This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer File: 6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer (raw, json) Hash identifier: JgVWANiyil7JynuKKGlbL8eEE1k/7Eecp7b47mXb5Tc= Subject key identifier: E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8560242B4F02478B423D73A93B5DB1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24663 IP: 37.200.120.0/21 IP: 45.150.204.0/22 IP: 80.250.224.0/20 IP: 94.127.216.0/21 IP: 178.23.224.0/21 IP: 185.30.228.0/22 IP: 2a03:8080::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:60:24:2b:4f:02:47:8b:42:3d:73:a9:3b:5d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8d062a969d2142bb8506a571180b45bd0fab934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1f:ca:b9:64:9d:fb:d0:40:5f:4d:7d:02:8a: 26:54:f4:62:bd:45:c3:52:a1:f3:5f:9e:99:6d:0d: 51:c2:91:3d:fb:63:ce:8c:7f:4f:1c:f7:a5:c5:2b: db:db:10:bd:69:fc:a3:1a:3e:2a:9f:f2:6d:03:61: c9:85:2a:11:72:8c:e6:23:fa:b0:32:50:45:be:15: e4:f2:21:89:c0:37:97:6e:7f:27:b5:62:09:4f:22: 6e:b8:a4:53:c3:e0:8d:0d:cc:65:b3:2c:c9:2f:46: d6:43:e1:c3:75:fd:1f:d9:da:81:dd:0c:ce:66:9c: dd:a0:4f:70:17:71:d1:2d:10:7c:d9:55:ab:3b:41: 42:dc:fb:e9:15:a9:b9:3f:a0:39:fe:6e:43:f1:2b: 13:1f:59:d3:a5:79:d1:46:76:31:04:34:34:d1:f0: 74:82:d6:0f:15:ce:45:4d:20:85:70:28:b3:21:e1: 66:46:88:5c:0d:d5:4c:b8:6f:dc:d9:90:e2:e3:7e: dd:02:45:9c:d7:dc:4c:76:63:4a:0f:cd:49:e1:1f: 9b:93:5a:d4:bc:e7:0b:18:eb:bc:82:35:1b:c6:6c: 61:7d:47:6c:43:5d:04:7b:83:5e:52:5f:c0:db:ac: 52:1f:c8:b1:39:6d:2f:ec:5b:ef:3f:3d:6c:e5:3f: 73:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.200.120.0/21 45.150.204.0/22 80.250.224.0/20 94.127.216.0/21 178.23.224.0/21 185.30.228.0/22 IPv6: 2a03:8080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24663 Signature Algorithm: sha256WithRSAEncryption a7:4e:24:09:4f:a5:f6:d9:b8:36:e8:ae:c7:07:4e:63:97:99: e0:90:13:21:d2:e5:7f:4b:96:70:95:3a:1a:29:64:ca:dd:a8: e9:e7:3d:60:6c:43:43:14:73:94:f7:07:ba:34:f8:6e:3e:6a: 07:52:1e:be:f3:93:a6:9b:77:7f:fe:22:c9:f9:97:74:47:35: 8d:8e:67:24:91:84:d7:cb:b5:ef:5d:15:63:16:45:13:e7:64: 6a:6e:b1:29:ee:07:c0:c8:f6:49:9b:6c:dd:57:61:bc:ac:a9: 92:a3:63:48:64:71:d8:17:8e:1c:a9:16:1f:0b:40:a3:68:2d: 94:ad:98:6d:5c:78:ad:b2:ec:29:83:9c:6f:a1:12:8a:4e:5f: 85:c7:b6:93:c3:06:1f:a1:06:fa:7c:af:fc:64:f2:13:af:be: 2b:8c:f5:b1:d9:87:94:e9:3c:e9:f1:97:5c:0e:50:30:61:38: a1:70:2c:1f:9f:cf:8d:aa:00:82:58:95:34:60:fe:87:45:fe: 3e:03:98:68:c4:67:9f:c5:2b:6a:70:82:cd:29:37:4a:88:b0: c8:79:ca:19:a2:fb:55:54:50:0a:56:c7:90:25:15:f9:44:24: 3d:d5:ec:b4:ba:24:84:15:3a:83:ba:1d:a2:70:02:e7:cf:1e: 35:73:6f:0c -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt/hWAkK08CR4tCPXOpO12xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGQwNjJhOTY5ZDIxNDJiYjg1MDZhNTcxMTgwYjQ1YmQwZmFiOTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx/KuWSd+9BAX019AoomVPRivUXD UqHzX56ZbQ1RwpE9+2POjH9PHPelxSvb2xC9afyjGj4qn/JtA2HJhSoRcozmI/qw MlBFvhXk8iGJwDeXbn8ntWIJTyJuuKRTw+CNDcxlsyzJL0bWQ+HDdf0f2dqB3QzO ZpzdoE9wF3HRLRB82VWrO0FC3PvpFam5P6A5/m5D8SsTH1nTpXnRRnYxBDQ00fB0 gtYPFc5FTSCFcCizIeFmRohcDdVMuG/c2ZDi437dAkWc19xMdmNKD81J4R+bk1rU vOcLGOu8gjUbxmxhfUdsQ10Ee4NeUl/A26xSH8ixOW0v7FvvPz1s5T9z0QIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFOjQYqlp0hQruFBqVxGAtFvQ+rk0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0L2E5OTE2 YS0xM2JmLTQ3NzAtOGU0NC01OGI2YTU3ODRhYjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvYTk5MTZh LTEzYmYtNDc3MC04ZTQ0LTU4YjZhNTc4NGFiNy8xLzZOQmlxV25TRkN1NFVHcFhF WUMwVzlENnVUUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQDJch4AwQCLZbMAwQEUPrgAwQDXn/YAwQDshfg AwQCuR7kMA0EAgACMAcDBQAqA4CAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmBX MA0GCSqGSIb3DQEBCwUAA4IBAQCnTiQJT6X22bg26K7HB05jl5ngkBMh0uV/S5Zw lToaKWTK3ajp5z1gbENDFHOU9we6NPhuPmoHUh6+85Omm3d//iLJ+Zd0RzWNjmck kYTXy7XvXRVjFkUT52RqbrEp7gfAyPZJm2zdV2G8rKmSo2NIZHHYF44cqRYfC0Cj aC2UrZhtXHitsuwpg5xvoRKKTl+Fx7aTwwYfoQb6fK/8ZPITr74rjPWx2YeU6Tzp 8ZdcDlAwYTihcCwfn8+NqgCCWJU0YP6HRf4+A5hoxGefxStqcILNKTdKiLDIecoZ ovtVVFAKVseQJRX5RCQ91ey0uiSEFTqDuh2icALnzx41c28M -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:09 2026 by rpki-client