This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer File: 6fxsgWY89vzpLoPl1mKLwOtqlNI.cer (raw, json) Hash identifier: jfuXnguZmEaZ20ax07dXkudRyOkLNvp4SrgfZOT1R2I= Subject key identifier: E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F139C46300029EBA02A3183ACF31857 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57988 IP: 91.237.54.0/23 IP: 176.111.248.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:9c:46:30:00:29:eb:a0:2a:31:83:ac:f3:18:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:18:16:4a:14:fd:85:b2:eb:f6:38:5e:94:98: b0:23:d0:f4:11:57:60:ab:7f:26:fa:9e:f0:ec:ab: 7c:eb:99:5e:cb:f2:21:13:5d:0a:a1:92:26:8d:10: 47:6a:db:f1:da:a8:f2:88:23:fd:e6:52:b8:d4:0d: d9:7b:4c:b9:08:a9:8a:f6:9a:d2:fc:39:79:b6:99: 2f:5c:db:3b:c2:9e:f7:78:ad:9b:fd:e2:d8:d1:c2: ab:34:ba:40:33:e2:26:c2:dd:dc:7d:fb:02:97:ba: 84:5f:a2:dd:a8:5d:f6:38:20:05:33:05:a5:e4:ea: e2:e1:a1:03:13:04:ed:44:79:67:64:76:2b:30:63: aa:ed:b3:4c:2d:3d:5d:ea:54:ba:a7:09:e7:50:c5: bb:87:e9:5b:10:43:3b:9d:ad:a4:9d:d4:5e:c2:3b: ce:67:9c:60:b3:cc:df:5b:68:2d:5f:4f:0b:17:67: 04:33:37:c1:0a:6f:f3:2d:86:db:60:be:62:30:5e: 16:ac:bc:ff:38:93:53:83:18:31:8d:6c:ce:e8:9f: 2c:cf:56:86:c3:95:de:ea:08:45:df:aa:1e:75:c0: 07:a4:03:10:97:d4:91:a9:2b:4e:1a:09:b6:16:3f: a1:60:0c:72:70:5c:ff:46:14:3c:7a:ed:6c:3c:2e: 31:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.237.54.0/23 176.111.248.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57988 Signature Algorithm: sha256WithRSAEncryption 30:db:09:9c:1b:51:84:d2:02:df:a4:94:b1:99:3b:59:f8:8d: f9:3a:ab:c1:ec:cf:13:41:e0:08:4f:dc:eb:db:fd:4c:26:f8: 3d:4f:97:91:6e:e8:f1:79:bd:8e:d2:9e:3b:85:49:44:f2:d5: 1a:3d:4d:14:66:f2:c3:29:63:41:8e:0a:f1:f6:e6:e0:8d:4a: dc:b9:fe:0e:d3:3f:22:63:b5:a5:83:62:ae:12:b3:1f:3b:2a: 51:a4:87:9e:06:d5:99:76:ec:11:41:83:ca:26:df:7e:cd:ee: 4a:cb:4d:3a:56:a9:ef:f7:f0:84:15:ed:54:c8:e9:7f:39:f5: 84:d9:c1:d4:c1:ad:d7:59:ea:0c:90:32:8b:a8:a9:f6:21:f8: 91:38:80:69:d7:22:5b:bb:88:3c:75:fc:36:c0:30:46:b3:2a: 86:4f:ca:47:b3:34:db:63:b9:39:a9:a3:e8:b5:2c:69:50:ec: a8:20:9a:48:c0:46:73:4f:ca:64:3c:94:a6:f3:6a:e6:8a:21: 49:53:43:6d:b1:45:98:8e:56:97:f5:ed:0e:d6:41:48:f7:ac: 1e:6d:16:9b:c9:a4:75:2f:f7:5a:6c:40:98:d7:44:ad:7d:8f: 44:5a:80:2b:45:30:92:ce:3a:b5:10:53:a9:bd:3a:05:90:c7: 0e:fc:b1:35 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt/E5xGMAAp66AqMYOs8xhXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWZjNmM4MTY2M2NmNmZjZTkyZTgzZTVkNjYyOGJjMGViNmE5NGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhgWShT9hbLr9jhelJiwI9D0EVdg q38m+p7w7Kt865ley/IhE10KoZImjRBHatvx2qjyiCP95lK41A3Ze0y5CKmK9prS /Dl5tpkvXNs7wp73eK2b/eLY0cKrNLpAM+Imwt3cffsCl7qEX6LdqF32OCAFMwWl 5Ori4aEDEwTtRHlnZHYrMGOq7bNMLT1d6lS6pwnnUMW7h+lbEEM7na2kndRewjvO Z5xgs8zfW2gtX08LF2cEMzfBCm/zLYbbYL5iMF4WrLz/OJNTgxgxjWzO6J8sz1aG w5Xe6ghF36oedcAHpAMQl9SRqStOGgm2Fj+hYAxycFz/RhQ8eu1sPC4x6QIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFOn8bIFmPPb86S6D5dZii8DrapTSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzRiOGNj NC01ZmMyLTRmMjYtODA0NS01MGVmNzI2YTkxMzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNGI4Y2M0 LTVmYzItNGYyNi04MDQ1LTUwZWY3MjZhOTEzNi8xLzZmeHNnV1k4OXZ6cExvUGwx bUtMd090cWxOSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBW+02AwQDsG/4MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDihDANBgkqhkiG9w0BAQsFAAOCAQEAMNsJnBtRhNIC36SUsZk7WfiN +TqrwezPE0HgCE/c69v9TCb4PU+XkW7o8Xm9jtKeO4VJRPLVGj1NFGbywyljQY4K 8fbm4I1K3Ln+DtM/ImO1pYNirhKzHzsqUaSHngbVmXbsEUGDyibffs3uSstNOlap 7/fwhBXtVMjpfzn1hNnB1MGt11nqDJAyi6ip9iH4kTiAadciW7uIPHX8NsAwRrMq hk/KR7M022O5Oamj6LUsaVDsqCCaSMBGc0/KZDyUpvNq5oohSVNDbbFFmI5Wl/Xt DtZBSPesHm0Wm8mkdS/3WmxAmNdErX2PRFqAK0Uwks46tRBTqb06BZDHDvyxNQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:34 2026 by rpki-client