This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer File: _6vCNZX9gER9mPXsNRMWG9JHP8Y.cer (raw, json) Hash identifier: Iz3DkjSbJmEBgzjej8ccdRwknDl2hTtJK5cAeXhZyN0= Subject key identifier: FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB90528CE0A7197D26E4AAEAB6386F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208341 IP: 193.222.252.0/23 IP: 193.223.70.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:90:52:8c:e0:a7:19:7d:26:e4:aa:ea:b6:38:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffabc23595fd80447d98f5ec3513161bd2473fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:be:dd:bc:ca:c9:9e:8c:c4:84:e8:d7:b8:9a: b5:8f:d2:b5:e1:4e:fa:7d:db:95:b9:fc:63:7c:79: 34:c5:6c:68:99:b7:d5:24:8b:5d:1f:3a:4b:2f:d0: e5:2a:ff:37:3c:a0:95:3d:fc:3a:e3:df:a6:c4:18: 1d:85:c7:7b:45:39:ac:91:99:b6:86:05:89:d2:1d: 54:23:81:cc:20:bc:8c:ce:29:d2:77:ad:a9:74:24: 01:f2:c5:ca:40:87:57:ec:77:18:38:5f:f5:79:6f: a1:36:f8:45:43:b0:17:83:8a:15:22:7a:76:37:1c: 55:ba:03:8d:51:6e:1d:b9:b1:a0:01:fe:27:e1:65: 85:31:d5:0a:7d:3e:af:37:77:06:3b:7c:63:1e:2d: bc:92:e6:5d:6d:1c:bb:f6:d4:49:bf:6e:10:e1:4b: 07:0f:b8:fa:89:13:47:13:5c:68:17:5b:f1:59:3c: f6:45:51:78:5e:a4:37:e1:22:07:aa:bc:e9:dc:1e: 49:72:3b:7e:7e:fb:65:f1:65:f3:ac:88:40:d1:9e: e5:24:13:9e:05:a7:75:64:80:a5:20:29:7d:bb:bc: 58:09:f0:63:53:1c:0b:e0:c2:0d:ee:a4:1a:31:af: 98:0e:04:e3:de:b4:e1:73:e6:54:e9:41:44:d3:25: a6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.222.252.0/23 193.223.70.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208341 Signature Algorithm: sha256WithRSAEncryption 60:95:26:b9:4f:57:78:09:29:8a:ff:e1:59:96:7e:7c:5c:ac: de:e8:ab:a3:6f:a3:72:78:3a:a7:22:ad:f4:68:50:fe:fb:f7: 50:87:92:97:c5:46:d3:ef:90:2e:e4:01:e7:9c:ed:47:f0:a1: 39:75:24:0e:7f:8e:93:6d:0b:9a:e0:9c:e1:a2:cf:95:9e:58: d9:20:ae:f7:05:55:e3:c1:89:3d:cc:05:b0:ce:cc:59:82:a1: 13:25:be:84:2b:4b:d1:21:3c:87:b0:f1:88:91:42:29:fe:47: b0:4c:81:b4:b9:1a:3f:bd:fb:27:dd:91:2d:56:d8:3a:dd:ba: 4b:9b:70:1e:c4:02:d7:31:7c:0d:8b:5d:4d:dd:40:eb:13:31: f0:c0:bb:62:b7:85:59:16:a9:b8:cf:58:e1:b3:d9:f6:dd:b7: 5c:fa:65:33:58:cc:8d:5f:58:9f:58:38:5a:26:8e:45:f2:90: 39:fd:e2:2a:ce:40:58:16:4a:12:04:23:78:72:60:29:cb:8a: be:bb:9f:79:0c:2c:aa:fa:f3:2a:28:d7:9f:73:ee:dc:e1:2d: 47:5a:98:2b:6d:d0:50:64:da:8f:7d:bb:7b:98:d7:4e:89:cd: d3:ae:12:da:17:6a:f6:24:f4:22:c4:78:4e:c4:7a:d9:f1:4a: 10:3c:6e:61 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt265BSjOCnGX0m5KrqtjhvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmFiYzIzNTk1ZmQ4MDQ0N2Q5OGY1ZWMzNTEzMTYxYmQyNDczZmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9b7dvMrJnozEhOjXuJq1j9K14U76 fduVufxjfHk0xWxombfVJItdHzpLL9DlKv83PKCVPfw649+mxBgdhcd7RTmskZm2 hgWJ0h1UI4HMILyMzinSd62pdCQB8sXKQIdX7HcYOF/1eW+hNvhFQ7AXg4oVInp2 NxxVugONUW4dubGgAf4n4WWFMdUKfT6vN3cGO3xjHi28kuZdbRy79tRJv24Q4UsH D7j6iRNHE1xoF1vxWTz2RVF4XqQ34SIHqrzp3B5Jcjt+fvtl8WXzrIhA0Z7lJBOe Bad1ZIClICl9u7xYCfBjUxwL4MIN7qQaMa+YDgTj3rThc+ZU6UFE0yWmJQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFP+rwjWV/YBEfZj17DUTFhvSRz/GMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzLzE5MTIx OS00N2M5LTRiMWItOGU0Ni1kZDhhNjhkYmQzYjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvMTkxMjE5 LTQ3YzktNGIxYi04ZTQ2LWRkOGE2OGRiZDNiNi8xL182dkNOWlg5Z0VSOW1QWHNO Uk1XRzlKSFA4WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwd78AwQBwd9GMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMt1TANBgkqhkiG9w0BAQsFAAOCAQEAYJUmuU9XeAkpiv/hWZZ+fFys 3uiro2+jcng6pyKt9GhQ/vv3UIeSl8VG0++QLuQB55ztR/ChOXUkDn+Ok20LmuCc 4aLPlZ5Y2SCu9wVV48GJPcwFsM7MWYKhEyW+hCtL0SE8h7DxiJFCKf5HsEyBtLka P737J92RLVbYOt26S5twHsQC1zF8DYtdTd1A6xMx8MC7YreFWRapuM9Y4bPZ9t23 XPplM1jMjV9Yn1g4WiaORfKQOf3iKs5AWBZKEgQjeHJgKcuKvrufeQwsqvrzKijX n3Pu3OEtR1qYK23QUGTaj327e5jXTonN064S2hdq9iT0IsR4TsR62fFKEDxuYQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:45 2026 by rpki-client