This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_6_prvuHuuoh5EJdR7EZlr2x4o4.cer File: _6_prvuHuuoh5EJdR7EZlr2x4o4.cer (raw, json) Hash identifier: XHajXWpXkojF+0Ac9mClXCunPWkQ+h3RzS0rPnynz3E= Subject key identifier: FF:AF:E9:AE:FB:87:BA:EA:21:E4:42:5D:47:B1:19:96:BD:B1:E2:8E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BDAF8A7BD9E7E45BD8EAEFC0A77886846 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/_6_prvuHuuoh5EJdR7EZlr2x4o4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 20 Jan 2026 10:34:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 151.237.144.0/20 IP: 164.138.40.0/21 IP: 185.129.192.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:f8:a7:bd:9e:7e:45:bd:8e:ae:fc:0a:77:88:68:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 20 10:34:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffafe9aefb87baea21e4425d47b11996bdb1e28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:cc:6b:fa:c9:5b:80:e6:04:b1:bc:1b:38:f8: 67:f5:40:0a:92:01:65:11:24:9c:0e:00:54:21:0d: f6:0e:05:42:7e:76:7e:3a:23:41:92:e3:62:ad:b9: 60:90:a8:84:92:a1:26:05:be:9f:1d:60:31:13:52: 74:36:73:60:54:35:bc:66:93:2f:c9:98:3d:c9:9a: 19:7a:41:3b:45:0d:6c:3c:58:23:38:88:89:48:5b: 7e:32:67:71:12:03:0b:1d:64:b2:a9:bc:6f:98:22: fa:ea:71:c6:8f:71:f4:f6:84:14:d0:6a:7a:48:0b: d1:14:34:4e:d1:4e:b6:c5:4c:2f:25:9c:dd:e4:dc: 5f:13:09:06:4b:9d:51:1b:61:87:85:55:f1:64:63: 04:a0:f2:0f:28:80:ee:63:a5:04:a7:15:fe:c0:d7: d2:bf:5a:66:93:1a:3e:d9:ea:f7:2f:8e:c1:55:54: d7:a2:41:c6:2e:94:6b:b2:8d:c7:7a:36:70:0e:77: fe:c8:3b:f4:87:64:0b:47:30:ba:3d:9e:94:88:e8: dd:c2:0c:59:bd:3d:2f:0f:7f:06:98:eb:a2:5f:7c: 93:90:f0:02:bd:0b:1b:bd:65:25:4f:0d:94:b8:de: 65:b8:e3:49:ce:09:4c:8e:04:f8:2b:d6:8e:2a:c1: 37:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AF:E9:AE:FB:87:BA:EA:21:E4:42:5D:47:B1:19:96:BD:B1:E2:8E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/_6_prvuHuuoh5EJdR7EZlr2x4o4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.237.144.0/20 164.138.40.0/21 185.129.192.0/22 Signature Algorithm: sha256WithRSAEncryption 30:29:d1:4c:1c:ff:e1:7f:56:0b:8e:6e:5b:40:1b:d6:6d:49: 41:20:b8:b4:81:3a:db:ff:21:31:db:e4:7f:04:68:fe:f1:04: ff:ea:7a:50:56:63:75:68:d1:8c:3e:85:6f:c5:4e:5c:7a:59: 4b:65:cd:f3:92:f9:92:ff:9c:93:02:33:79:14:a9:9d:2b:d0: 4e:95:9c:d8:cb:c3:75:e0:4e:19:b6:12:d3:dd:85:e8:0a:9e: 36:d2:8d:6a:2c:6d:7c:72:07:3e:58:2e:ff:bb:0c:b1:a7:43: 4f:26:52:51:b1:24:2f:5e:d5:f2:e2:04:db:b9:9d:05:13:4b: 2a:17:fe:3d:c4:c6:e1:a6:f8:06:a3:24:eb:ba:4d:97:35:ca: 09:e1:7b:64:ec:44:c7:3b:13:1d:4d:85:80:49:7c:a1:3e:b9: fb:2b:f6:7e:a1:ed:1b:0b:51:11:af:16:77:c1:76:16:bf:3f: 8b:17:7d:88:c7:f0:df:c8:49:a9:48:8f:99:51:9e:73:6d:a3: 31:51:01:0c:c8:00:56:36:1c:40:d3:31:58:d9:1d:f5:4b:a1: e0:60:ed:a3:a1:e3:d3:dd:05:c0:ed:2b:44:8c:5e:99:0d:2e: 6b:40:c5:2f:c4:1d:ef:6e:db:21:ef:72:e9:57:01:34:9f:c5: 2d:9d:ad:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZva+Ke9nn5FvY6u/Ap3iGhGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIwMTAzNDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmFmZTlhZWZiODdiYWVhMjFlNDQyNWQ0N2IxMTk5NmJkYjFlMjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Mxr+slbgOYEsbwbOPhn9UAKkgFl ESScDgBUIQ32DgVCfnZ+OiNBkuNirblgkKiEkqEmBb6fHWAxE1J0NnNgVDW8ZpMv yZg9yZoZekE7RQ1sPFgjOIiJSFt+MmdxEgMLHWSyqbxvmCL66nHGj3H09oQU0Gp6 SAvRFDRO0U62xUwvJZzd5NxfEwkGS51RG2GHhVXxZGMEoPIPKIDuY6UEpxX+wNfS v1pmkxo+2er3L47BVVTXokHGLpRrso3HejZwDnf+yDv0h2QLRzC6PZ6UiOjdwgxZ vT0vD38GmOuiX3yTkPACvQsbvWUlTw2UuN5luONJzglMjgT4K9aOKsE3+QIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFP+v6a77h7rqIeRCXUexGZa9seKOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3LzU1MDc4 NC05OWI2LTRhZjEtYmNmOS1lODE2NGU3NTJjMmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvNTUwNzg0 LTk5YjYtNGFmMS1iY2Y5LWU4MTY0ZTc1MmMyZi8xL182X3BydnVIdXVvaDVFSmRS N0VabHIyeDRvNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQEl+2QAwQDpIooAwQCuYHAMA0GCSqGSIb3DQEB CwUAA4IBAQAwKdFMHP/hf1YLjm5bQBvWbUlBILi0gTrb/yEx2+R/BGj+8QT/6npQ VmN1aNGMPoVvxU5cellLZc3zkvmS/5yTAjN5FKmdK9BOlZzYy8N14E4ZthLT3YXo Cp420o1qLG18cgc+WC7/uwyxp0NPJlJRsSQvXtXy4gTbuZ0FE0sqF/49xMbhpvgG oyTruk2XNcoJ4Xtk7ETHOxMdTYWASXyhPrn7K/Z+oe0bC1ERrxZ3wXYWvz+LF32I x/DfyEmpSI+ZUZ5zbaMxUQEMyABWNhxA0zFY2R31S6HgYO2joePT3QXA7StEjF6Z DS5rQMUvxB3vbtsh73LpVwE0n8Utna0d -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:42 2026 by rpki-client