This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer File: 6x3AD9LB4-qvzszBtLofj9CkqYw.cer (raw, json) Hash identifier: aXcGmO74sPPzhe/6JTMxZepWbqwvP6hVoSoHpGxfbmY= Subject key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4E7256BF29ACC9175F51D2D6B90FE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62167 AS: 64463 IP: 89.107.28.0/22 IP: 185.44.160.0/22 IP: 185.163.80.0/22 IP: 2a01:7520::/32 IP: 2a0b:5800::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e7:25:6b:f2:9a:cc:91:75:f5:1d:2d:6b:90:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f6:ea:2a:e1:40:95:be:96:43:61:01:b4:49: 53:37:af:0e:8b:b5:c4:f6:95:29:1b:8e:64:ad:78: 07:08:16:16:8d:af:f2:0f:b1:d5:48:0d:69:d8:a6: 0a:c4:02:50:14:86:3f:75:61:80:1b:af:5f:15:29: a8:60:40:62:03:fe:b1:89:52:b8:44:17:d7:cc:ae: 46:6b:a1:4f:6f:5f:23:8c:75:af:65:34:22:63:3c: 94:ec:c1:78:4d:67:c2:53:8d:fa:8e:eb:92:bc:48: ba:19:03:e0:24:ab:d1:ff:3a:d0:00:fb:a7:e3:7b: ae:cf:7b:d2:cf:d0:a5:11:66:1d:92:57:f3:d1:6e: b5:bc:9e:8b:a4:67:74:6f:d7:eb:90:2d:16:25:6c: b4:e0:e7:07:f4:42:6e:b3:23:a1:a6:43:45:cd:ab: e2:d0:fa:a5:43:17:f0:eb:5d:f6:f0:57:4a:56:1d: fd:a1:6e:a2:c5:86:3d:63:d6:5f:5a:55:18:aa:e9: d0:b2:21:53:0a:97:b3:a1:69:63:2b:0c:79:a7:5e: 6f:79:cc:0f:ec:cb:a5:b0:d4:e7:fa:ee:c8:d5:4b: 5b:34:ef:e7:4a:88:f8:00:38:b7:6e:ed:19:cc:42: b5:87:4c:5c:c6:13:db:6e:ef:3d:62:c2:88:3c:f1: 22:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.107.28.0/22 185.44.160.0/22 185.163.80.0/22 IPv6: 2a01:7520::/32 2a0b:5800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62167 64463 Signature Algorithm: sha256WithRSAEncryption 11:d0:c5:26:37:47:30:93:de:c0:24:58:54:84:ae:08:ef:38: 61:21:c0:9d:6c:f8:82:eb:31:fc:a3:bf:20:53:3f:53:08:9b: 65:57:de:be:a3:02:f9:89:37:28:0f:c8:ae:83:83:64:90:53: 7a:b5:47:29:7c:f2:49:68:0e:94:e0:10:dd:f4:38:89:47:cf: af:1e:2f:89:a6:45:9a:4c:0b:6a:ae:e5:24:0b:76:e0:8d:e7: 77:01:99:43:9e:62:cb:07:5f:73:96:b7:78:cb:cd:eb:0a:26: 3f:d0:ef:af:c0:1e:ea:b0:4f:0d:9d:f5:0c:68:38:2d:f0:40: 62:58:a6:46:d3:09:89:66:12:f4:d7:5b:cc:65:7e:0c:bf:35: 30:ca:6a:c7:25:2f:f9:c8:d8:34:b0:bb:6c:a9:b4:c5:5a:dc: f9:6e:44:79:d0:ba:89:47:34:ea:91:57:e7:92:c8:bf:ae:34: b2:4a:26:e3:68:5b:8f:80:3d:b2:93:ff:0d:fb:ca:3f:f3:0f: ed:ed:8c:54:fa:4f:33:89:cc:e0:8f:ac:0a:23:34:5b:b3:a1: a0:96:8e:76:bf:97:bb:60:5a:92:7c:ee:05:19:15:f7:f8:a5: 90:30:b4:fd:40:17:ed:8e:36:25:c6:94:4c:b9:40:96:dc:7e: c7:f9:b2:a7 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt7pOcla/KazJF19R0ta5D+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjFkYzAwZmQyYzFlM2VhYWZjZWNjYzFiNGJhMWY4ZmQwYTRhOThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/bqKuFAlb6WQ2EBtElTN68Oi7XE 9pUpG45krXgHCBYWja/yD7HVSA1p2KYKxAJQFIY/dWGAG69fFSmoYEBiA/6xiVK4 RBfXzK5Ga6FPb18jjHWvZTQiYzyU7MF4TWfCU436juuSvEi6GQPgJKvR/zrQAPun 43uuz3vSz9ClEWYdklfz0W61vJ6LpGd0b9frkC0WJWy04OcH9EJusyOhpkNFzavi 0PqlQxfw61328FdKVh39oW6ixYY9Y9ZfWlUYqunQsiFTCpezoWljKwx5p15vecwP 7MulsNTn+u7I1UtbNO/nSoj4ADi3bu0ZzEK1h0xcxhPbbu89YsKIPPEiZQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFOsdwA/SwePqr87MwbS6H4/QpKmMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1LzVhYjU4 NS1iMjliLTRlNzEtODAzOC05MGUyMWRmMDFlOTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvNWFiNTg1 LWIyOWItNGU3MS04MDM4LTkwZTIxZGYwMWU5MS8xLzZ4M0FEOUxCNC1xdnpzekJ0 TG9majlDa3FZdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQCWWscAwQCuSygAwQCuaNQMBQEAgACMA4DBQAq AXUgAwUAKgtYADAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA8tcCAwD7zzANBgkq hkiG9w0BAQsFAAOCAQEAEdDFJjdHMJPewCRYVISuCO84YSHAnWz4gusx/KO/IFM/ UwibZVfevqMC+Yk3KA/IroODZJBTerVHKXzySWgOlOAQ3fQ4iUfPrx4viaZFmkwL aq7lJAt24I3ndwGZQ55iywdfc5a3eMvN6womP9Dvr8Ae6rBPDZ31DGg4LfBAYlim RtMJiWYS9NdbzGV+DL81MMpqxyUv+cjYNLC7bKm0xVrc+W5EedC6iUc06pFX55LI v640skom42hbj4A9spP/DfvKP/MP7e2MVPpPM4nM4I+sCiM0W7OhoJaOdr+Xu2Ba knzuBRkV9/ilkDC0/UAX7Y42JcaUTLlAltx+x/mypw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:53 2026 by rpki-client