This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer File: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer (raw, json) Hash identifier: Uvp3o0jSZkZwJ2DTosItQyLFNO+ids+goc9QFar+Uqk= Subject key identifier: 5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C802F2085DEEC7771EA182B5D3967BD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:678:b60::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2f:20:85:de:ec:77:71:ea:18:2b:5d:39:67:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:75:0b:c5:30:6a:ec:fd:81:ad:56:4f:41:79: 60:5a:96:22:14:ae:73:c4:b7:5e:4a:ff:fb:1a:99: 36:91:d8:78:b1:a4:cf:6e:6e:95:84:50:9d:2c:0d: db:62:10:ab:a5:45:6d:99:86:78:d2:35:ed:fc:b2: 3f:1e:13:3c:fe:0e:56:a2:e7:98:d7:2c:53:dc:02: 3a:51:99:16:fd:c8:fc:ef:d5:0b:a3:a3:ff:54:1f: 26:12:d5:26:8e:b4:b6:f4:dd:28:fc:cf:cd:0e:09: 65:59:44:62:0a:75:e3:12:25:47:6e:d2:02:e4:2d: 26:53:2f:30:0e:17:b2:75:e6:81:6b:a9:a4:79:28: 2d:85:64:ad:e8:12:3a:65:5c:84:bb:98:6f:93:f7: 65:23:1c:91:d2:4d:8d:22:09:cd:3b:52:da:e6:ad: 04:f8:ec:3f:6a:1e:8c:e4:ff:8d:6e:41:4e:a6:d7: 87:92:a9:39:e6:17:d3:e6:58:1d:78:5b:5c:60:9a: a7:97:37:74:11:71:69:16:00:67:a5:7a:14:99:56: 52:3b:91:69:fa:f8:83:ea:88:42:c3:68:c3:d9:91: 7a:3e:8f:87:f2:61:50:47:23:74:02:47:cd:a7:19: c7:60:17:5c:66:fc:0d:a5:34:e4:0e:53:a8:32:83: d8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:b60::/48 Signature Algorithm: sha256WithRSAEncryption 96:cb:91:a4:6c:2a:b6:21:a7:af:49:7d:6d:43:82:ce:19:cf: 69:aa:26:13:3c:b6:fb:cb:42:12:4b:36:79:dc:f6:40:3b:ea: 8a:58:f9:84:8d:a5:3e:1f:40:0c:52:61:e4:d2:18:dc:ae:fa: 85:69:0b:fc:6c:b1:7d:a4:ba:48:dd:41:b8:e5:a0:f7:fe:e5: 28:8f:df:85:5f:6b:17:57:52:90:1e:cc:90:4c:0a:f2:09:08: 2c:61:b9:15:b5:0e:94:f6:1e:26:f2:46:6d:60:31:e4:fb:af: 22:52:f9:bd:3a:86:97:9c:0d:61:97:4f:1f:f8:61:d6:ef:ee: 61:5e:06:a0:45:e3:bc:36:b9:5f:67:85:fe:60:b0:8d:be:b6: c5:82:7f:53:05:40:69:8a:5a:15:7a:c9:3a:af:f0:58:45:5b: 59:24:e9:b1:6b:91:24:01:f9:8a:4f:63:c8:28:ea:56:c3:32: 06:ba:dd:ed:f8:22:09:9e:a2:13:f9:47:7a:b7:c3:1c:19:6c: 39:18:36:06:df:f0:00:03:4f:54:f2:d3:d4:27:36:1f:8c:db: a8:76:81:d2:2c:4c:c3:d1:13:36:1c:c1:af:f9:84:3d:55:82: 44:b0:30:62:e1:45:07:0e:14:46:92:5d:5d:74:10:69:ff:90: 35:ca:f2:df -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt8gC8ghd7sd3HqGCtdOWe9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmE2MjVkYzM5OGNiNzAwZjcyZmE4ZWE2ZjQzMTNiZjMzMzVhNTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3ULxTBq7P2BrVZPQXlgWpYiFK5z xLdeSv/7Gpk2kdh4saTPbm6VhFCdLA3bYhCrpUVtmYZ40jXt/LI/HhM8/g5WoueY 1yxT3AI6UZkW/cj879ULo6P/VB8mEtUmjrS29N0o/M/NDgllWURiCnXjEiVHbtIC 5C0mUy8wDheydeaBa6mkeSgthWSt6BI6ZVyEu5hvk/dlIxyR0k2NIgnNO1La5q0E +Ow/ah6M5P+NbkFOpteHkqk55hfT5lgdeFtcYJqnlzd0EXFpFgBnpXoUmVZSO5Fp +viD6ohCw2jD2ZF6Po+H8mFQRyN0AkfNpxnHYBdcZvwNpTTkDlOoMoPYcwIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFF+mJdw5jLcA9y+o6m9DE78zNaU7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyLzE3MDYy YS05NmJkLTQ5M2YtOGIyMC1lYWMxMDYzMDBiMGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvMTcwNjJh LTk2YmQtNDkzZi04YjIwLWVhYzEwNjMwMGIwYS8xL1g2WWwzRG1NdHdEM0w2anFi ME1UdnpNMXBUcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAtgMA0GCSqGSIb3DQEBCwUAA4IBAQCW y5GkbCq2IaevSX1tQ4LOGc9pqiYTPLb7y0ISSzZ53PZAO+qKWPmEjaU+H0AMUmHk 0hjcrvqFaQv8bLF9pLpI3UG45aD3/uUoj9+FX2sXV1KQHsyQTAryCQgsYbkVtQ6U 9h4m8kZtYDHk+68iUvm9OoaXnA1hl08f+GHW7+5hXgagReO8NrlfZ4X+YLCNvrbF gn9TBUBpiloVesk6r/BYRVtZJOmxa5EkAfmKT2PIKOpWwzIGut3t+CIJnqIT+Ud6 t8McGWw5GDYG3/AAA09U8tPUJzYfjNuodoHSLEzD0RM2HMGv+YQ9VYJEsDBi4UUH DhRGkl1ddBBp/5A1yvLf -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:07 2026 by rpki-client