This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer File: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer (raw, json) Hash identifier: hnVvIsqxW1U8Gv64P5kyHzVl4vRwBHzXuyknKjVoq0Y= Subject key identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6C05274A07A78CD130C0256AB5DDF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212604 IP: 31.42.178.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c0:52:74:a0:7a:78:cd:13:0c:02:56:ab:5d:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e90391d244173f3e1aa821db77484b1ada53557f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:79:23:94:25:c9:36:ad:c7:04:8f:23:51:27: cd:84:d2:37:8e:11:67:c0:fe:b1:9a:19:8a:e5:d4: 4c:e5:f7:48:12:7a:f6:a3:80:e9:76:9d:26:63:bc: b7:31:e1:af:2f:75:fd:1d:af:df:1d:19:93:52:45: d4:b6:7f:f9:7b:aa:f8:69:6d:11:f6:26:f9:9e:23: f8:ef:d7:89:14:6f:1a:46:3e:56:a8:2b:e3:e9:e7: 53:b3:65:b2:bf:d3:54:7c:b5:b8:7b:d9:b5:59:5c: fb:e4:73:a0:7c:14:8d:94:a9:35:a3:22:25:87:97: 23:44:c7:17:2c:39:56:fd:be:79:17:37:e9:61:04: 30:36:91:df:29:79:c2:90:cf:ad:66:62:76:82:07: c9:52:6d:cf:47:88:fd:ab:28:3f:df:2c:e7:3f:66: 9a:08:5b:ce:0a:0e:36:17:b2:8b:8c:dc:4f:59:24: c6:ef:2e:c8:59:12:af:05:e1:75:db:fd:56:fa:af: dc:92:a5:c4:4e:0f:1c:e7:07:c3:c8:e4:0b:1f:1b: fb:43:85:14:00:14:10:86:30:58:2e:75:81:1e:3a: d4:28:f8:1a:3d:8e:fd:1b:38:cd:da:57:3d:21:e0: 8a:c6:8f:b1:6d:8e:47:d6:04:a8:f0:b4:1c:3c:0a: 31:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.178.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212604 Signature Algorithm: sha256WithRSAEncryption 72:06:ea:82:c9:20:00:93:e0:53:27:d5:9f:e4:ed:92:dc:32: d4:84:2f:21:76:c9:ff:0c:b1:ad:21:0a:dc:4d:d2:8a:bf:03: a6:f9:3e:5f:1e:e3:88:00:3f:b2:88:37:b6:bd:ae:c6:a1:04: cb:12:97:4d:1d:26:81:e7:c9:c9:09:25:f6:27:c6:b4:b7:f2: b5:37:02:5a:af:29:b0:f6:11:50:5a:ec:e4:91:d2:fc:35:00: e9:ff:17:81:7b:ef:be:55:1d:15:2b:d6:12:54:27:5c:e2:e2: 1d:4a:c5:13:00:63:5d:2c:5e:fd:f5:9c:1a:83:76:7c:de:09: df:d9:bc:87:ab:62:9e:9b:78:1d:44:03:51:5f:a5:f8:d6:e7: 31:a5:9e:3f:82:ed:eb:dc:65:bc:04:83:5d:95:11:2a:80:e1: e6:bc:bf:2e:57:9b:4a:8f:6a:ea:7e:71:7c:9f:8e:f9:09:d9: a5:55:dc:e4:06:f1:40:d5:99:3c:dd:1a:0f:f3:d8:fa:49:e8: e7:5f:0c:42:b7:72:90:9a:0d:a9:76:09:81:e7:78:60:4a:24: cf:59:17:08:c6:12:d1:c6:91:17:f0:b5:00:dc:17:fb:1b:ec: c1:f0:8b:22:ac:5f:24:d7:18:8d:66:d3:75:85:7b:af:3f:e8: 56:a6:56:bf -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xsBSdKB6eM0TDAJWq13fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTAzOTFkMjQ0MTczZjNlMWFhODIxZGI3NzQ4NGIxYWRhNTM1NTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83kjlCXJNq3HBI8jUSfNhNI3jhFn wP6xmhmK5dRM5fdIEnr2o4Dpdp0mY7y3MeGvL3X9Ha/fHRmTUkXUtn/5e6r4aW0R 9ib5niP479eJFG8aRj5WqCvj6edTs2Wyv9NUfLW4e9m1WVz75HOgfBSNlKk1oyIl h5cjRMcXLDlW/b55FzfpYQQwNpHfKXnCkM+tZmJ2ggfJUm3PR4j9qyg/3yznP2aa CFvOCg42F7KLjNxPWSTG7y7IWRKvBeF12/1W+q/ckqXETg8c5wfDyOQLHxv7Q4UU ABQQhjBYLnWBHjrUKPgaPY79GzjN2lc9IeCKxo+xbY5H1gSo8LQcPAoxRQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOkDkdJEFz8+Gqgh23dISxraU1V/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzZkZDY4 Mi0yYjA2LTQwNWMtODY5My00NmJlNzk4NzBiZTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvNmRkNjgy LTJiMDYtNDA1Yy04NjkzLTQ2YmU3OTg3MGJlOC8xLzZRT1Iwa1FYUHo0YXFDSGJk MGhMR3RwVFZYOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBHyqyMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM+fDANBgkqhkiG9w0BAQsFAAOCAQEAcgbqgskgAJPgUyfVn+Ttktwy1IQvIXbJ /wyxrSEK3E3Sir8Dpvk+Xx7jiAA/sog3tr2uxqEEyxKXTR0mgefJyQkl9ifGtLfy tTcCWq8psPYRUFrs5JHS/DUA6f8XgXvvvlUdFSvWElQnXOLiHUrFEwBjXSxe/fWc GoN2fN4J39m8h6tinpt4HUQDUV+l+NbnMaWeP4Lt69xlvASDXZURKoDh5ry/Lleb So9q6n5xfJ+O+QnZpVXc5AbxQNWZPN0aD/PY+kno518MQrdykJoNqXYJged4YEok z1kXCMYS0caRF/C1ANwX+xvswfCLIqxfJNcYjWbTdYV7rz/oVqZWvw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:20 2026 by rpki-client