This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer File: m6lLwUk3uws2MjdDVaRGckEEqYE.cer (raw, json) Hash identifier: JGnEjbjhGZXYLNot/uafRQV99bjOIFfEbc8JukqWE/o= Subject key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6F194DA33DC67F849715314C85C1B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31480 IP: 91.196.32.0/22 IP: 185.59.136.0/24 IP: 193.151.108.0/22 IP: 2a0c:1d80::/29 IP: 2a0f:bc80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f1:94:da:33:dc:67:f8:49:71:53:14:c8:5c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ba94bc14937bb0b3632374355a446724104a981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:83:09:6a:14:59:34:99:50:54:1a:59:db:7e: 9c:fd:dc:93:69:7d:0e:d5:58:a2:e1:16:e8:5f:d3: b3:31:4d:ce:b6:af:f4:49:8c:95:9a:50:17:cb:64: c4:37:7d:5c:fa:b7:4f:b4:96:52:61:1a:1a:b3:92: 46:c2:ea:0a:e4:d1:f2:bd:f3:70:5f:18:9c:57:ed: c0:42:e4:36:93:e4:f5:57:ac:45:d4:a3:8f:ea:73: d0:66:52:c8:cd:bf:14:1b:8b:c2:d3:75:fc:91:a7: ba:e8:1b:62:5f:70:0d:14:38:d2:09:97:db:a5:f2: d7:7f:6f:99:5f:dc:d6:9a:13:ca:14:f3:09:3a:95: fa:65:13:6f:13:d9:57:9a:40:76:34:31:77:73:34: b1:b4:46:40:3e:c0:b8:66:fa:45:81:5a:5f:07:59: 62:7f:bf:c0:c2:37:30:f1:a3:94:fa:10:a4:66:eb: a5:05:ee:a8:04:01:be:a5:b8:de:b3:d6:36:43:2c: 0b:3f:06:13:df:7c:01:48:b3:b6:3c:25:ec:f3:9d: 1c:f0:8e:e1:06:00:bd:aa:ed:76:0c:e0:c1:7e:1b: 75:bd:a2:62:aa:38:e1:d4:41:72:26:a8:79:37:e9: d1:26:f7:96:23:5e:30:eb:fc:5b:27:ff:6e:8d:8a: ea:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.32.0/22 185.59.136.0/24 193.151.108.0/22 IPv6: 2a0c:1d80::/29 2a0f:bc80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31480 Signature Algorithm: sha256WithRSAEncryption 8c:df:f0:cc:3d:2d:b8:fb:04:45:91:7d:96:5a:15:9e:f9:96: af:4c:25:f6:ec:ec:7d:c2:78:ba:3b:c5:57:f3:c0:f1:a7:3b: d5:9c:e3:39:08:a7:1d:be:05:82:b5:32:6f:a1:5d:98:de:87: a2:0b:d7:18:30:10:08:47:15:59:fc:d5:c9:6f:37:01:bf:84: a6:5d:7a:6e:c1:ae:a2:e1:86:40:f5:aa:c6:d4:37:f6:a2:aa: 8c:84:0c:6d:41:21:90:79:24:57:3b:ec:9f:a0:93:c5:ae:40: 0d:16:23:93:6e:1e:75:d2:e8:f0:ea:fe:dc:c5:02:8c:e4:f0: 9e:47:8a:2c:7c:c8:d1:5f:49:61:c7:2b:58:a6:3f:05:5e:a3: 66:b8:ab:47:a3:b9:13:25:cc:4e:79:62:db:1d:07:fa:e6:32: 54:0a:d6:5d:9f:c4:c9:00:af:82:ab:1a:2b:8e:8c:a2:5f:a0: 4c:5c:e5:19:d1:d4:38:27:3d:26:21:bd:20:d9:1d:77:8c:8a: 86:aa:ff:89:c7:4a:e1:33:75:59:df:d1:eb:28:79:4d:ac:74: 4d:72:78:17:59:44:28:6f:bb:21:5e:5f:63:08:8a:3b:b0:45: f3:b6:31:3e:00:a8:fa:0d:81:69:df:d4:c8:90:a7:4f:be:fc: 74:5b:ed:77 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt3xvGU2jPcZ/hJcVMUyFwbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmE5NGJjMTQ5MzdiYjBiMzYzMjM3NDM1NWE0NDY3MjQxMDRhOTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYMJahRZNJlQVBpZ236c/dyTaX0O 1Vii4RboX9OzMU3Otq/0SYyVmlAXy2TEN31c+rdPtJZSYRoas5JGwuoK5NHyvfNw XxicV+3AQuQ2k+T1V6xF1KOP6nPQZlLIzb8UG4vC03X8kae66BtiX3ANFDjSCZfb pfLXf2+ZX9zWmhPKFPMJOpX6ZRNvE9lXmkB2NDF3czSxtEZAPsC4ZvpFgVpfB1li f7/Awjcw8aOU+hCkZuulBe6oBAG+pbjes9Y2QywLPwYT33wBSLO2PCXs850c8I7h BgC9qu12DODBfht1vaJiqjjh1EFyJqh5N+nRJveWI14w6/xbJ/9ujYrqUwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFJupS8FJN7sLNjI3Q1WkRnJBBKmBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhL2NjNzg0 My1kMTM2LTRmZmItOGI5OS04MzZjMzEyYWM4YzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvY2M3ODQz LWQxMzYtNGZmYi04Yjk5LTgzNmMzMTJhYzhjMi8xL202bEx3VWszdXdzMk1qZERW YVJHY2tFRXFZRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQCW8QgAwQAuTuIAwQCwZdsMBQEAgACMA4DBQMq DB2AAwUDKg+8gDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJ6+DANBgkqhkiG9w0B AQsFAAOCAQEAjN/wzD0tuPsERZF9lloVnvmWr0wl9uzsfcJ4ujvFV/PA8ac71Zzj OQinHb4FgrUyb6FdmN6HogvXGDAQCEcVWfzVyW83Ab+Epl16bsGuouGGQPWqxtQ3 9qKqjIQMbUEhkHkkVzvsn6CTxa5ADRYjk24eddLo8Or+3MUCjOTwnkeKLHzI0V9J YccrWKY/BV6jZrirR6O5EyXMTnli2x0H+uYyVArWXZ/EyQCvgqsaK46Mol+gTFzl GdHUOCc9JiG9INkdd4yKhqr/icdK4TN1Wd/R6yh5Tax0TXJ4F1lEKG+7IV5fYwiK O7BF87YxPgCo+g2Bad/UyJCnT778dFvtdw== -----END CERTIFICATE-----Generated at Wed Jan 21 14:44:18 2026 by rpki-client