This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6uYgsFna8H5G_DUi0JsZCVFs_O8.cer File: 6uYgsFna8H5G_DUi0JsZCVFs_O8.cer (raw, json) Hash identifier: 2AymYsXacvowd4jeF8Lxl7XOGteO5crhiRp8d5xiZpo= Subject key identifier: EA:E6:20:B0:59:DA:F0:7E:46:FC:35:22:D0:9B:19:09:51:6C:FC:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C0122431033063C6F27ED1182A64A0D59 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 27 Jan 2026 20:25:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210225 IP: 2001:67c:1710::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:01:22:43:10:33:06:3c:6f:27:ed:11:82:a6:4a:0d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 27 20:25:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eae620b059daf07e46fc3522d09b1909516cfcef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:42:9a:ee:33:d4:f7:28:91:82:67:0d:4b: 3b:43:cc:5e:de:38:8e:92:2b:c2:a0:73:08:09:3d: 0d:ac:37:9c:28:59:b5:e0:4c:e5:11:81:1d:4c:70: 09:fe:31:9a:0d:86:50:74:83:6f:e0:52:69:ce:1b: 7a:4f:72:33:0d:5b:5c:95:0a:df:36:71:92:f0:c9: a1:59:6f:a5:f6:70:5c:18:c8:3c:08:50:2b:db:42: 38:80:cc:0b:00:01:3b:44:39:8b:b3:bd:9e:75:9f: 83:c9:bd:7a:f6:d8:2a:49:1f:2f:90:d8:e2:4c:63: cf:30:0e:5a:6f:9c:e3:48:2c:28:a2:d4:7c:ca:7e: 0e:02:de:82:2c:e7:20:96:e9:02:16:68:a9:e1:08: 39:66:31:53:fa:50:5d:94:c5:79:93:93:18:56:1b: 77:8a:3a:48:37:6f:04:32:69:06:ce:64:2a:35:66: 61:6f:47:18:e1:1e:0f:e8:66:9a:7e:27:72:a2:0b: ff:ef:6d:1f:a6:39:63:d7:5d:f7:c8:f4:68:11:e2: 02:50:91:4d:9c:00:fb:51:c6:92:81:a9:7a:85:96: a6:19:4f:b4:36:03:85:bf:c3:a7:23:1b:3a:68:b2: 5f:bc:1d:ca:aa:6e:1a:3a:0b:a6:64:c5:cf:56:31: 46:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E6:20:B0:59:DA:F0:7E:46:FC:35:22:D0:9B:19:09:51:6C:FC:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1710::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210225 Signature Algorithm: sha256WithRSAEncryption a4:0f:7c:51:ba:dd:91:f4:ac:ef:2e:bd:21:ad:4a:7f:76:98: 6d:3e:60:1f:61:b3:9d:19:a2:24:75:09:c8:50:ac:6b:ff:aa: 5c:b1:c3:b4:d8:45:1a:96:23:ef:fd:26:1d:eb:9e:14:eb:2a: ce:6b:aa:e9:2b:07:86:82:db:7b:33:4b:5e:c1:ad:e3:df:d5: 3e:77:28:03:47:75:cf:15:d9:5e:3d:ec:ca:cf:f3:9d:d6:07: df:77:41:8d:46:0d:19:13:80:01:4a:8c:eb:3c:c4:b6:4e:f2: 95:2a:04:cf:56:c5:94:e4:05:1b:7f:9f:cb:76:45:f4:eb:8a: 22:34:aa:d4:25:5e:db:f3:9e:e0:82:be:cc:34:ae:47:01:6f: 7c:13:88:5e:82:7d:36:f7:5e:1d:41:09:af:e4:cb:5a:66:d3: 7f:a7:54:8f:39:91:1a:10:28:60:a8:46:73:bb:ba:1e:0c:a9: 4f:0a:5e:a3:be:c0:03:d0:6b:ce:98:3d:d6:6a:b6:a1:44:c9: 49:ed:95:b9:aa:d5:fe:1f:f6:87:0c:9d:02:0e:25:35:3d:a1: c7:b2:78:d0:2b:d0:e8:a9:53:a8:14:73:76:98:3e:c0:ac:47: e1:b1:62:47:04:69:b5:0b:8b:a4:4d:87:fe:19:c9:ac:88:ef: 62:0f:97:73 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZwBIkMQMwY8byftEYKmSg1ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI3MjAyNTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWU2MjBiMDU5ZGFmMDdlNDZmYzM1MjJkMDliMTkwOTUxNmNmY2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5RCmu4z1PcokYJnDUs7Q8xe3jiO kivCoHMICT0NrDecKFm14EzlEYEdTHAJ/jGaDYZQdINv4FJpzht6T3IzDVtclQrf NnGS8MmhWW+l9nBcGMg8CFAr20I4gMwLAAE7RDmLs72edZ+Dyb169tgqSR8vkNji TGPPMA5ab5zjSCwootR8yn4OAt6CLOcglukCFmip4Qg5ZjFT+lBdlMV5k5MYVht3 ijpIN28EMmkGzmQqNWZhb0cY4R4P6Gaafidyogv/720fpjlj1133yPRoEeICUJFN nAD7UcaSgal6hZamGU+0NgOFv8OnIxs6aLJfvB3Kqm4aOgumZMXPVjFG3wIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFOrmILBZ2vB+Rvw1ItCbGQlRbPzvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxLzkwMWE1 Yy0wZDJiLTQxMDAtYWYxNi1mNzE2YmRhMjA3ZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvOTAxYTVj LTBkMmItNDEwMC1hZjE2LWY3MTZiZGEyMDdmMy8xLzZ1WWdzRm5hOEg1R19EVWkw SnNaQ1ZGc19POC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBcQMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM1MTANBgkqhkiG9w0BAQsFAAOCAQEApA98UbrdkfSs7y69Ia1Kf3aYbT5g H2GznRmiJHUJyFCsa/+qXLHDtNhFGpYj7/0mHeueFOsqzmuq6SsHhoLbezNLXsGt 49/VPncoA0d1zxXZXj3sys/zndYH33dBjUYNGROAAUqM6zzEtk7ylSoEz1bFlOQF G3+fy3ZF9OuKIjSq1CVe2/Oe4IK+zDSuRwFvfBOIXoJ9NvdeHUEJr+TLWmbTf6dU jzmRGhAoYKhGc7u6HgypTwpeo77AA9Brzpg91mq2oUTJSe2VuarV/h/2hwydAg4l NT2hx7J40CvQ6KlTqBRzdpg+wKxH4bFiRwRptQuLpE2H/hnJrIjvYg+Xcw== -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:58 2026 by rpki-client