This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer File: 6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer (raw, json) Hash identifier: rKGV/+zylKCDY5L0uN1MvN8ri/RMBbaBZvV7csRG6uk= Subject key identifier: E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA5F119ED51631FABC975C176BD2C9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39855 IP: 185.20.68.0/22 IP: 2a04:e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:5f:11:9e:d5:16:31:fa:bc:97:5c:17:6b:d2:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d6:42:8f:c3:41:43:5f:c3:08:ac:96:0f:bb: f9:e5:73:6d:ba:63:67:27:48:74:dc:62:79:c4:d2: 0d:b1:c8:e6:f7:56:c2:ce:62:d3:3b:40:52:7f:e1: 4c:b3:fe:da:82:43:b1:f5:8b:74:d5:54:29:66:8f: c1:8e:c4:0e:91:36:23:ed:37:be:68:2c:f4:73:d8: c0:44:15:9c:78:28:1f:c8:82:09:45:dd:1f:b9:b8: 17:75:1b:bf:e3:59:3d:65:06:49:b6:c3:3b:a5:21: 81:b0:d2:f3:ac:35:70:57:1b:c5:d6:91:76:e6:1f: 51:e1:55:99:71:fe:2f:59:a4:e8:bb:ee:3e:79:51: 38:ba:d3:2a:bd:67:3e:c3:61:aa:13:67:fc:c3:2b: 8e:d2:25:8c:65:90:26:38:12:78:3b:41:be:c8:2a: 13:02:8d:50:d2:55:25:12:e3:55:fd:1b:d3:46:ea: 61:15:a5:ef:a2:af:e6:30:d7:0f:ae:a4:f7:cc:c4: 4a:71:ba:07:e0:bb:b2:d6:fe:e9:0e:08:60:c5:06: 41:f9:49:07:b1:c2:ed:d6:47:66:49:ac:b5:62:0e: d8:ad:63:8d:2f:c6:6d:b2:30:a2:4b:50:0d:12:f0: cc:d2:a8:6d:d6:90:9e:e1:45:ab:57:90:bb:6b:ca: 96:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.20.68.0/22 IPv6: 2a04:e00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39855 Signature Algorithm: sha256WithRSAEncryption 92:e4:85:0c:a3:7c:d8:9d:4f:03:bc:03:9c:5a:25:b6:33:b9: ae:bc:46:b9:d7:b0:59:97:b9:36:3a:1a:d1:b8:a4:72:70:d5: 80:cc:25:cf:a1:0c:3e:42:5c:94:4a:3a:1e:3b:37:6a:c5:21: 45:86:06:7f:5d:b9:52:00:9e:8c:30:c6:45:95:6f:c9:de:ab: 7a:76:91:a8:f1:63:7a:67:0a:9a:db:86:fa:ad:93:b6:72:37: 13:06:94:9f:90:b7:79:85:5e:4f:33:48:84:ea:54:00:1f:cf: 9f:47:a2:e6:9b:b3:d5:44:02:db:92:f5:0d:24:61:e3:f0:7a: 33:c5:94:01:08:4c:a4:7b:44:5c:4b:97:41:f5:0a:56:4f:15: dd:aa:c4:ff:28:87:1b:87:b0:0a:fe:d4:c4:62:bb:aa:38:dd: b0:b2:2e:06:c7:ae:3d:b1:06:4c:6e:85:76:1f:29:82:19:cd: ac:66:cb:1e:1b:ad:07:98:c1:23:b6:ff:5e:89:2c:3a:e2:c7: 02:ff:5e:a5:56:52:c0:86:bb:1b:3e:5c:b5:8d:96:46:04:8e: 98:de:da:63:9b:9e:a8:0e:0b:6a:8f:ae:19:20:23:d7:dd:3e: c7:17:b6:28:1a:23:59:f3:cf:ad:ee:66:91:02:5a:6a:76:e2: c4:d1:53:d5 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9yl8RntUWMfq8l1wXa9LJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTZiOTEyYjRhNWEwYzc3MDNiNWNhNThiMTg2NzQxZTBkNTMzNWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NZCj8NBQ1/DCKyWD7v55XNtumNn J0h03GJ5xNINscjm91bCzmLTO0BSf+FMs/7agkOx9Yt01VQpZo/BjsQOkTYj7Te+ aCz0c9jARBWceCgfyIIJRd0fubgXdRu/41k9ZQZJtsM7pSGBsNLzrDVwVxvF1pF2 5h9R4VWZcf4vWaTou+4+eVE4utMqvWc+w2GqE2f8wyuO0iWMZZAmOBJ4O0G+yCoT Ao1Q0lUlEuNV/RvTRuphFaXvoq/mMNcPrqT3zMRKcboH4Luy1v7pDghgxQZB+UkH scLt1kdmSay1Yg7YrWONL8ZtsjCiS1ANEvDM0qht1pCe4UWrV5C7a8qWEQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOlrkStKWgx3A7XKWLGGdB4NUzW0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5LzJmMzM4 My1kYjc5LTQ0YzYtYmI2Yi1iNTQ2MTUwZmRjMDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvMmYzMzgz LWRiNzktNDRjNi1iYjZiLWI1NDYxNTBmZGMwNC8xLzZXdVJLMHBhREhjRHRjcFlz WVowSGcxVE5iUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuRREMA0EAgACMAcDBQMqBA4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCbrzANBgkqhkiG9w0BAQsFAAOCAQEAkuSFDKN82J1P A7wDnFoltjO5rrxGudewWZe5Njoa0bikcnDVgMwlz6EMPkJclEo6Hjs3asUhRYYG f125UgCejDDGRZVvyd6renaRqPFjemcKmtuG+q2TtnI3EwaUn5C3eYVeTzNIhOpU AB/Pn0ei5puz1UQC25L1DSRh4/B6M8WUAQhMpHtEXEuXQfUKVk8V3arE/yiHG4ew Cv7UxGK7qjjdsLIuBseuPbEGTG6Fdh8pghnNrGbLHhutB5jBI7b/XoksOuLHAv9e pVZSwIa7Gz5ctY2WRgSOmN7aY5ueqA4Lao+uGSAj190+xxe2KBojWfPPre5mkQJa anbixNFT1Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:52 2026 by rpki-client