This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer File: d6W3Uxx6reukfRwv65uee6qxu7c.cer (raw, json) Hash identifier: G/OMeX/jglaDcflOM3j6QvQHJxl4u+0c/H6p1EiMjUI= Subject key identifier: 77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA39A4FDDC7ED857292D00E0010602F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43304 IP: 185.188.32.0/22 IP: 2a0b:b580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:9a:4f:dd:c7:ed:85:72:92:d0:0e:00:10:60:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cf:6c:52:e0:77:2d:ca:36:69:70:0e:2d:60: db:01:f1:66:72:89:76:31:07:96:f2:8b:4e:fd:7a: ae:f5:81:7d:d7:2d:ea:8f:10:40:45:ab:59:16:5f: 22:72:9f:26:1c:0a:d0:88:49:49:79:53:fe:3f:42: e6:82:9a:8a:82:e5:41:b2:bf:2b:c5:3b:55:b6:d8: 62:6b:7e:4b:de:35:b9:08:7f:88:bc:9e:30:41:17: 2e:c5:a0:2c:03:95:8e:8c:26:b2:01:77:a9:22:cc: ba:7c:51:b6:86:67:ae:41:f8:2f:d6:2d:7d:80:3f: c8:14:9c:2d:89:10:9f:d0:8a:d2:69:d0:37:c9:e1: 28:aa:51:f3:0c:08:b6:7b:c7:44:f1:72:7d:b5:f3: a3:d7:8d:65:58:53:6f:58:51:36:aa:d9:52:70:b7: bb:6a:b4:29:4f:b9:51:8b:a8:f4:60:b5:d3:f7:4f: bf:86:64:de:a8:9a:62:99:b3:6a:7d:83:fa:fb:aa: a6:70:77:e7:79:38:50:75:2e:4d:da:db:67:26:ae: e7:a8:ef:3a:b0:b3:30:b3:5b:b5:64:85:4b:2e:cd: 7d:bc:81:8e:9f:68:ef:ce:35:79:50:64:a4:4e:9f: 60:91:50:df:27:66:b9:2d:93:a4:77:50:07:52:59: 1e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.32.0/22 IPv6: 2a0b:b580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43304 Signature Algorithm: sha256WithRSAEncryption 27:5e:a1:55:59:59:a3:cd:b0:d7:a6:a7:4e:e9:d0:74:52:6e: 54:c9:c2:ff:0a:6c:46:47:97:9c:c8:2f:8d:e8:36:e1:09:a1: e3:72:43:98:bd:b4:e4:70:d1:85:2f:17:e5:bc:43:b7:b5:d8: 9f:10:e5:3b:89:0f:4d:e5:cd:0c:8f:dc:40:63:1d:20:16:61: 36:8a:e3:f8:21:11:37:ae:7d:94:07:fd:4a:ab:8b:fe:23:8c: 03:11:9f:15:69:8f:30:19:cc:20:8c:6b:9f:63:0b:5b:73:9d: 4d:f9:7c:91:ab:37:b2:72:bb:b2:9a:ee:60:26:2e:77:25:e6: 73:1d:7a:56:31:0e:19:20:4a:4b:67:15:58:42:ef:75:cf:ae: bf:13:ff:2c:c4:0e:87:f6:1f:51:33:2f:59:8f:c6:65:01:f2: f5:78:be:78:9b:27:db:da:12:47:97:f8:da:09:2e:d2:f0:54: 59:c6:8a:c3:70:a9:5c:54:35:c4:29:da:76:29:d2:9f:94:57: d0:a9:10:f0:15:44:22:b1:42:02:ec:70:12:3e:96:c3:83:65: 94:d7:c3:a8:5f:01:e9:b7:c4:61:fc:98:d0:fb:57:7b:03:1b: 9b:46:46:3d:90:48:04:16:98:01:d0:42:ac:7f:12:48:f2:fb: 77:13:d7:ae -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7o5pP3cfthXKS0A4AEGAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2E1Yjc1MzFjN2FhZGViYTQ3ZDFjMmZlYjliOWU3YmFhYjFiYmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1c9sUuB3Lco2aXAOLWDbAfFmcol2 MQeW8otO/Xqu9YF91y3qjxBARatZFl8icp8mHArQiElJeVP+P0LmgpqKguVBsr8r xTtVtthia35L3jW5CH+IvJ4wQRcuxaAsA5WOjCayAXepIsy6fFG2hmeuQfgv1i19 gD/IFJwtiRCf0IrSadA3yeEoqlHzDAi2e8dE8XJ9tfOj141lWFNvWFE2qtlScLe7 arQpT7lRi6j0YLXT90+/hmTeqJpimbNqfYP6+6qmcHfneThQdS5N2ttnJq7nqO86 sLMws1u1ZIVLLs19vIGOn2jvzjV5UGSkTp9gkVDfJ2a5LZOkd1AHUlkemwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHelt1Mceq3rpH0cL+ubnnuqsbu3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzNkZDM3 ZC02YjBiLTRmMWYtYjBmYi05MzIzOGZjZDE2MjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvM2RkMzdk LTZiMGItNGYxZi1iMGZiLTkzMjM4ZmNkMTYyMi8xL2Q2VzNVeHg2cmV1a2ZSd3Y2 NXVlZTZxeHU3Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubwgMA0EAgACMAcDBQMqC7WAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCpKDANBgkqhkiG9w0BAQsFAAOCAQEAJ16hVVlZo82w 16anTunQdFJuVMnC/wpsRkeXnMgvjeg24Qmh43JDmL205HDRhS8X5bxDt7XYnxDl O4kPTeXNDI/cQGMdIBZhNorj+CERN659lAf9SquL/iOMAxGfFWmPMBnMIIxrn2ML W3OdTfl8kas3snK7spruYCYudyXmcx16VjEOGSBKS2cVWELvdc+uvxP/LMQOh/Yf UTMvWY/GZQHy9Xi+eJsn29oSR5f42gku0vBUWcaKw3CpXFQ1xCnadinSn5RX0KkQ 8BVEIrFCAuxwEj6Ww4NllNfDqF8B6bfEYfyY0PtXewMbm0ZGPZBIBBaYAdBCrH8S SPL7dxPXrg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:04 2026 by rpki-client