This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6y7LDykkUqe-lOaWD3znIBa9GAU.cer File: 6y7LDykkUqe-lOaWD3znIBa9GAU.cer (raw, json) Hash identifier: 10VVxsWNqqhPsSqdGu4ERVf0ncxJgAH79gFESEgUx5U= Subject key identifier: EB:2E:CB:0F:29:24:52:A7:BE:94:E6:96:0F:7C:E7:20:16:BD:18:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A59DED9E272BD251FEF1068F1824544 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199946 IP: 185.37.196.0/22 IP: 2a04:70c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:de:d9:e2:72:bd:25:1f:ef:10:68:f1:82:45:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb2ecb0f292452a7be94e6960f7ce72016bd1805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:34:7d:1f:4b:51:84:af:22:d7:2e:57:e7:15: 93:bd:9f:3f:1b:bd:9e:bc:72:43:d1:dc:ce:57:84: 19:de:8c:62:67:fe:b7:8c:9b:8d:a2:cb:13:7e:75: b5:fe:17:24:7a:3b:ff:63:14:ba:14:28:19:9a:2d: 8d:08:82:8e:e5:e3:e1:ae:cf:fe:a1:76:b5:f4:3a: 1c:ab:7e:f4:92:79:d8:c2:43:ae:14:e2:bb:04:54: 14:fd:c8:61:ba:83:d8:8f:f8:17:01:41:29:95:03: b6:ea:94:60:bb:31:ae:7d:15:a8:a1:31:75:1e:09: 85:65:9e:5c:8a:5d:8f:c7:bc:63:10:e7:47:59:bd: e4:5e:cb:da:2a:72:b6:aa:4c:17:60:eb:44:33:c9: d7:23:97:fc:f3:b6:06:2f:c9:5c:44:08:68:17:74: b4:f2:86:a0:81:9a:7e:93:79:f8:21:a1:06:f6:2f: ec:f6:1b:95:d4:77:47:01:0c:00:15:a3:45:51:70: d2:d0:4d:71:db:4a:8f:de:b5:c7:1f:f0:75:ed:4b: 49:59:0e:a2:40:ea:82:cb:e0:fa:64:cc:17:1c:43: 64:de:09:9f:3c:2f:2b:5f:32:3b:56:77:28:bb:64: 64:94:fc:9c:c6:04:1e:a2:69:33:d2:d0:70:9b:54: 09:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2E:CB:0F:29:24:52:A7:BE:94:E6:96:0F:7C:E7:20:16:BD:18:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.196.0/22 IPv6: 2a04:70c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199946 Signature Algorithm: sha256WithRSAEncryption 2a:1f:96:e6:d2:01:50:01:d7:99:52:87:51:a2:75:94:5b:0c: 43:21:57:fe:80:39:df:b4:b6:f3:9b:a6:26:0f:dd:5c:83:20: e4:a7:a6:67:10:18:8c:ab:7f:26:fc:c7:1f:82:d4:56:dc:01: 38:5d:ba:79:51:16:c9:65:9e:cd:27:ff:a1:b6:f2:d9:bc:76: a8:79:a3:4f:2e:ed:63:64:3a:29:51:e8:d0:af:bc:2d:87:bb: be:0f:27:38:f8:53:bb:e8:b0:ba:47:a7:00:0d:d3:e8:fd:55: 72:b6:93:df:94:ec:28:7d:83:46:0b:c0:28:31:f8:72:21:25: 41:af:73:00:b9:15:8a:04:40:3d:d4:2a:81:4e:6a:b2:a5:78: 62:37:04:7c:76:24:fe:ac:a9:1d:7f:20:4f:5c:ee:e6:0c:85: a3:56:ac:31:b7:5c:82:17:68:97:0c:e7:c5:89:78:4b:d2:76: 21:fb:cf:2b:ac:71:bb:9c:4a:ed:97:cc:43:24:24:18:88:27: 8a:bc:28:33:20:3a:e9:42:dd:c3:9a:98:9b:23:62:26:57:60: 31:55:2a:7c:07:42:16:1a:49:e9:0a:2f:70:ef:db:75:21:97: ba:b5:65:7f:8a:b9:1d:54:d2:ad:73:c0:13:f8:a7:39:51:77: a5:e3:73:d4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6Wd7Z4nK9JR/vEGjxgkVEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjJlY2IwZjI5MjQ1MmE3YmU5NGU2OTYwZjdjZTcyMDE2YmQxODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTR9H0tRhK8i1y5X5xWTvZ8/G72e vHJD0dzOV4QZ3oxiZ/63jJuNossTfnW1/hckejv/YxS6FCgZmi2NCIKO5ePhrs/+ oXa19Docq370knnYwkOuFOK7BFQU/chhuoPYj/gXAUEplQO26pRguzGufRWooTF1 HgmFZZ5cil2Px7xjEOdHWb3kXsvaKnK2qkwXYOtEM8nXI5f887YGL8lcRAhoF3S0 8oaggZp+k3n4IaEG9i/s9huV1HdHAQwAFaNFUXDS0E1x20qP3rXHH/B17UtJWQ6i QOqCy+D6ZMwXHENk3gmfPC8rXzI7Vncou2RklPycxgQeomkz0tBwm1QJOQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOsuyw8pJFKnvpTmlg985yAWvRgFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2LzU0OGVm Ni1lNzJlLTQ1MDMtOGFmOS1iNTVkODhmN2M5ZGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvNTQ4ZWY2 LWU3MmUtNDUwMy04YWY5LWI1NWQ4OGY3YzlkZS8xLzZ5N0xEeWtrVXFlLWxPYVdE M3puSUJhOUdBVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSXEMA0EAgACMAcDBQMqBHDAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMNCjANBgkqhkiG9w0BAQsFAAOCAQEAKh+W5tIBUAHX mVKHUaJ1lFsMQyFX/oA537S285umJg/dXIMg5KemZxAYjKt/JvzHH4LUVtwBOF26 eVEWyWWezSf/obby2bx2qHmjTy7tY2Q6KVHo0K+8LYe7vg8nOPhTu+iwukenAA3T 6P1VcraT35TsKH2DRgvAKDH4ciElQa9zALkVigRAPdQqgU5qsqV4YjcEfHYk/qyp HX8gT1zu5gyFo1asMbdcghdolwznxYl4S9J2IfvPK6xxu5xK7ZfMQyQkGIgnirwo MyA66ULdw5qYmyNiJldgMVUqfAdCFhpJ6QovcO/bdSGXurVlf4q5HVTSrXPAE/in OVF3peNz1A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:23 2026 by rpki-client