This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer File: 6s3B4kf6qVMYCCpKxe29gFEfjfc.cer (raw, json) Hash identifier: 1rjiJb2FfeqjQXHavaKT7ALjFi2lRy1v6T1J2Kv3aQQ= Subject key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15E918152F717D6E3B9D16FD887BD3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208002 IP: 104.247.160.0/19 IP: 185.73.84.0/24 IP: 185.73.128.0/22 IP: 185.137.212.0/22 IP: 2a03:a5a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e9:18:15:2f:71:7d:6e:3b:9d:16:fd:88:7b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:96:e5:5c:89:ee:3b:a4:1b:21:09:c7:65:77: 28:62:38:1a:e9:37:5d:ff:36:e4:17:a4:da:3f:ea: c3:07:cb:cb:1a:a0:2c:d5:5b:6f:e4:a6:15:d9:f0: a3:66:e5:7f:06:cb:18:42:8c:c8:b2:c1:aa:a2:d5: c9:d5:7e:c3:8e:c7:35:46:17:f9:f5:bf:79:51:3c: ab:32:9f:4b:11:92:de:c4:73:b9:ec:bb:77:98:57: d0:ee:53:cb:9e:ed:03:4d:80:20:cf:c1:ff:3d:a1: be:14:ea:f2:b5:74:78:42:0f:33:8a:73:92:52:08: 5d:94:ec:79:7a:1f:6a:82:8d:6a:10:6a:27:d5:05: d2:35:60:f1:10:5e:5d:2c:63:c6:e7:97:a5:c9:e8: b4:57:cc:50:21:44:89:24:04:84:55:55:e1:11:cd: 3f:21:2e:98:c5:47:5d:6f:ea:fe:0e:4a:d0:a7:1d: 44:9e:7b:91:86:75:57:36:6c:57:35:1e:67:16:4d: f0:5b:b2:cb:1c:48:02:41:90:62:23:cc:89:c9:49: 0a:ab:2d:87:55:79:06:06:df:68:ac:45:2b:6d:58: e1:1f:55:c0:78:76:cf:85:bb:42:46:b8:83:e3:60: 75:84:3d:4d:1c:3e:c2:42:25:ed:81:e7:c7:96:25: 14:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.247.160.0/19 185.73.84.0/24 185.73.128.0/22 185.137.212.0/22 IPv6: 2a03:a5a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208002 Signature Algorithm: sha256WithRSAEncryption 79:01:5f:f1:b8:fc:0d:b3:8d:0f:6c:f0:a4:41:69:4b:f9:e9: 87:81:df:df:86:df:37:b8:53:70:fd:39:de:58:3f:4a:f5:a8: ac:ea:51:af:22:b1:91:10:9d:7e:3d:10:b9:41:86:91:72:d8: 73:18:7c:38:58:fd:59:fc:af:3a:03:e7:8c:8f:25:e7:b7:2c: b8:b2:0c:18:86:ee:db:d4:17:31:fe:13:7d:4b:d3:98:91:ee: b4:9d:f9:55:de:da:7b:b3:22:d6:ff:79:de:7a:c0:7b:ed:47: 43:00:4d:a5:82:24:d6:29:e3:0d:45:12:a5:d7:38:95:c2:65: 10:6d:8e:78:2f:e1:d2:5f:9b:46:16:5c:11:04:31:92:8e:7f: 24:be:5a:50:f6:33:e0:04:43:7c:49:29:20:f3:34:40:43:54: da:be:3f:48:58:f7:c3:92:f6:cf:6a:60:fd:ed:ac:62:9f:d9: 91:a6:8c:73:1e:54:aa:33:51:31:50:de:61:f7:e7:da:c8:48: 49:9a:64:fa:a8:a9:6d:80:ba:82:e7:af:9b:60:b0:f2:e0:71: bc:4d:43:c5:4e:b6:7b:1b:05:f5:40:51:fd:17:35:4c:ef:3c: b3:f4:48:68:21:94:76:e3:bb:42:71:fe:12:39:22:76:6e:f7: 78:4e:0c:dc -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt/FekYFS9xfW47nRb9iHvTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWNkYzFlMjQ3ZmFhOTUzMTgwODJhNGFjNWVkYmQ4MDUxMWY4ZGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspblXInuO6QbIQnHZXcoYjga6Tdd /zbkF6TaP+rDB8vLGqAs1Vtv5KYV2fCjZuV/BssYQozIssGqotXJ1X7Djsc1Rhf5 9b95UTyrMp9LEZLexHO57Lt3mFfQ7lPLnu0DTYAgz8H/PaG+FOrytXR4Qg8zinOS UghdlOx5eh9qgo1qEGon1QXSNWDxEF5dLGPG55elyei0V8xQIUSJJASEVVXhEc0/ IS6YxUddb+r+DkrQpx1EnnuRhnVXNmxXNR5nFk3wW7LLHEgCQZBiI8yJyUkKqy2H VXkGBt9orEUrbVjhH1XAeHbPhbtCRriD42B1hD1NHD7CQiXtgefHliUUKwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFOrNweJH+qlTGAgqSsXtvYBRH433MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1L2U2YzQ0 Yy0zMTI1LTRmZTYtYTAwZC02MjhjY2YwMGRmYmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvZTZjNDRj LTMxMjUtNGZlNi1hMDBkLTYyOGNjZjAwZGZiZC8xLzZzM0I0a2Y2cVZNWUNDcEt4 ZTI5Z0ZFZmpmYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQFaPegAwQAuUlUAwQCuUmAAwQCuYnUMA0EAgAC MAcDBQAqA6WgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMsgjANBgkqhkiG9w0B AQsFAAOCAQEAeQFf8bj8DbOND2zwpEFpS/nph4Hf34bfN7hTcP053lg/SvWorOpR ryKxkRCdfj0QuUGGkXLYcxh8OFj9WfyvOgPnjI8l57csuLIMGIbu29QXMf4TfUvT mJHutJ35Vd7ae7Mi1v953nrAe+1HQwBNpYIk1injDUUSpdc4lcJlEG2OeC/h0l+b RhZcEQQxko5/JL5aUPYz4ARDfEkpIPM0QENU2r4/SFj3w5L2z2pg/e2sYp/ZkaaM cx5UqjNRMVDeYffn2shISZpk+qipbYC6guevm2Cw8uBxvE1DxU62exsF9UBR/Rc1 TO88s/RIaCGUduO7QnH+Ejkidm73eE4M3A== -----END CERTIFICATE-----Generated at Mon Jan 26 18:38:29 2026 by rpki-client