This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer File: b6rlVhP8iVhve9beDtygl7hhWmo.cer (raw, json) Hash identifier: JezPjFIbURkn7FYFuAYdV3TRVdk3a5aSVhFbQXn3CQA= Subject key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DDB721B0A332554AAF72A8732B7B0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29488 IP: 185.208.36.0/22 IP: 217.74.176.0/20 IP: 2001:1a30::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:db:72:1b:0a:33:25:54:aa:f7:2a:87:32:b7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6faae55613fc89586f7bd6de0edca097b8615a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:58:4d:7f:4a:2b:16:2a:e5:1b:c9:ce:4d:43: 43:11:5b:6d:59:b9:5f:33:e7:2b:7f:26:31:4a:06: 34:7e:11:7b:a8:e2:bb:b8:df:d2:ef:eb:0c:e8:95: f8:a3:f8:04:5a:75:73:33:a1:21:89:58:5d:d8:30: 9f:51:03:f2:a2:16:33:79:79:3f:1a:6e:74:6c:06: 09:61:01:ba:bd:30:71:82:09:06:46:da:c0:3a:f0: 81:7b:ee:44:09:73:86:85:e0:93:7e:b5:e0:18:99: de:d6:31:62:f7:2e:10:d3:21:ab:cc:f5:95:56:60: 0c:54:0a:35:80:f9:32:2d:9c:cb:45:7a:90:e3:02: 88:6a:25:83:57:7c:f2:be:1a:29:d7:57:76:92:a7: 8e:be:3a:a4:50:7c:56:a2:ec:67:9b:cd:2d:38:9d: db:96:24:b3:71:0b:eb:49:b1:02:5d:28:8d:da:cd: 60:59:4b:92:5c:2d:69:6f:5c:90:b6:66:13:91:9c: ba:e4:b4:4a:c0:30:ae:8e:fc:28:3c:8c:62:e7:e3: 87:ed:e8:fc:b8:aa:69:18:9c:12:f3:b5:54:ac:d8: 52:5d:11:80:a1:9a:ca:1b:41:8a:5a:97:5b:fe:d2: fa:23:a1:8a:44:13:37:4b:ba:79:15:3e:97:57:e6: d3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.208.36.0/22 217.74.176.0/20 IPv6: 2001:1a30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29488 Signature Algorithm: sha256WithRSAEncryption 6a:19:a0:6a:04:9e:78:c5:3c:0b:09:10:54:24:44:2a:49:bf: 1b:4d:ab:b2:ee:38:84:f0:c6:8d:e8:68:77:80:90:2d:03:38: f0:3c:9f:61:b5:63:de:67:f4:58:9d:65:b4:f3:59:e9:6a:17: 13:cc:0f:27:89:97:6f:10:63:50:55:67:bd:e1:92:c6:2a:fb: 6c:9d:10:da:ed:bc:38:09:a7:ac:c7:4d:f1:39:8e:d4:6a:75: 6e:e2:53:d4:18:97:ec:08:4a:bb:c4:03:a7:5b:e6:09:4e:23: bc:a2:12:87:df:93:49:a7:3b:0a:3a:78:5d:09:9b:a3:c0:2f: 89:7c:4c:ed:f6:4e:0f:5e:85:87:ff:8e:12:95:19:0c:e2:7d: 3f:23:8f:43:7c:eb:3c:94:b0:07:3a:3d:a3:8a:50:5e:45:19: 35:ad:1c:9b:e6:b5:d9:27:0a:25:d2:44:9f:4a:45:06:91:58: 2d:3e:ea:6e:bc:25:e0:b0:25:7e:71:5d:49:54:03:14:d3:d6: 21:da:29:c5:e4:8e:a5:c9:d2:d4:e2:c8:31:a7:9c:d8:d3:5d: 98:fe:9f:e0:69:78:db:ba:3b:8d:db:c6:df:1c:28:56:4c:5e: ae:9d:e3:6e:b8:e1:a3:43:8a:d9:e8:95:9e:b1:eb:80:55:ca: 49:53:53:4c -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt5fdtyGwozJVSq9yqHMrewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmFhZTU1NjEzZmM4OTU4NmY3YmQ2ZGUwZWRjYTA5N2I4NjE1YTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFhNf0orFirlG8nOTUNDEVttWblf M+crfyYxSgY0fhF7qOK7uN/S7+sM6JX4o/gEWnVzM6EhiVhd2DCfUQPyohYzeXk/ Gm50bAYJYQG6vTBxggkGRtrAOvCBe+5ECXOGheCTfrXgGJne1jFi9y4Q0yGrzPWV VmAMVAo1gPkyLZzLRXqQ4wKIaiWDV3zyvhop11d2kqeOvjqkUHxWouxnm80tOJ3b liSzcQvrSbECXSiN2s1gWUuSXC1pb1yQtmYTkZy65LRKwDCujvwoPIxi5+OH7ej8 uKppGJwS87VUrNhSXRGAoZrKG0GKWpdb/tL6I6GKRBM3S7p5FT6XV+bTXQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFG+q5VYT/IlYb3vW3g7coJe4YVpqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzU3ODg5 YS01MGRmLTRhYmYtODFlNS0xYjEyNjQxZjQ5M2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvNTc4ODlh LTUwZGYtNGFiZi04MWU1LTFiMTI2NDFmNDkzYi8xL2I2cmxWaFA4aVZodmU5YmVE dHlnbDdoaFdtby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCudAkAwQE2UqwMA0EAgACMAcDBQAgARowMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAnMwMA0GCSqGSIb3DQEBCwUAA4IBAQBqGaBq BJ54xTwLCRBUJEQqSb8bTauy7jiE8MaN6Gh3gJAtAzjwPJ9htWPeZ/RYnWW081np ahcTzA8niZdvEGNQVWe94ZLGKvtsnRDa7bw4Caesx03xOY7UanVu4lPUGJfsCEq7 xAOnW+YJTiO8ohKH35NJpzsKOnhdCZujwC+JfEzt9k4PXoWH/44SlRkM4n0/I49D fOs8lLAHOj2jilBeRRk1rRyb5rXZJwol0kSfSkUGkVgtPupuvCXgsCV+cV1JVAMU 09Yh2inF5I6lydLU4sgxp5zY012Y/p/gaXjbujuN28bfHChWTF6uneNuuOGjQ4rZ 6JWeseuAVcpJU1NM -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:07 2026 by rpki-client