This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer File: 6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer (raw, json) Hash identifier: bItCNRCyPVlcIIut7uP59H5NnhsDLi6MBymm5Efy3JU= Subject key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6E5B6F5DD77E5A9FE5A9B3CC8F306 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9125 AS: 48164 AS: 50781 AS: 52021 AS: 56681 IP: 5.172.32.0/21 IP: 89.23.64.0/19 IP: 91.193.75.0/24 IP: 92.42.248.0/21 IP: 93.93.192.0/21 IP: 95.140.112.0/20 IP: 109.111.224.0/19 IP: 178.254.128.0/18 IP: 185.157.44.0/22 IP: 193.104.68.0/24 IP: 217.169.208.0/20 IP: 2a02:b58::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e5:b6:f5:dd:77:e5:a9:fe:5a:9b:3c:c8:f3:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:eb:25:9c:1f:82:f0:3f:0d:e7:03:38:d6:18: 94:bf:44:d5:4b:c6:d1:3f:da:e6:54:a5:da:80:14: e4:6d:61:a1:ff:a0:c8:79:68:f0:aa:e5:29:18:ae: ed:8a:9b:66:6c:1a:e2:34:0e:4c:19:21:51:7e:50: e4:19:3d:48:2c:0c:01:ff:46:46:c3:9c:e4:c0:cb: 6e:24:fa:41:77:17:c3:36:75:e4:fa:2c:f2:e9:04: e2:88:90:53:cc:bb:e5:f9:7f:f9:2a:a6:da:a3:f1: 20:e1:e9:c0:42:c0:00:66:bb:5b:29:66:83:a3:b5: 4b:52:8b:09:ab:13:31:ca:06:e9:57:ad:93:bf:38: fc:d9:b1:7a:fa:3c:cb:b2:86:5f:8e:41:8e:74:c2: d4:35:39:3d:86:4c:22:29:04:71:f2:b3:98:9a:37: 1b:67:04:1b:ac:7a:e8:5b:50:b7:10:16:30:50:c9: 16:34:58:ff:34:23:34:7d:28:2d:70:75:e5:b1:ce: 77:47:27:4f:70:ef:63:a4:c1:f0:3b:72:01:13:3c: 04:b2:86:cc:23:1c:e2:3c:22:1c:ab:6e:67:2b:a6: 06:f5:e6:75:e2:ff:1a:19:5e:fd:fb:e2:8f:67:ec: 6d:54:e7:8c:da:8a:30:58:23:c9:54:8a:4b:b4:9b: 2f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.32.0/21 89.23.64.0/19 91.193.75.0/24 92.42.248.0/21 93.93.192.0/21 95.140.112.0/20 109.111.224.0/19 178.254.128.0/18 185.157.44.0/22 193.104.68.0/24 217.169.208.0/20 IPv6: 2a02:b58::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9125 48164 50781 52021 56681 Signature Algorithm: sha256WithRSAEncryption 27:66:ae:6a:0c:bf:fb:14:0b:f2:d3:f8:3d:4a:8d:8b:85:13: fd:21:ae:bc:85:ae:ca:d4:4c:0f:2d:48:b4:09:1d:bc:04:eb: f2:1a:b8:1a:40:50:09:02:0f:dc:c0:8a:42:df:0f:6e:1a:68: 28:7d:f5:ce:9c:45:13:f5:2d:08:8e:b1:94:8f:dc:17:69:d9: 11:96:ca:74:e8:bb:5b:6e:f8:72:a4:a6:9e:f0:3c:62:46:7b: 58:4a:90:98:f1:82:c9:5f:32:a9:b1:ee:56:19:47:ea:4f:ed: de:87:50:e6:49:7d:fd:f0:68:e2:7f:95:fa:10:96:54:29:02: 9e:9b:d9:25:08:8d:b2:e1:c6:46:7f:a4:6b:58:72:38:4f:aa: 2b:a5:a7:41:92:4a:38:44:ef:fa:15:30:1b:be:ee:c4:8c:66: 8e:61:81:81:8d:d2:6e:f4:7a:64:33:e9:d2:cc:2f:a3:17:d6: 49:68:b5:bc:f1:97:f8:67:e8:17:d1:c9:33:f2:25:e9:2a:61: c6:95:86:d9:51:29:d8:75:6b:e2:84:4a:2d:00:4b:ce:07:77: 2f:c1:75:0e:42:ca:5f:75:58:2d:21:bb:cd:ba:fe:4a:19:7a: e9:0f:e4:d2:50:7b:44:ec:95:8a:01:98:1b:0e:06:41:55:8f: 75:c5:ee:b7 -----BEGIN CERTIFICATE----- MIIF8jCCBNqgAwIBAgISAZt+puW29d135an+Wps8yPMGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTcxM2VmMjUyNzdlMTNkZDczZjQ0MTk2ZmRhNWNlYzBmZDljZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+slnB+C8D8N5wM41hiUv0TVS8bR P9rmVKXagBTkbWGh/6DIeWjwquUpGK7tiptmbBriNA5MGSFRflDkGT1ILAwB/0ZG w5zkwMtuJPpBdxfDNnXk+izy6QTiiJBTzLvl+X/5Kqbao/Eg4enAQsAAZrtbKWaD o7VLUosJqxMxygbpV62Tvzj82bF6+jzLsoZfjkGOdMLUNTk9hkwiKQRx8rOYmjcb ZwQbrHroW1C3EBYwUMkWNFj/NCM0fSgtcHXlsc53RydPcO9jpMHwO3IBEzwEsobM IxziPCIcq25nK6YG9eZ14v8aGV79++KPZ+xtVOeM2oowWCPJVIpLtJsvvQIDAQAB o4IC/jCCAvowHQYDVR0OBBYEFOlxPvJSd+E91z9EGW/aXOwP2c4WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1L2UxNzZl Yi01NmYyLTQ4MDctYjEwMS0wZjY2YzE4ODc5MTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvZTE3NmVi LTU2ZjItNDgwNy1iMTAxLTBmNjZjMTg4NzkxNi8xLzZYRS04bEozNFQzWFAwUVpi OXBjN0FfWnpoWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGoGCCsGAQUF BwEHAQH/BFswWTBIBAIAATBCAwQDBawgAwQFWRdAAwQAW8FLAwQDXCr4AwQDXV3A AwQEX4xwAwQFbW/gAwQGsv6AAwQCuZ0sAwQAwWhEAwQE2anQMA0EAgACMAcDBQAq AgtYMC0GCCsGAQUFBwEIAQH/BB4wHKAaMBgCAiOlAgMAvCQCAwDGXQIDAMs1AgMA 3WkwDQYJKoZIhvcNAQELBQADggEBACdmrmoMv/sUC/LT+D1KjYuFE/0hrryFrsrU TA8tSLQJHbwE6/IauBpAUAkCD9zAikLfD24aaCh99c6cRRP1LQiOsZSP3Bdp2RGW ynTou1tu+HKkpp7wPGJGe1hKkJjxgslfMqmx7lYZR+pP7d6HUOZJff3waOJ/lfoQ llQpAp6b2SUIjbLhxkZ/pGtYcjhPqiulp0GSSjhE7/oVMBu+7sSMZo5hgYGN0m70 emQz6dLML6MX1klotbzxl/hn6BfRyTPyJekqYcaVhtlRKdh1a+KESi0AS84Hdy/B dQ5Cyl91WC0hu826/koZeukP5NJQe0TslYoBmBsOBkFVj3XF7rc= -----END CERTIFICATE-----Generated at Tue Jan 20 22:03:03 2026 by rpki-client