This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer File: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer (raw, json) Hash identifier: 7yhMEPmNYfB+LlZSdUET/FtNghmYnBGscNXYC4IDF8A= Subject key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35A8C33CA59E77F6510B827F1BC3FB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207488 IP: 2001:678:c10::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a8:c3:3c:a5:9e:77:f6:51:0b:82:7f:1b:c3:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b8:72:91:43:fb:67:ef:a9:39:a3:e5:82:e7: 86:92:d9:f6:20:a1:87:79:8c:58:42:67:c3:4b:60: 02:f0:fa:42:99:bb:8d:a0:64:55:8e:cf:42:41:0d: 61:91:01:f0:a3:ee:d2:33:be:47:6b:c1:ab:8e:49: 0d:7e:ba:95:a2:79:d1:38:82:e2:ee:55:72:2d:f9: 90:67:14:ee:a3:07:64:98:99:3f:99:21:94:ee:a2: 63:c5:49:11:48:26:dc:c8:fd:be:10:6a:fd:00:76: 09:71:3a:97:9b:15:74:04:fa:ed:ae:d7:69:97:81: 1e:66:01:0b:b0:6e:f9:12:dc:0e:8d:f5:fc:0d:45: 52:3a:ea:dd:03:3e:11:24:57:d2:8f:23:d4:47:f9: 50:51:5b:95:e0:aa:0a:64:e8:98:f3:97:39:b5:ec: 93:22:44:ed:4d:10:92:7c:20:f3:1c:cd:03:be:64: 61:49:b4:1a:9e:8f:aa:44:8b:a7:9b:4f:c9:e3:ac: 8d:c8:7a:3a:06:9b:3f:38:37:b3:72:5a:c0:61:5c: c1:5a:7f:18:f2:dc:79:d5:b6:d2:c2:2d:a5:65:fd: d0:8d:f9:48:39:7e:a4:cc:52:a6:87:99:1f:47:9f: 5c:5c:6b:39:ca:1a:cc:69:8b:db:e9:28:ea:35:64: 75:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:c10::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207488 Signature Algorithm: sha256WithRSAEncryption 22:e0:23:0d:b3:a3:64:2b:34:17:7f:44:c8:2a:a9:ff:ae:68: 6d:8a:42:cd:90:df:f1:59:12:99:d6:09:de:1e:b3:a8:89:21: 74:7d:ab:06:fa:5e:29:05:a8:da:20:5c:f7:13:f5:cc:59:45: fd:b0:09:29:3f:65:e6:89:54:f6:02:0f:17:a0:83:01:f5:ba: d4:95:99:8d:43:09:32:53:c4:49:8b:2c:a2:55:dc:53:9b:7b: bc:0c:e0:1b:e0:81:80:3b:08:46:6d:ec:df:00:9f:42:75:a2: e0:79:40:97:e7:45:82:b9:bd:2a:ca:5b:4d:42:81:fb:4e:77: a4:60:9b:d0:bd:bf:b9:d2:b0:a9:e0:ab:52:9d:d9:51:3e:53: 43:46:71:45:9d:d8:09:2c:7d:f9:ca:e8:6a:c8:e5:83:c1:c1: ed:63:e9:26:50:4e:5d:51:a4:92:52:69:69:72:80:9a:ec:26: 3b:a7:07:02:c0:be:76:c4:bd:30:ac:e1:04:4d:6b:2b:d1:43: c5:a6:94:cb:14:87:0b:33:44:a5:b3:64:44:07:98:f9:32:74: f8:b8:be:65:4a:c0:84:d2:c8:72:8f:4b:c6:60:bb:f6:fb:b2: 30:a8:2b:f5:9d:5f:25:09:4a:d3:8b:33:52:46:1b:8b:f1:84: d0:cf:de:84 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt7NajDPKWed/ZRC4J/G8P7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGVkNjAyZmQwZDQ2ZDM4Y2RlMWU3MzJjNjUyZWE5OTU4ZTk3NjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7hykUP7Z++pOaPlgueGktn2IKGH eYxYQmfDS2AC8PpCmbuNoGRVjs9CQQ1hkQHwo+7SM75Ha8GrjkkNfrqVonnROILi 7lVyLfmQZxTuowdkmJk/mSGU7qJjxUkRSCbcyP2+EGr9AHYJcTqXmxV0BPrtrtdp l4EeZgELsG75EtwOjfX8DUVSOurdAz4RJFfSjyPUR/lQUVuV4KoKZOiY85c5teyT IkTtTRCSfCDzHM0DvmRhSbQano+qRIunm0/J46yNyHo6Bps/ODezclrAYVzBWn8Y 8tx51bbSwi2lZf3QjflIOX6kzFKmh5kfR59cXGs5yhrMaYvb6SjqNWR1gwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFOjtYC/Q1G04zeHnMsZS6plY6XaRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkL2I2NDA5 Yi0xNjM4LTRjN2EtODFmMi05NGY4ZmIzMDA5ZjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvYjY0MDli LTE2MzgtNGM3YS04MWYyLTk0ZjhmYjMwMDlmMi8xLzZPMWdMOURVYlRqTjRlY3l4 bExxbVZqcGRwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAwQMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMqgDANBgkqhkiG9w0BAQsFAAOCAQEAIuAjDbOjZCs0F39EyCqp/65obYpC zZDf8VkSmdYJ3h6zqIkhdH2rBvpeKQWo2iBc9xP1zFlF/bAJKT9l5olU9gIPF6CD AfW61JWZjUMJMlPESYssolXcU5t7vAzgG+CBgDsIRm3s3wCfQnWi4HlAl+dFgrm9 KspbTUKB+053pGCb0L2/udKwqeCrUp3ZUT5TQ0ZxRZ3YCSx9+croasjlg8HB7WPp JlBOXVGkklJpaXKAmuwmO6cHAsC+dsS9MKzhBE1rK9FDxaaUyxSHCzNEpbNkRAeY +TJ0+Li+ZUrAhNLIco9LxmC79vuyMKgr9Z1fJQlK04szUkYbi/GE0M/ehA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:24 2026 by rpki-client