This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer File: b6MuZYEYPyxIl6dlIzOQH39b7nM.cer (raw, json) Hash identifier: iladKiug9XWNoJevjsnhlectCe/APUY2Nbrr0RxlMPI= Subject key identifier: 6F:A3:2E:65:81:18:3F:2C:48:97:A7:65:23:33:90:1F:7F:5B:EE:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783519F279309A615159F57F96AFBEAC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211488 IP: 185.218.107.0/24 IP: 2a10:d1c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:19:f2:79:30:9a:61:51:59:f5:7f:96:af:be:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fa32e6581183f2c4897a7652333901f7f5bee73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c2:62:51:86:fd:54:33:3b:92:81:ec:06:b0: 2e:b2:49:0d:16:58:a2:d4:c3:f1:28:97:f9:3a:70: fc:a0:02:a6:dd:fb:84:5a:6c:94:2d:af:a7:cc:27: 9f:96:2f:ba:23:4f:ef:a6:bf:73:25:ff:6a:da:4e: 9b:4a:29:1a:7d:a0:8f:e8:2a:72:68:26:d6:26:c9: a6:1a:89:54:47:23:fe:dd:09:30:d1:79:66:ce:47: 27:54:45:ba:9c:1a:93:ee:a1:83:ba:b1:93:17:d8: 43:bf:63:a3:ec:7d:aa:0d:4b:4e:fb:f6:b8:0c:ba: 6e:fb:b5:b5:b3:cc:94:c2:98:d6:09:fc:1d:01:ec: 97:3f:71:21:7a:d6:c7:31:13:6e:f3:61:d5:da:f9: a9:4f:ef:8b:9b:f4:78:8e:01:2e:d5:ad:6f:b3:b6: 88:b3:2d:7e:8e:b8:57:0e:7c:61:db:60:d9:9f:22: 49:db:0d:6a:27:48:e7:4f:2d:3d:6a:01:3a:d8:97: e9:3f:7c:2c:8a:ca:4c:ce:94:da:59:ab:9d:72:15: 88:b3:a9:10:a5:fa:6f:51:61:41:ab:a2:45:d7:f7: a4:1b:59:e0:b8:32:6a:33:53:c0:d1:15:87:c8:e1: 19:eb:f3:d0:02:fd:e6:74:76:98:0c:a7:f0:00:ff: 36:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A3:2E:65:81:18:3F:2C:48:97:A7:65:23:33:90:1F:7F:5B:EE:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.107.0/24 IPv6: 2a10:d1c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211488 Signature Algorithm: sha256WithRSAEncryption 88:55:fb:bb:49:ac:cc:4b:a8:fe:08:d9:4b:bc:61:a3:d0:be: a4:57:20:d4:86:96:40:7a:b5:96:21:d8:c2:a9:d7:ce:0b:5f: 73:52:b5:81:bf:eb:a5:95:ff:77:d0:fb:29:8c:87:23:df:ec: 36:a9:bf:ee:00:7b:83:37:da:36:77:62:59:ed:b4:09:ce:5a: be:20:58:fe:13:6c:7d:79:5a:0c:95:1b:50:2b:1d:ce:20:dd: 91:aa:5c:47:3c:b9:31:a6:b5:6c:66:f8:2d:7e:eb:dd:21:62: f6:0c:58:7f:8d:a7:f5:26:41:e0:c3:14:49:5b:88:ef:f2:d4: 09:3c:d8:f3:bf:36:6d:93:88:2f:23:b6:00:95:dd:03:fb:f2: a4:45:34:10:de:53:14:0c:61:29:7f:7e:d8:cd:d2:b4:53:69: 75:77:01:52:c4:b8:0d:03:ef:a9:ef:d7:d5:85:18:26:8c:0e: 71:d6:3d:1c:93:98:e3:c3:1d:41:00:a1:49:14:ae:f6:2e:f1: ab:83:2a:57:25:92:ce:4b:4b:ef:34:01:c7:dd:f1:b6:ba:99: 1a:f2:da:7b:c4:02:76:23:8a:4f:af:d8:b8:12:d2:fe:ec:5a: eb:3c:7f:14:e7:2b:aa:16:00:9a:fc:40:72:74:6c:30:9d:eb: ed:1f:ca:6c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NRnyeTCaYVFZ9X+Wr76sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmEzMmU2NTgxMTgzZjJjNDg5N2E3NjUyMzMzOTAxZjdmNWJlZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8JiUYb9VDM7koHsBrAuskkNFlii 1MPxKJf5OnD8oAKm3fuEWmyULa+nzCefli+6I0/vpr9zJf9q2k6bSikafaCP6Cpy aCbWJsmmGolURyP+3Qkw0XlmzkcnVEW6nBqT7qGDurGTF9hDv2Oj7H2qDUtO+/a4 DLpu+7W1s8yUwpjWCfwdAeyXP3EhetbHMRNu82HV2vmpT++Lm/R4jgEu1a1vs7aI sy1+jrhXDnxh22DZnyJJ2w1qJ0jnTy09agE62JfpP3wsispMzpTaWaudchWIs6kQ pfpvUWFBq6JF1/ekG1nguDJqM1PA0RWHyOEZ6/PQAv3mdHaYDKfwAP820wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFG+jLmWBGD8sSJenZSMzkB9/W+5zMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzg1Y2E4 ZS1kNzRiLTRjMDUtODFiNi03NzBmMDU3MmMwZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvODVjYThl LWQ3NGItNGMwNS04MWI2LTc3MGYwNTcyYzBlNy8xL2I2TXVaWUVZUHl4SWw2ZGxJ ek9RSDM5YjduTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAudprMA0EAgACMAcDBQAqENHAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM6IDANBgkqhkiG9w0BAQsFAAOCAQEAiFX7u0mszEuo /gjZS7xho9C+pFcg1IaWQHq1liHYwqnXzgtfc1K1gb/rpZX/d9D7KYyHI9/sNqm/ 7gB7gzfaNndiWe20Cc5aviBY/hNsfXlaDJUbUCsdziDdkapcRzy5Maa1bGb4LX7r 3SFi9gxYf42n9SZB4MMUSVuI7/LUCTzY8782bZOILyO2AJXdA/vypEU0EN5TFAxh KX9+2M3StFNpdXcBUsS4DQPvqe/X1YUYJowOcdY9HJOY48MdQQChSRSu9i7xq4Mq VyWSzktL7zQBx93xtrqZGvLae8QCdiOKT6/YuBLS/uxa6zx/FOcrqhYAmvxAcnRs MJ3r7R/KbA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:59 2026 by rpki-client