This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer File: DL6R62OkTx6fGoPt0hih7HXCXpE.cer (raw, json) Hash identifier: nJz14a7gWCwDNf6mXzMN0nmDplXEjwLICyF/j15JxZs= Subject key identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B743CEB9A43D5AE44C5E603A4EEAE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.235.199.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:74:3c:eb:9a:43:d5:ae:44:c5:e6:03:a4:ee:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:06:e2:74:5c:27:03:df:62:ca:3b:b1:be:de: 47:4c:63:de:5f:bc:cc:14:98:69:76:43:26:d3:d4: 3f:95:8c:1b:6e:65:02:cf:e2:e4:f1:ab:45:c1:97: 52:69:8d:bc:b5:b1:a0:f4:79:df:c9:64:e0:81:fe: ce:89:55:81:79:66:86:5a:66:96:01:5f:3a:43:33: b1:50:32:bb:9b:60:14:49:c1:90:35:2c:ee:6f:db: f8:da:cc:95:39:a5:15:8a:a1:68:fd:33:66:2f:59: 57:9e:9d:25:78:b4:70:26:60:1d:be:f2:39:bc:00: 21:90:95:f2:52:0f:ee:e9:e9:0d:b2:17:dc:5a:84: 5f:a3:f1:48:75:a4:92:28:77:36:e7:46:93:85:f7: 21:4e:b0:5b:d8:f5:20:9e:52:09:4b:4c:d7:54:aa: b7:38:ee:d5:e7:be:99:81:44:4c:ca:11:c4:4a:e7: 7d:e7:fe:5a:75:a2:31:b5:0d:5a:f4:3a:0c:44:b1: 92:65:4b:89:57:04:51:e5:4d:37:53:3c:ce:25:be: bb:1c:82:94:61:7b:d8:02:eb:6b:33:c8:79:f9:ad: 10:c9:28:e9:ec:b4:27:65:12:d4:2c:5c:22:ae:1c: 70:2c:b0:b8:e2:cd:dc:3e:06:c0:b0:45:55:2b:55: d3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.199.0/24 Signature Algorithm: sha256WithRSAEncryption 06:95:85:35:e9:7b:2f:cf:6c:86:cf:b1:68:60:44:af:e9:4d: 8b:59:66:fd:cd:10:5e:cb:0d:e5:6c:54:2f:a7:22:6f:6e:3e: be:b1:d1:3f:32:ea:54:78:28:dd:7a:88:23:58:e0:0d:53:92: da:39:e0:b8:da:05:1a:70:fa:71:fa:8f:ed:48:18:60:5a:37: 3b:be:d5:3f:b4:c3:a6:03:bf:82:4e:d2:63:ab:c8:23:39:18: 27:6e:bd:a8:ca:11:48:52:7f:a1:78:9d:5d:42:9b:75:25:09: 00:b3:be:f6:61:3a:63:ae:d0:ad:44:e1:de:a5:4f:db:d3:41: 26:bf:b6:f8:35:f4:1d:33:a6:25:1e:10:f7:9c:9b:b6:87:35: f4:a4:ac:65:c3:7f:8b:3a:fa:53:66:80:d7:d1:f4:1a:d8:04: 39:cc:fb:96:2b:05:38:2f:2f:b6:08:fa:81:96:d0:04:3a:e2: 31:bc:97:00:2a:f4:3b:00:cf:c3:cc:b5:92:4e:0e:c5:29:5c: aa:7a:4e:f5:dc:95:6e:75:43:b8:a8:33:8b:89:70:7a:bf:dd: ba:d3:85:83:5a:2d:4a:2a:54:60:48:53:fb:d6:66:48:b2:ba: 69:8f:4b:65:4b:44:b4:34:99:c1:af:94:e7:7c:41:c9:55:6e: 13:c0:e2:ec -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6W3Q865pD1a5ExeYDpO6uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2JlOTFlYjYzYTQ0ZjFlOWYxYTgzZWRkMjE4YTFlYzc1YzI1ZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogbidFwnA99iyjuxvt5HTGPeX7zM FJhpdkMm09Q/lYwbbmUCz+Lk8atFwZdSaY28tbGg9HnfyWTggf7OiVWBeWaGWmaW AV86QzOxUDK7m2AUScGQNSzub9v42syVOaUViqFo/TNmL1lXnp0leLRwJmAdvvI5 vAAhkJXyUg/u6ekNshfcWoRfo/FIdaSSKHc250aThfchTrBb2PUgnlIJS0zXVKq3 OO7V576ZgURMyhHESud95/5adaIxtQ1a9DoMRLGSZUuJVwRR5U03UzzOJb67HIKU YXvYAutrM8h5+a0QySjp7LQnZRLULFwirhxwLLC44s3cPgbAsEVVK1XTqwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFAy+ketjpE8enxqD7dIYoex1wl6RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzdlNTFi NC0wYWI0LTQ3MTktYjMzMC1iZGM1YWU4YWJkYjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvN2U1MWI0 LTBhYjQtNDcxOS1iMzMwLWJkYzVhZThhYmRiMS8xL0RMNlI2Mk9rVHg2ZkdvUHQw aGloN0hYQ1hwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuevHMA0GCSqGSIb3DQEBCwUAA4IBAQAGlYU1 6Xsvz2yGz7FoYESv6U2LWWb9zRBeyw3lbFQvpyJvbj6+sdE/MupUeCjdeogjWOAN U5LaOeC42gUacPpx+o/tSBhgWjc7vtU/tMOmA7+CTtJjq8gjORgnbr2oyhFIUn+h eJ1dQpt1JQkAs772YTpjrtCtROHepU/b00Emv7b4NfQdM6YlHhD3nJu2hzX0pKxl w3+LOvpTZoDX0fQa2AQ5zPuWKwU4Ly+2CPqBltAEOuIxvJcAKvQ7AM/DzLWSTg7F KVyqek713JVudUO4qDOLiXB6v92604WDWi1KKlRgSFP71mZIsrppj0tlS0S0NJnB r5TnfEHJVW4TwOLs -----END CERTIFICATE-----Generated at Fri Jan 2 23:51:59 2026 by rpki-client