This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer File: E6-mzmVC4btSPh0DvQCk0it_2u0.cer (raw, json) Hash identifier: lBBkrgjUTWiF8fj8ayWxkRCuIadSgzrr32pdJ573wck= Subject key identifier: 13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77596338B402E2430779F07D15992E48 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211417 IP: 185.144.92.0/22 IP: 2a03:a920::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:63:38:b4:02:e2:43:07:79:f0:7d:15:99:2e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d9:22:b7:e7:e5:36:d4:2f:1b:a0:1e:c6:bd: 86:a7:a0:12:af:88:67:bc:b6:30:fc:aa:b0:0a:86: 8b:fa:f7:b4:6a:cb:90:27:43:d6:00:c1:f2:d0:a2: 56:1c:96:24:5e:81:04:3a:49:56:5e:35:66:9b:ac: 35:1f:3f:d8:bb:35:79:58:97:38:ad:64:85:78:c0: 67:86:b3:bb:6a:49:63:8f:65:11:5b:f8:97:4b:de: 50:46:90:1a:02:a7:81:57:15:71:b0:11:1d:40:22: 31:19:a2:f3:68:bd:9b:c7:c1:88:1c:e3:ec:19:54: af:c9:7e:de:87:3b:38:90:7a:ff:6a:31:dd:6d:af: 06:a8:ec:14:7d:21:43:60:dc:0e:55:43:1c:0f:0b: 4f:66:d8:8e:fd:e4:d9:ed:eb:91:07:0f:46:45:f1: 78:27:6b:01:20:de:8c:54:98:35:8d:e4:30:82:03: b1:f1:87:f9:8a:2c:49:fc:33:ae:82:6f:e2:98:99: 6c:d3:c4:a6:d6:35:48:d0:1f:fc:c0:65:3d:a9:c3: 6a:1a:11:59:60:a7:07:56:ec:03:1a:ba:cf:a5:0d: 4b:47:de:85:f1:07:69:f7:d3:7b:9d:cc:49:bb:d2: c4:9c:46:6b:7c:0b:78:77:22:0c:75:ac:5a:91:95: 5d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.92.0/22 IPv6: 2a03:a920::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211417 Signature Algorithm: sha256WithRSAEncryption 08:dd:c9:d8:1a:51:d0:35:b1:be:8a:ee:ae:3a:d1:f7:5c:22: e5:c2:05:69:43:36:0d:b7:02:83:00:a6:90:b3:89:ff:af:35: 7e:df:77:d4:06:ee:6b:f0:5f:b3:e1:99:11:eb:60:29:bc:31: 2f:2d:c0:bc:dd:70:be:ec:af:4e:a0:31:d0:70:04:df:48:db: f0:ba:5d:75:79:5a:fe:d5:a4:f3:c7:64:f4:17:a9:e6:c9:c2: f8:07:b7:bd:9d:ca:0a:98:3b:7a:7b:9f:a7:f6:35:7c:ec:7d: be:33:7b:98:22:42:7b:6c:19:95:d8:7f:e8:09:48:c3:da:db: 63:90:e2:38:74:fa:ac:6d:82:c4:dd:e0:66:0d:a9:a7:a7:96: 69:4d:a5:a8:59:3f:aa:84:9c:ad:f3:52:e6:e2:a6:36:4e:c5: ad:95:e3:fc:35:07:ae:97:4c:5f:ee:bb:99:e4:38:5f:0b:b5: 27:47:ba:5f:87:a0:4a:49:c2:6b:87:64:33:0a:6d:4d:a8:d2: 75:65:d3:61:94:77:48:a7:e6:39:fc:4f:78:63:8d:41:a6:56: ee:e9:a7:eb:99:00:3b:a5:02:f2:70:10:0b:67:74:b0:52:03: 12:a9:84:f8:29:2d:2a:4c:ed:2e:d1:cc:45:20:39:00:38:10: cd:0c:92:3a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WWM4tALiQwd58H0VmS5IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2FmYTZjZTY1NDJlMWJiNTIzZTFkMDNiZDAwYTRkMjJiN2ZkYWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNkit+flNtQvG6Aexr2Gp6ASr4hn vLYw/KqwCoaL+ve0asuQJ0PWAMHy0KJWHJYkXoEEOklWXjVmm6w1Hz/YuzV5WJc4 rWSFeMBnhrO7akljj2URW/iXS95QRpAaAqeBVxVxsBEdQCIxGaLzaL2bx8GIHOPs GVSvyX7ehzs4kHr/ajHdba8GqOwUfSFDYNwOVUMcDwtPZtiO/eTZ7euRBw9GRfF4 J2sBIN6MVJg1jeQwggOx8Yf5iixJ/DOugm/imJls08Sm1jVI0B/8wGU9qcNqGhFZ YKcHVuwDGrrPpQ1LR96F8Qdp99N7ncxJu9LEnEZrfAt4dyIMdaxakZVd/QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBOvps5lQuG7Uj4dA70ApNIrf9rtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhLzczMWM3 Yy05YTE3LTRiY2EtOTg0Yy1jN2ZiZmM0ZGM5ZGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvNzMxYzdj LTlhMTctNGJjYS05ODRjLWM3ZmJmYzRkYzlkYy8xL0U2LW16bVZDNGJ0U1BoMER2 UUNrMGl0XzJ1MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZBcMA0EAgACMAcDBQAqA6kgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM52TANBgkqhkiG9w0BAQsFAAOCAQEACN3J2BpR0DWx vorurjrR91wi5cIFaUM2DbcCgwCmkLOJ/681ft931Abua/Bfs+GZEetgKbwxLy3A vN1wvuyvTqAx0HAE30jb8LpddXla/tWk88dk9Bep5snC+Ae3vZ3KCpg7enufp/Y1 fOx9vjN7mCJCe2wZldh/6AlIw9rbY5DiOHT6rG2CxN3gZg2pp6eWaU2lqFk/qoSc rfNS5uKmNk7FrZXj/DUHrpdMX+67meQ4Xwu1J0e6X4egSknCa4dkMwptTajSdWXT YZR3SKfmOfxPeGONQaZW7umn65kAO6UC8nAQC2d0sFIDEqmE+CktKkztLtHMRSA5 ADgQzQySOg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:33 2026 by rpki-client