This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer File: mT6BRnbzLyZHccetdnpN-H08Y-I.cer (raw, json) Hash identifier: MzbP7dasi4MjxIdt+hOw4NsibSjNql7rRAZ6M3JnCF8= Subject key identifier: 99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B11FC30713A78074D7397A29F5D78DEFC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 12 Dec 2025 09:54:58 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 206659 AS: 213484 IP: 194.153.159.192/26 IP: 2001:7f8:ff::/48 IP: 2a0d:b080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:fc:30:71:3a:78:07:4d:73:97:a2:9f:5d:78:de:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 12 09:54:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=993e814676f32f264771c7ad767a4df87d3c63e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:41:6b:92:18:ea:07:2f:2b:bd:e3:a8:90:7d: 27:15:96:03:2a:7a:fe:14:3e:70:d5:b4:33:22:e4: 1c:75:ab:35:5e:ca:b8:5f:7b:8f:33:d2:a1:b5:9d: 2e:6d:56:f2:88:8a:f1:2d:00:09:7a:9d:cc:7c:9d: af:47:fd:3d:52:85:5f:cb:db:3c:5d:c2:b1:56:23: c7:aa:05:6a:cd:43:cb:a4:ed:11:55:37:78:13:cb: fa:77:d3:ef:9a:23:26:0e:33:c5:88:26:f5:e3:0e: 3c:b8:dd:f3:43:f1:a9:04:90:12:e1:f0:28:f5:7c: 33:a7:21:9e:fe:24:e8:ec:d7:c9:66:48:46:ba:0d: 1d:57:98:18:e8:be:0e:5a:0e:f9:a7:4f:d1:3f:50: 21:57:d7:57:6c:a6:de:2d:83:03:d0:3c:6f:0a:d1: 23:55:cd:34:ed:6e:b5:61:c9:a4:5f:25:61:76:f7: be:83:f5:91:91:10:b6:5b:b9:63:9c:81:4e:c2:a9: 01:28:21:81:72:b1:c2:b0:d1:44:d7:4b:4b:8f:9c: 6a:71:b7:0b:dd:41:08:8e:f5:63:09:37:e4:9f:c9: 4d:75:31:bd:e9:3e:68:f4:16:51:bd:e6:10:dc:cf: de:8f:0e:1c:44:d8:34:b2:f9:05:72:b0:53:6b:fa: 22:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.153.159.192/26 IPv6: 2001:7f8:ff::/48 2a0d:b080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206659 213484 Signature Algorithm: sha256WithRSAEncryption 90:b7:be:94:68:0d:81:a5:dd:39:03:60:a3:45:c3:93:9a:4e: 42:74:38:3f:69:dd:6b:79:b3:e1:3c:d1:9e:b2:48:9f:b6:76: 6d:d3:ba:41:2e:67:7e:c7:ae:53:15:5f:0c:63:c8:83:db:67: 57:0a:9b:bb:cc:39:4b:25:38:60:e2:98:26:dd:e0:88:bd:44: b4:a2:66:90:6a:e6:a8:1e:20:1e:6e:ea:31:e7:cb:03:5b:70: 05:f9:c4:ae:be:18:84:50:95:f4:6c:ad:6a:1e:ae:f2:fd:48: 30:d5:90:da:2b:de:6a:f2:9c:b7:e4:a3:fd:e6:b8:5b:40:ab: fc:7d:05:3b:0c:b5:31:6a:07:06:98:a3:90:ce:37:1a:b2:78: 07:b6:b0:12:cc:04:43:e2:c2:5f:6b:43:6c:fa:06:c3:91:cc: e9:97:8e:d7:8f:dd:51:18:f0:27:51:74:b2:84:20:97:ef:a7: c9:5e:84:65:38:8c:90:7e:31:2f:76:45:26:f3:f9:d1:95:6f: 29:ac:a3:95:60:53:c8:2a:22:75:a5:69:47:e8:d3:39:8b:02: 93:3b:85:f8:5a:30:e8:3d:53:cd:7b:e7:ef:10:95:76:18:aa: 33:bf:c6:f9:8a:02:af:77:dc:b1:3b:87:59:07:23:ad:98:2d: 23:67:2a:bf -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZsR/DBxOngHTXOXop9deN78MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjEyMDk1NDU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTNlODE0Njc2ZjMyZjI2NDc3MWM3YWQ3NjdhNGRmODdkM2M2M2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80FrkhjqBy8rveOokH0nFZYDKnr+ FD5w1bQzIuQcdas1Xsq4X3uPM9KhtZ0ubVbyiIrxLQAJep3MfJ2vR/09UoVfy9s8 XcKxViPHqgVqzUPLpO0RVTd4E8v6d9PvmiMmDjPFiCb14w48uN3zQ/GpBJAS4fAo 9XwzpyGe/iTo7NfJZkhGug0dV5gY6L4OWg75p0/RP1AhV9dXbKbeLYMD0DxvCtEj Vc007W61YcmkXyVhdve+g/WRkRC2W7ljnIFOwqkBKCGBcrHCsNFE10tLj5xqcbcL 3UEIjvVjCTfkn8lNdTG96T5o9BZRveYQ3M/ejw4cRNg0svkFcrBTa/oiawIDAQAB o4ICvjCCArowHQYDVR0OBBYEFJk+gUZ28y8mR3HHrXZ6Tfh9PGPiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1L2MzMjFm NS1kNjExLTQyMTgtYWYxZi00OGNiMGZjYjkwYzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvYzMyMWY1 LWQ2MTEtNDIxOC1hZjFmLTQ4Y2IwZmNiOTBjMy8xL21UNkJSbmJ6THlaSGNjZXRk bnBOLUgwOFktSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDgGCCsGAQUF BwEHAQH/BCkwJzANBAIAATAHAwUGwpmfwDAWBAIAAjAQAwcAIAEH+AD/AwUDKg2w gDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDJ0MCAwNB7DANBgkqhkiG9w0BAQsF AAOCAQEAkLe+lGgNgaXdOQNgo0XDk5pOQnQ4P2nda3mz4TzRnrJIn7Z2bdO6QS5n fseuUxVfDGPIg9tnVwqbu8w5SyU4YOKYJt3giL1EtKJmkGrmqB4gHm7qMefLA1tw BfnErr4YhFCV9Gytah6u8v1IMNWQ2iveavKct+Sj/ea4W0Cr/H0FOwy1MWoHBpij kM43GrJ4B7awEswEQ+LCX2tDbPoGw5HM6ZeO14/dURjwJ1F0soQgl++nyV6EZTiM kH4xL3ZFJvP50ZVvKayjlWBTyCoidaVpR+jTOYsCkzuF+Fow6D1TzXvn7xCVdhiq M7/G+YoCr3fcsTuHWQcjrZgtI2cqvw== -----END CERTIFICATE-----Generated at Wed Dec 17 23:07:23 2025 by rpki-client