This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer File: k6EPqeyo7I3dXhJUJkOOjfjIerw.cer (raw, json) Hash identifier: CIIGYEkwdJQX6Nh0gK/dJVEyvjIGVS4Xg3UTAzjcuts= Subject key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB1DF93D90BAD7848EA94EB5E02756 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57219 AS: 205995 IP: 185.1.91.0/24 IP: 185.198.16.0/22 IP: 2001:7f8:b3::/48 IP: 2a0a:8240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1d:f9:3d:90:ba:d7:84:8e:a9:4e:b5:e0:27:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0c:e7:4e:c1:1a:d6:16:3a:e5:a1:2b:f5:1f: 24:37:fb:3f:04:21:7b:74:ef:54:81:89:46:d6:e2: 2b:3b:95:87:a7:8c:e3:44:f8:dc:d3:e6:e7:3c:5c: 95:cd:9c:25:dc:f7:a7:1c:9b:0d:25:62:65:a7:4d: 90:48:47:4a:ec:07:64:e5:eb:34:f3:48:0b:d9:e2: 6e:99:c0:bd:cd:11:a5:cf:e7:bd:1a:07:ee:d7:a9: 60:9d:c0:78:a1:81:76:88:8c:ed:df:2d:c7:00:fd: 8a:37:27:7b:83:05:88:cd:a6:49:1e:83:6d:cf:04: 87:db:79:bb:d5:79:11:e5:6f:aa:82:4a:38:60:33: 67:1d:af:1a:36:d5:a6:95:3e:36:60:de:1b:3c:61: 43:72:74:ba:a2:8b:9f:54:78:f5:c6:17:15:b5:be: 38:06:3c:17:93:dd:87:d1:ef:03:61:4a:da:6a:4e: 27:80:39:98:a9:30:01:97:ab:bb:eb:50:3a:3d:58: 3e:82:86:1a:36:fc:e2:d5:2c:52:1d:59:46:6b:d7: a8:57:05:91:47:da:a0:20:1f:c7:6f:34:b2:1a:5e: 16:30:59:bd:b3:06:f7:3f:7e:ce:3a:93:50:f6:d2: 33:e5:37:01:d3:9c:83:6d:dc:59:6c:59:95:2b:71: fa:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.91.0/24 185.198.16.0/22 IPv6: 2001:7f8:b3::/48 2a0a:8240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57219 205995 Signature Algorithm: sha256WithRSAEncryption 04:e2:80:53:f8:a7:d2:9d:ef:33:3e:9c:bf:c2:00:35:0f:b4: 87:60:34:84:ff:1f:c3:c3:75:eb:da:4a:64:e1:6a:e5:1e:8c: 5f:d9:23:e0:c6:5b:0d:f8:8a:a2:96:45:74:8e:b6:e3:e1:33: f1:ef:5c:17:36:42:9f:32:1b:89:26:1a:19:e2:b7:f5:d7:21: 73:b9:b3:f6:4d:cc:38:01:b9:69:e9:a8:01:26:25:c8:1b:3b: 3b:33:60:cd:a7:40:2c:fe:37:8d:c0:0f:07:91:da:5e:ef:0b: 59:a6:ff:b9:0b:d5:dc:6c:c4:1e:42:92:ce:9e:9c:da:47:32: 58:31:66:94:11:52:e3:a1:67:e0:2b:74:9c:9b:a0:ed:20:3e: 94:d3:c9:96:96:d8:8d:e6:85:ce:f2:0d:50:3f:bc:a2:3c:43: 9e:ea:e9:3a:f5:ad:df:52:64:b0:82:42:72:6f:0a:4d:9c:00: 81:9f:b4:30:d3:07:d2:45:de:a4:7c:a7:b0:20:3d:a7:0c:24: ed:b5:93:c2:39:de:f2:0f:95:cb:04:f1:b1:a7:e0:ee:fc:14: 72:47:8c:ab:e9:6a:36:92:ac:fe:e8:59:5c:1f:f1:ad:59:71: f2:58:85:10:34:53:7a:4e:87:51:0e:af:20:99:88:6d:1a:59: a1:fc:ee:bf -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt26x35PZC614SOqU614CdWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2ExMGZhOWVjYThlYzhkZGQ1ZTEyNTQyNjQzOGU4ZGY4Yzg3YWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwznTsEa1hY65aEr9R8kN/s/BCF7 dO9UgYlG1uIrO5WHp4zjRPjc0+bnPFyVzZwl3PenHJsNJWJlp02QSEdK7Adk5es0 80gL2eJumcC9zRGlz+e9Ggfu16lgncB4oYF2iIzt3y3HAP2KNyd7gwWIzaZJHoNt zwSH23m71XkR5W+qgko4YDNnHa8aNtWmlT42YN4bPGFDcnS6ooufVHj1xhcVtb44 BjwXk92H0e8DYUraak4ngDmYqTABl6u761A6PVg+goYaNvzi1SxSHVlGa9eoVwWR R9qgIB/HbzSyGl4WMFm9swb3P37OOpNQ9tIz5TcB05yDbdxZbFmVK3H6GQIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFJOhD6nsqOyN3V4SVCZDjo34yHq8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyLzg1ZTAw ZS1kOWFlLTQwNzQtOTY2Mi00ODc5MGY2MDBjNjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvODVlMDBl LWQ5YWUtNDA3NC05NjYyLTQ4NzkwZjYwMGM2NC8xL2s2RVBxZXlvN0kzZFhoSlVK a09PamZqSWVydy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDASBAIAATAMAwQAuQFbAwQCucYQMBYEAgACMBADBwAgAQf4ALMD BQMqCoJAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDfgwIDAySrMA0GCSqGSIb3 DQEBCwUAA4IBAQAE4oBT+KfSne8zPpy/wgA1D7SHYDSE/x/Dw3Xr2kpk4WrlHoxf 2SPgxlsN+IqilkV0jrbj4TPx71wXNkKfMhuJJhoZ4rf11yFzubP2Tcw4Ablp6agB JiXIGzs7M2DNp0As/jeNwA8Hkdpe7wtZpv+5C9XcbMQeQpLOnpzaRzJYMWaUEVLj oWfgK3Scm6DtID6U08mWltiN5oXO8g1QP7yiPEOe6uk69a3fUmSwgkJybwpNnACB n7Qw0wfSRd6kfKewID2nDCTttZPCOd7yD5XLBPGxp+Du/BRyR4yr6Wo2kqz+6Flc H/GtWXHyWIUQNFN6TodRDq8gmYhtGlmh/O6/ -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:05 2026 by rpki-client