This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer File: 6u6iC7vbml0c3HEU4q9RjnaxQm4.cer (raw, json) Hash identifier: KslK6s8QfcgRMxaz9KjG5Q3PnILIXIVJtcxRu8lxU2A= Subject key identifier: EA:EE:A2:0B:BB:DB:9A:5D:1C:DC:71:14:E2:AF:51:8E:76:B1:42:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F151773F5A0D44703A673A3A1861DD7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209223 IP: 2.57.12.0/22 IP: 2a09:dfc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:17:73:f5:a0:d4:47:03:a6:73:a3:a1:86:1d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eaeea20bbbdb9a5d1cdc7114e2af518e76b1426e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:64:68:47:71:0b:48:6e:73:c4:6b:48:aa:62: 18:1b:51:ee:42:c1:04:1e:c4:05:8e:2b:ac:a9:aa: 4b:3b:0e:e6:1f:8f:b5:2f:18:9d:6e:05:f7:d2:c8: f5:0b:d4:1c:9e:94:cd:ba:0a:68:a2:90:3c:42:63: dd:c3:cf:65:7d:89:b2:cc:4f:07:92:bc:5d:13:1e: 93:63:22:f8:ea:af:87:46:6b:38:2d:09:8d:af:cb: 01:b9:b0:96:f0:e7:65:66:40:90:1e:b8:5d:5a:c3: 33:24:80:c2:57:5c:4c:d0:f8:f2:9a:97:31:a2:5f: d6:fd:7b:0e:1d:1a:78:89:51:1e:d0:23:92:bc:17: f4:9a:ee:55:6d:4c:e5:6c:62:cf:98:f6:e3:7a:96: b5:44:a4:2f:2e:78:af:1a:14:34:ba:2e:2f:6c:1b: 5a:8a:1e:a6:54:f6:d6:74:1b:54:b4:f6:80:6a:34: 0f:5f:a6:c2:0e:05:1e:28:a2:94:b2:6a:8f:13:b2: 58:6d:0d:ed:fd:62:c2:a1:7e:39:4a:21:94:ee:1c: 3f:28:69:3a:69:3d:2c:16:12:9c:0b:1c:eb:ec:3d: 5f:c2:df:ef:98:c8:1a:67:03:1f:e3:7a:3e:c8:05: 79:ec:ba:81:98:a7:ff:26:26:88:ec:43:ed:45:41: 3b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EE:A2:0B:BB:DB:9A:5D:1C:DC:71:14:E2:AF:51:8E:76:B1:42:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.12.0/22 IPv6: 2a09:dfc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209223 Signature Algorithm: sha256WithRSAEncryption 3d:f8:67:24:f9:08:00:2a:ae:53:c5:cf:25:10:b9:fa:68:3d: 94:30:28:6c:c9:2c:20:cc:5f:ac:66:51:ad:df:0c:d4:85:75: b4:68:f9:b9:62:55:4b:f2:9a:0b:d4:64:46:7a:1d:23:eb:5d: 57:5f:40:26:db:73:bd:2a:56:08:87:a2:57:ed:23:38:df:88: 98:b2:c2:58:79:58:33:48:81:2b:1b:22:7a:e5:52:32:9e:61: 48:1b:d1:00:35:eb:42:f6:07:f3:89:85:54:b7:35:9a:66:0d: 61:fe:08:9d:4f:5b:bd:e1:f3:90:ee:c9:64:ee:fb:6a:9f:43: dd:37:da:11:52:b9:51:84:b0:d2:63:f6:3d:48:f1:17:4f:9c: a0:b0:49:a9:35:c1:d4:0b:ed:83:4a:83:ba:dc:ec:1c:27:eb: 1e:ab:28:3e:4c:62:f9:fa:af:9a:e8:c2:34:d4:26:45:83:00: c1:47:49:5b:26:0f:2f:af:8c:d3:0b:bf:e5:07:cb:38:19:6d: 3d:13:40:a3:5c:3b:09:5c:4c:0e:db:83:ff:20:d1:d3:fe:ac: 40:ae:06:66:20:f0:6d:a3:48:59:02:50:ec:23:ff:05:c5:91: fd:9d:c7:49:41:30:83:25:d0:33:7f:4d:f5:0c:7a:89:e9:57: 2d:fd:a3:b3 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FRdz9aDURwOmc6Ohhh3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWVlYTIwYmJiZGI5YTVkMWNkYzcxMTRlMmFmNTE4ZTc2YjE0MjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGRoR3ELSG5zxGtIqmIYG1HuQsEE HsQFjiusqapLOw7mH4+1LxidbgX30sj1C9QcnpTNugpoopA8QmPdw89lfYmyzE8H krxdEx6TYyL46q+HRms4LQmNr8sBubCW8OdlZkCQHrhdWsMzJIDCV1xM0Pjympcx ol/W/XsOHRp4iVEe0COSvBf0mu5VbUzlbGLPmPbjepa1RKQvLnivGhQ0ui4vbBta ih6mVPbWdBtUtPaAajQPX6bCDgUeKKKUsmqPE7JYbQ3t/WLCoX45SiGU7hw/KGk6 aT0sFhKcCxzr7D1fwt/vmMgaZwMf43o+yAV57LqBmKf/JiaI7EPtRUE7/QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOruogu725pdHNxxFOKvUY52sUJuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzdkZjg1 OS0yODUxLTQzYzMtYTMyYi1hYjA0NzIwOTMwY2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvN2RmODU5 LTI4NTEtNDNjMy1hMzJiLWFiMDQ3MjA5MzBjZi8xLzZ1NmlDN3ZibWwwYzNIRVU0 cTlSam5heFFtNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCAjkMMA0EAgACMAcDBQMqCd/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMxRzANBgkqhkiG9w0BAQsFAAOCAQEAPfhnJPkIACqu U8XPJRC5+mg9lDAobMksIMxfrGZRrd8M1IV1tGj5uWJVS/KaC9RkRnodI+tdV19A JttzvSpWCIeiV+0jON+ImLLCWHlYM0iBKxsieuVSMp5hSBvRADXrQvYH84mFVLc1 mmYNYf4InU9bveHzkO7JZO77ap9D3TfaEVK5UYSw0mP2PUjxF0+coLBJqTXB1Avt g0qDutzsHCfrHqsoPkxi+fqvmujCNNQmRYMAwUdJWyYPL6+M0wu/5QfLOBltPRNA o1w7CVxMDtuD/yDR0/6sQK4GZiDwbaNIWQJQ7CP/BcWR/Z3HSUEwgyXQM39N9Qx6 ielXLf2jsw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:52 2026 by rpki-client