This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer File: C6XvqmwrvKGf6h_7abLZaQc7lc8.cer (raw, json) Hash identifier: 6WIrkOMY6F4y3LaSUxiYNnFT1p9TGwLlUNHwmewM614= Subject key identifier: 0B:A5:EF:AA:6C:2B:BC:A1:9F:EA:1F:FB:69:B2:D9:69:07:3B:95:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C05A1D78FF4A02D5C04A1DFB66646AC23 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 28 Jan 2026 17:23:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 62.32.40.0/21 IP: 2a04:2e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:a1:d7:8f:f4:a0:2d:5c:04:a1:df:b6:66:46:ac:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 28 17:23:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ba5efaa6c2bbca19fea1ffb69b2d969073b95cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ea:64:c6:ea:44:cd:41:42:a9:12:3f:92:f6: 8b:33:83:a8:04:f0:36:83:d1:07:dc:c7:44:ad:46: cf:8e:e1:23:a6:3f:71:82:62:fe:8c:2e:67:c8:e3: c0:40:63:71:55:bb:3b:d5:02:d6:20:a0:86:0c:e8: 8b:ee:d1:cf:0f:0e:19:d1:cd:1b:7d:bf:86:59:c3: 4a:fc:27:b7:e8:ce:5f:90:39:f8:a3:9c:75:4d:b9: b5:8d:bf:1d:53:15:64:ed:83:56:0b:4e:e7:2a:16: 22:99:86:8f:28:03:8d:a4:f3:33:18:20:3a:0c:8b: 2c:6c:06:9c:d5:23:6e:ca:5c:43:ff:6c:39:fb:89: a7:34:d5:77:46:fd:b7:0b:16:0a:26:fd:04:a8:25: db:71:24:bc:e8:90:4c:b4:c0:85:32:a2:d4:6e:e4: 8b:85:65:46:3d:16:6a:3b:a6:32:ad:be:da:87:f5: 94:49:80:f1:13:e1:f7:5f:61:b5:40:1a:cc:07:27: 48:44:4a:bc:91:7f:7d:95:39:a1:4b:bc:bb:c1:e8: bb:bb:21:70:b3:f2:b4:e0:72:b3:43:20:98:60:7c: 13:d2:e8:80:11:db:1a:e0:22:5c:70:9b:c3:46:89: 8a:9c:0b:c0:ed:f8:b2:88:15:00:df:ec:2c:63:25: bd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A5:EF:AA:6C:2B:BC:A1:9F:EA:1F:FB:69:B2:D9:69:07:3B:95:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.32.40.0/21 IPv6: 2a04:2e00::/29 Signature Algorithm: sha256WithRSAEncryption 06:4e:f3:f3:f2:9c:a6:9e:f8:3b:32:46:72:7b:f5:39:95:32: 69:0f:4e:b3:a8:4c:f7:df:1f:24:1b:19:fe:4b:88:0d:56:18: 8a:46:78:e2:ff:fe:d2:12:e6:db:9e:06:ca:b1:74:e2:ab:44: a4:9b:ab:b2:36:94:64:4b:09:ad:1f:09:25:63:62:77:72:9f: d4:d1:4b:59:93:9a:43:e4:5b:bc:5c:82:f7:f3:8c:89:15:1a: 45:51:8d:08:f4:19:60:bb:a8:b4:87:69:46:04:80:4a:b7:2d: c0:c4:1e:88:50:c7:bc:6b:80:47:4e:55:ae:0f:42:cc:15:9d: cb:50:d2:11:5e:4a:41:9a:e3:f2:76:f3:5f:76:af:37:b7:4b: 33:9c:19:37:10:de:4a:ff:07:99:79:44:08:21:55:16:da:4b: 92:a2:3f:90:a8:f7:2f:9d:84:d6:59:63:eb:80:18:af:99:43: cf:c0:dc:fe:b9:16:6a:5b:4a:f6:95:0e:d9:70:b1:dc:b7:fa: de:a1:c9:88:bd:e2:e7:3a:50:1f:c4:19:80:88:aa:0f:11:3b: bf:ce:16:0c:94:7c:a0:3f:b5:03:53:ba:7e:15:11:c3:f9:7e: ef:e3:03:5d:36:50:93:b2:59:bd:5c:67:13:ae:6e:65:ed:0d: 8c:d4:a1:c0 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZwFodeP9KAtXASh37ZmRqwjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI4MTcyMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmE1ZWZhYTZjMmJiY2ExOWZlYTFmZmI2OWIyZDk2OTA3M2I5NWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvepkxupEzUFCqRI/kvaLM4OoBPA2 g9EH3MdErUbPjuEjpj9xgmL+jC5nyOPAQGNxVbs71QLWIKCGDOiL7tHPDw4Z0c0b fb+GWcNK/Ce36M5fkDn4o5x1Tbm1jb8dUxVk7YNWC07nKhYimYaPKAONpPMzGCA6 DIssbAac1SNuylxD/2w5+4mnNNV3Rv23CxYKJv0EqCXbcSS86JBMtMCFMqLUbuSL hWVGPRZqO6Yyrb7ah/WUSYDxE+H3X2G1QBrMBydIREq8kX99lTmhS7y7wei7uyFw s/K04HKzQyCYYHwT0uiAEdsa4CJccJvDRomKnAvA7fiyiBUA3+wsYyW94wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFAul76psK7yhn+of+2my2WkHO5XPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhLzQ2ZDcx OC0yNTA5LTQ4MWEtOWYyYy1jM2M4YmJjYjMwZTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvNDZkNzE4 LTI1MDktNDgxYS05ZjJjLWMzYzhiYmNiMzBlOC8xL0M2WHZxbXdydktHZjZoXzdh YkxaYVFjN2xjOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDPiAoMA0EAgACMAcDBQMqBC4AMA0GCSqGSIb3 DQEBCwUAA4IBAQAGTvPz8pymnvg7MkZye/U5lTJpD06zqEz33x8kGxn+S4gNVhiK Rnji//7SEubbngbKsXTiq0Skm6uyNpRkSwmtHwklY2J3cp/U0UtZk5pD5Fu8XIL3 84yJFRpFUY0I9Blgu6i0h2lGBIBKty3AxB6IUMe8a4BHTlWuD0LMFZ3LUNIRXkpB muPydvNfdq83t0sznBk3EN5K/weZeUQIIVUW2kuSoj+QqPcvnYTWWWPrgBivmUPP wNz+uRZqW0r2lQ7ZcLHct/reocmIveLnOlAfxBmAiKoPETu/zhYMlHygP7UDU7p+ FRHD+X7v4wNdNlCTslm9XGcTrm5l7Q2M1KHA -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:35 2026 by rpki-client