This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer File: d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer (raw, json) Hash identifier: uz9AMQDDeqspJ/wh5QD5iI4XmJ4EtttLsKDdji8ezTA= Subject key identifier: 77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA5936E16FC0377CC86B72CA390051C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214638 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:93:6e:16:fc:03:77:cc:86:b7:2c:a3:90:05:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77fe97184da82a36d7ebe3f85840315b8ab2214c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fa:37:f0:db:0b:bf:eb:b5:71:c6:23:a0:40: 40:31:e6:d4:ee:7c:8b:4b:c3:c1:ef:c1:0a:6e:00: ff:5a:53:14:3e:16:23:fd:d6:1f:3a:c6:72:f7:42: de:36:14:ab:76:83:15:d9:d4:8e:67:c2:5b:b7:96: 56:ba:be:bf:54:f1:96:46:86:1b:f0:23:99:4a:00: 60:30:2b:7b:0a:25:ae:38:19:b9:4c:4a:aa:c3:20: 32:57:2d:79:f7:1a:a8:00:eb:8d:0d:ff:aa:16:ba: 66:46:a2:e6:8b:3c:b8:dc:03:b8:2a:bf:a5:c5:98: 6c:1b:79:65:35:e0:29:cd:f8:d6:8d:bf:78:09:77: 17:21:54:ce:cd:08:72:36:fd:94:93:2c:9e:fa:09: 88:f9:ba:53:38:8a:81:ff:00:35:1c:e2:f7:8b:56: b9:e9:bb:78:c5:1e:67:02:4f:07:a6:1e:b2:d2:ef: 29:e8:a9:e7:2f:a0:ba:23:aa:67:44:8d:b7:3c:30: f5:fb:c4:22:a5:be:07:f6:09:25:74:81:1f:5b:4c: 4e:5e:03:57:a7:7a:f9:af:11:d3:9e:6b:e9:1e:ae: 87:ac:b6:da:9c:8f:dd:af:e0:e9:07:4b:e0:2f:c4: c3:e3:38:53:c1:09:44:0e:69:a8:66:28:08:88:9f: e8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214638 Signature Algorithm: sha256WithRSAEncryption 96:bd:5a:7f:93:66:2c:63:8f:7a:d9:ab:73:d5:b3:97:8f:e2: ff:ad:ab:d7:01:eb:e6:52:8d:16:fb:9e:77:18:aa:88:7c:cf: 36:24:50:d0:fa:d3:42:14:e7:6d:8c:10:41:30:a8:a0:2f:c7: 12:a8:ce:7c:2e:be:bc:e3:4e:14:4e:1c:04:55:2b:82:ba:ef: c7:13:4e:80:7b:1f:9a:c7:a2:d2:46:57:03:92:51:35:0d:0e: 33:f7:b5:cb:b7:89:dc:5d:9f:e6:2a:fd:86:98:d1:9d:c3:a4: d4:7f:8f:0f:e4:03:5d:8a:73:81:5c:02:0f:d5:6d:fe:7f:c9: 4b:0f:96:a0:86:82:a4:d9:62:8d:91:77:2e:24:0b:83:70:89: 9d:ec:1e:d0:53:70:8c:7b:db:19:e4:00:30:b0:b7:ea:4f:70: f5:a6:4d:97:d9:9d:67:51:cf:fe:34:97:b9:12:5e:9c:f0:91: f7:80:00:80:4b:2c:4a:33:ba:2b:69:9d:25:54:ea:27:e3:2d: 28:bc:07:96:c0:1b:9c:f1:6a:6e:64:94:cb:af:db:8a:f6:7f: db:fb:4b:1f:bb:1d:6c:78:79:24:1d:37:2a:64:48:99:b2:1b: 7a:d5:5b:8b:ca:6b:d4:69:cf:05:7a:ba:ea:cf:26:9c:81:f3: 51:24:f8:64 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+pZNuFvwDd8yGtyyjkAUcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2ZlOTcxODRkYTgyYTM2ZDdlYmUzZjg1ODQwMzE1YjhhYjIyMTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fo38NsLv+u1ccYjoEBAMebU7nyL S8PB78EKbgD/WlMUPhYj/dYfOsZy90LeNhSrdoMV2dSOZ8Jbt5ZWur6/VPGWRoYb 8COZSgBgMCt7CiWuOBm5TEqqwyAyVy159xqoAOuNDf+qFrpmRqLmizy43AO4Kr+l xZhsG3llNeApzfjWjb94CXcXIVTOzQhyNv2Ukyye+gmI+bpTOIqB/wA1HOL3i1a5 6bt4xR5nAk8Hph6y0u8p6KnnL6C6I6pnRI23PDD1+8Qipb4H9gkldIEfW0xOXgNX p3r5rxHTnmvpHq6HrLbanI/dr+DpB0vgL8TD4zhTwQlEDmmoZigIiJ/oyQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFHf+lxhNqCo21+vj+FhAMVuKsiFMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkLzE0M2I0 MC01ODNhLTRhNjQtYmRiMS1hNWU5N2NmMzUwMmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvMTQzYjQw LTU4M2EtNGE2NC1iZGIxLWE1ZTk3Y2YzNTAyZC8xL2RfNlhHRTJvS2piWDYtUDRX RUF4VzRxeUlVdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNGbjANBgkqhkiG9w0BAQsFAAOCAQEAlr1af5NmLGOP etmrc9Wzl4/i/62r1wHr5lKNFvuedxiqiHzPNiRQ0PrTQhTnbYwQQTCooC/HEqjO fC6+vONOFE4cBFUrgrrvxxNOgHsfmsei0kZXA5JRNQ0OM/e1y7eJ3F2f5ir9hpjR ncOk1H+PD+QDXYpzgVwCD9Vt/n/JSw+WoIaCpNlijZF3LiQLg3CJnewe0FNwjHvb GeQAMLC36k9w9aZNl9mdZ1HP/jSXuRJenPCR94AAgEssSjO6K2mdJVTqJ+MtKLwH lsAbnPFqbmSUy6/bivZ/2/tLH7sdbHh5JB03KmRImbIbetVbi8pr1GnPBXq66s8m nIHzUST4ZA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:28 2026 by rpki-client