This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer File: 6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer (raw, json) Hash identifier: dcud28+NZaF20BuCcdSSEOniGU8q6uVY9DeYSeHTdLU= Subject key identifier: EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDAC008880581C04A143E8AE4C7B6B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8523 IP: 80.76.144.0/20 IP: 164.40.176.0/21 IP: 2a00:1d28::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ac:00:88:80:58:1c:04:a1:43:e8:ae:4c:7b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea827b9556d540da536b8046c65ff95b06ee4963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:50:15:60:cb:25:16:ac:ed:26:5a:f3:1f:f7: 5d:60:6c:50:a2:aa:6f:24:71:88:f9:ef:a2:08:bc: af:68:67:07:f4:a0:93:18:ce:26:b0:5b:cc:98:55: 6a:73:c4:5c:a7:6d:71:a3:46:40:58:43:71:b3:be: 2e:90:05:dc:2d:d0:c3:47:df:28:0b:86:5f:28:c1: 57:74:c4:7e:79:85:9e:ef:52:0a:47:f1:33:ca:3e: 4f:8d:ba:9f:7a:62:a8:19:79:87:db:f1:56:df:c9: 3b:3f:3c:d6:8b:19:36:ed:4f:f6:50:e3:af:e9:ac: 42:cb:5a:15:83:df:bb:9a:bf:48:d9:54:ce:00:0b: 7b:e0:d2:55:9f:6e:d9:28:d9:a4:f4:60:00:da:ff: 97:c8:fc:99:c9:fe:12:f3:6d:9b:d3:45:3d:d2:d1: a8:4d:16:3f:9a:55:1c:0c:a2:ab:96:42:95:a3:08: b1:57:8b:6e:90:39:7b:3e:92:64:5b:16:0c:88:5e: d6:43:63:b1:29:f3:e8:f5:06:57:e5:06:42:66:71: a7:a9:99:15:2f:14:3f:36:d7:55:ea:6a:59:5e:06: b6:fe:35:94:9e:16:66:68:50:02:4f:f3:5c:2b:7f: b1:cf:dc:55:72:34:30:d7:5b:c6:15:55:2d:1c:83: 5f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.76.144.0/20 164.40.176.0/21 IPv6: 2a00:1d28::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8523 Signature Algorithm: sha256WithRSAEncryption 78:50:19:04:44:83:1f:a4:38:36:a3:0c:71:42:1e:f2:a7:8d: 0b:78:b6:a2:c4:43:a3:0c:d2:42:a0:c1:9a:86:5f:9a:d3:69: 05:db:3a:28:40:98:1e:1c:28:1a:6a:d2:b7:64:4a:45:5e:d8: 55:7b:68:d1:ed:6d:1d:9c:0e:11:d4:62:e0:d8:6c:d8:79:12: 0a:79:2b:39:8f:54:42:e1:64:e1:44:81:d7:0c:29:a6:44:6c: 69:fb:06:71:f5:89:13:87:ec:2d:8c:39:30:6d:37:de:f3:6d: 37:ea:0e:12:dd:5a:da:53:e4:f7:24:e1:c9:5b:8c:b5:c6:d3: 19:17:6c:c0:4d:98:cc:3b:24:fe:45:40:cb:50:e8:01:3a:98: 86:d2:f3:84:d6:40:73:d7:88:d5:60:a8:d2:4e:0a:d2:42:51: b3:8f:66:86:6a:07:8c:21:f1:cf:bb:9e:7d:23:f3:76:ef:5e: 80:ea:79:d7:ed:32:28:62:35:21:1a:3d:22:a0:4e:60:b0:65: 1d:07:3c:e8:af:15:40:94:ed:7b:22:66:78:cb:04:b8:f0:fe: 96:4b:81:c5:0e:fc:64:23:5b:92:ac:33:76:7c:c2:3d:be:7c: dd:e6:53:25:5f:09:1d:8c:7b:fb:a2:2b:62:98:4f:90:e1:72: 35:fb:f0:f5 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt87awAiIBYHAShQ+iuTHtrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTgyN2I5NTU2ZDU0MGRhNTM2YjgwNDZjNjVmZjk1YjA2ZWU0OTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1AVYMslFqztJlrzH/ddYGxQoqpv JHGI+e+iCLyvaGcH9KCTGM4msFvMmFVqc8Rcp21xo0ZAWENxs74ukAXcLdDDR98o C4ZfKMFXdMR+eYWe71IKR/Ezyj5PjbqfemKoGXmH2/FW38k7PzzWixk27U/2UOOv 6axCy1oVg9+7mr9I2VTOAAt74NJVn27ZKNmk9GAA2v+XyPyZyf4S822b00U90tGo TRY/mlUcDKKrlkKVowixV4tukDl7PpJkWxYMiF7WQ2OxKfPo9QZX5QZCZnGnqZkV LxQ/NtdV6mpZXga2/jWUnhZmaFACT/NcK3+xz9xVcjQw11vGFVUtHINfZwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFOqCe5VW1UDaU2uARsZf+VsG7kljMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljLzQwMTJh NC0zZDU4LTRkZDAtODBiNC1iZTMxN2I1MzFjMmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvNDAxMmE0 LTNkNTgtNGRkMC04MGI0LWJlMzE3YjUzMWMyZS8xLzZvSjdsVmJWUU5wVGE0Qkd4 bF81V3didVNXTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEUEyQAwQDpCiwMA0EAgACMAcDBQAqAB0oMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAiFLMA0GCSqGSIb3DQEBCwUAA4IBAQB4UBkE RIMfpDg2owxxQh7yp40LeLaixEOjDNJCoMGahl+a02kF2zooQJgeHCgaatK3ZEpF XthVe2jR7W0dnA4R1GLg2GzYeRIKeSs5j1RC4WThRIHXDCmmRGxp+wZx9YkTh+wt jDkwbTfe82036g4S3VraU+T3JOHJW4y1xtMZF2zATZjMOyT+RUDLUOgBOpiG0vOE 1kBz14jVYKjSTgrSQlGzj2aGageMIfHPu559I/N2716A6nnX7TIoYjUhGj0ioE5g sGUdBzzorxVAlO17ImZ4ywS48P6WS4HFDvxkI1uSrDN2fMI9vnzd5lMlXwkdjHv7 oitimE+Q4XI1+/D1 -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:30 2026 by rpki-client