This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer File: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer (raw, json) Hash identifier: NBqYrXf/vwgsE7o7XvjvrRWyPJfyDJ0wsxOZDwdVit4= Subject key identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B4B9E6AE178D3E5C635EAEF8921807189 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 23 Dec 2025 14:30:31 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 205518 AS: 206945 IP: 185.171.8.0/22 IP: 185.203.164.0/22 IP: 185.215.104.0/22 IP: 2a0a:bf00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:9e:6a:e1:78:d3:e5:c6:35:ea:ef:89:21:80:71:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 23 14:30:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e91f272b13c750143c7ec87e0c802aead8ac6e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:36:bd:8c:10:19:49:2c:78:af:c9:4b:7c:49: 08:22:68:89:1e:cd:86:ca:cf:b9:c6:ad:d6:03:31: fb:5c:1b:84:a4:56:82:95:fa:b2:12:7c:05:89:6a: 41:5c:76:e0:85:7b:27:35:66:64:5f:21:8a:be:1d: 35:e5:e0:33:28:ca:6e:fb:37:90:15:ef:1b:47:cc: 7c:d0:4a:2e:bb:3a:da:cd:2f:05:38:53:d8:6a:0c: 37:62:d6:83:f2:4e:71:6b:62:0b:12:10:59:84:67: 02:c2:a7:cb:e7:ac:61:05:10:dd:74:a2:1e:8b:d5: 4b:1d:cf:90:af:28:81:db:88:22:96:ad:cc:2a:cd: a7:54:d6:eb:b3:bb:cb:0a:84:c2:e6:33:a5:d0:39: fe:20:23:b4:c2:25:37:58:53:cb:4f:9d:21:d9:55: 71:44:8c:d3:00:20:dd:9a:0f:6d:0a:8d:63:65:79: 97:e6:e9:26:06:a3:07:90:b5:b3:7b:ff:f1:74:5d: e4:82:f4:f0:90:c6:31:7f:f5:26:b6:95:aa:c0:40: ea:df:91:04:72:e9:cf:2a:f4:18:13:7b:a7:53:f9: 8b:d4:61:a4:45:0c:9c:31:24:d6:76:2d:6a:fa:12: 06:b0:89:46:85:1b:ad:77:f7:bc:6f:22:ba:ca:98: d6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.171.8.0/22 185.203.164.0/22 185.215.104.0/22 IPv6: 2a0a:bf00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205518 206945 Signature Algorithm: sha256WithRSAEncryption 91:62:90:58:4d:cc:cc:5c:21:0c:74:9b:33:aa:6a:e2:66:07: 00:76:55:98:86:81:65:81:a1:56:8e:14:f7:74:e9:3e:91:2e: e1:f4:3c:a6:96:d3:7e:45:a3:22:5b:6d:c1:fd:c9:d9:77:b8: 4d:3c:16:8d:37:76:a3:bb:01:45:35:fb:de:2c:07:ce:35:29: 44:99:f9:42:6f:d6:ca:ec:c1:5f:31:7b:1e:22:28:de:2b:5a: 1b:f1:5c:ae:80:87:7e:d3:a0:da:02:99:90:7d:9b:00:bc:a0: ec:4a:26:6e:1d:bd:5e:7a:a3:8f:c4:9e:f4:97:2d:c6:5d:9c: 01:77:db:9b:20:09:f7:9d:00:63:4e:08:c7:00:bb:e0:9e:1e: 5c:c0:46:db:6a:29:8d:14:7b:92:d6:bb:24:1a:7d:9d:13:4c: d2:f5:27:2c:2a:72:89:17:d2:ed:8a:22:81:e0:93:a6:8a:73: fe:21:8a:59:62:5c:df:9d:c1:92:f7:9e:7e:02:97:e8:7f:0a: 8a:3f:8d:9b:e2:d5:26:9b:e2:e4:91:89:e1:ca:89:8f:4c:a8: 61:f5:31:81:6e:1a:f3:1e:35:a4:fa:a0:60:91:23:99:dc:20: fb:f1:86:eb:c7:d8:fc:aa:5f:03:ac:35:7e:6b:f0:c4:36:71: 2e:01:91:83 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZtLnmrheNPlxjXq74khgHGJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjIzMTQzMDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTFmMjcyYjEzYzc1MDE0M2M3ZWM4N2UwYzgwMmFlYWQ4YWM2ZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Da9jBAZSSx4r8lLfEkIImiJHs2G ys+5xq3WAzH7XBuEpFaClfqyEnwFiWpBXHbghXsnNWZkXyGKvh015eAzKMpu+zeQ Fe8bR8x80EouuzrazS8FOFPYagw3YtaD8k5xa2ILEhBZhGcCwqfL56xhBRDddKIe i9VLHc+QryiB24gilq3MKs2nVNbrs7vLCoTC5jOl0Dn+ICO0wiU3WFPLT50h2VVx RIzTACDdmg9tCo1jZXmX5ukmBqMHkLWze//xdF3kgvTwkMYxf/UmtpWqwEDq35EE cunPKvQYE3unU/mL1GGkRQycMSTWdi1q+hIGsIlGhRutd/e8byK6ypjW6wIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFOkfJysTx1AUPH7IfgyAKurYrG4HMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjL2Q2MmQy Mi04MmYyLTRiMjAtYmFjNC02MDFhNzI1YTAwZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvZDYyZDIy LTgyZjItNGIyMC1iYWM0LTYwMWE3MjVhMDBmNS8xLzZSOG5LeFBIVUJROGZzaC1E SUFxNnRpc2JnYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuasIAwQCucukAwQCuddoMA0EAgACMAcDBQMq Cr8AMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMizgIDAyhhMA0GCSqGSIb3DQEB CwUAA4IBAQCRYpBYTczMXCEMdJszqmriZgcAdlWYhoFlgaFWjhT3dOk+kS7h9Dym ltN+RaMiW23B/cnZd7hNPBaNN3ajuwFFNfveLAfONSlEmflCb9bK7MFfMXseIije K1ob8VyugId+06DaApmQfZsAvKDsSiZuHb1eeqOPxJ70ly3GXZwBd9ubIAn3nQBj TgjHALvgnh5cwEbbaimNFHuS1rskGn2dE0zS9ScsKnKJF9LtiiKB4JOminP+IYpZ YlzfncGS955+ApfofwqKP42b4tUmm+LkkYnhyomPTKhh9TGBbhrzHjWk+qBgkSOZ 3CD78Ybrx9j8ql8DrDV+a/DENnEuAZGD -----END CERTIFICATE-----Generated at Fri Dec 26 12:20:59 2025 by rpki-client