: 39:b7:6a:95:97:26:9b:4d:b7:9f:56:59:2e:52:7b: 08:a0:c5:73:e5:b9:d5:11:cd:42:9c:3a:97:2d:b5: 9d:f4:5a:cb:cd:d8:92:b2:c8:b1:60:15:54:e8:31: 45:a3:30:c2:1d:66:a6:10:d1:7b:33:33:b4:6f:ed: 35:27:0d:3d:f2:ec:a4:f8:84:e4:08:aa:c0:85:9d: 97:9d:70:a6:a7:9f:54:ab:97:78:38:84:6c:cc:57: 70:c1:57:11:fc:a6:84:1b:05:f6:59:b3:43:24:e2: 8e:91:c8:e1:84:ba:55:bc:6a:33:5e:14:6f:d2:0e: be:c4:ca:a7:f4:01:26:36:43:82:67:96:fc:3a:cf: 08:ef:96:e0:68:7b:bf:79:1a:be:f3:04:34:dc:6e: 95:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.252.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50096 Signature Algorithm: sha256WithRSAEncryption 91:b1:27:e0:77:89:e6:79:29:2e:a6:e6:5c:3b:af:53:ab:11: 74:98:8f:34:76:52:7e:6f:52:11:27:3c:42:2b:5b:c9:2a:2c: a7:83:be:73:ce:b2:c8:fc:e9:54:42:f4:f8:6d:2a:d4:f7:5a: 81:01:fd:f0:99:d5:79:fb:2a:58:cc:2f:0c:c9:f8:d4:0b:f4: ba:60:ad:18:fa:59:20:43:f7:ba:6c:d1:63:1b:e9:80:e3:20: 89:0b:25:47:b9:27:5f:f0:15:1b:df:c9:b8:9c:09:b3:7c:45: ea:82:0b:74:24:49:65:ba:e9:25:6e:0c:e4:03:9d:8a:d6:23: d2:33:68:3b:2a:30:df:26:64:0f:0b:94:dd:91:1f:af:66:f4: 1c:1a:b4:e4:6a:51:ca:f9:57:45:21:be:bd:eb:9d:90:4a:1f: d4:b9:4c:68:68:3d:61:9e:b7:8e:67:10:74:25:ca:dd:08:3d: 5e:11:26:a5:ee:79:b7:09:2e:60:3d:c9:e8:0c:c1:79:1c:0c: 2a:73:22:d7:75:75:f3:69:46:02:33:fa:35:07:a2:0c:a5:67: 1f:a5:6d:cf:37:63:7d:2f:f6:d1:04:df:96:e7:fd:5b:a5:6d: 60:56:9d:ed:89:20:79:77:5f:3a:30:e1:21:51:a6:2c:71:83: 2f:7a:cb:1e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4ol1eBgAoU4xQK1dyvzBGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGM0ODNiNzVjMmRiMWNmOWZmNGU5NGM3YTBmZGYwZGIwMDAwZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUIJ5UhjhWJUnKlVvoAhaaeynQPc Br4IxBouh316n2cqeAXhXx3sNf/vCHRTq2gNHEZ4lRmg3CY/Jgjj69QyzppJ800v 5FDDovKpS/W1/t2ncNXAQt6TGNapq34+Q0KivWZrwBZAmDg5t2qVlyabTbefVlku UnsIoMVz5bnVEc1CnDqXLbWd9FrLzdiSssixYBVU6DFFozDCHWamENF7MzO0b+01 Jw098uyk+ITkCKrAhZ2XnXCmp59Uq5d4OIRszFdwwVcR/KaEGwX2WbNDJOKOkcjh hLpVvGozXhRv0g6+xMqn9AEmNkOCZ5b8Os8I75bgaHu/eRq+8wQ03G6VPQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOjEg7dcLbHPn/TpTHoP3w2wAA8AMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhLzMxZmRh MC03YWFhLTQ2MWMtYTM1Mi1lYjM1YmZhMDY1YWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvMzFmZGEw LTdhYWEtNDYxYy1hMzUyLWViMzViZmEwNjVhZC8xLzZNU0R0MXd0c2MtZjlPbE1l Z19mRGJBQUR3QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwm78MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDDsDANBgkqhkiG9w0BAQsFAAOCAQEAkbEn4HeJ5nkpLqbmXDuvU6sRdJiPNHZS fm9SESc8QitbySosp4O+c86yyPzpVEL0+G0q1PdagQH98JnVefsqWMwvDMn41Av0 umCtGPpZIEP3umzRYxvpgOMgiQslR7knX/AVG9/JuJwJs3xF6oILdCRJZbrpJW4M 5AOditYj0jNoOyow3yZkDwuU3ZEfr2b0HBq05GpRyvlXRSG+veudkEof1LlMaGg9 YZ63jmcQdCXK3Qg9XhEmpe55twkuYD3J6AzBeRwMKnMi13V182lGAjP6NQeiDKVn H6VtzzdjfS/20QTfluf9W6VtYFad7YkgeXdfOjDhIVGmLHGDL3rLHg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:03 2026 by rpki-client