This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer File: X6FRijy1wnSeMNn_Icg3iJHOgSU.cer (raw, json) Hash identifier: yKv50WlRvkkxn5UVwb4uVRZAMpxp2FlG0kOv06jpmYk= Subject key identifier: 5F:A1:51:8A:3C:B5:C2:74:9E:30:D9:FF:21:C8:37:88:91:CE:81:25 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BDF76843F565DE3C6EE750ED0864EB79F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 21 Jan 2026 07:30:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39461 IP: 192.149.117.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:76:84:3f:56:5d:e3:c6:ee:75:0e:d0:86:4e:b7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 21 07:30:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fa1518a3cb5c2749e30d9ff21c8378891ce8125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bc:ba:2e:13:25:8c:89:c5:67:cb:2a:af:89: 9e:be:b7:47:49:9a:24:b4:d0:ac:33:b8:3f:43:51: bc:b6:83:e0:55:05:19:6f:c6:f1:eb:95:5b:23:f0: b7:88:b8:b0:44:af:b2:cc:46:53:ca:b9:e4:0d:56: 6a:04:a6:73:d0:41:58:35:2d:14:28:d4:b6:ac:bd: b3:2c:47:65:e1:d6:5b:7e:58:00:9c:5b:e1:29:e6: cd:63:a9:f8:94:eb:6b:1b:c7:8e:48:00:60:69:cb: 12:55:2a:63:24:80:8a:6f:65:df:47:05:e4:fa:cb: 54:48:63:e7:61:ee:f3:18:79:2c:0f:8f:f5:fe:70: b6:7f:d5:0d:50:ff:b7:b0:85:47:e2:ef:7c:cd:e3: a4:ca:90:cc:c0:b3:58:b5:31:9b:93:f3:dc:55:f3: 8e:3c:39:4d:79:52:80:45:de:6c:a3:0f:f0:10:8b: f3:3b:7d:87:9a:72:d9:82:51:7a:32:cb:b1:99:40: 6c:46:8f:4b:56:c8:db:f7:cc:6d:f6:d2:51:30:22: 48:36:1b:0d:57:76:20:e6:c9:f9:40:07:30:34:87: 91:98:1e:77:51:39:0d:4d:5b:9e:1e:30:1d:f9:91: c2:64:73:e0:5f:1d:d0:1d:2f:d2:c5:a2:ce:f2:ef: 84:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A1:51:8A:3C:B5:C2:74:9E:30:D9:FF:21:C8:37:88:91:CE:81:25 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.149.117.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39461 Signature Algorithm: sha256WithRSAEncryption 70:32:ba:97:8d:c7:a7:25:24:83:40:6b:dd:b7:81:25:19:ce: 07:dc:e3:3e:3a:bb:2b:e2:db:e2:15:b6:c6:f0:71:d3:d2:28: 99:3a:42:37:05:d2:cd:82:1b:ee:5f:de:59:e9:85:fe:58:18: 0a:6b:13:bf:4f:8d:34:e8:85:17:3e:25:37:bb:03:b0:13:47: 3b:e5:16:b6:fa:de:06:e0:30:2f:c7:19:d0:93:d7:ce:8e:93: 92:b1:aa:eb:f1:49:24:df:a0:dc:32:d8:fa:18:04:75:80:79: b8:eb:54:cf:94:3d:39:74:4b:45:db:f6:0f:de:0e:fb:61:c8: 9f:17:53:62:aa:fb:29:bf:ae:bb:a7:10:a4:39:7b:7c:11:e1: a4:75:ad:c5:c1:c1:49:39:75:cd:ed:8a:5e:d4:22:2f:f9:18: 11:16:ed:87:b4:6d:f9:50:49:0c:97:81:ec:50:de:63:5f:9e: d0:f1:68:63:f9:23:39:9c:e3:13:af:0f:c7:04:96:07:46:93: 76:84:86:4e:88:2f:c0:08:40:2a:1f:d4:d9:b8:fb:32:0a:f6: 48:b8:bb:a7:9f:3e:2b:d4:4e:fa:a9:52:5b:ca:ba:46:4d:ed: d6:df:36:5e:1e:d5:fb:1c:c3:50:a1:d0:a0:3d:f1:28:43:12: 22:a6:1f:18 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZvfdoQ/Vl3jxu51DtCGTrefMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIxMDczMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmExNTE4YTNjYjVjMjc0OWUzMGQ5ZmYyMWM4Mzc4ODkxY2U4MTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7y6LhMljInFZ8sqr4mevrdHSZok tNCsM7g/Q1G8toPgVQUZb8bx65VbI/C3iLiwRK+yzEZTyrnkDVZqBKZz0EFYNS0U KNS2rL2zLEdl4dZbflgAnFvhKebNY6n4lOtrG8eOSABgacsSVSpjJICKb2XfRwXk +stUSGPnYe7zGHksD4/1/nC2f9UNUP+3sIVH4u98zeOkypDMwLNYtTGbk/PcVfOO PDlNeVKARd5sow/wEIvzO32HmnLZglF6MsuxmUBsRo9LVsjb98xt9tJRMCJINhsN V3Yg5sn5QAcwNIeRmB53UTkNTVueHjAd+ZHCZHPgXx3QHS/SxaLO8u+E9wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFF+hUYo8tcJ0njDZ/yHIN4iRzoElMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzkzMTAx NS1hODBiLTQ4NDQtYWMzNy02ZThlOThiOTBjNWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvOTMxMDE1 LWE4MGItNDg0NC1hYzM3LTZlOGU5OGI5MGM1Zi8xL1g2RlJpankxd25TZU1Obl9J Y2czaUpIT2dTVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwJV1MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCaJTANBgkqhkiG9w0BAQsFAAOCAQEAcDK6l43HpyUkg0Br3beBJRnOB9zjPjq7 K+Lb4hW2xvBx09IomTpCNwXSzYIb7l/eWemF/lgYCmsTv0+NNOiFFz4lN7sDsBNH O+UWtvreBuAwL8cZ0JPXzo6TkrGq6/FJJN+g3DLY+hgEdYB5uOtUz5Q9OXRLRdv2 D94O+2HInxdTYqr7Kb+uu6cQpDl7fBHhpHWtxcHBSTl1ze2KXtQiL/kYERbth7Rt +VBJDJeB7FDeY1+e0PFoY/kjOZzjE68PxwSWB0aTdoSGTogvwAhAKh/U2bj7Mgr2 SLi7p58+K9RO+qlSW8q6Rk3t1t82Xh7V+xzDUKHQoD3xKEMSIqYfGA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:11 2026 by rpki-client