This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer File: 6UWUa-c3BQO-r75A4REVudyVO8M.cer (raw, json) Hash identifier: SpDkyWSYm/TOobo617Dme1NUuB6VoWZBc1k+CsQbw+Y= Subject key identifier: E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11DD46D9299F8E37FF06528BA7C60D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.140.104.0/22 IP: 2a07:1c00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:dd:46:d9:29:9f:8e:37:ff:06:52:8b:a7:c6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e945946be7370503beafbe40e11115b9dc953bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:76:79:d3:34:68:d4:ac:54:ca:ab:6d:fc:4a: 9d:26:06:1a:2f:62:6f:42:c5:56:17:fb:bb:f5:10: be:fc:ec:ff:9f:b5:03:e7:18:b3:8d:be:d8:a9:a1: 41:c4:56:72:5b:48:83:75:e9:e1:bf:0c:73:19:e1: 49:29:c9:cf:7c:fe:00:dd:b2:2b:02:73:02:35:12: d6:18:a9:25:9b:07:aa:bd:46:56:a9:ef:b4:1d:1e: ad:97:74:c8:61:4e:08:2d:39:02:b4:b1:e9:43:5a: 10:ac:7c:a9:76:51:5d:e8:98:8f:c1:b3:00:48:90: 0e:d0:44:15:ff:b9:04:42:fb:41:7f:42:cc:f1:14: fd:21:9d:44:da:25:69:66:b0:89:39:94:a4:35:02: ac:bf:29:9f:ab:ff:fe:13:04:9a:7d:4f:07:7c:c0: 4f:f3:ed:39:6b:c0:a7:a0:3f:05:9e:3e:af:0c:dd: 27:29:1f:77:28:a9:eb:3b:90:01:cb:91:b2:d0:ec: 61:cf:96:ba:db:9e:89:d2:02:df:1f:9e:32:87:e7: d5:c9:db:8d:19:80:c4:5c:9c:a1:73:26:04:05:fb: ec:16:0e:a0:da:75:08:4d:08:32:c2:cf:37:48:fa: 10:0b:f1:d5:22:71:4f:65:a6:63:5a:38:c0:71:a1: bd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.104.0/22 IPv6: 2a07:1c00::/29 Signature Algorithm: sha256WithRSAEncryption 5e:61:ba:71:15:3c:92:0a:8e:64:13:fa:d4:e3:4d:b6:d2:24: a0:8d:11:9e:4e:ce:56:5b:2e:e3:a7:e3:c7:3d:bd:a4:96:c8: 2d:62:ce:dd:89:94:5c:70:72:e4:2a:b9:fd:a7:f7:20:fc:93: 7e:ca:8b:17:fb:bd:b1:9a:83:42:32:b7:30:24:90:f0:f7:ec: 6d:d8:ed:2a:2d:ff:2a:4e:27:b6:d6:55:02:d5:5c:ba:68:12: 87:b9:e3:88:51:90:de:a2:10:1c:4f:0e:d9:68:b9:3c:5c:26: c8:d1:49:ee:22:f9:a8:5c:2e:d5:43:8d:0b:ee:b4:7b:d5:48: 04:8e:dd:34:39:4c:41:25:4e:19:09:4a:1d:d5:a1:f6:34:62: 00:8e:63:c2:92:a6:40:bd:26:fe:67:38:2b:db:4a:f7:e2:7c: 05:be:21:ea:34:72:66:bf:67:84:58:55:39:b4:89:27:16:2c: a0:b0:76:e8:24:3a:db:2f:1d:40:32:c9:73:ef:54:68:d9:ba: 05:a3:da:2e:bb:c5:e1:7e:e3:61:59:e7:0e:39:54:93:a2:83: 6b:9a:d4:77:7e:f0:7d:5d:fb:9c:66:71:8b:d8:d8:23:93:5a: 86:24:64:74:8d:d7:db:32:ba:43:0f:76:54:4c:8d:35:4b:0f: f9:8f:1b:85 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8Ed1G2Smfjjf/BlKLp8YNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTQ1OTQ2YmU3MzcwNTAzYmVhZmJlNDBlMTExMTViOWRjOTUzYmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73Z50zRo1KxUyqtt/EqdJgYaL2Jv QsVWF/u79RC+/Oz/n7UD5xizjb7YqaFBxFZyW0iDdenhvwxzGeFJKcnPfP4A3bIr AnMCNRLWGKklmweqvUZWqe+0HR6tl3TIYU4ILTkCtLHpQ1oQrHypdlFd6JiPwbMA SJAO0EQV/7kEQvtBf0LM8RT9IZ1E2iVpZrCJOZSkNQKsvymfq//+EwSafU8HfMBP 8+05a8CnoD8Fnj6vDN0nKR93KKnrO5ABy5Gy0Oxhz5a6256J0gLfH54yh+fVyduN GYDEXJyhcyYEBfvsFg6g2nUITQgyws83SPoQC/HVInFPZaZjWjjAcaG9rQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFOlFlGvnNwUDvq++QOERFbnclTvDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwLzVmZjE5 OS1kYWYwLTRhN2UtOGU1ZC02NmQzZDhiYTUzOWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvNWZmMTk5 LWRhZjAtNGE3ZS04ZTVkLTY2ZDNkOGJhNTM5Zi8xLzZVV1VhLWMzQlFPLXI3NUE0 UkVWdWR5Vk84TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYxoMA0EAgACMAcDBQMqBxwAMA0GCSqGSIb3 DQEBCwUAA4IBAQBeYbpxFTySCo5kE/rU40220iSgjRGeTs5WWy7jp+PHPb2klsgt Ys7diZRccHLkKrn9p/cg/JN+yosX+72xmoNCMrcwJJDw9+xt2O0qLf8qTie21lUC 1Vy6aBKHueOIUZDeohAcTw7ZaLk8XCbI0UnuIvmoXC7VQ40L7rR71UgEjt00OUxB JU4ZCUod1aH2NGIAjmPCkqZAvSb+Zzgr20r34nwFviHqNHJmv2eEWFU5tIknFiyg sHboJDrbLx1AMslz71Ro2boFo9ouu8XhfuNhWecOOVSTooNrmtR3fvB9XfucZnGL 2Ngjk1qGJGR0jdfbMrpDD3ZUTI01Sw/5jxuF -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:42 2026 by rpki-client