This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer File: 6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer (raw, json) Hash identifier: 9DqgIuqKt0haQMeKqEaVCjoW5KoBOWrXqoye6AGZrts= Subject key identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A101F7825430336A5A2C88D355C32A90E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 23 Oct 2025 08:11:29 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 50597 AS: 212692 IP: 37.98.224.0/21 IP: 85.113.90.0/23 IP: 85.194.196.0/22 IP: 109.205.112.0/21 IP: 185.76.32.0/22 IP: 2a05:55c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:10:1f:78:25:43:03:36:a5:a2:c8:8d:35:5c:32:a9:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Oct 23 08:11:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ebf760c05773c15d73676450344668fefb723447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1c:30:b1:c8:a9:9a:1e:5a:d7:dc:4e:c3:a3: fc:36:6e:6f:cc:73:ec:12:70:41:d5:b0:60:5f:d1: 19:34:5b:0b:7e:eb:67:24:56:df:94:3d:d4:d5:c6: 67:37:23:cd:63:f6:0a:cf:47:cf:6d:9f:80:66:72: 0a:0d:ea:1c:81:ed:cb:53:57:22:67:08:40:91:32: d1:dd:38:df:25:9f:63:f0:1a:7c:70:6c:b3:7d:41: 20:be:08:8a:e9:1b:79:45:bd:ba:77:24:28:2f:45: fb:10:a1:e3:64:4b:0b:f6:13:99:a3:50:e8:c1:19: be:64:ad:80:8b:36:01:e6:ea:76:30:ae:5e:e7:21: b0:c6:f3:c6:26:dd:8e:22:4b:44:9c:b3:f0:6b:13: 19:bb:4d:71:bb:26:e1:02:5a:4c:a4:53:a3:31:06: dd:13:5f:c1:f8:a8:49:57:15:97:f5:f8:92:ce:41: 38:d1:a3:47:fe:4a:de:d0:52:61:aa:59:04:27:fb: 70:29:1e:af:f7:37:4a:12:27:18:51:6a:b1:87:04: d5:03:f8:ec:32:3d:43:8d:58:36:d4:ff:2d:44:36: 7b:a5:2d:74:bf:54:21:fa:3c:1b:1d:2a:bb:95:7b: f6:e3:05:e6:63:60:ca:ad:97:d9:e8:0c:f7:9e:7d: fa:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.98.224.0/21 85.113.90.0/23 85.194.196.0/22 109.205.112.0/21 185.76.32.0/22 IPv6: 2a05:55c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50597 212692 Signature Algorithm: sha256WithRSAEncryption 7b:4e:db:ee:78:71:ae:a8:c7:4a:4b:e4:40:2f:c4:51:fa:c1: 95:52:13:cc:cd:24:a7:54:31:16:dd:69:ea:7e:51:5d:34:92: 29:bb:7f:87:05:7a:3e:92:cc:c6:b4:b3:0a:6e:09:d9:5e:6d: e0:c9:78:de:3b:c9:f3:d2:fe:71:fe:6d:6f:ba:cd:ed:96:3a: 24:3d:06:51:c5:a8:b0:97:a7:8d:2c:fc:02:4c:c2:dc:53:21: b3:ff:94:9a:57:17:97:48:75:87:65:95:9f:03:2c:6c:8e:1c: 53:5f:1a:6e:24:f5:ea:87:f4:d5:c8:17:97:30:7c:4d:79:61: b1:8f:09:8b:29:e2:17:77:12:11:a9:19:74:0d:83:c9:a7:75: 10:10:2f:9f:a6:23:6b:35:9b:4e:02:f9:c8:1b:db:74:71:ef: d7:c4:c0:f5:4a:0a:65:38:c6:49:59:d7:80:a2:2d:7c:6e:f6: 44:d9:d1:c1:b8:f8:fe:e3:bf:4a:20:b8:98:0a:77:03:de:07: f9:06:ba:b6:2a:e1:3a:09:a1:1d:82:db:fb:80:6b:9e:b6:95: 97:8f:ec:c6:1f:69:ae:15:19:68:c3:d7:53:86:6c:d6:61:5b: 21:8b:90:db:0d:75:ff:ae:59:63:22:12:d9:8a:4e:77:6b:a2: 62:01:a6:36 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZoQH3glQwM2paLIjTVcMqkOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMDIzMDgxMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmY3NjBjMDU3NzNjMTVkNzM2NzY0NTAzNDQ2NjhmZWZiNzIzNDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRwwscipmh5a19xOw6P8Nm5vzHPs EnBB1bBgX9EZNFsLfutnJFbflD3U1cZnNyPNY/YKz0fPbZ+AZnIKDeocge3LU1ci ZwhAkTLR3TjfJZ9j8Bp8cGyzfUEgvgiK6Rt5Rb26dyQoL0X7EKHjZEsL9hOZo1Do wRm+ZK2AizYB5up2MK5e5yGwxvPGJt2OIktEnLPwaxMZu01xuybhAlpMpFOjMQbd E1/B+KhJVxWX9fiSzkE40aNH/kre0FJhqlkEJ/twKR6v9zdKEicYUWqxhwTVA/js Mj1DjVg21P8tRDZ7pS10v1Qh+jwbHSq7lXv24wXmY2DKrZfZ6Az3nn36GQIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFOv3YMBXc8Fdc2dkUDRGaP77cjRHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzkzMWY4 MS1jNDA5LTRkM2EtOTVkZi00OTA5ODg5N2VlNGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvOTMxZjgx LWM0MDktNGQzYS05NWRmLTQ5MDk4ODk3ZWU0YS8xLzZfZGd3RmR6d1YxeloyUlFO RVpvX3Z0eU5FYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQDJWLgAwQBVXFaAwQCVcLEAwQDbc1wAwQCuUwg MA0EAgACMAcDBQMqBVXAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDFpQIDAz7U MA0GCSqGSIb3DQEBCwUAA4IBAQB7TtvueHGuqMdKS+RAL8RR+sGVUhPMzSSnVDEW 3WnqflFdNJIpu3+HBXo+kszGtLMKbgnZXm3gyXjeO8nz0v5x/m1vus3tljokPQZR xaiwl6eNLPwCTMLcUyGz/5SaVxeXSHWHZZWfAyxsjhxTXxpuJPXqh/TVyBeXMHxN eWGxjwmLKeIXdxIRqRl0DYPJp3UQEC+fpiNrNZtOAvnIG9t0ce/XxMD1SgplOMZJ WdeAoi18bvZE2dHBuPj+479KILiYCncD3gf5Brq2KuE6CaEdgtv7gGuetpWXj+zG H2muFRlow9dThmzWYVshi5DbDXX/rlljIhLZik53a6JiAaY2 -----END CERTIFICATE-----Generated at Fri Dec 5 23:08:00 2025 by rpki-client