This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer File: 6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer (raw, json) Hash identifier: h1FANHrkHwNPZilp6le1R2kzvwErg8vn4AboQ3dTzgM= Subject key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F157E8B5992AADD54816883AD571EE6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43833 IP: 80.254.224.0/22 IP: 89.29.160.0 -- 89.29.231.255 IP: 89.29.240.0 -- 89.29.253.255 IP: 89.29.255.0/24 IP: 91.223.7.0/24 IP: 176.57.96.0/21 IP: 185.40.36.0/24 IP: 185.64.240.0 -- 185.64.242.255 IP: 185.250.196.0/22 IP: 193.177.212.0/22 IP: 213.181.64.0/19 IP: 2a0c:11c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:7e:8b:59:92:aa:dd:54:81:68:83:ad:57:1e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:95:22:9a:6b:0d:a7:42:df:04:11:e1:d1: c7:92:67:ba:28:ff:97:bb:01:73:bc:f2:b4:67:0f: 85:11:bf:68:68:4a:99:92:02:66:f9:41:a8:a5:4a: a3:35:f2:6e:27:5c:56:ff:d2:4a:3c:42:4f:68:14: 4c:1d:32:09:e0:98:4d:a6:94:e4:1e:1e:70:a4:62: 8e:0a:ce:0a:c8:04:89:b8:4e:18:6b:fd:5f:b4:9f: bc:b2:1c:59:0f:7f:13:f1:e4:b6:b4:97:3c:d5:ee: 95:f7:04:bb:33:39:bd:0c:27:fc:6e:cb:5d:de:97: 29:73:0c:81:11:6f:43:dd:c7:08:4f:57:2e:96:90: 9b:88:b5:da:2a:ca:db:fe:a3:c5:f7:70:4b:80:70: 81:f0:12:e9:80:29:29:ac:24:9a:fa:84:f2:ae:ca: e1:a1:3f:ca:00:8e:3b:7a:af:e9:c0:ee:87:fb:f3: 72:cc:2a:6a:3c:9a:24:44:5c:84:f6:74:85:0e:a0: 20:f7:16:2b:f8:09:ff:0b:1b:2a:41:05:51:c8:cd: 2a:98:52:f1:27:29:be:49:89:e5:15:e7:f2:db:9a: 23:c6:c5:8a:ad:39:a9:e8:58:14:7a:fc:a2:e8:60: d0:a1:33:11:7d:fc:08:c9:76:5b:a7:35:be:9b:13: a1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.254.224.0/22 89.29.160.0-89.29.231.255 89.29.240.0-89.29.253.255 89.29.255.0/24 91.223.7.0/24 176.57.96.0/21 185.40.36.0/24 185.64.240.0-185.64.242.255 185.250.196.0/22 193.177.212.0/22 213.181.64.0/19 IPv6: 2a0c:11c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43833 Signature Algorithm: sha256WithRSAEncryption ad:4c:dc:74:9f:0a:4c:4a:45:07:d9:84:dc:66:9a:8c:83:2c: a6:bb:97:17:34:aa:14:ed:d9:ef:36:14:b4:e2:7d:31:5a:dd: 44:01:c2:a4:27:a1:b3:37:dc:a1:db:8b:60:8a:56:41:6c:d2: fb:99:12:db:40:5d:9e:b7:32:ba:6d:74:20:e1:40:9a:05:d1: 68:3b:ad:6e:c2:ec:4a:6a:2a:83:c1:3d:4c:bf:83:35:41:98: 49:0e:5f:1a:ee:b5:28:06:50:ba:6d:1a:c2:31:88:50:ae:87: 7a:ee:77:ac:2d:a6:c5:14:fb:6b:c3:86:c1:e1:7d:9e:13:cc: cc:ea:1d:73:7c:1a:f0:18:24:4e:59:cf:e5:91:44:84:20:57: 5d:36:04:92:00:18:21:e3:65:09:ad:b9:6b:4d:a8:44:d0:22: 5d:29:85:97:dc:88:a3:87:4e:28:25:7b:53:d9:43:45:23:5a: b9:b2:a1:6e:d1:a8:ac:da:ec:7a:c7:86:02:ba:e4:42:c0:2f: 6a:50:d0:07:10:53:67:69:07:f9:b9:85:73:6e:58:bd:d5:64: a8:f3:14:1d:16:56:d2:57:59:24:db:ce:02:41:02:a6:3a:32: 07:f3:f6:c1:0c:64:df:90:15:ee:88:af:e5:d9:36:12:84:c0: e5:09:ee:45 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgISAZt/FX6LWZKq3VSBaIOtVx7mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTJjNDE1ZDE3NzVhZTk5OTNlOTAwYTc1MzZiNDZhYjE0NGE5YWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QGVIpprDadC3wQR4dHHkme6KP+X uwFzvPK0Zw+FEb9oaEqZkgJm+UGopUqjNfJuJ1xW/9JKPEJPaBRMHTIJ4JhNppTk Hh5wpGKOCs4KyASJuE4Ya/1ftJ+8shxZD38T8eS2tJc81e6V9wS7Mzm9DCf8bstd 3pcpcwyBEW9D3ccIT1culpCbiLXaKsrb/qPF93BLgHCB8BLpgCkprCSa+oTyrsrh oT/KAI47eq/pwO6H+/NyzCpqPJokRFyE9nSFDqAg9xYr+An/CxsqQQVRyM0qmFLx Jym+SYnlFefy25ojxsWKrTmp6FgUevyi6GDQoTMRffwIyXZbpzW+mxOhBwIDAQAB o4IDBDCCAwAwHQYDVR0OBBYEFOksQV0Xda6Zk+kAp1NrRqsUSpqiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzA4OThi ZS1iMDM3LTQyOWYtYjUwNC0xZDkzNGEwNDg0NzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvMDg5OGJl LWIwMzctNDI5Zi1iNTA0LTFkOTM0YTA0ODQ3NC8xLzZTeEJYUmQxcnBtVDZRQ25V MnRHcXhSS21xSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGCBggrBgEF BQcBBwEB/wRzMHEwYAQCAAEwWgMEAlD+4DAMAwQFWR2gAwQDWR3gMAwDBARZHfAD BAFZHfwDBABZHf8DBABb3wcDBAOwOWADBAC5KCQwDAMEBLlA8AMEALlA8gMEArn6 xAMEAsGx1AMEBdW1QDANBAIAAjAHAwUDKgwRwDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMAqzkwDQYJKoZIhvcNAQELBQADggEBAK1M3HSfCkxKRQfZhNxmmoyDLKa7 lxc0qhTt2e82FLTifTFa3UQBwqQnobM33KHbi2CKVkFs0vuZEttAXZ63MrptdCDh QJoF0Wg7rW7C7EpqKoPBPUy/gzVBmEkOXxrutSgGULptGsIxiFCuh3rud6wtpsUU +2vDhsHhfZ4TzMzqHXN8GvAYJE5Zz+WRRIQgV102BJIAGCHjZQmtuWtNqETQIl0p hZfciKOHTigle1PZQ0UjWrmyoW7RqKza7HrHhgK65ELAL2pQ0AcQU2dpB/m5hXNu WL3VZKjzFB0WVtJXWSTbzgJBAqY6Mgfz9sEMZN+QFe6Ir+XZNhKEwOUJ7kU= -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:20 2026 by rpki-client