This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer File: 6QUkmbAAPqDurqJCYzjDTgv4_c8.cer (raw, json) Hash identifier: PnvTaXpCiGYixsU7rZQJERWCYU4D9U2xrIo0V2GCxrQ= Subject key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE2FF57B91DE87049298D8473BCEA3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201608 AS: 207850 IP: 185.69.68.0/23 IP: 193.108.20.0/24 IP: 193.108.25.0 -- 193.108.26.255 IP: 193.108.178.0/24 IP: 2a0f:8bc0::/30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2f:f5:7b:91:de:87:04:92:98:d8:47:3b:ce:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:99:b0:af:fa:7f:01:b2:7b:b9:30:3a:ba:5b: ee:70:0e:03:0a:63:25:46:57:fe:1d:fc:6e:59:98: 5f:c9:a1:6b:a4:9b:64:17:52:cc:d1:87:60:9a:45: 2d:4c:26:a8:4b:70:44:06:dd:b8:24:c0:31:0e:95: f5:7f:b7:de:a7:9f:f0:8b:57:78:ab:83:95:f2:8c: 37:e6:84:99:a1:c6:16:15:0f:17:09:03:f6:79:ce: ef:f6:14:b6:bf:4e:cb:ad:7d:5b:1a:fc:a4:a3:86: 77:6c:78:c6:33:b9:1e:03:6a:f6:b1:c2:56:86:5b: ef:1c:9d:1e:32:d7:fc:6e:10:6b:72:c7:93:66:79: d2:72:37:36:2a:ac:62:a9:50:f8:9e:dc:4a:86:03: 14:15:8a:dd:f1:f5:db:17:05:ad:27:7e:c7:b9:55: 90:88:a4:c6:a4:5e:13:3b:5c:0d:79:ab:f8:21:b7: 96:f5:88:83:48:e3:e0:02:ae:64:40:bc:36:43:d5: 15:84:13:84:2e:e5:17:36:0e:4d:f5:66:7e:18:5d: 88:58:d9:1f:31:60:2f:35:d6:6b:49:eb:ab:04:f4: 04:3f:1d:75:5f:db:6b:d3:56:8b:d9:30:92:be:32: de:b8:03:2d:78:ae:b9:ad:e9:dc:67:dc:34:68:77: ec:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.68.0/23 193.108.20.0/24 193.108.25.0-193.108.26.255 193.108.178.0/24 IPv6: 2a0f:8bc0::/30 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201608 207850 Signature Algorithm: sha256WithRSAEncryption 9c:13:16:2d:d9:2b:1d:5e:49:b9:1a:c3:fd:8a:bf:31:79:47: 19:62:1c:e0:22:9a:b3:de:25:5e:4f:7f:e2:0d:96:0a:f8:44: cb:fd:c1:8f:53:45:fa:ec:0d:ab:82:c2:3b:f0:6e:44:90:a8: 9c:e3:cf:4e:6e:08:63:7b:a3:15:a0:b7:48:7e:7c:52:9a:2c: 99:52:c7:d2:18:e7:c0:0e:28:70:97:05:f1:4f:5f:11:1c:e5: 96:e0:6f:16:64:2d:e4:c4:3f:26:09:61:9d:c8:46:d8:92:b4: fb:98:b1:44:80:d4:f5:42:3e:09:fd:f5:4a:b1:01:60:c8:fd: 3b:36:ac:80:1b:6c:0b:03:ec:19:5e:4b:21:c7:c2:55:31:cf: 71:ba:fa:68:ec:c3:37:0a:ad:bb:08:1d:72:7e:ae:e7:2e:4e: af:b3:3d:5b:0f:d9:c1:8a:06:53:28:21:d4:60:ce:c8:aa:42: 7d:8d:1a:15:1a:a5:62:51:74:bf:b5:fc:a9:c4:28:20:3f:84: 81:74:69:bb:9a:a0:c1:01:c3:93:92:10:51:55:5b:3b:15:2e: 1a:d4:88:1a:93:1d:80:cc:10:b0:07:f0:6d:58:ac:ff:ca:91: 1e:e9:43:d9:3e:41:76:f0:27:29:e2:97:18:f0:d8:fd:2d:69: 6b:5b:96:c5 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZt87i/1e5HehwSSmNhHO86jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTA1MjQ5OWIwMDAzZWEwZWVhZWEyNDI2MzM4YzM0ZTBiZjhmZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5mwr/p/AbJ7uTA6ulvucA4DCmMl Rlf+HfxuWZhfyaFrpJtkF1LM0YdgmkUtTCaoS3BEBt24JMAxDpX1f7fep5/wi1d4 q4OV8ow35oSZocYWFQ8XCQP2ec7v9hS2v07LrX1bGvyko4Z3bHjGM7keA2r2scJW hlvvHJ0eMtf8bhBrcseTZnnScjc2KqxiqVD4ntxKhgMUFYrd8fXbFwWtJ37HuVWQ iKTGpF4TO1wNeav4IbeW9YiDSOPgAq5kQLw2Q9UVhBOELuUXNg5N9WZ+GF2IWNkf MWAvNdZrSeurBPQEPx11X9tr01aL2TCSvjLeuAMteK65rencZ9w0aHfstQIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFOkFJJmwAD6g7q6iQmM4w04L+P3PMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzLzc4N2E5 Ni1mYjBkLTQzMmEtODQyOC03MTBlZjQ3NzMyYjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvNzg3YTk2 LWZiMGQtNDMyYS04NDI4LTcxMGVmNDc3MzJiMC8xLzZRVWttYkFBUHFEdXJxSkNZ empEVGd2NF9jOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAmBAIAATAgAwQBuUVEAwQAwWwUMAwDBADBbBkDBADBbBoDBADB bLIwDQQCAAIwBwMFAioPi8AwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAxOIAgMD K+owDQYJKoZIhvcNAQELBQADggEBAJwTFi3ZKx1eSbkaw/2KvzF5RxliHOAimrPe JV5Pf+INlgr4RMv9wY9TRfrsDauCwjvwbkSQqJzjz05uCGN7oxWgt0h+fFKaLJlS x9IY58AOKHCXBfFPXxEc5ZbgbxZkLeTEPyYJYZ3IRtiStPuYsUSA1PVCPgn99Uqx AWDI/Ts2rIAbbAsD7BleSyHHwlUxz3G6+mjswzcKrbsIHXJ+rucuTq+zPVsP2cGK BlMoIdRgzsiqQn2NGhUapWJRdL+1/KnEKCA/hIF0abuaoMEBw5OSEFFVWzsVLhrU iBqTHYDMELAH8G1YrP/KkR7pQ9k+QXbwJynilxjw2P0taWtblsU= -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:44 2026 by rpki-client