This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer File: md6y4fhaF9okDPyBbZcsheQR5iQ.cer (raw, json) Hash identifier: slhWfaGRy3guKpwwyqf6UIADFqOqOjUzANrEhgRutuE= Subject key identifier: 99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910D4720B9C89E7A1B9287232CB2F5E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61328 IP: 194.31.56.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d4:72:0b:9c:89:e7:a1:b9:28:72:32:cb:2f:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99deb2e1f85a17da240cfc816d972c85e411e624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e5:5f:1f:2d:c0:e5:5d:60:f2:e0:9d:c2:53: 5e:12:7e:7b:42:fa:25:24:a6:84:a9:b1:2f:a1:24: 3b:b9:4f:77:4c:3d:d7:c2:b7:37:65:95:70:32:5b: 68:fc:66:95:b6:17:ec:23:87:5a:37:3e:74:66:7a: e4:c2:24:f8:6e:2a:18:41:ca:c5:6a:23:e2:9e:11: 2d:2f:a8:a0:ad:50:91:69:95:f7:82:1b:ea:58:31: 7d:e9:ec:ef:ba:7c:b1:c2:e4:93:74:2a:fb:fe:df: 14:21:9e:07:c8:3b:31:91:34:29:09:24:1e:61:f9: 60:94:f8:23:15:26:e6:ba:55:ba:38:a1:8c:2d:cf: f0:f3:92:c0:f4:4b:ff:07:7a:99:e4:c8:f8:86:6f: 50:50:fa:bb:b4:6a:2a:d9:a5:c5:12:8a:6c:5b:54: 37:36:ce:71:5f:0f:d8:3b:3d:2f:e2:19:2c:f2:14: 19:9a:e4:52:34:f6:41:1d:06:96:97:6c:86:07:e3: ce:62:90:35:ad:03:11:f4:2f:55:87:3d:5f:8f:8a: f1:30:07:62:fa:8b:cb:b5:19:c3:fe:bd:b9:77:77: b1:9c:16:5b:f3:b7:65:c6:5a:ac:87:00:a5:13:8c: 9f:85:d7:6e:fd:e8:da:ef:a3:91:c4:20:c8:65:be: fa:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.56.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61328 Signature Algorithm: sha256WithRSAEncryption 7d:82:79:ce:48:48:22:f8:dd:61:7b:de:d5:6e:2f:e9:ba:b8: 2a:77:cf:2e:7e:c8:0c:e2:a7:c8:54:57:3b:c4:b7:a2:85:f7: 2c:98:4c:30:cf:3f:fd:dc:5f:a7:37:99:6e:ec:a5:40:9c:dc: a0:f2:67:2b:9d:ea:3e:81:c6:f9:2a:0e:cc:84:be:38:73:ee: 29:0e:61:b2:90:05:10:9d:4d:85:3c:09:a3:f7:bd:3a:15:d9: ac:30:93:5a:ab:bd:15:78:e0:29:1d:2e:dc:bf:f8:08:31:e4: 82:d3:fc:a0:9c:bf:66:12:55:a9:be:9d:93:ba:10:8c:9e:47: 78:1e:a3:61:ce:2c:f2:04:1e:26:20:c9:fb:fa:05:94:18:7b: dc:e3:58:34:ab:e7:6a:82:2f:e4:45:c1:c7:9a:0a:bb:d8:95: 64:99:ce:b1:30:19:a9:e1:a4:f4:f8:11:49:03:f7:86:e4:8a: da:89:bb:2c:0c:00:d5:89:69:4d:e0:82:91:7a:77:61:84:d8: 02:94:18:d5:20:97:62:96:92:78:19:68:38:9c:44:c3:2f:6c: 24:ae:e1:6e:f9:65:22:1a:df:1c:6d:5c:af:2c:1e:e3:56:92: d5:6a:b7:af:f6:fe:e9:4d:f5:31:cc:80:8d:42:58:af:e4:85: aa:ed:ff:52 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5ENRyC5yJ56G5KHIyyy9eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWRlYjJlMWY4NWExN2RhMjQwY2ZjODE2ZDk3MmM4NWU0MTFlNjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+VfHy3A5V1g8uCdwlNeEn57Qvol JKaEqbEvoSQ7uU93TD3Xwrc3ZZVwMlto/GaVthfsI4daNz50ZnrkwiT4bioYQcrF aiPinhEtL6igrVCRaZX3ghvqWDF96ezvunyxwuSTdCr7/t8UIZ4HyDsxkTQpCSQe YflglPgjFSbmulW6OKGMLc/w85LA9Ev/B3qZ5Mj4hm9QUPq7tGoq2aXFEopsW1Q3 Ns5xXw/YOz0v4hks8hQZmuRSNPZBHQaWl2yGB+POYpA1rQMR9C9Vhz1fj4rxMAdi +ovLtRnD/r25d3exnBZb87dlxlqshwClE4yfhddu/eja76ORxCDIZb76DQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJnesuH4WhfaJAz8gW2XLIXkEeYkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzLzdjOTFj YS01NWY3LTQzYTQtYjk1MC04ZGM5NGU4OWJmMDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvN2M5MWNh LTU1ZjctNDNhNC1iOTUwLThkYzk0ZTg5YmYwMy8xL21kNnk0ZmhhRjlva0RQeUJi WmNzaGVRUjVpUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwh84MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDvkDANBgkqhkiG9w0BAQsFAAOCAQEAfYJ5zkhIIvjdYXve1W4v6bq4KnfPLn7I DOKnyFRXO8S3ooX3LJhMMM8//dxfpzeZbuylQJzcoPJnK53qPoHG+SoOzIS+OHPu KQ5hspAFEJ1NhTwJo/e9OhXZrDCTWqu9FXjgKR0u3L/4CDHkgtP8oJy/ZhJVqb6d k7oQjJ5HeB6jYc4s8gQeJiDJ+/oFlBh73ONYNKvnaoIv5EXBx5oKu9iVZJnOsTAZ qeGk9PgRSQP3huSK2om7LAwA1YlpTeCCkXp3YYTYApQY1SCXYpaSeBloOJxEwy9s JK7hbvllIhrfHG1crywe41aS1Wq3r/b+6U31McyAjUJYr+SFqu3/Ug== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:54 2026 by rpki-client