This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer File: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer (raw, json) Hash identifier: ZuBQPy0kA4KOANjYeeAfGz929bwMOsrZdwZAj1kBxBM= Subject key identifier: E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F831DEFBB1F4C9A758776283C5F2E70 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204654 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:1d:ef:bb:1f:4c:9a:75:87:76:28:3c:5f:2e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e972a6c2ebea46413072f90dd526d78f1102f4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ef:b8:76:75:3f:68:c6:28:71:f3:37:72:69: 61:cd:16:22:45:11:98:bd:a6:c5:a7:e0:a8:64:82: 15:50:1c:84:0a:bb:5a:36:36:fb:ea:ed:1d:11:63: 32:f0:b9:33:90:3e:e8:c6:59:e8:01:f5:d8:fa:90: 5c:62:56:9f:f6:8b:0b:ec:97:98:b2:27:b1:b8:dc: 51:35:87:9f:38:50:2d:21:b3:c9:62:8c:cf:a5:f3: 3d:cd:93:1e:50:11:55:dd:d0:5f:0e:5c:fe:51:6d: c2:9a:87:c1:17:c1:fd:90:d8:72:ae:0c:fe:0f:ee: 75:70:73:03:3c:04:94:a5:75:4d:26:57:e9:40:82: 21:97:01:a9:23:5e:4a:b1:0a:80:74:70:22:24:09: 07:21:2d:9d:64:e6:89:31:0c:14:15:77:30:36:73: 3b:89:2f:42:41:6e:f8:8b:12:79:e1:be:e0:74:81: 53:34:b2:dd:44:97:97:58:91:94:4c:25:22:38:b8: a9:6d:5a:b2:72:00:62:43:8f:e8:54:10:3d:51:f5: 2a:bc:f9:dc:39:f7:f0:ae:da:7e:65:51:71:e2:47: 79:ea:d2:22:96:0d:13:57:77:2f:c2:d5:31:74:51: 19:ad:94:60:51:0d:78:5f:fe:fb:69:11:16:cc:e3: 12:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204654 Signature Algorithm: sha256WithRSAEncryption 80:b2:94:c9:56:0e:f3:ab:a8:6b:2a:53:6a:89:d2:7f:e3:0c: 0c:b6:8a:28:d6:0a:b7:6b:13:99:a5:47:92:98:32:e9:6a:de: ef:1c:0d:a0:45:99:71:c2:0a:02:aa:bc:97:c4:db:ab:94:c5: ea:9f:de:aa:df:2c:a8:ca:7d:77:69:1c:ad:5b:6c:0a:1d:dd: ec:e9:d5:9d:b0:64:f5:d8:9a:29:06:11:25:7d:50:e2:fb:ed: 5e:a8:0a:31:ef:4d:e3:22:79:af:70:f7:e6:75:b3:8e:8a:e4: 87:e3:e9:e1:6e:3a:46:80:c3:fc:dd:d8:f0:b4:d4:d9:59:6e: 51:b3:31:4b:12:da:b8:cc:73:9c:6d:c1:e4:3a:9e:00:f1:8d: c5:55:48:87:b7:c3:46:38:41:e3:84:76:c6:1e:34:21:bc:bb: ab:d6:32:cc:64:a3:f3:31:54:27:41:52:19:4d:bd:1a:eb:60: db:4a:7f:78:d2:3d:cb:80:40:2b:ea:70:73:1b:4f:4a:68:28: 46:57:14:9e:6f:c3:bb:f3:6f:23:d7:06:3d:53:e0:65:3f:83: 74:18:13:4b:50:90:1a:55:03:d1:f0:90:d4:a6:73:b3:e8:e7: a3:af:bc:a3:f1:1c:54:8d:4e:b3:fc:64:6e:82:fc:0f:c4:eb: 64:23:64:18 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/gx3vux9MmnWHdig8Xy5wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTcyYTZjMmViZWE0NjQxMzA3MmY5MGRkNTI2ZDc4ZjExMDJmNGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm++4dnU/aMYocfM3cmlhzRYiRRGY vabFp+CoZIIVUByECrtaNjb76u0dEWMy8LkzkD7oxlnoAfXY+pBcYlaf9osL7JeY siexuNxRNYefOFAtIbPJYozPpfM9zZMeUBFV3dBfDlz+UW3CmofBF8H9kNhyrgz+ D+51cHMDPASUpXVNJlfpQIIhlwGpI15KsQqAdHAiJAkHIS2dZOaJMQwUFXcwNnM7 iS9CQW74ixJ54b7gdIFTNLLdRJeXWJGUTCUiOLipbVqycgBiQ4/oVBA9UfUqvPnc Offwrtp+ZVFx4kd56tIilg0TV3cvwtUxdFEZrZRgUQ14X/77aREWzOMSrwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFOlypsLr6kZBMHL5DdUm148RAvTyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhL2I3NjI4 ZC00MjZjLTQ4ODktYTAwYy00Zjk3NGM5Nzc5NDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvYjc2Mjhk LTQyNmMtNDg4OS1hMDBjLTRmOTc0Yzk3Nzk0NS8xLzZYS213dXZxUmtFd2N2a04x U2JYanhFQzlQSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMfbjANBgkqhkiG9w0BAQsFAAOCAQEAgLKUyVYO86uo aypTaonSf+MMDLaKKNYKt2sTmaVHkpgy6Wre7xwNoEWZccIKAqq8l8Tbq5TF6p/e qt8sqMp9d2kcrVtsCh3d7OnVnbBk9diaKQYRJX1Q4vvtXqgKMe9N4yJ5r3D35nWz jorkh+Pp4W46RoDD/N3Y8LTU2VluUbMxSxLauMxznG3B5DqeAPGNxVVIh7fDRjhB 44R2xh40Iby7q9YyzGSj8zFUJ0FSGU29Gutg20p/eNI9y4BAK+pwcxtPSmgoRlcU nm/Du/NvI9cGPVPgZT+DdBgTS1CQGlUD0fCQ1KZzs+jno6+8o/EcVI1Os/xkboL8 D8TrZCNkGA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:33 2026 by rpki-client