This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer File: 6lg9YfLlemsW6ksanKJ7slDXSO8.cer (raw, json) Hash identifier: dBZcwnLwJp2f43cir1S12W5HrSxjSl8hmoRnt5iDXuk= Subject key identifier: EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BF98D2C41672C78251481B175DB4E7E6F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 09:05:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60295 IP: 193.25.172.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:8d:2c:41:67:2c:78:25:14:81:b1:75:db:4e:7e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 09:05:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1c:8d:a6:78:70:61:f2:e1:48:49:87:81:1f: 6e:dd:d9:a7:5d:12:8c:bc:49:fe:ab:05:83:dc:fb: 15:69:07:97:04:ce:5d:ba:48:e0:14:3f:14:9a:82: c6:8a:ce:3b:3c:4d:71:2d:bf:2c:e3:cf:f2:ac:08: d8:5f:4c:61:89:28:78:2f:c9:d5:63:f7:c0:e8:93: 4f:cf:83:61:38:f3:cb:0a:18:5d:a4:d8:6f:4f:14: 52:7c:b9:d4:00:68:f1:db:7f:b0:ea:66:b9:88:e2: 7b:54:8f:c4:fb:b9:a6:9d:74:17:5d:dc:ea:ba:8d: 8a:54:96:f7:41:be:f9:22:79:4c:57:3e:b8:34:61: 41:4a:7a:ac:ca:c1:5b:8f:b7:96:f4:dc:25:32:f6: 59:36:85:54:5b:34:5b:66:4e:c3:ef:97:47:a5:ea: 90:a6:80:22:73:cb:ee:6f:3a:41:a7:3f:f8:33:72: 82:5c:44:46:a5:1e:fd:46:a9:64:0f:16:4f:bf:11: fb:e3:8a:f4:36:ff:da:a8:be:e5:7d:43:93:ac:70: 20:9e:ac:a8:e1:f7:fd:e1:12:c5:56:7a:32:76:ab: c7:80:fd:91:f9:d4:41:fb:d4:e5:a9:65:d6:2d:2a: e9:0e:10:3d:53:bb:f7:e3:28:9f:98:48:c9:ab:fe: 5a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.25.172.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60295 Signature Algorithm: sha256WithRSAEncryption 40:a3:15:bc:76:83:3b:de:3f:66:bf:03:b2:0d:39:81:95:78: 4d:7c:68:8f:e7:43:d9:88:5f:bb:e8:28:49:74:64:70:f5:bd: f2:e0:eb:eb:be:85:c5:d5:27:07:9b:1a:cd:d0:b5:e9:2d:14: 81:40:f2:61:57:af:23:92:30:fb:5c:92:ff:0a:e8:82:ff:6f: 9a:01:43:17:32:9a:45:91:0c:2b:9c:d3:fe:25:55:3d:23:aa: 7d:de:43:f2:ce:5e:71:bd:b9:01:66:f9:ea:79:1e:53:59:1d: 8a:34:ae:3a:c1:61:1d:7b:36:ee:e8:a2:c9:44:f8:dd:d0:d3: 0d:d2:2d:73:7b:1e:d5:7f:e6:92:b8:40:f7:86:b9:10:19:4e: 96:f0:57:8a:84:72:e4:a3:ef:d6:f0:a6:9e:99:7f:35:95:ff: 80:aa:5b:7b:83:f4:d7:bf:30:99:35:27:b9:31:c3:01:48:da: f4:c8:bc:86:8f:61:86:ff:df:20:18:d2:6c:bf:69:27:bb:27: 82:c2:08:d4:f1:96:8f:5b:28:f5:5e:08:53:62:ec:cc:4a:06: fb:25:79:d7:1c:7a:fa:6f:1c:a9:bc:86:93:91:51:16:e6:bd: a8:b1:c8:e6:dc:8a:37:22:05:29:5a:1e:c7:f9:eb:a2:7c:06: a2:5a:fe:42 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZv5jSxBZyx4JRSBsXXbTn5vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MDkwNTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTU4M2Q2MWYyZTU3YTZiMTZlYTRiMWE5Y2EyN2JiMjUwZDc0OGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xyNpnhwYfLhSEmHgR9u3dmnXRKM vEn+qwWD3PsVaQeXBM5dukjgFD8UmoLGis47PE1xLb8s48/yrAjYX0xhiSh4L8nV Y/fA6JNPz4NhOPPLChhdpNhvTxRSfLnUAGjx23+w6ma5iOJ7VI/E+7mmnXQXXdzq uo2KVJb3Qb75InlMVz64NGFBSnqsysFbj7eW9NwlMvZZNoVUWzRbZk7D75dHpeqQ poAic8vubzpBpz/4M3KCXERGpR79RqlkDxZPvxH744r0Nv/aqL7lfUOTrHAgnqyo 4ff94RLFVnoydqvHgP2R+dRB+9TlqWXWLSrpDhA9U7v34yifmEjJq/5a+wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOpYPWHy5XprFupLGpyie7JQ10jvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzZmNTEy OC03Y2JhLTQ5YzUtOWIyNS05OWMxYjBjZmMzYTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvNmY1MTI4 LTdjYmEtNDljNS05YjI1LTk5YzFiMGNmYzNhOC8xLzZsZzlZZkxsZW1zVzZrc2Fu S0o3c2xEWFNPOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwRmsMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDrhzANBgkqhkiG9w0BAQsFAAOCAQEAQKMVvHaDO94/Zr8Dsg05gZV4TXxoj+dD 2Yhfu+goSXRkcPW98uDr676FxdUnB5sazdC16S0UgUDyYVevI5Iw+1yS/wrogv9v mgFDFzKaRZEMK5zT/iVVPSOqfd5D8s5ecb25AWb56nkeU1kdijSuOsFhHXs27uii yUT43dDTDdItc3se1X/mkrhA94a5EBlOlvBXioRy5KPv1vCmnpl/NZX/gKpbe4P0 178wmTUnuTHDAUja9Mi8ho9hhv/fIBjSbL9pJ7sngsII1PGWj1so9V4IU2LszEoG +yV51xx6+m8cqbyGk5FRFua9qLHI5tyKNyIFKVoex/nronwGolr+Qg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:51 2026 by rpki-client