This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer File: _6PlUUHBofny4ogR7X53-tN4pXk.cer (raw, json) Hash identifier: foycbtedVVDa6XD4prvFTzeT+SwJVfY92JRdQY5cPnU= Subject key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38E38611C6E855625F27C3D8BC4B98 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 109.122.0.0/19 IP: 2a12:180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e3:86:11:c6:e8:55:62:5f:27:c3:d8:bc:4b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9c:ae:46:7a:37:b9:e6:ea:50:36:c2:e3:9c: d3:22:3b:e7:2e:fa:4c:27:f2:d6:c5:80:50:7e:8e: b5:1e:6e:2f:0b:40:93:aa:4d:d3:3a:d9:c0:1f:ea: 44:50:95:c1:2b:37:67:01:bf:56:e6:e1:ec:40:f3: 39:4e:28:02:95:e1:51:22:9b:0a:e2:4a:bb:40:d7: 3e:ad:4d:84:28:5a:bd:57:47:f8:71:8b:35:7a:2e: 5b:f8:e1:f9:5f:8b:4d:07:a4:37:55:b0:10:af:7d: 1c:93:00:88:a3:9d:9b:aa:c9:80:c7:a2:17:27:5f: 2b:13:41:75:20:57:9c:f7:d0:1a:35:c0:7f:d2:6e: ee:78:ff:c5:f4:b3:91:8c:9e:15:a7:73:27:64:dc: 0c:fb:86:8a:ba:f3:bb:fc:21:5c:35:29:a3:af:80: 68:b3:17:54:14:42:de:76:76:f4:31:c2:bd:91:6a: 59:e3:ba:0f:e3:cb:e8:3e:8f:5e:fd:11:df:d0:f9: 54:91:ba:87:7f:97:08:ab:11:d5:93:d0:d3:ec:dd: 59:df:0c:54:18:7d:02:dd:f9:ce:76:54:45:25:15: 3a:02:30:f0:06:14:c7:d6:8a:4d:b4:ca:c4:91:33: 93:39:e4:4d:cb:8b:37:6b:73:3f:c8:c1:9e:ee:b4: 0e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.0.0/19 IPv6: 2a12:180::/29 Signature Algorithm: sha256WithRSAEncryption 24:6b:61:67:21:3f:11:8a:74:cc:60:19:53:7e:9b:bd:a7:95: b1:30:06:c7:de:e1:d0:62:d9:54:27:dd:5c:9b:4a:0b:d9:fa: e6:38:9e:84:d6:a6:a9:6f:16:bd:f2:90:b1:36:82:9a:8e:cd: b4:38:9d:6b:e6:6e:22:74:84:eb:9b:7b:71:44:a7:6d:a7:d2: ba:cf:a0:5a:da:38:12:0a:07:2a:73:41:e2:77:5a:9e:87:59: 1b:ca:15:cf:ee:d4:bc:5d:0b:87:2e:a3:a1:fb:35:c5:9d:bc: 7e:38:81:28:5f:6c:22:e6:8c:c7:59:e4:f9:b9:31:60:bf:c2: f4:72:33:97:fd:77:c9:77:89:dd:29:7e:d4:bc:bc:7d:a2:fe: fd:8c:b0:35:bf:fc:7f:a6:2b:18:58:c5:7a:a1:d5:34:95:0c: 2b:6d:37:e5:88:4b:68:2f:33:c7:ce:c9:74:64:87:88:7a:96: c2:52:d0:24:c7:4e:e3:5b:e9:c5:d2:27:2b:63:f1:63:49:25: c1:b8:47:06:32:99:36:18:4f:b1:75:79:08:ad:0b:c8:90:4b: 67:ba:17:6e:3e:75:40:bf:49:0d:99:2c:e8:e8:5c:96:6e:28: 67:c6:86:96:1c:ce:6d:23:05:fd:28:4e:a7:66:df:d9:61:34: 8a:38:99:f8 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+OOOGEcboVWJfJ8PYvEuYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmEzZTU1MTQxYzFhMWY5ZjJlMjg4MTFlZDdlNzdmYWQzNzhhNTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5yuRno3uebqUDbC45zTIjvnLvpM J/LWxYBQfo61Hm4vC0CTqk3TOtnAH+pEUJXBKzdnAb9W5uHsQPM5TigCleFRIpsK 4kq7QNc+rU2EKFq9V0f4cYs1ei5b+OH5X4tNB6Q3VbAQr30ckwCIo52bqsmAx6IX J18rE0F1IFec99AaNcB/0m7ueP/F9LORjJ4Vp3MnZNwM+4aKuvO7/CFcNSmjr4Bo sxdUFELednb0McK9kWpZ47oP48voPo9e/RHf0PlUkbqHf5cIqxHVk9DT7N1Z3wxU GH0C3fnOdlRFJRU6AjDwBhTH1opNtMrEkTOTOeRNy4s3a3M/yMGe7rQObQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFP+j5VFBwaH58uKIEe1+d/rTeKV5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExL2IyNjNh Mi0wZjZmLTRmNWQtYWY5ZS1hMzlhYzI1MzlmYzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvYjI2M2Ey LTBmNmYtNGY1ZC1hZjllLWEzOWFjMjUzOWZjNS8xL182UGxVVUhCb2ZueTRvZ1I3 WDUzLXRONHBYay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQFbXoAMA0EAgACMAcDBQMqEgGAMA0GCSqGSIb3 DQEBCwUAA4IBAQAka2FnIT8RinTMYBlTfpu9p5WxMAbH3uHQYtlUJ91cm0oL2frm OJ6E1qapbxa98pCxNoKajs20OJ1r5m4idITrm3txRKdtp9K6z6Ba2jgSCgcqc0Hi d1qeh1kbyhXP7tS8XQuHLqOh+zXFnbx+OIEoX2wi5ozHWeT5uTFgv8L0cjOX/XfJ d4ndKX7UvLx9ov79jLA1v/x/pisYWMV6odU0lQwrbTfliEtoLzPHzsl0ZIeIepbC UtAkx07jW+nF0icrY/FjSSXBuEcGMpk2GE+xdXkIrQvIkEtnuhduPnVAv0kNmSzo 6FyWbihnxoaWHM5tIwX9KE6nZt/ZYTSKOJn4 -----END CERTIFICATE-----Generated at Sun Jan 11 21:03:47 2026 by rpki-client