This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer File: 6MibPc36Jpe0hyEwjHa2c3KhOxU.cer (raw, json) Hash identifier: 9SOPgThUCf6cVoJh7YRqLfdHWQ3l0LngadmwT7wC3x0= Subject key identifier: E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80046BBF21E7EACC27A70E2172EF3C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.53.128.0/23 IP: 194.53.214.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:04:6b:bf:21:e7:ea:cc:27:a7:0e:21:72:ef:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8c89b3dcdfa2697b48721308c76b67372a13b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ba:6b:2c:d6:7b:a1:67:3d:19:5a:31:ae:1f: b7:0f:30:e8:90:28:44:35:ac:33:f0:17:58:ac:33: e1:76:0a:15:f0:be:02:a8:ac:57:bf:41:a2:d8:b2: 94:38:f3:8a:c0:61:32:c5:ab:b4:14:d4:a2:4b:4d: fa:f5:4a:cc:d7:00:32:78:ba:48:18:b5:e8:64:52: b9:a4:18:06:5b:1a:77:03:27:dd:40:39:b3:b4:9f: bf:16:87:2a:0f:55:46:88:be:3b:bd:4f:25:b3:6a: c1:fe:76:75:a2:88:5c:e6:aa:73:f2:53:7f:83:4d: bd:b8:fa:72:fb:4c:d7:c3:94:16:8e:17:ef:1e:42: c3:34:ee:0d:af:d3:bc:d7:5d:5e:7a:1d:6a:13:51: 97:9d:20:27:ae:08:09:89:11:c9:91:37:a2:5a:c6: dd:82:29:62:02:54:9a:42:d7:1f:43:d7:b7:d1:22: 26:6a:59:3a:d6:31:c9:f7:ef:35:9d:ee:ae:fa:19: 25:75:f5:21:f9:b6:f6:22:dd:44:56:c9:99:1a:1a: b7:42:20:02:4b:ca:62:fb:1e:34:eb:cc:90:b5:ca: b6:33:77:56:d3:ec:f3:0f:5c:8b:4f:02:96:93:b0: 0d:b0:19:36:d6:a7:3d:d1:13:f0:6d:06:e7:83:a1: 64:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.53.128.0/23 194.53.214.0/23 Signature Algorithm: sha256WithRSAEncryption 39:d5:55:b1:89:e4:0a:1b:d3:e4:2b:e3:f0:21:d6:f4:64:1f: f6:f3:e9:3e:6f:9e:1e:bf:b0:0f:e2:e9:14:f7:7d:a4:6c:3a: b7:d7:84:07:ae:68:b6:fc:e0:c4:48:5c:73:1e:d4:ba:cf:00: a1:d6:b4:89:88:76:47:72:3b:47:08:d8:55:16:6d:00:7c:c5: e7:c7:17:0b:01:02:c7:a4:9a:e7:cf:53:36:99:ea:4b:88:3b: d6:92:e2:c8:27:05:b3:40:a0:4f:ac:62:ea:0e:b4:46:70:b0: 3d:df:61:e2:c0:ab:e6:a5:77:9e:b9:d1:68:0a:c2:11:56:8a: 81:55:53:d9:b4:ec:59:5b:b9:30:fe:2f:16:fa:19:f8:c9:a8: 91:79:b8:df:39:af:48:fe:a0:09:b0:3e:f9:9e:dd:ca:9c:50: 3d:f4:bf:f0:37:a7:72:43:62:f3:6e:15:dd:45:f9:96:b0:94: a9:60:02:9d:04:0e:4e:36:f3:c1:fb:b2:b1:b4:cb:1f:2d:18: 35:b8:67:1b:88:8a:ad:b9:af:b6:b0:80:99:e9:66:21:5e:50: 0a:82:16:91:88:60:46:93:80:18:aa:e0:3a:f6:e0:b7:a1:ee: 88:d0:2b:2d:84:25:f8:8d:64:dd:81:b4:e6:3f:21:60:4b:4c: 5a:7a:4a:7a -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt8gARrvyHn6swnpw4hcu88MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGM4OWIzZGNkZmEyNjk3YjQ4NzIxMzA4Yzc2YjY3MzcyYTEzYjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubprLNZ7oWc9GVoxrh+3DzDokChE Nawz8BdYrDPhdgoV8L4CqKxXv0Gi2LKUOPOKwGEyxau0FNSiS0369UrM1wAyeLpI GLXoZFK5pBgGWxp3AyfdQDmztJ+/FocqD1VGiL47vU8ls2rB/nZ1oohc5qpz8lN/ g029uPpy+0zXw5QWjhfvHkLDNO4Nr9O8111eeh1qE1GXnSAnrggJiRHJkTeiWsbd giliAlSaQtcfQ9e30SImalk61jHJ9+81ne6u+hkldfUh+bb2It1EVsmZGhq3QiAC S8pi+x4068yQtcq2M3dW0+zzD1yLTwKWk7ANsBk21qc90RPwbQbng6FkLQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFOjImz3N+iaXtIchMIx2tnNyoTsVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0L2YyMzFl NC02N2E2LTRjNTUtOTFmNS05MzRiNDQzOTA5MmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvZjIzMWU0 LTY3YTYtNGM1NS05MWY1LTkzNGI0NDM5MDkyZC8xLzZNaWJQYzM2SnBlMGh5RXdq SGEyYzNLaE94VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwjWAAwQBwjXWMA0GCSqGSIb3DQEBCwUAA4IB AQA51VWxieQKG9PkK+PwIdb0ZB/28+k+b54ev7AP4ukU932kbDq314QHrmi2/ODE SFxzHtS6zwCh1rSJiHZHcjtHCNhVFm0AfMXnxxcLAQLHpJrnz1M2mepLiDvWkuLI JwWzQKBPrGLqDrRGcLA932HiwKvmpXeeudFoCsIRVoqBVVPZtOxZW7kw/i8W+hn4 yaiRebjfOa9I/qAJsD75nt3KnFA99L/wN6dyQ2LzbhXdRfmWsJSpYAKdBA5ONvPB +7KxtMsfLRg1uGcbiIqtua+2sICZ6WYhXlAKghaRiGBGk4AYquA69uC3oe6I0Cst hCX4jWTdgbTmPyFgS0xaekp6 -----END CERTIFICATE-----Generated at Tue Jan 27 04:25:49 2026 by rpki-client