This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer File: 6ZQF7o9djnZOkL1mvdHomsEoCeg.cer (raw, json) Hash identifier: heVHhCWSeI6u6VHOHmwXJBj6o5HfCHmKeVrx26jykvE= Subject key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA6CF2AE4C06F2FFB4B62AD1428F0C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31537 IP: 185.169.76.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:6c:f2:ae:4c:06:f2:ff:b4:b6:2a:d1:42:8f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f7:0f:e8:35:f3:ba:90:78:e6:fa:ad:20:a0: 99:6e:f6:6d:79:5a:65:81:60:a5:64:7d:76:c2:5f: c4:66:22:ef:09:a5:5b:ae:2c:b8:d7:23:1e:9c:7d: bf:8b:89:57:bc:01:b4:86:cc:0a:62:4f:79:a1:06: 2f:76:d5:ba:4d:f0:75:93:bc:f9:d8:66:23:8d:95: 51:9a:9d:da:27:5e:f6:68:5b:84:de:8a:53:58:7c: 54:20:80:c3:0e:75:ad:a8:67:06:76:11:bf:eb:2a: 1e:b3:1e:e7:7c:bc:7b:71:91:f4:2a:e3:ca:ca:d7: de:d3:b8:b4:a0:da:1c:8c:38:c4:b0:cf:fa:05:78: 6e:9e:ef:17:53:e2:54:ae:ab:d2:6f:f7:80:f2:e4: 0c:45:da:9f:03:b0:6f:56:da:99:4d:9f:86:e6:6f: 93:4b:0e:64:8c:5c:4d:ec:fa:44:8e:78:bb:43:74: d0:95:36:39:63:46:e2:94:25:63:eb:70:cd:10:fe: e4:30:0c:84:35:26:df:85:39:96:11:15:04:0a:53: b2:8f:9c:ae:2d:40:43:3e:58:28:a0:4a:e0:4d:9c: 9c:1e:39:c9:73:81:65:69:98:9e:91:e3:ac:fa:22: d3:7c:48:3a:e4:38:5a:6d:a6:1b:a5:ca:00:24:cf: 2f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.76.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31537 Signature Algorithm: sha256WithRSAEncryption 36:f5:39:23:14:b0:a3:bb:d6:cf:29:56:2e:fe:4a:26:57:1b: ed:52:62:5d:3a:d7:9c:ef:d7:29:ce:ab:b8:e5:47:43:a9:17: fc:4e:7c:89:72:41:cd:b8:b3:b5:d7:e0:42:e5:d1:7c:9d:8b: f5:e3:8e:64:bb:80:36:13:05:35:ca:1f:b3:d2:7f:61:f0:5c: 07:3c:ad:6b:46:de:b9:02:f9:c8:00:20:5f:d7:be:61:1a:cf: 28:81:73:63:5f:15:b3:bb:83:36:9a:c9:40:1d:26:fa:8a:d7: 06:bd:82:cb:61:1a:c8:88:b5:f6:e9:d5:a6:86:ee:88:33:7c: 91:b2:b2:3a:4b:a9:af:5d:cb:69:ea:55:66:a9:a6:2c:4f:dd: a7:dd:7a:11:de:f1:ac:7b:61:fe:07:fa:55:a0:1a:13:07:bf: 5a:d4:5b:ee:2e:56:97:b1:1b:b0:5f:2b:23:b0:eb:cf:f5:0e: 42:82:43:72:cf:a1:82:fa:c7:03:a1:db:9e:a8:59:24:ef:dc: 54:93:20:35:f4:6e:ba:de:ba:5d:d4:08:f8:d0:f3:89:23:65: 68:54:ef:f6:42:95:73:d9:cc:cc:dd:cf:9f:30:78:e8:f3:bb: 3b:f9:1d:e8:11:10:76:db:b2:28:b4:0f:e1:e6:cb:84:60:9b: e4:ea:d5:fb -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt9ymzyrkwG8v+0tirRQo8MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTk0MDVlZThmNWQ4ZTc2NGU5MGJkNjZiZGQxZTg5YWMxMjgwOWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PcP6DXzupB45vqtIKCZbvZteVpl gWClZH12wl/EZiLvCaVbriy41yMenH2/i4lXvAG0hswKYk95oQYvdtW6TfB1k7z5 2GYjjZVRmp3aJ172aFuE3opTWHxUIIDDDnWtqGcGdhG/6yoesx7nfLx7cZH0KuPK ytfe07i0oNocjDjEsM/6BXhunu8XU+JUrqvSb/eA8uQMRdqfA7BvVtqZTZ+G5m+T Sw5kjFxN7PpEjni7Q3TQlTY5Y0bilCVj63DNEP7kMAyENSbfhTmWERUEClOyj5yu LUBDPlgooErgTZycHjnJc4FlaZiekeOs+iLTfEg65DhabaYbpcoAJM8vyQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFOmUBe6PXY52TpC9Zr3R6JrBKAnoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzFiOTIw Mi00ODY5LTRkNDUtOTUyMS1lYjExYjQ5NTRmMzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvMWI5MjAy LTQ4NjktNGQ0NS05NTIxLWViMTFiNDk1NGYzMy8xLzZaUUY3bzlkam5aT2tMMW12 ZEhvbXNFb0NlZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAualMMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnsxMA0GCSqGSIb3DQEBCwUAA4IBAQA29TkjFLCju9bPKVYu/komVxvtUmJdOtec 79cpzqu45UdDqRf8TnyJckHNuLO11+BC5dF8nYv1445ku4A2EwU1yh+z0n9h8FwH PK1rRt65AvnIACBf175hGs8ogXNjXxWzu4M2mslAHSb6itcGvYLLYRrIiLX26dWm hu6IM3yRsrI6S6mvXctp6lVmqaYsT92n3XoR3vGse2H+B/pVoBoTB79a1FvuLlaX sRuwXysjsOvP9Q5CgkNyz6GC+scDodueqFkk79xUkyA19G663rpd1Aj40POJI2Vo VO/2QpVz2czM3c+fMHjo87s7+R3oERB227IotA/h5suEYJvk6tX7 -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:58 2026 by rpki-client