This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer File: 6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer (raw, json) Hash identifier: HtBcE/FxNJWXVnUauQazEvpEyDRJvMAqT6o1KC4zvkA= Subject key identifier: E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6993F9BAD228E94FF2DE7DD3B707D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34557 IP: 85.9.128.0/18 IP: 2a0a:7500::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:99:3f:9b:ad:22:8e:94:ff:2d:e7:dd:3b:70:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:18:3e:0d:f1:6e:df:83:cd:da:62:e7:e6:e2: 67:cb:b2:9d:25:09:c5:8c:b2:b6:88:81:c8:42:f5: af:a4:b8:b6:c1:ff:98:3a:5f:f2:88:a7:ab:a3:f7: 32:96:53:89:8e:96:a2:ff:a0:0a:d5:40:5b:17:51: e0:c1:1e:d8:9b:bd:a1:2c:60:14:b6:ae:08:2d:80: f2:30:07:b0:b1:bf:5c:76:0b:3b:0b:b6:ad:98:98: b7:85:e1:99:56:54:6b:97:32:78:57:5b:7b:70:10: 2b:88:22:d1:9e:87:e3:c9:db:b9:69:d2:9f:9f:6e: 37:83:9c:48:71:45:ce:5a:76:e2:ab:dd:b1:c4:37: f6:89:b5:21:c0:7b:78:b7:3f:b0:08:79:78:24:65: f4:f9:d2:44:82:10:20:ec:5e:b2:db:2c:e3:ea:86: b5:1c:c2:a7:83:16:79:b7:3d:25:1d:14:63:6a:2a: ff:7a:e5:dd:d6:7a:7f:33:bb:3c:5d:b7:16:da:9e: 2b:70:68:fc:c6:25:61:19:67:e2:49:a7:80:41:43: 03:a2:d4:2a:e8:8e:d5:51:ae:a4:15:93:79:68:47: 60:fe:81:51:b5:6c:c8:e9:aa:38:48:86:7c:50:36: d9:88:bc:a0:6c:b5:ff:33:be:1e:3d:23:5f:aa:99: e6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.9.128.0/18 IPv6: 2a0a:7500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34557 Signature Algorithm: sha256WithRSAEncryption 2a:0e:47:48:f3:83:86:ba:1c:3f:73:63:5a:e9:12:0b:73:a2: 53:a5:21:80:a5:0f:51:9e:51:09:42:b9:64:74:d4:10:6c:03: bf:be:f7:4e:18:26:3c:02:f6:22:c6:06:47:dd:e4:c2:1e:bf: c5:74:73:cb:a1:a4:bd:61:73:3f:bd:0f:9c:c7:ed:3a:dd:e9: 79:80:ea:84:22:0c:09:8e:f7:fb:47:80:a8:29:21:08:7f:6a: 85:fd:a5:69:09:c3:3a:99:10:76:1e:5c:cf:03:be:45:04:e2: b7:c4:0e:d5:c1:61:82:56:c2:09:e3:03:b3:4e:ff:a3:9a:23: bf:59:12:5a:dc:17:77:98:70:2f:5e:48:e6:55:8b:d6:bb:48: b5:ee:bf:af:4d:43:21:21:8e:82:07:76:f5:47:60:df:e9:5b: e4:f1:78:5d:cd:e0:cb:91:29:43:70:82:f7:f3:07:e9:50:f9: fb:01:c3:07:f6:15:93:7d:3c:d1:8c:88:f1:95:46:fc:66:11: e8:f5:f6:91:ad:7b:91:d0:a7:81:fc:1c:1b:c1:bd:cf:bd:d4: 23:ff:63:3b:d4:0e:2f:16:c4:89:a4:3c:e2:58:84:eb:d6:86: 07:9b:06:08:bd:b4:e3:0d:90:5d:b4:08:e1:8c:df:7d:fd:f6: d5:65:8e:77 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xpk/m60ijpT/LefdO3B9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTVjYzE3OGNkZjVhZDkyNzk5MzllNTc2OGFlODg4M2ZmYmYzNWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Rg+DfFu34PN2mLn5uJny7KdJQnF jLK2iIHIQvWvpLi2wf+YOl/yiKero/cyllOJjpai/6AK1UBbF1HgwR7Ym72hLGAU tq4ILYDyMAewsb9cdgs7C7atmJi3heGZVlRrlzJ4V1t7cBAriCLRnofjydu5adKf n243g5xIcUXOWnbiq92xxDf2ibUhwHt4tz+wCHl4JGX0+dJEghAg7F6y2yzj6oa1 HMKngxZ5tz0lHRRjair/euXd1np/M7s8XbcW2p4rcGj8xiVhGWfiSaeAQUMDotQq 6I7VUa6kFZN5aEdg/oFRtWzI6ao4SIZ8UDbZiLygbLX/M74ePSNfqpnmEQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOlcwXjN9a2SeZOeV2iuiIP/vzXrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzLzYzMjQ2 My1jMmRjLTRjYjgtYmM0Zi0yZGY5OWQ4MTIzYjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvNjMyNDYz LWMyZGMtNGNiOC1iYzRmLTJkZjk5ZDgxMjNiNy8xLzZWekJlTTMxclpKNWs1NVhh SzZJZ18tX05lcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQGVQmAMA0EAgACMAcDBQAqCnUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCG/TANBgkqhkiG9w0BAQsFAAOCAQEAKg5HSPODhroc P3NjWukSC3OiU6UhgKUPUZ5RCUK5ZHTUEGwDv773ThgmPAL2IsYGR93kwh6/xXRz y6GkvWFzP70PnMftOt3peYDqhCIMCY73+0eAqCkhCH9qhf2laQnDOpkQdh5czwO+ RQTit8QO1cFhglbCCeMDs07/o5ojv1kSWtwXd5hwL15I5lWL1rtIte6/r01DISGO ggd29Udg3+lb5PF4Xc3gy5EpQ3CC9/MH6VD5+wHDB/YVk3080YyI8ZVG/GYR6PX2 ka17kdCngfwcG8G9z73UI/9jO9QOLxbEiaQ84liE69aGB5sGCL204w2QXbQI4Yzf ff321WWOdw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:24 2026 by rpki-client