This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer File: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer (raw, json) Hash identifier: UeAlBzNeh9uqa5HpVK7RZHcO3AHPLLrO3uPHxwD9DRs= Subject key identifier: EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F13A198FD22B1228A907DE8503461B0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.36.21.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:a1:98:fd:22:b1:22:8a:90:7d:e8:50:34:61:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea7651c0f1bf648ec64952e8084574b900f08a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ba:8e:fc:c6:a2:44:36:3b:33:13:b7:cd:21: f1:c0:7b:a6:0a:40:fa:82:2a:63:7b:7e:1f:95:63: a3:08:6b:79:bb:65:88:5f:03:10:06:bd:7e:42:e5: da:af:0c:33:53:58:69:ff:4f:77:4e:dd:97:ea:02: 58:a1:9e:a6:7a:c2:dd:f9:03:a5:77:d3:92:ea:11: 69:6d:eb:4e:91:a5:80:dd:fc:dd:c2:64:b2:4d:1b: e4:7a:0c:27:42:d1:ee:a6:37:71:65:fd:2e:94:c5: a6:a4:f4:5b:90:1f:fa:a9:db:2b:b1:9c:12:19:3e: 4f:67:1d:32:ac:88:a7:20:18:29:94:ed:64:8a:c5: 06:8f:d5:50:fa:d7:e9:b8:0d:ef:6b:9c:ae:0c:0b: a5:e8:aa:00:c3:32:b2:86:b1:95:96:2d:06:72:93: cb:0c:b4:32:bb:a7:d1:8c:7f:9a:c1:72:6c:4e:5c: 8b:ce:7f:94:60:23:ec:ee:8f:6f:a2:98:0a:3d:78: 26:6a:14:cc:0a:f9:b2:4d:95:a9:ef:56:24:cd:c2: 99:17:37:92:e5:51:7a:b3:8d:1f:ae:7e:3a:a3:ee: c0:dc:92:ad:9b:56:8a:03:c6:8f:7a:c3:80:2d:99: c5:64:a3:b9:5a:e5:ef:14:41:fa:eb:6c:59:ca:76: 49:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.36.21.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:46:80:32:52:60:c4:7e:b2:f9:79:ff:7c:82:79:2f:58:9a: 88:05:01:73:03:79:6c:68:0f:45:c9:84:a2:ed:c8:e4:a7:8d: f5:7e:4b:10:f9:9d:62:5c:cf:68:db:4d:c4:c8:26:d0:25:a2: 7f:b8:49:be:4c:2e:89:28:1a:2c:c1:a7:7c:62:69:ce:dd:fa: 79:2c:73:1b:7a:41:70:f7:31:da:48:76:04:18:86:db:ae:97: 78:3a:dc:06:05:c2:65:94:c5:f8:98:98:e1:89:27:f1:21:85: 92:90:eb:86:7f:01:d5:2c:f0:f8:14:d2:2a:41:d3:95:5f:a1: 1f:61:ea:20:5b:fb:2d:ec:90:c2:e7:6b:4c:c3:a4:ba:26:15: 5d:cf:9e:ff:3c:ee:8a:ca:1a:76:04:88:19:9a:d1:51:bd:36: 1b:37:c7:28:b0:af:1b:7f:e1:04:bb:6d:24:64:92:e8:38:a3: 91:80:fe:cb:f9:36:e5:8b:41:1e:45:3f:bb:01:88:9e:54:d6: 60:5c:93:1b:12:98:ef:fc:c2:a0:9b:f0:d9:f8:f5:6f:53:0b: 13:19:bb:10:d6:5e:f0:2a:5b:4e:c1:39:eb:de:83:85:c0:d7: 9f:cf:fc:68:f8:e1:d4:1f:39:2d:6a:bc:98:98:74:77:cf:bc: 5e:7a:40:c5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/E6GY/SKxIoqQfehQNGGwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTc2NTFjMGYxYmY2NDhlYzY0OTUyZTgwODQ1NzRiOTAwZjA4YTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLqO/MaiRDY7MxO3zSHxwHumCkD6 gipje34flWOjCGt5u2WIXwMQBr1+QuXarwwzU1hp/093Tt2X6gJYoZ6mesLd+QOl d9OS6hFpbetOkaWA3fzdwmSyTRvkegwnQtHupjdxZf0ulMWmpPRbkB/6qdsrsZwS GT5PZx0yrIinIBgplO1kisUGj9VQ+tfpuA3va5yuDAul6KoAwzKyhrGVli0GcpPL DLQyu6fRjH+awXJsTlyLzn+UYCPs7o9vopgKPXgmahTMCvmyTZWp71YkzcKZFzeS 5VF6s40frn46o+7A3JKtm1aKA8aPesOALZnFZKO5WuXvFEH662xZynZJswIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFOp2UcDxv2SOxklS6AhFdLkA8IoXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhLzRkMDEw Ni1jMWVkLTRmZjEtYWJkNi02MGRlYzk3ZDY3ODMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvNGQwMTA2 LWMxZWQtNGZmMS1hYmQ2LTYwZGVjOTdkNjc4My8xLzZuWlJ3UEdfWkk3R1NWTG9D RVYwdVFEd2loYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwiQVMA0GCSqGSIb3DQEBCwUAA4IBAQA6RoAy UmDEfrL5ef98gnkvWJqIBQFzA3lsaA9FyYSi7cjkp431fksQ+Z1iXM9o203EyCbQ JaJ/uEm+TC6JKBoswad8YmnO3fp5LHMbekFw9zHaSHYEGIbbrpd4OtwGBcJllMX4 mJjhiSfxIYWSkOuGfwHVLPD4FNIqQdOVX6EfYeogW/st7JDC52tMw6S6JhVdz57/ PO6Kyhp2BIgZmtFRvTYbN8cosK8bf+EEu20kZJLoOKORgP7L+Tbli0EeRT+7AYie VNZgXJMbEpjv/MKgm/DZ+PVvUwsTGbsQ1l7wKltOwTnr3oOFwNefz/xo+OHUHzkt aryYmHR3z7xeekDF -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:06 2026 by rpki-client