This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer File: 6uDCwN7m-e1l4FHqqQl9As9b9fI.cer (raw, json) Hash identifier: DcdyiowfvFARgbWcH76OxzNn32jZiXQdKjmP1XgWL4w= Subject key identifier: EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1365AF1FCE9E1818578F5BCBC75DE6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210784 IP: 119.235.13.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:65:af:1f:ce:9e:18:18:57:8f:5b:cb:c7:5d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d6:fb:a3:7f:13:73:87:74:04:d1:88:49:49: e8:ab:e3:81:6e:78:37:96:20:70:55:59:64:9f:bb: 68:92:30:49:a0:c2:8e:be:84:22:7f:30:96:11:45: 89:5b:4d:89:cd:fa:e1:ce:d5:af:d8:21:df:da:73: 0e:e7:1a:71:02:ac:3d:ec:c9:da:3f:0f:07:b6:81: 9a:44:ff:a3:8f:eb:46:50:38:3e:f8:6f:34:b0:d3: 2c:34:56:a8:8d:2c:54:36:9c:c8:2d:73:ae:29:55: 7f:ba:ba:97:46:29:ef:d7:ed:a8:cb:61:f8:52:cb: ee:4d:07:38:c4:2b:7b:60:d1:6d:10:44:15:9a:76: 72:fe:ac:b1:30:74:51:ce:5b:33:54:11:f1:b8:11: 6f:5f:b7:e7:16:37:ef:c8:46:c6:9d:1f:f3:19:42: f7:b8:0a:a6:89:8f:09:2b:e9:3f:a1:44:97:29:4e: 62:64:f5:3c:9b:88:e5:ba:bc:ab:05:de:59:cd:fa: 32:27:07:5c:ad:eb:70:07:ac:78:c5:5c:b4:64:37: 27:6b:9b:d0:87:2a:5e:24:13:df:58:1e:87:3e:ff: 86:04:8d:0b:02:27:5f:d7:02:b4:32:87:50:cc:09: d1:ef:71:bb:ee:43:c6:58:c5:63:13:67:49:c5:ff: 50:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.235.13.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210784 Signature Algorithm: sha256WithRSAEncryption 50:d1:2b:33:32:49:44:ed:da:27:b5:bf:c1:4c:83:2d:a2:b1: fc:c5:1c:18:0e:f8:80:c0:37:d3:78:75:a9:a1:42:c3:74:a7: ba:90:62:ab:94:7b:70:05:86:3e:24:bf:12:43:c1:b6:44:69: bf:f1:fd:06:35:5b:e6:b6:3f:df:2c:80:ba:49:83:bc:b3:10: 8a:87:aa:af:3b:44:77:e2:7e:ad:4b:2a:07:25:92:83:05:12: bc:da:51:f4:91:56:0e:66:de:1c:18:61:7c:e6:76:cc:07:ca: ae:15:11:eb:b1:bb:ff:07:cd:11:05:33:f8:4b:59:b7:3f:81: d1:21:e8:4d:7c:a0:dc:ef:24:da:df:fd:49:e7:14:a4:f0:f9: 7b:da:9d:d0:54:3b:3c:de:c4:be:78:b0:8f:7a:38:fd:97:e2: 92:31:73:ca:62:56:a4:d9:e5:44:4c:70:e8:89:ff:62:4e:b4: b4:ae:b7:37:c1:81:2e:bd:cf:cd:b7:2b:4a:e0:28:7d:6c:37: 15:d7:7e:eb:1c:a5:b4:bd:07:a5:ff:48:42:1d:89:bd:55:f1: c1:bc:79:e8:6f:77:ee:51:c8:63:bc:03:16:06:5e:b0:ef:bb: 60:46:15:ad:ee:ff:13:47:8c:64:b4:2b:42:e8:63:6f:4b:5b: 28:93:19:c7 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/E2WvH86eGBhXj1vLx13mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWUwYzJjMGRlZTZmOWVkNjVlMDUxZWFhOTA5N2QwMmNmNWJmNWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudb7o38Tc4d0BNGISUnoq+OBbng3 liBwVVlkn7tokjBJoMKOvoQifzCWEUWJW02JzfrhztWv2CHf2nMO5xpxAqw97Mna Pw8HtoGaRP+jj+tGUDg++G80sNMsNFaojSxUNpzILXOuKVV/urqXRinv1+2oy2H4 UsvuTQc4xCt7YNFtEEQVmnZy/qyxMHRRzlszVBHxuBFvX7fnFjfvyEbGnR/zGUL3 uAqmiY8JK+k/oUSXKU5iZPU8m4jluryrBd5ZzfoyJwdcretwB6x4xVy0ZDcna5vQ hypeJBPfWB6HPv+GBI0LAidf1wK0ModQzAnR73G77kPGWMVjE2dJxf9QLwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOrgwsDe5vntZeBR6qkJfQLPW/XyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5L2QzZGU0 My1hYTNjLTQ2OTItYTkyNC1kOThmNWQwNzYyOTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvZDNkZTQz LWFhM2MtNDY5Mi1hOTI0LWQ5OGY1ZDA3NjI5OC8xLzZ1REN3TjdtLWUxbDRGSHFx UWw5QXM5YjlmSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAd+sNMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM3YDANBgkqhkiG9w0BAQsFAAOCAQEAUNErMzJJRO3aJ7W/wUyDLaKx/MUcGA74 gMA303h1qaFCw3SnupBiq5R7cAWGPiS/EkPBtkRpv/H9BjVb5rY/3yyAukmDvLMQ ioeqrztEd+J+rUsqByWSgwUSvNpR9JFWDmbeHBhhfOZ2zAfKrhUR67G7/wfNEQUz +EtZtz+B0SHoTXyg3O8k2t/9SecUpPD5e9qd0FQ7PN7Evniwj3o4/ZfikjFzymJW pNnlRExw6In/Yk60tK63N8GBLr3PzbcrSuAofWw3Fdd+6xyltL0Hpf9IQh2JvVXx wbx56G937lHIY7wDFgZesO+7YEYVre7/E0eMZLQrQuhjb0tbKJMZxw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:53 2026 by rpki-client