This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer File: 6laHr9YhtSqXTNOvC-iiWmcRhtI.cer (raw, json) Hash identifier: cqXPvpyrfzY/yhKx4EYyxR5sB6Fl8gO88FzIfaoThIk= Subject key identifier: EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3DCB2A663B9ED2EE10DFC88CE3988 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48138 IP: 91.209.28.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:dc:b2:a6:63:b9:ed:2e:e1:0d:fc:88:ce:39:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea5687afd621b52a974cd3af0be8a25a671186d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ce:a7:76:3c:5b:76:f4:4e:69:d4:36:6e:38: bd:31:50:70:20:d1:d9:79:62:c5:7f:4d:e1:80:f5: 0c:5d:2e:7d:3b:9a:66:4f:3d:f4:47:49:98:63:08: ba:b8:65:0e:42:c6:3b:f0:a5:1d:f1:78:0d:ab:65: fb:a3:cf:e3:1e:a5:cd:dd:94:d3:44:bc:59:67:44: 67:02:62:b4:f7:a4:3b:1e:54:fd:2e:9e:f3:98:41: f5:9e:5a:6a:35:0e:8e:0f:12:ea:a5:3b:af:c3:e6: b1:df:e5:5a:b2:14:60:29:2d:69:54:7e:df:6d:a0: c8:cf:b8:80:c6:74:85:31:c0:ef:6b:f0:c9:3b:3e: 1b:18:41:73:41:d6:a5:7f:00:b3:2f:0c:16:2a:5f: ad:44:79:46:f4:f1:39:32:15:42:ee:e9:16:97:9e: 4e:25:10:05:cf:00:78:9d:e6:a8:7b:f0:cf:38:7f: 8b:ac:5f:d7:e9:65:b9:96:3e:a3:18:8d:51:73:83: bd:24:8e:d4:ae:8d:3a:84:d1:b0:9a:5c:fa:68:5f: 4a:bf:b5:7b:00:a7:a8:5f:d1:70:81:d5:83:a3:7b: 84:bb:fa:28:f8:bd:c8:ca:32:84:97:15:e8:bb:95: 65:5a:d3:6d:32:76:24:9b:fd:a1:49:dc:88:fc:18: 49:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.28.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48138 Signature Algorithm: sha256WithRSAEncryption 4d:1d:53:1d:2a:42:31:fe:8a:38:46:18:c4:af:e3:c7:02:97: 2a:84:1a:72:1b:ce:ad:e1:f8:5b:07:78:8d:c7:d2:06:0d:3a: 0b:d5:23:40:a1:2e:4e:a8:60:1a:bf:9b:e6:9e:64:eb:4b:0d: d8:85:23:bd:65:c3:b1:ad:80:b9:37:59:44:fd:cb:ac:72:8e: 9a:fd:65:0e:a0:ef:ba:2a:cf:15:1d:7e:b7:f9:e3:3c:af:a2: b4:bd:f0:cf:bf:e1:82:8c:1d:b0:10:3a:a2:9a:b1:39:cd:15: e6:eb:d7:fb:26:82:86:22:15:67:a7:47:56:98:eb:5e:ec:b2: 22:d5:70:f9:b0:87:c0:30:bf:0f:22:78:c7:81:2e:c4:e9:d6: d6:1f:a3:d0:d5:2b:0b:ba:ae:28:cf:59:b0:e1:f3:06:40:c5: b4:b3:33:7b:23:51:6a:39:10:ac:6a:9b:8d:f8:7c:f7:62:c8: d0:d5:36:da:d9:23:bc:4f:36:89:fc:88:7b:8d:1d:05:ad:55: 4e:1f:53:4c:3a:23:6e:1d:26:39:f1:b7:5a:9a:d9:33:4f:93: da:d1:19:cb:62:ce:06:c6:9f:fe:02:d9:5e:18:d6:78:bb:bc: 51:8c:18:19:62:f8:c7:5a:51:95:2a:31:3c:20:aa:a4:27:63: 54:3d:27:ad -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7o9yypmO57S7hDfyIzjmIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTU2ODdhZmQ2MjFiNTJhOTc0Y2QzYWYwYmU4YTI1YTY3MTE4NmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s6ndjxbdvROadQ2bji9MVBwINHZ eWLFf03hgPUMXS59O5pmTz30R0mYYwi6uGUOQsY78KUd8XgNq2X7o8/jHqXN3ZTT RLxZZ0RnAmK096Q7HlT9Lp7zmEH1nlpqNQ6ODxLqpTuvw+ax3+VashRgKS1pVH7f baDIz7iAxnSFMcDva/DJOz4bGEFzQdalfwCzLwwWKl+tRHlG9PE5MhVC7ukWl55O JRAFzwB4neaoe/DPOH+LrF/X6WW5lj6jGI1Rc4O9JI7Uro06hNGwmlz6aF9Kv7V7 AKeoX9FwgdWDo3uEu/oo+L3IyjKElxXou5VlWtNtMnYkm/2hSdyI/BhJ5QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOpWh6/WIbUql0zTrwvoolpnEYbSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzZiMmRh Mi0zNTk2LTQ3ZmYtOWJhNS1iMjM4NTZhMWE4MDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvNmIyZGEy LTM1OTYtNDdmZi05YmE1LWIyMzg1NmExYTgwMy8xLzZsYUhyOVlodFNxWFROT3ZD LWlpV21jUmh0SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9EcMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC8CjANBgkqhkiG9w0BAQsFAAOCAQEATR1THSpCMf6KOEYYxK/jxwKXKoQachvO reH4Wwd4jcfSBg06C9UjQKEuTqhgGr+b5p5k60sN2IUjvWXDsa2AuTdZRP3LrHKO mv1lDqDvuirPFR1+t/njPK+itL3wz7/hgowdsBA6opqxOc0V5uvX+yaChiIVZ6dH VpjrXuyyItVw+bCHwDC/DyJ4x4EuxOnW1h+j0NUrC7quKM9ZsOHzBkDFtLMzeyNR ajkQrGqbjfh892LI0NU22tkjvE82ifyIe40dBa1VTh9TTDojbh0mOfG3WprZM0+T 2tEZy2LOBsaf/gLZXhjWeLu8UYwYGWL4x1pRlSoxPCCqpCdjVD0nrQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:00 2026 by rpki-client