This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer File: a6JrVs7pf2AglBuxfGp8bOoPgUo.cer (raw, json) Hash identifier: PFYpSvT/IUruIF2NI+28hHihzeQoQ6kdv4pZRGmRLuk= Subject key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA162839BD6C759A95F8163AF0E254 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210779 IP: 176.105.252.0/22 IP: 217.13.109.0/24 IP: 2a0d:c740::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:16:28:39:bd:6c:75:9a:95:f8:16:3a:f0:e2:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:19:7a:36:a3:e7:e5:22:19:1c:3d:8b:e7:a7: 90:c0:db:8d:18:f3:2c:49:5d:af:7f:d3:ed:4e:38: 05:3c:29:35:fa:fa:5e:ef:1f:5d:af:d0:75:46:f8: 39:4f:31:34:7d:52:6c:05:68:81:da:0e:80:74:22: cf:d4:e7:11:68:4a:10:2d:cb:00:6e:07:47:78:88: 1d:ad:ce:77:2e:f2:97:53:25:99:da:48:da:8e:62: 69:ca:07:be:c7:a4:d6:51:13:77:58:a0:da:43:84: 6c:bb:69:9b:13:95:9f:f6:5a:d3:6e:ef:34:da:0d: 2d:12:44:ff:3c:eb:6d:38:75:4d:df:4a:3b:d3:c9: 41:8f:75:42:37:c0:f6:70:01:ad:9d:e5:e9:be:fb: 05:f2:5b:3a:fe:66:4a:7f:cb:bf:37:6c:02:74:d6: 00:26:d7:54:43:78:4a:93:0a:a1:6e:01:5d:53:d0: 52:0b:6e:c9:08:47:ff:d2:f2:1c:0e:bc:76:b1:10: db:01:34:06:6d:a9:94:4b:89:ae:f9:5e:b2:ec:1c: a8:4c:94:78:0c:02:96:3b:39:ef:bc:e0:04:89:3b: 4a:e4:36:f1:e4:89:b8:dd:a6:5a:1a:93:51:2c:91: 43:fe:c5:1f:56:fd:36:ea:c7:59:f8:9b:9c:aa:17: cb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.105.252.0/22 217.13.109.0/24 IPv6: 2a0d:c740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210779 Signature Algorithm: sha256WithRSAEncryption 5a:c5:1b:73:b8:35:a8:a4:6d:ed:42:74:ac:de:29:1e:26:9c: af:51:75:67:5e:52:c2:86:b1:63:d2:7b:0f:06:7c:86:07:b0: 0d:16:27:3f:64:c7:49:53:73:40:1a:6d:96:07:23:a1:58:25: 4c:e8:6b:5b:84:2c:57:77:e0:d8:6f:d2:d4:ea:94:04:c7:66: bd:c7:d6:79:cc:f2:9b:c8:65:29:2f:b7:d9:75:3b:95:27:53: cf:2f:b5:22:5c:64:5a:5c:ef:ce:18:21:bc:2d:ef:8e:11:b6: b7:b0:d8:81:e4:fe:2e:49:e4:7f:c8:33:e9:a5:5e:7a:60:3c: ec:6e:d2:dd:95:dc:a4:8d:9d:0a:49:95:1e:04:d5:1b:f8:7d: 22:d9:66:40:10:f5:78:0a:a1:23:e7:58:ec:11:43:bf:b2:2c: 10:b2:82:58:c0:e3:6f:1e:0b:a6:c3:5c:52:08:cf:3b:45:62: f0:7e:f1:4f:38:8b:b3:c1:8c:ba:26:52:a2:ab:06:63:5c:6b: 93:ca:b6:7f:5f:87:d8:e4:47:bc:89:f8:24:55:25:fb:12:0c: 59:42:c1:69:bc:4b:fd:a5:91:e8:49:90:e6:a2:a1:04:34:a0: 6c:24:91:87:f2:76:d2:44:a4:a5:69:46:7b:07:ef:72:dc:d4: 66:2a:7d:e0 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9yhYoOb1sdZqV+BY68OJUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmEyNmI1NmNlZTk3ZjYwMjA5NDFiYjE3YzZhN2M2Y2VhMGY4MTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hl6NqPn5SIZHD2L56eQwNuNGPMs SV2vf9PtTjgFPCk1+vpe7x9dr9B1Rvg5TzE0fVJsBWiB2g6AdCLP1OcRaEoQLcsA bgdHeIgdrc53LvKXUyWZ2kjajmJpyge+x6TWURN3WKDaQ4Rsu2mbE5Wf9lrTbu80 2g0tEkT/POttOHVN30o708lBj3VCN8D2cAGtneXpvvsF8ls6/mZKf8u/N2wCdNYA JtdUQ3hKkwqhbgFdU9BSC27JCEf/0vIcDrx2sRDbATQGbamUS4mu+V6y7ByoTJR4 DAKWOznvvOAEiTtK5Dbx5Im43aZaGpNRLJFD/sUfVv026sdZ+JucqhfLrwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFGuia1bO6X9gIJQbsXxqfGzqD4FKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlL2I5MDNl OS02ZDA5LTRlMjAtYjkyNi0zNjkyZjk2ZTMzYTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvYjkwM2U5 LTZkMDktNGUyMC1iOTI2LTM2OTJmOTZlMzNhOS8xL2E2SnJWczdwZjJBZ2xCdXhm R3A4Yk9vUGdVby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCsGn8AwQA2Q1tMA0EAgACMAcDBQAqDcdAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM3WzANBgkqhkiG9w0BAQsFAAOCAQEAWsUb c7g1qKRt7UJ0rN4pHiacr1F1Z15SwoaxY9J7DwZ8hgewDRYnP2THSVNzQBptlgcj oVglTOhrW4QsV3fg2G/S1OqUBMdmvcfWeczym8hlKS+32XU7lSdTzy+1IlxkWlzv zhghvC3vjhG2t7DYgeT+Lknkf8gz6aVeemA87G7S3ZXcpI2dCkmVHgTVG/h9Itlm QBD1eAqhI+dY7BFDv7IsELKCWMDjbx4LpsNcUgjPO0Vi8H7xTziLs8GMuiZSoqsG Y1xrk8q2f1+H2ORHvIn4JFUl+xIMWULBabxL/aWR6EmQ5qKhBDSgbCSRh/J20kSk pWlGewfvctzUZip94A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:35 2026 by rpki-client