This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer File: 6sVEfAQxp17nu1lAohg8GEOOtrE.cer (raw, json) Hash identifier: 94zl/8N9V5N87PVxLjHzLfpXcrCZxxtfoLpFDa2nZmg= Subject key identifier: EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDE0A4569C5F38BCF7125BBEA82367 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 62.3.52.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e0:a4:56:9c:5f:38:bc:f7:12:5b:be:a8:23:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:76:37:18:80:fe:a3:88:50:ea:a4:9a:f8:eb: 72:d1:bb:e7:0f:29:e7:f1:a7:81:6d:f8:01:80:25: 6e:16:36:d8:ca:8c:f4:6d:b2:c7:88:60:b1:12:cf: 1c:f2:5f:1e:7d:6a:78:1a:e6:68:18:f7:3a:63:5b: b7:f1:51:13:28:aa:21:2c:59:c3:d4:8e:0b:fd:a8: ff:d9:d3:71:1d:db:17:54:47:a7:72:66:c8:8d:09: 0b:fb:55:fa:18:cb:d1:dd:28:b9:51:a8:7a:a4:3a: f0:ba:de:2e:7b:f0:f1:f5:2d:17:d8:83:93:8f:c1: f9:23:e5:ef:22:05:f1:2f:6b:21:e8:5c:24:b4:c9: e6:4c:18:74:cc:9a:e8:13:5f:0a:60:8f:3c:8f:31: 14:70:bd:b8:30:be:00:06:49:e8:cf:76:cc:65:b5: 3f:fe:e1:22:25:f0:af:1d:a6:c0:5a:ea:e2:9d:9b: 14:96:75:8e:cb:44:f3:3c:57:1f:95:f7:d6:10:5a: 63:78:68:cf:dd:a4:e3:55:26:a7:bf:c4:f5:b8:c3: 2f:a4:0b:66:22:21:4d:59:b3:90:98:cf:62:18:37: 8d:01:13:81:fd:03:f5:12:52:31:00:06:60:1d:25: 81:cd:99:14:b8:9e:fb:da:1c:a6:e1:a2:de:1c:c1: 75:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.52.0/24 Signature Algorithm: sha256WithRSAEncryption 51:32:02:93:dc:44:2c:9f:cd:50:c5:45:3c:73:60:4a:9a:90: d2:0a:18:7e:e5:fc:76:8b:54:97:39:8e:7a:94:45:6b:52:e7: e4:a7:4a:63:26:04:82:c9:93:6e:ff:cd:66:3a:87:d3:1e:cc: 56:c5:80:13:0b:5c:3a:04:9b:4a:3d:cc:d0:1d:d0:f2:fc:71: 70:c4:be:bf:b8:ff:e4:9a:48:5c:87:a6:d6:16:36:91:db:3c: d1:f3:4e:e3:17:0e:31:45:02:5a:98:5e:4e:a1:b6:ca:74:a7: 85:43:c6:9f:45:95:d5:04:f0:7e:b5:09:3f:92:89:64:60:76: b9:f7:84:6e:20:67:76:05:97:27:d7:ad:ab:52:68:3b:26:c1: 86:a3:f4:c4:9e:2a:04:7d:c8:f1:57:87:33:64:e7:5e:5a:b6: a3:9d:c3:89:d8:98:d1:9d:44:8d:87:d5:42:24:ae:be:11:a9: f3:a5:8e:e8:06:3b:51:50:e9:56:47:ec:3b:b6:da:35:10:53: d4:1f:99:8a:8c:8c:2a:11:63:a2:3a:bc:9b:db:3c:57:0e:06: 06:51:39:55:f0:74:a8:9d:97:c5:a6:eb:2c:a1:37:9a:3b:c4: 5a:42:fa:db:0f:33:8d:ef:a0:98:91:84:7d:81:0f:43:4b:d7: 04:32:5e:7a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87eCkVpxfOLz3Elu+qCNnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWM1NDQ3YzA0MzFhNzVlZTdiYjU5NDBhMjE4M2MxODQzOGViNmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnY3GID+o4hQ6qSa+Oty0bvnDynn 8aeBbfgBgCVuFjbYyoz0bbLHiGCxEs8c8l8efWp4GuZoGPc6Y1u38VETKKohLFnD 1I4L/aj/2dNxHdsXVEencmbIjQkL+1X6GMvR3Si5Uah6pDrwut4ue/Dx9S0X2IOT j8H5I+XvIgXxL2sh6FwktMnmTBh0zJroE18KYI88jzEUcL24ML4ABknoz3bMZbU/ /uEiJfCvHabAWurinZsUlnWOy0TzPFcflffWEFpjeGjP3aTjVSanv8T1uMMvpAtm IiFNWbOQmM9iGDeNAROB/QP1ElIxAAZgHSWBzZkUuJ772hym4aLeHMF1CwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFOrFRHwEMade57tZQKIYPBhDjraxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiLzc3MjY0 ZS00OTY0LTRmNjgtOTJlNS1mZmE0MzM5YmNlNGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvNzcyNjRl LTQ5NjQtNGY2OC05MmU1LWZmYTQzMzliY2U0Zi8xLzZzVkVmQVF4cDE3bnUxbEFv aGc4R0VPT3RyRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAPgM0MA0GCSqGSIb3DQEBCwUAA4IBAQBRMgKT 3EQsn81QxUU8c2BKmpDSChh+5fx2i1SXOY56lEVrUufkp0pjJgSCyZNu/81mOofT HsxWxYATC1w6BJtKPczQHdDy/HFwxL6/uP/kmkhch6bWFjaR2zzR807jFw4xRQJa mF5OobbKdKeFQ8afRZXVBPB+tQk/kolkYHa594RuIGd2BZcn162rUmg7JsGGo/TE nioEfcjxV4czZOdeWrajncOJ2JjRnUSNh9VCJK6+EanzpY7oBjtRUOlWR+w7tto1 EFPUH5mKjIwqEWOiOryb2zxXDgYGUTlV8HSonZfFpussoTeaO8RaQvrbDzON76CY kYR9gQ9DS9cEMl56 -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:48 2026 by rpki-client