This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer File: b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer (raw, json) Hash identifier: QNgpTwvc7H+uIL39UcCheZj5VlI9APvHL6ZfXoPGr9Q= Subject key identifier: 6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B361C8AE76F69DAA726813930CA1619 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208215 IP: 171.22.208.0 -- 171.22.210.255 IP: 2a09:3e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:1c:8a:e7:6f:69:da:a7:26:81:39:30:ca:16:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:74:80:22:3d:3f:d5:9f:47:f6:b6:09:17:94: aa:bd:15:0f:c2:70:9f:e7:11:1c:41:97:cc:5d:87: cf:48:b8:ba:92:d2:33:a4:17:3e:56:0f:13:27:d9: 32:e7:83:2b:9b:c8:88:82:91:5a:d0:79:47:01:d8: 95:65:8e:ad:56:9c:99:c0:51:d2:18:1e:62:ea:a9: d0:9b:4f:61:79:5e:56:fc:0b:c1:36:dd:65:4b:88: a6:05:eb:2e:57:9c:bc:b2:24:fa:0f:b0:cc:98:df: 6f:38:e1:9a:87:d8:b8:28:91:42:2e:8f:de:a1:6c: 01:06:89:82:4f:18:cc:7a:01:9d:6d:8c:3e:90:73: f3:4f:b2:48:08:29:50:d2:63:75:e9:38:12:e3:95: 8c:bb:f8:0c:2a:d6:bf:2a:bb:44:71:a4:e9:07:c3: b3:77:2b:34:40:61:f5:b4:14:c3:bf:80:91:74:18: bf:d9:5a:bd:f9:62:d8:62:c9:72:0f:de:db:a9:50: 9d:fe:d7:d5:7a:f1:2c:07:b2:3f:d3:58:64:8c:fa: c3:39:5e:cb:b2:d0:3d:e5:56:a6:04:a1:00:09:53: 95:2a:f9:fa:a4:ef:f0:f5:60:55:78:a7:5c:7b:89: 7d:02:d5:f2:46:e9:25:98:62:75:b3:e5:21:6f:cc: 18:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.22.208.0-171.22.210.255 IPv6: 2a09:3e40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208215 Signature Algorithm: sha256WithRSAEncryption 78:b6:89:34:41:98:d1:86:95:a2:dd:5e:7d:cb:76:37:76:7b: bc:36:a0:88:05:52:ce:2f:89:09:4c:5e:f8:d2:dc:9a:c1:b3: e6:34:ae:b9:53:21:ee:e8:4c:72:6b:7b:4e:22:9a:48:6f:ac: 06:32:0e:df:ae:3d:fc:5b:ca:73:08:b6:b9:70:fb:b0:15:f6: ef:44:9e:ba:ed:03:e6:3b:f1:b7:b5:62:20:dc:e7:49:6b:1a: 47:ae:9d:a4:19:58:d1:16:c7:a6:68:98:87:c8:36:09:8d:52: bd:6b:9e:bc:bd:8a:a8:67:fa:f6:2e:22:62:ba:20:e0:4d:e7: 3b:c6:d8:04:9e:f7:38:e5:2d:2d:1a:26:2b:b8:38:c4:34:be: bf:4a:6a:00:99:af:c1:f0:b3:7a:68:53:a5:df:0a:21:83:1e: 49:7d:39:ce:61:21:ff:ff:d6:3a:47:c1:dc:fe:76:ae:aa:71: 18:c9:83:af:15:f7:66:3b:08:c7:fc:03:3b:a3:2f:73:7e:56: dd:f0:b2:81:3c:a9:6c:98:e3:c8:a7:67:95:ef:a8:1d:72:8a: f0:44:eb:bf:73:81:7f:51:17:aa:9b:3c:f8:09:c1:38:37:31: b4:88:02:57:55:cf:b9:92:1a:0d:d9:55:fb:68:e1:3f:ab:a2: d0:0b:ab:c7 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt7NhyK529p2qcmgTkwyhYZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmExMDRmNmE4OTc4YmIxNmNkMDUzMTRmOThhNzg2ZTBkMGQ5NTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHSAIj0/1Z9H9rYJF5SqvRUPwnCf 5xEcQZfMXYfPSLi6ktIzpBc+Vg8TJ9ky54Mrm8iIgpFa0HlHAdiVZY6tVpyZwFHS GB5i6qnQm09heV5W/AvBNt1lS4imBesuV5y8siT6D7DMmN9vOOGah9i4KJFCLo/e oWwBBomCTxjMegGdbYw+kHPzT7JICClQ0mN16TgS45WMu/gMKta/KrtEcaTpB8Oz dys0QGH1tBTDv4CRdBi/2Vq9+WLYYslyD97bqVCd/tfVevEsB7I/01hkjPrDOV7L stA95VamBKEACVOVKvn6pO/w9WBVeKdce4l9AtXyRuklmGJ1s+Uhb8wYkQIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFG+hBPaol4uxbNBTFPmKeG4NDZVkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3LzlkZDVl My01NzZmLTQ0YTEtYTVjYy02NTA5Y2I1ZjI3ZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvOWRkNWUz LTU3NmYtNDRhMS1hNWNjLTY1MDljYjVmMjdmOC8xL2I2RUU5cWlYaTdGczBGTVUt WXA0YmcwTmxXUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTAUBAIAATAOMAwDBASrFtADBACrFtIwDQQCAAIwBwMFAyoJPkAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAy1XMA0GCSqGSIb3DQEBCwUAA4IBAQB4 tok0QZjRhpWi3V59y3Y3dnu8NqCIBVLOL4kJTF740tyawbPmNK65UyHu6Exya3tO IppIb6wGMg7frj38W8pzCLa5cPuwFfbvRJ667QPmO/G3tWIg3OdJaxpHrp2kGVjR FsemaJiHyDYJjVK9a568vYqoZ/r2LiJiuiDgTec7xtgEnvc45S0tGiYruDjENL6/ SmoAma/B8LN6aFOl3wohgx5JfTnOYSH//9Y6R8Hc/nauqnEYyYOvFfdmOwjH/AM7 oy9zflbd8LKBPKlsmOPIp2eV76gdcorwROu/c4F/UReqmzz4CcE4NzG0iAJXVc+5 khoN2VX7aOE/q6LQC6vH -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:43 2026 by rpki-client