This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.cer File: 6YD7lTCjb_e3Qw1Q1EuPttbcqTc.cer (raw, json) Hash identifier: 1BxzY/FQOW3QYy932FOu0I7j2n7UQ48NoynmBMzaD4E= Subject key identifier: E9:80:FB:95:30:A3:6F:F7:B7:43:0D:50:D4:4B:8F:B6:D6:DC:A9:37 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6FE2C437C49E5B5185ED207991406 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 30790 IP: 194.54.184.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fe:2c:43:7c:49:e5:b5:18:5e:d2:07:99:14:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e980fb9530a36ff7b7430d50d44b8fb6d6dca937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:29:ca:00:33:c0:bb:68:8c:e8:42:7b:9a:4f: 5e:21:65:af:ae:d5:1a:9e:fb:f5:2f:d6:83:37:1b: 5c:cd:58:08:99:c0:14:3b:46:2d:2c:df:1b:b7:0e: a3:bb:4c:a8:0d:b2:a0:36:83:fd:41:68:df:dd:2d: 86:69:af:2b:4b:8b:90:7e:36:e2:5d:06:43:ba:7e: 8c:1b:4e:1d:f3:35:1b:7a:f3:72:50:43:90:78:c0: 89:36:b7:4c:6c:93:bb:45:14:77:46:ef:76:7b:fa: 51:e2:ca:09:d5:90:ed:9c:ff:7f:c6:0a:c4:8b:3f: f5:7e:62:d4:3d:f8:71:9d:f5:3d:fc:76:ff:55:d2: 74:cc:4d:65:f2:c7:e8:89:9e:4c:df:1a:ab:54:6a: a5:cc:ba:6a:d8:38:f2:22:4c:0b:ea:67:99:aa:5e: 5e:9c:63:91:13:44:c4:c8:fb:a7:3a:d3:93:da:db: 3d:2a:ee:52:bf:80:e5:03:5c:7c:ad:67:ea:59:82: 31:23:40:bc:30:b8:b7:d0:b9:94:63:9f:7f:fe:0b: 82:58:a7:78:52:8a:ef:ba:85:ed:64:71:a0:ee:57: 35:b0:7e:39:9f:a2:95:af:dd:a0:92:8d:62:7e:19: 24:6a:24:5e:80:2c:8a:30:14:83:b8:05:c7:a1:e3: 54:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:80:FB:95:30:A3:6F:F7:B7:43:0D:50:D4:4B:8F:B6:D6:DC:A9:37 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.54.184.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30790 Signature Algorithm: sha256WithRSAEncryption 19:d2:5a:7c:76:bb:92:db:69:09:38:c8:e6:4d:d2:73:78:1a: 00:9c:cf:83:cc:eb:bc:44:1f:fb:e8:ec:8c:e8:91:1f:36:e7: 40:54:84:ae:12:8a:70:df:ad:7e:cf:a0:b6:e0:ff:2d:07:f7: ed:6e:33:8b:02:6a:9a:16:63:d7:63:2d:72:34:fd:16:86:1b: 6e:59:5a:b8:e3:24:51:14:b8:a8:45:fa:0a:3e:80:dc:4d:13: e6:c9:d4:1a:06:17:95:19:dd:b2:08:a2:f6:94:ad:9d:42:af: 93:10:11:d0:6e:cc:b8:63:df:9a:cd:92:31:26:a9:f2:3c:a7: b3:23:0c:2d:49:02:d4:e4:fc:b0:57:df:6e:0d:08:bf:8d:d3: 9d:4d:0d:60:0d:95:86:a6:e6:c6:14:77:30:5e:cf:e5:17:05: 20:27:60:0b:01:0b:56:2f:e1:f3:e4:c7:c3:37:b5:5f:ee:15: 67:d7:37:d5:09:17:1e:41:8f:6d:25:58:af:f9:41:c8:fe:c3: d2:b8:92:e7:4f:cf:df:61:f5:c2:59:5a:20:c5:b5:71:97:50: 0e:23:e9:77:c2:ba:5b:2a:f2:40:ef:46:5a:a9:30:73:b6:76: 86:30:aa:bd:f3:e8:62:59:51:73:e5:c8:2a:b7:99:c7:0a:bf: ea:ca:d3:fe -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt+pv4sQ3xJ5bUYXtIHmRQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTgwZmI5NTMwYTM2ZmY3Yjc0MzBkNTBkNDRiOGZiNmQ2ZGNhOTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1inKADPAu2iM6EJ7mk9eIWWvrtUa nvv1L9aDNxtczVgImcAUO0YtLN8btw6ju0yoDbKgNoP9QWjf3S2Gaa8rS4uQfjbi XQZDun6MG04d8zUbevNyUEOQeMCJNrdMbJO7RRR3Ru92e/pR4soJ1ZDtnP9/xgrE iz/1fmLUPfhxnfU9/Hb/VdJ0zE1l8sfoiZ5M3xqrVGqlzLpq2DjyIkwL6meZql5e nGORE0TEyPunOtOT2ts9Ku5Sv4DlA1x8rWfqWYIxI0C8MLi30LmUY59//guCWKd4 UorvuoXtZHGg7lc1sH45n6KVr92gko1ifhkkaiRegCyKMBSDuAXHoeNU9QIDAQAB o4ICnzCCApswHQYDVR0OBBYEFOmA+5Uwo2/3t0MNUNRLj7bW3Kk3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyLzQ1YTA0 Yy1jYjBkLTRjMGMtOGJmMS00OGYzOWZkZTBlZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvNDVhMDRj LWNiMGQtNGMwYy04YmYxLTQ4ZjM5ZmRlMGVlYS8xLzZZRDdsVENqYl9lM1F3MVEx RXVQdHRiY3FUYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwja4MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnhGMA0GCSqGSIb3DQEBCwUAA4IBAQAZ0lp8druS22kJOMjmTdJzeBoAnM+DzOu8 RB/76OyM6JEfNudAVISuEopw361+z6C24P8tB/ftbjOLAmqaFmPXYy1yNP0Whhtu WVq44yRRFLioRfoKPoDcTRPmydQaBheVGd2yCKL2lK2dQq+TEBHQbsy4Y9+azZIx JqnyPKezIwwtSQLU5PywV99uDQi/jdOdTQ1gDZWGpubGFHcwXs/lFwUgJ2ALAQtW L+Hz5MfDN7Vf7hVn1zfVCRceQY9tJViv+UHI/sPSuJLnT8/fYfXCWVogxbVxl1AO I+l3wrpbKvJA70ZaqTBztnaGMKq98+hiWVFz5cgqt5nHCr/qytP+ -----END CERTIFICATE-----Generated at Mon Feb 9 23:58:05 2026 by rpki-client