This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer File: g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer (raw, json) Hash identifier: w1q1WHHqpogRGNUyuxybnmJ0KGIZDEoD6B91dd0Ik2I= Subject key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDC7EBFEE000B10B9C5B468DEFCBCF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.53.8.0/22 IP: 194.53.80.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c7:eb:fe:e0:00:b1:0b:9c:5b:46:8d:ef:cb:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ff:86:47:cd:70:e2:fd:06:e9:36:4c:b8:20: b0:78:37:39:86:bf:3a:59:53:b5:17:7e:9b:ca:cb: f0:fc:6e:a4:16:d4:2b:e2:68:60:27:6f:c0:17:00: 4e:55:8a:4f:16:ea:10:0a:f4:47:1f:9b:5f:47:52: d9:49:36:bb:87:49:5d:01:65:29:ce:a8:96:1d:60: 04:57:ea:d1:ee:32:2c:f3:95:1a:54:02:eb:60:16: 33:45:ed:e3:5f:77:d3:92:1f:8d:1a:f2:64:ac:5b: b4:f8:09:fd:f0:ca:7f:6b:2b:da:bd:4e:d0:9a:65: 16:a7:cf:4f:73:7a:05:2a:c4:88:6f:a9:aa:33:4f: b9:5c:ca:37:1a:9e:14:95:01:9e:73:f5:fb:69:c0: bf:96:53:2a:41:be:ef:3a:07:1e:08:7a:3e:8d:28: db:80:7e:1f:a6:b1:2f:98:f9:f7:e6:4e:33:a1:b1: 31:21:9c:e2:95:6c:3c:61:89:40:d5:6d:dc:d7:60: 96:42:4e:a3:70:ec:b8:83:7d:45:05:16:6f:fb:6e: 55:50:f5:b0:a0:36:cc:25:42:ea:af:97:bc:51:94: f2:9d:39:9e:2b:2e:f6:f0:50:b6:80:2c:66:82:e4: ad:d7:1b:7d:f6:a9:6c:0a:05:f9:e7:fd:17:a4:40: 53:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.53.8.0/22 194.53.80.0/22 Signature Algorithm: sha256WithRSAEncryption 19:77:54:9a:3f:36:cb:18:8d:de:29:78:36:86:59:0c:54:24: 81:06:2c:1c:21:9d:56:16:99:35:e0:07:be:b7:fa:5e:e6:8c: 3d:8e:e5:ac:96:72:b8:d4:86:ad:37:e6:47:c3:f7:5b:dd:65: 4e:31:d7:1e:ca:1b:f2:0b:b3:33:06:b1:de:20:47:d9:6b:0f: 91:47:95:c0:d9:e1:7f:c0:13:69:78:53:e9:02:17:1b:e8:22: 45:41:1b:de:8a:db:79:17:4c:b8:d3:87:a3:a2:e0:27:56:40: 14:31:40:51:fd:48:c6:a5:a9:1b:8f:b0:ae:93:f7:56:ad:93: c8:da:ae:3d:1d:f5:d3:cf:f0:22:02:5e:a3:cb:c8:43:82:e5: cb:13:4d:12:21:19:c2:6d:40:4f:b7:7a:10:95:7f:4a:f1:36: 61:f7:12:ec:01:66:5c:25:74:76:5e:c8:bd:20:78:7c:7c:09: 6b:b6:f5:fb:63:61:a1:2a:73:4f:1f:dd:2f:75:ef:43:69:8e: 51:1f:03:2d:d7:d6:84:00:e2:36:de:e9:85:f0:31:f6:2c:9b: c8:85:5c:bd:55:ec:13:80:a1:f2:e9:01:c5:41:50:7c:36:b5: 56:a2:ef:64:26:36:40:6a:69:8b:34:8a:99:58:8b:9b:fa:e8: f7:b2:10:dc -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt87cfr/uAAsQucW0aN78vPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2FjODhmMDE3MGNiZmU0NDZjZmQzMWE1ODIzY2RlMGUwOTMxOTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4f+GR81w4v0G6TZMuCCweDc5hr86 WVO1F36bysvw/G6kFtQr4mhgJ2/AFwBOVYpPFuoQCvRHH5tfR1LZSTa7h0ldAWUp zqiWHWAEV+rR7jIs85UaVALrYBYzRe3jX3fTkh+NGvJkrFu0+An98Mp/ayvavU7Q mmUWp89Pc3oFKsSIb6mqM0+5XMo3Gp4UlQGec/X7acC/llMqQb7vOgceCHo+jSjb gH4fprEvmPn35k4zobExIZzilWw8YYlA1W3c12CWQk6jcOy4g31FBRZv+25VUPWw oDbMJULqr5e8UZTynTmeKy728FC2gCxmguSt1xt99qlsCgX55/0XpEBT6QIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFIOsiPAXDL/kRs/TGlgjzeDgkxmaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzL2VkNjlk Yy04MGQ3LTQzMzYtYTIyZC04NDhhZjY5OGQwZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvZWQ2OWRj LTgwZDctNDMzNi1hMjJkLTg0OGFmNjk4ZDBkOC8xL2c2eUk4QmNNdi1SR3o5TWFX Q1BONE9DVEdaby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCwjUIAwQCwjVQMA0GCSqGSIb3DQEBCwUAA4IB AQAZd1SaPzbLGI3eKXg2hlkMVCSBBiwcIZ1WFpk14Ae+t/pe5ow9juWslnK41Iat N+ZHw/db3WVOMdceyhvyC7MzBrHeIEfZaw+RR5XA2eF/wBNpeFPpAhcb6CJFQRve itt5F0y404ejouAnVkAUMUBR/UjGpakbj7Cuk/dWrZPI2q49HfXTz/AiAl6jy8hD guXLE00SIRnCbUBPt3oQlX9K8TZh9xLsAWZcJXR2Xsi9IHh8fAlrtvX7Y2GhKnNP H90vde9DaY5RHwMt19aEAOI23umF8DH2LJvIhVy9VewTgKHy6QHFQVB8NrVWou9k JjZAammLNIqZWIub+uj3shDc -----END CERTIFICATE-----Generated at Tue Jan 27 00:36:03 2026 by rpki-client