This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer File: G6QV0W5y4zPyk2wcXhffJDeBCMI.cer (raw, json) Hash identifier: R2qr3hhzW6UNe1QskBP+yrJmrkzP12Kni5TpKoxwa1w= Subject key identifier: 1B:A4:15:D1:6E:72:E3:33:F2:93:6C:1C:5E:17:DF:24:37:81:08:C2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CA9B048618AA8FCEE7B975EE0FE61 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215620 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a9:b0:48:61:8a:a8:fc:ee:7b:97:5e:e0:fe:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ba415d16e72e333f2936c1c5e17df24378108c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:26:23:82:67:85:20:ae:df:d8:9e:cb:15:63: 92:db:85:be:20:fc:d9:d9:ea:c0:8d:a2:7d:84:2c: 8c:e1:85:21:13:5f:9b:58:e8:e5:c4:73:71:dd:1d: 9d:1d:37:35:ef:d2:e9:3c:39:4f:c2:60:35:f7:39: d5:e0:d8:a3:85:93:14:71:dd:97:7e:b6:81:47:fd: 92:55:7a:31:db:b7:db:cc:24:ee:41:0a:2e:81:24: 11:68:00:6c:7a:61:f0:60:09:56:63:4f:07:15:a9: 64:81:3c:4c:cc:63:e9:f4:d1:11:d2:89:99:78:42: 32:49:ba:89:b9:7d:b0:ab:9e:eb:5d:13:3a:1e:e3: 77:4d:c1:b8:14:c7:fe:54:ba:46:a9:51:9e:0a:3c: a3:bc:ba:37:f2:4c:96:06:1d:57:55:da:cc:9f:33: c3:0c:d8:8e:75:c9:dc:0e:c9:ac:98:0b:d3:c3:50: e1:81:1e:3b:52:0f:02:c2:fd:51:0d:65:4d:d2:a3: 04:2d:26:b0:4a:93:30:37:a0:b9:91:6a:73:a4:d2: 2c:08:e9:ef:aa:dc:4b:88:15:b9:38:c1:53:47:cc: e9:1b:48:c5:a4:88:91:1a:eb:37:dc:94:1e:07:ce: 08:bc:ec:b5:81:6a:8d:78:12:5e:91:63:8a:57:89: f4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A4:15:D1:6E:72:E3:33:F2:93:6C:1C:5E:17:DF:24:37:81:08:C2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215620 Signature Algorithm: sha256WithRSAEncryption 84:0d:ac:40:38:52:d1:82:79:3b:f3:b0:72:f3:00:c3:f1:5f: 1b:14:a9:3f:f8:22:a8:fc:e0:43:44:be:4e:37:f3:ac:e0:a3: 09:67:fd:cd:e7:e4:b8:4f:05:11:8a:c3:8f:3e:bb:c0:92:87: d3:5f:31:ea:54:b0:7a:13:b0:02:64:ce:77:4e:c4:18:f1:6b: 4c:f1:30:b3:42:a9:29:b9:cd:60:2b:1d:e3:26:e7:2e:08:3d: 21:33:7c:a7:4c:0b:9c:ee:84:72:94:c5:46:37:6e:cf:c5:10: 43:bc:af:71:f8:53:41:9b:f7:19:6f:31:12:3c:c8:bd:8a:54: a7:23:53:12:dc:d0:8d:2f:bf:34:2a:e3:55:93:95:e7:a7:52: 11:e8:a6:3b:96:98:e7:59:58:70:9a:34:8e:a4:ec:f5:a9:15: e7:6b:07:9b:17:58:91:af:20:45:2d:35:67:e0:97:37:b4:1c: 80:f5:e2:c2:0b:13:0e:b9:4e:96:f3:04:1c:a9:fa:9f:51:ee: 92:61:6c:cd:b9:f8:62:1f:0e:ab:1b:37:f5:6d:03:09:b6:99: 4e:9d:b3:19:7e:51:c5:6c:9b:9b:38:ae:97:bf:df:63:fa:ac: ae:ff:4a:02:69:51:1f:2e:bb:5e:eb:c5:bb:47:63:c5:96:75: f8:4a:fc:85 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9XKmwSGGKqPzue5de4P5hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmE0MTVkMTZlNzJlMzMzZjI5MzZjMWM1ZTE3ZGYyNDM3ODEwOGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyYjgmeFIK7f2J7LFWOS24W+IPzZ 2erAjaJ9hCyM4YUhE1+bWOjlxHNx3R2dHTc179LpPDlPwmA19znV4NijhZMUcd2X fraBR/2SVXox27fbzCTuQQougSQRaABsemHwYAlWY08HFalkgTxMzGPp9NER0omZ eEIySbqJuX2wq57rXRM6HuN3TcG4FMf+VLpGqVGeCjyjvLo38kyWBh1XVdrMnzPD DNiOdcncDsmsmAvTw1DhgR47Ug8Cwv1RDWVN0qMELSawSpMwN6C5kWpzpNIsCOnv qtxLiBW5OMFTR8zpG0jFpIiRGus33JQeB84IvOy1gWqNeBJekWOKV4n0DQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFBukFdFucuMz8pNsHF4X3yQ3gQjCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhL2NlNDBi OS0zNWQ3LTRhNmEtODMwNy02YTBiMjVjNTYzMmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvY2U0MGI5 LTM1ZDctNGE2YS04MzA3LTZhMGIyNWM1NjMyZC8xL0c2UVYwVzV5NHpQeWsyd2NY aGZmSkRlQkNNSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNKRDANBgkqhkiG9w0BAQsFAAOCAQEAhA2sQDhS0YJ5 O/OwcvMAw/FfGxSpP/giqPzgQ0S+TjfzrOCjCWf9zefkuE8FEYrDjz67wJKH018x 6lSwehOwAmTOd07EGPFrTPEws0KpKbnNYCsd4ybnLgg9ITN8p0wLnO6EcpTFRjdu z8UQQ7yvcfhTQZv3GW8xEjzIvYpUpyNTEtzQjS+/NCrjVZOV56dSEeimO5aY51lY cJo0jqTs9akV52sHmxdYka8gRS01Z+CXN7QcgPXiwgsTDrlOlvMEHKn6n1HukmFs zbn4Yh8Oqxs39W0DCbaZTp2zGX5RxWybmziul7/fY/qsrv9KAmlRHy67XuvFu0dj xZZ1+Er8hQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:49:36 2026 by rpki-client