This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer File: RA6IwxN_ipFffaG1wDQcoYwsI0w.cer (raw, json) Hash identifier: RGzvfHy6NFmXzPWo9blb3JFqFj/ZIt+iQ0mT7Xbn2iI= Subject key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C802279736E5F968C8B3D1D201B1D76 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47146 AS: 48937 IP: 93.189.192.0/21 IP: 195.149.65.0/24 IP: 213.5.168.0/21 IP: 2a00:7680::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:22:79:73:6e:5f:96:8c:8b:3d:1d:20:1b:1d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d5:ac:23:71:7b:e9:1b:cf:45:98:a6:de:cb: 31:17:6c:0d:b9:ee:4b:82:5d:64:f6:85:fa:cd:70: 2e:ae:b1:41:55:1a:ba:61:05:ea:b8:33:be:8c:14: bf:f1:f8:d2:ae:19:1b:51:24:93:43:6e:09:b0:7f: b0:8f:bd:ec:07:1a:f9:4b:d0:1f:f8:93:e5:b9:b4: de:02:d6:82:a4:ed:05:07:b3:27:50:bf:23:43:83: 08:bb:f1:9e:2b:ef:cf:06:5d:72:a3:da:2b:16:c3: 8c:58:e0:24:c6:16:ef:d1:fa:ca:74:8f:50:ff:41: 8a:97:dd:d4:bf:3b:a7:77:86:89:2a:fd:78:f2:03: 96:51:f8:5c:bc:e1:a7:cd:d7:ae:3e:35:c3:90:04: c8:86:80:af:d4:26:98:31:09:27:53:07:83:43:4f: 49:a3:51:e0:3e:fd:07:33:b1:6f:a5:5a:aa:1d:39: b1:09:57:4b:3f:74:9e:83:d8:bf:ff:b2:7d:3a:2b: 1c:04:c5:4d:e6:9a:e2:51:9e:5d:8b:bf:67:6f:71: 78:5a:8e:95:f4:05:cd:a2:87:b5:bb:44:1b:93:4e: af:7a:25:47:cf:5d:87:f1:db:25:60:0f:6d:0c:f6: 96:0a:8a:ed:4a:04:d4:aa:f9:eb:1e:65:84:70:3a: 03:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.189.192.0/21 195.149.65.0/24 213.5.168.0/21 IPv6: 2a00:7680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47146 48937 Signature Algorithm: sha256WithRSAEncryption 49:0f:28:8d:ed:16:29:a3:a3:8e:2b:91:b7:19:b2:00:2a:8d: b2:56:2f:0d:2e:34:86:be:74:76:eb:28:19:d2:88:43:b1:96: 58:c6:9a:24:1c:36:01:39:9f:93:3b:f7:ba:44:d3:f6:57:3a: 31:75:7c:8d:4b:f4:24:1e:23:60:7a:d3:72:7b:6c:24:75:35: 17:86:94:2d:6f:83:06:76:c1:4e:f2:29:6e:61:44:d4:31:10: 0a:59:24:89:e8:cc:0b:dc:45:a5:53:53:98:e6:3a:84:1d:b8: 53:65:81:00:91:1a:1c:06:36:92:2f:7e:d9:1f:9f:0c:48:19: ed:e8:97:02:3b:6a:5c:ad:bb:de:11:61:ed:ea:b7:04:3c:91: 76:62:c9:a6:74:c3:c3:12:4b:14:15:c1:7e:e5:14:f4:f8:a9: 97:45:25:3b:78:2a:f2:34:29:31:36:51:1a:d9:6d:f8:36:81: 54:6e:96:b5:f1:48:28:93:81:39:de:a4:28:e3:de:c0:81:55: f4:f6:5e:09:b3:b0:3e:e0:5e:bd:af:e3:c1:90:9a:9f:04:5b: b4:93:9a:40:52:2d:51:e7:f2:77:c8:16:1b:84:d3:9c:d6:d1: db:a6:ea:e3:c8:5d:c1:c8:d1:00:db:a0:e6:66:83:d7:e3:82: 07:cb:5f:e6 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt8gCJ5c25floyLPR0gGx12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDBlODhjMzEzN2Y4YTkxNWY3ZGExYjVjMDM0MWNhMThjMmMyMzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotWsI3F76RvPRZim3ssxF2wNue5L gl1k9oX6zXAurrFBVRq6YQXquDO+jBS/8fjSrhkbUSSTQ24JsH+wj73sBxr5S9Af +JPlubTeAtaCpO0FB7MnUL8jQ4MIu/GeK+/PBl1yo9orFsOMWOAkxhbv0frKdI9Q /0GKl93Uvzund4aJKv148gOWUfhcvOGnzdeuPjXDkATIhoCv1CaYMQknUweDQ09J o1HgPv0HM7FvpVqqHTmxCVdLP3Seg9i//7J9OiscBMVN5priUZ5di79nb3F4Wo6V 9AXNooe1u0Qbk06veiVHz12H8dslYA9tDPaWCortSgTUqvnrHmWEcDoD3QIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFEQOiMMTf4qRX32htcA0HKGMLCNMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiLzA3ODlh YS05ZTczLTQ1ZWUtOTFiNi0xNDNmZjYwZDk5OTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvMDc4OWFh LTllNzMtNDVlZS05MWI2LTE0M2ZmNjBkOTk5MS8xL1JBNkl3eE5faXBGZmZhRzF3 RFFjb1l3c0kwdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDXb3AAwQAw5VBAwQD1QWoMA0EAgACMAcDBQAq AHaAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwC4KgIDAL8pMA0GCSqGSIb3DQEB CwUAA4IBAQBJDyiN7RYpo6OOK5G3GbIAKo2yVi8NLjSGvnR26ygZ0ohDsZZYxpok HDYBOZ+TO/e6RNP2VzoxdXyNS/QkHiNgetNye2wkdTUXhpQtb4MGdsFO8iluYUTU MRAKWSSJ6MwL3EWlU1OY5jqEHbhTZYEAkRocBjaSL37ZH58MSBnt6JcCO2pcrbve EWHt6rcEPJF2YsmmdMPDEksUFcF+5RT0+KmXRSU7eCryNCkxNlEa2W34NoFUbpa1 8Ugok4E53qQo497AgVX09l4Js7A+4F69r+PBkJqfBFu0k5pAUi1R5/J3yBYbhNOc 1tHbpurjyF3ByNEA26DmZoPX44IHy1/m -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:29 2026 by rpki-client