This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer File: k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer (raw, json) Hash identifier: cw2wJVaTbMTrkmCT0hvZTPpyQztT87oY9gLHIO6J8rg= Subject key identifier: 93:A3:FA:4B:78:E5:0F:4A:F9:7B:E2:85:E2:E9:10:A5:D1:ED:C6:39 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F06F3C0D8696DB6A009D052D7BD09 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 38932 IP: 185.186.112.0/22 IP: 213.231.128.0/18 IP: 2a02:4320::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:06:f3:c0:d8:69:6d:b6:a0:09:d0:52:d7:bd:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93a3fa4b78e50f4af97be285e2e910a5d1edc639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8a:ef:f7:7f:3f:d6:9a:5e:ea:e6:3b:5a:6d: 6b:9a:a7:c8:e4:0f:ef:6e:db:e9:e1:7d:11:62:91: 00:f2:71:45:cf:20:f5:d0:6a:8f:6f:54:ef:cd:c2: a6:ea:13:2e:4a:75:e9:68:53:a0:d1:ab:ba:c3:b1: 99:d9:1f:92:d5:97:78:4b:11:48:e1:bc:89:0f:17: 89:05:64:b6:f5:79:db:b4:7b:36:29:67:5d:48:e6: 7c:c4:fb:33:ff:b3:43:4a:8c:18:ae:9d:cf:17:9e: 8f:c1:0f:1a:00:75:74:60:3d:fe:36:d2:69:27:48: 7d:1c:ac:28:64:8b:59:ce:82:65:d8:1b:08:f5:e7: 73:ee:52:e9:f8:69:54:43:c9:87:ab:c0:c8:b0:cd: 19:58:d2:b7:91:24:e8:c2:4b:7f:31:d1:d4:83:27: 7b:de:46:0f:65:a4:ac:c5:fc:66:49:82:21:06:d5: 14:1d:dc:6e:ec:1c:1b:1f:c6:54:bc:02:45:20:d0: 43:e6:42:3f:c7:04:fc:cf:e3:65:6b:0a:f1:ff:86: d6:1a:2d:d8:ff:62:d8:21:e6:c2:1d:8b:aa:96:19: 34:80:d2:91:80:40:95:c1:d4:c3:05:1a:f5:7e:ee: 2b:f9:3a:e4:01:ed:e5:ae:2d:b4:dd:fd:bc:08:cb: f3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A3:FA:4B:78:E5:0F:4A:F9:7B:E2:85:E2:E9:10:A5:D1:ED:C6:39 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.186.112.0/22 213.231.128.0/18 IPv6: 2a02:4320::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 38932 Signature Algorithm: sha256WithRSAEncryption 73:c1:9b:1c:23:db:f8:2f:d0:5f:9e:33:07:88:c4:b4:13:de: 6d:25:3b:83:fa:da:63:f0:80:29:7a:7e:66:f5:e4:04:33:43: 2c:dc:55:54:3e:f7:67:63:5f:0f:05:19:1a:c4:2e:61:e7:97: c2:44:09:c5:33:22:36:5f:81:ac:57:10:09:ec:20:d7:03:42: 71:4c:5b:c4:f7:6a:5a:20:35:e2:e5:a5:63:da:ba:28:21:86: cd:97:79:15:d8:be:2a:36:33:58:42:85:47:4e:70:f0:37:8e: 99:63:1f:07:e5:f0:e7:62:97:0a:94:8b:27:da:3f:a3:88:3c: 1d:f0:45:e4:83:15:4e:0e:1e:f6:73:23:52:ef:69:e1:4f:70: f6:5f:57:21:9e:08:2b:79:42:b7:0a:e9:b5:96:d1:64:7c:1d: 59:0a:46:be:cc:d4:a9:a7:44:dc:fd:0c:c3:56:a0:fa:34:d4: 32:5d:ae:dc:33:18:c8:37:e2:4a:6b:26:86:0a:45:e9:8c:5c: ee:5e:60:5c:d0:26:0d:ab:81:82:9a:9e:f8:04:56:6d:c8:6a: b2:dd:7b:24:72:8d:04:5b:4b:2d:18:03:49:e9:7c:49:76:18: a1:6a:69:11:d0:8c:48:b9:1d:79:07:ab:e7:43:29:24:cf:17: f7:72:9f:f1 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5fwbzwNhpbbagCdBS170JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2EzZmE0Yjc4ZTUwZjRhZjk3YmUyODVlMmU5MTBhNWQxZWRjNjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsorv938/1ppe6uY7Wm1rmqfI5A/v btvp4X0RYpEA8nFFzyD10GqPb1TvzcKm6hMuSnXpaFOg0au6w7GZ2R+S1Zd4SxFI 4byJDxeJBWS29XnbtHs2KWddSOZ8xPsz/7NDSowYrp3PF56PwQ8aAHV0YD3+NtJp J0h9HKwoZItZzoJl2BsI9edz7lLp+GlUQ8mHq8DIsM0ZWNK3kSTowkt/MdHUgyd7 3kYPZaSsxfxmSYIhBtUUHdxu7BwbH8ZUvAJFINBD5kI/xwT8z+Nlawrx/4bWGi3Y /2LYIebCHYuqlhk0gNKRgECVwdTDBRr1fu4r+TrkAe3lri203f28CMvziwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJOj+kt45Q9K+XviheLpEKXR7cY5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExL2I1MmFl MS0wOWE2LTQ0NTgtOWQwNi0wYjY5MDg3MzdkN2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvYjUyYWUx LTA5YTYtNDQ1OC05ZDA2LTBiNjkwODczN2Q3Zi8xL2s2UDZTM2psRDByNWUtS0Y0 dWtRcGRIdHhqay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCubpwAwQG1eeAMA0EAgACMAcDBQAqAkMgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCYFDANBgkqhkiG9w0BAQsFAAOCAQEAc8Gb HCPb+C/QX54zB4jEtBPebSU7g/raY/CAKXp+ZvXkBDNDLNxVVD73Z2NfDwUZGsQu YeeXwkQJxTMiNl+BrFcQCewg1wNCcUxbxPdqWiA14uWlY9q6KCGGzZd5Fdi+KjYz WEKFR05w8DeOmWMfB+Xw52KXCpSLJ9o/o4g8HfBF5IMVTg4e9nMjUu9p4U9w9l9X IZ4IK3lCtwrptZbRZHwdWQpGvszUqadE3P0Mw1ag+jTUMl2u3DMYyDfiSmsmhgpF 6Yxc7l5gXNAmDauBgpqe+ARWbchqst17JHKNBFtLLRgDSel8SXYYoWppEdCMSLkd eQer50MpJM8X93Kf8Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:13 2026 by rpki-client