This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer File: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer (raw, json) Hash identifier: BrNwGSo1wXzaAB98JmC+OY93IdraF/U8dxxE8WjPx24= Subject key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAB04C20F78B431E325B98DF84C342 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43846 IP: 37.0.64.0/21 IP: 79.140.144.0/20 IP: 185.12.40.0/22 IP: 185.80.96.0/22 IP: 2a00:8700::/29 IP: 2a05:7b40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b0:4c:20:f7:8b:43:1e:32:5b:98:df:84:c3:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8f239a70043734172d26378bf2106ae72552187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:73:d4:0c:20:17:11:1d:eb:9e:d2:61:30:d5: ab:2b:61:d7:88:91:62:11:3b:a4:ea:4c:20:bf:ed: 5d:90:8d:f2:41:67:b8:e9:b7:30:29:b5:95:b5:84: c6:5c:8a:2b:c8:8b:3a:79:0b:69:e5:dc:8d:5d:16: 22:e0:09:fa:cf:56:0b:f1:11:12:9b:c1:d0:2e:0b: 59:a0:f6:ea:4d:99:80:b2:91:a3:60:d7:17:a2:4d: 5d:af:7b:c2:db:7d:ca:eb:4e:1e:5d:9d:0c:29:7a: 77:f9:08:02:07:64:aa:b3:6e:fc:42:39:32:73:67: a7:a4:74:d5:86:80:59:23:ee:4f:17:e9:74:9f:52: d8:d8:55:b2:a1:f6:ab:f1:2a:1c:39:55:2c:b5:28: 7b:a1:0c:80:b2:47:21:c0:d2:84:d3:f8:5b:f2:f1: 22:13:fe:ce:47:37:f9:69:22:87:94:e3:ed:8c:f5: 9b:a6:1e:d0:63:35:45:bb:3a:33:96:8c:8d:77:ef: 6a:46:70:51:1b:e8:14:47:03:83:d9:83:77:55:26: 9d:7d:a7:e3:1c:c3:0a:ca:2c:b9:78:27:be:a4:10: f3:60:99:37:5f:84:07:e4:9f:f4:b3:2b:33:c1:7e: 48:3a:98:b0:3e:fa:c2:9c:aa:d7:bc:cf:8c:91:f5: 40:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.0.64.0/21 79.140.144.0/20 185.12.40.0/22 185.80.96.0/22 IPv6: 2a00:8700::/29 2a05:7b40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43846 Signature Algorithm: sha256WithRSAEncryption 81:03:13:d8:d9:c5:6b:7c:40:47:ab:e7:b7:84:e9:61:06:aa: c9:51:e9:bc:98:36:3a:d5:93:9a:c5:a9:7f:b7:a0:23:53:ee: bc:58:c2:c0:8d:1a:ad:66:4e:9a:81:07:8b:68:cd:f2:89:ae: 62:80:2b:42:b1:25:ab:08:cb:96:0a:2a:da:ed:9b:02:d2:b9: 37:3f:cc:38:e1:d9:57:6d:f6:ae:99:8f:1f:7b:a6:ea:f8:4c: 45:ca:65:44:e8:a5:03:df:bd:1b:15:cd:df:95:1a:19:55:bf: e4:30:0e:7a:c2:ea:f0:8c:48:8b:da:54:82:2d:35:58:f4:e8: d7:19:30:f5:03:54:92:5d:76:1e:23:86:e4:16:38:a0:77:41: ed:a1:2b:af:f3:ed:39:a6:0b:16:5f:fc:ec:88:3e:76:db:3e: 76:e5:72:90:1b:f1:8e:7e:df:f2:0e:15:e3:c7:21:7b:c0:fe: a9:fc:6d:a0:ac:bb:ca:fb:dc:5a:b4:62:06:ad:9c:07:87:54: 68:fa:e3:97:86:39:a6:96:ab:30:b6:0c:80:18:08:8c:3d:87: 16:86:91:af:79:24:87:3a:1e:15:74:f2:05:81:d6:b5:c6:a3: a3:cf:15:8b:56:c8:dd:b7:6e:a4:2e:cd:29:7a:4b:a8:6d:72: c6:78:2f:f5 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgISAZt26rBMIPeLQx4yW5jfhMNCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGYyMzlhNzAwNDM3MzQxNzJkMjYzNzhiZjIxMDZhZTcyNTUyMTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3PUDCAXER3rntJhMNWrK2HXiJFi ETuk6kwgv+1dkI3yQWe46bcwKbWVtYTGXIoryIs6eQtp5dyNXRYi4An6z1YL8RES m8HQLgtZoPbqTZmAspGjYNcXok1dr3vC233K604eXZ0MKXp3+QgCB2Sqs278Qjky c2enpHTVhoBZI+5PF+l0n1LY2FWyofar8SocOVUstSh7oQyAskchwNKE0/hb8vEi E/7ORzf5aSKHlOPtjPWbph7QYzVFuzozloyNd+9qRnBRG+gURwOD2YN3VSadfafj HMMKyiy5eCe+pBDzYJk3X4QH5J/0syszwX5IOpiwPvrCnKrXvM+MkfVAKQIDAQAB o4ICyDCCAsQwHQYDVR0OBBYEFOjyOacAQ3NBctJjeL8hBq5yVSGHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzRlOTAy YS0yOTlmLTRkYTctOWE2ZC02NjliZDExM2ExNzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvNGU5MDJh LTI5OWYtNGRhNy05YTZkLTY2OWJkMTEzYTE3OC8xLzZQSTVwd0JEYzBGeTBtTjR2 eUVHcm5KVklZYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF BwEHAQH/BDgwNjAeBAIAATAYAwQDJQBAAwQET4yQAwQCuQwoAwQCuVBgMBQEAgAC MA4DBQMqAIcAAwUDKgV7QDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAq0YwDQYJ KoZIhvcNAQELBQADggEBAIEDE9jZxWt8QEer57eE6WEGqslR6byYNjrVk5rFqX+3 oCNT7rxYwsCNGq1mTpqBB4tozfKJrmKAK0KxJasIy5YKKtrtmwLSuTc/zDjh2Vdt 9q6Zjx97pur4TEXKZUTopQPfvRsVzd+VGhlVv+QwDnrC6vCMSIvaVIItNVj06NcZ MPUDVJJddh4jhuQWOKB3Qe2hK6/z7TmmCxZf/OyIPnbbPnblcpAb8Y5+3/IOFePH IXvA/qn8baCsu8r73Fq0YgatnAeHVGj645eGOaaWqzC2DIAYCIw9hxaGka95JIc6 HhV08gWB1rXGo6PPFYtWyN23bqQuzSl6S6htcsZ4L/U= -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:57 2026 by rpki-client