This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer File: P6xo-RIFxE5zAzbmALYzT4yB6MI.cer (raw, json) Hash identifier: CobGPwieNTvALOXKIlA+M2Mhp9kFwkDlSxOuN+IxjWA= Subject key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9F1286800DBE39EED5826DFB2E155 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25761 AS: 214502 IP: 143.223.100.0/24 IP: 170.62.253.0/24 IP: 2001:67c:fec::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f1:28:68:00:db:e3:9e:ed:58:26:df:b2:e1:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fac68f91205c44e730336e600b6334f8c81e8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:44:37:48:e4:dd:b4:0e:85:37:e4:ce:43:70: b7:1a:36:fc:92:5b:b2:cc:38:fb:02:23:84:ff:d1: 4f:ab:72:31:9b:f0:c7:14:01:37:46:91:63:c9:9b: c7:d1:d2:f7:ea:cc:1a:3b:b2:1b:55:42:e0:b7:aa: b7:49:f3:c8:76:25:32:dd:4d:c7:5f:84:c4:ab:84: 1e:b5:4e:d5:99:f0:11:c9:73:85:38:76:a6:5e:a1: 0a:de:8d:87:bf:f8:76:95:6f:73:a8:85:4e:3f:07: 9e:67:91:85:ca:cf:71:63:4e:72:ed:c4:38:ff:9f: d8:9b:81:12:d8:a7:44:6a:b5:b7:22:03:9f:62:9b: a0:1e:83:c9:35:e9:6d:a3:3f:d4:84:ed:51:c2:68: 23:6b:0d:53:9a:11:65:74:0a:4a:97:8d:07:c6:24: 4d:a0:7d:0a:14:35:31:00:19:be:43:da:96:23:20: 1b:d1:3e:e0:9b:e3:22:1e:8b:72:cc:ad:ac:2f:5d: ea:2b:06:a1:f4:4e:7a:55:9b:c3:1e:cc:6f:bf:e0: fd:9b:96:94:32:7c:53:fe:fc:6d:b5:b6:2d:10:cb: 9d:df:bd:f7:78:c3:e5:95:f8:69:18:cf:85:a2:bb: eb:2b:79:47:eb:15:c6:35:ee:16:4e:89:6f:c8:88: 9a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.223.100.0/24 170.62.253.0/24 IPv6: 2001:67c:fec::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25761 214502 Signature Algorithm: sha256WithRSAEncryption 3e:ad:f9:32:af:28:a3:4d:7b:cf:72:11:43:ca:74:44:41:13: 4f:36:30:ff:42:37:f4:42:cd:9c:04:54:ee:db:fa:17:58:0f: 8b:6f:d7:a9:0c:56:f0:2b:43:ae:7d:a1:34:3c:fe:79:4f:cd: ae:33:e3:52:00:05:dc:05:7e:db:cd:62:71:8a:24:f4:ce:52: e3:59:cf:b4:2a:ee:f0:37:4a:26:8b:54:09:0a:4b:79:37:78: b9:52:4e:99:1c:81:89:b4:53:23:7e:ba:ff:da:9a:8f:b8:39: 13:e3:83:6c:71:17:fc:aa:1d:db:2c:36:6d:f0:e6:55:17:c8: 7e:03:f9:a4:4e:20:a2:0e:8d:98:8b:9b:40:da:77:2a:16:f5: 09:83:37:39:63:b9:e8:79:f6:98:73:d4:3b:32:5b:b7:87:de: 69:8e:ae:29:b0:e2:89:b4:b0:2b:5e:71:a6:26:34:9d:b0:f5: 94:25:51:bc:15:15:c5:a8:24:44:40:84:f8:33:7c:8d:55:40: 81:83:4c:d7:41:7f:64:ec:44:9c:aa:f0:3e:da:79:05:df:6d: 8e:93:0e:80:3d:e9:1e:5b:f6:88:7f:6c:2d:c2:05:6b:0b:95: 89:b0:fc:b3:23:35:dc:48:88:66:3d:29:04:6b:dd:4f:c1:b3: 53:15:ef:66 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt9yfEoaADb457tWCbfsuFVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmFjNjhmOTEyMDVjNDRlNzMwMzM2ZTYwMGI2MzM0ZjhjODFlOGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUQ3SOTdtA6FN+TOQ3C3Gjb8kluy zDj7AiOE/9FPq3Ixm/DHFAE3RpFjyZvH0dL36swaO7IbVULgt6q3SfPIdiUy3U3H X4TEq4QetU7VmfARyXOFOHamXqEK3o2Hv/h2lW9zqIVOPweeZ5GFys9xY05y7cQ4 /5/Ym4ES2KdEarW3IgOfYpugHoPJNeltoz/UhO1Rwmgjaw1TmhFldApKl40HxiRN oH0KFDUxABm+Q9qWIyAb0T7gm+MiHotyzK2sL13qKwah9E56VZvDHsxvv+D9m5aU MnxT/vxttbYtEMud3733eMPllfhpGM+ForvrK3lH6xXGNe4WTolvyIia5QIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFD+saPkSBcROcwM25gC2M0+MgejCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5L2UzZTQw Zi0xNTA1LTQyZTktOTZmMS1mZWE3NGU4MTA1MWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvZTNlNDBm LTE1MDUtNDJlOS05NmYxLWZlYTc0ZTgxMDUxYS8xL1A2eG8tUklGeEU1ekF6Ym1B TFl6VDR5QjZNSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQAj99kAwQAqj79MA8EAgACMAkDBwAgAQZ8D+ww HgYIKwYBBQUHAQgBAf8EDzANoAswCQICZKECAwNF5jANBgkqhkiG9w0BAQsFAAOC AQEAPq35Mq8oo017z3IRQ8p0REETTzYw/0I39ELNnARU7tv6F1gPi2/XqQxW8CtD rn2hNDz+eU/NrjPjUgAF3AV+281icYok9M5S41nPtCru8DdKJotUCQpLeTd4uVJO mRyBibRTI366/9qaj7g5E+ODbHEX/Kod2yw2bfDmVRfIfgP5pE4gog6NmIubQNp3 Khb1CYM3OWO56Hn2mHPUOzJbt4feaY6uKbDiibSwK15xpiY0nbD1lCVRvBUVxagk RECE+DN8jVVAgYNM10F/ZOxEnKrwPtp5Bd9tjpMOgD3pHlv2iH9sLcIFawuVibD8 syM13EiIZj0pBGvdT8GzUxXvZg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:58 2026 by rpki-client