This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer File: r6URZapQNqzaEf7gAg40_MQ57eY.cer (raw, json) Hash identifier: Hf2JeQegZo645jri9T9XqnrFGWi7kc4nz/9eHPYBldU= Subject key identifier: AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA609BBC614DFBE1D0D34824720287 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25504 AS: 41078 AS: 57115 IP: 83.243.56.0/21 IP: 89.200.168.0/21 IP: 91.223.141.0/24 IP: 91.230.83.0/24 IP: 94.102.208.0/20 IP: 109.235.56.0/21 IP: 151.252.48.0/20 IP: 158.58.144.0/21 IP: 185.90.232.0/22 IP: 193.254.184.0/21 IP: 195.191.92.0/23 IP: 2001:67c:2394::/48 IP: 2a00:19e0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:60:9b:bc:61:4d:fb:e1:d0:d3:48:24:72:02:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afa51165aa5036acda11fee0020e34fcc439ede6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:11:18:82:f8:67:dc:0a:dc:f5:7a:4d:3e: 52:0d:b2:f4:92:52:57:94:36:24:d1:83:e9:ba:6b: 03:e5:8f:26:d8:8b:ee:dd:99:72:c0:16:a3:d5:2d: 41:e8:3e:2c:68:a8:50:ad:11:f4:80:7b:47:53:f2: 1c:a0:09:32:d7:26:b5:13:25:87:5a:e6:05:8f:66: 5c:ac:45:59:04:1b:41:dc:99:e1:a8:0f:23:df:03: e8:32:83:c1:c5:2a:7f:93:f7:64:e6:61:59:0e:1f: 7d:e8:d2:db:fa:7c:42:4b:b1:85:d6:33:0f:49:d3: ca:df:ca:6e:a9:bf:f0:f4:87:9c:9c:fc:83:bc:6b: 2e:b7:ce:ec:43:71:4b:97:86:c2:3c:c4:f9:75:81: 48:9c:68:d7:5c:e2:d0:21:3b:e0:b0:d9:fc:80:29: 73:04:76:35:9e:73:22:f0:85:02:13:f0:68:9a:a6: 78:3c:c5:ad:b4:ec:23:91:9a:ec:91:fb:8c:cc:37: b3:53:8f:ec:a1:50:e6:0a:a7:e8:b1:e0:97:49:c1: 02:01:7a:cb:65:f0:ac:55:d4:71:53:fb:5f:40:94: 8b:2a:f2:a2:63:96:ed:b5:c1:0d:73:b9:45:a9:9c: 86:5b:0c:39:b4:aa:39:f0:39:33:82:3a:59:49:7e: b0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.243.56.0/21 89.200.168.0/21 91.223.141.0/24 91.230.83.0/24 94.102.208.0/20 109.235.56.0/21 151.252.48.0/20 158.58.144.0/21 185.90.232.0/22 193.254.184.0/21 195.191.92.0/23 IPv6: 2001:67c:2394::/48 2a00:19e0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25504 41078 57115 Signature Algorithm: sha256WithRSAEncryption 42:81:e7:11:ab:3d:e2:9b:08:04:18:13:31:86:36:34:95:fc: 1d:d4:f0:4d:81:71:74:a1:4c:b9:8d:ed:ec:5b:02:1b:5f:52: 41:a5:8f:33:ae:91:aa:59:43:5b:70:5f:0b:51:15:86:ea:5c: 13:55:0f:cd:01:83:f5:71:f1:15:9b:ea:62:5a:c8:04:fc:7c: cd:b0:04:a1:38:10:52:c1:a4:52:d7:79:f2:e7:76:69:62:8f: 4e:d3:03:f5:2c:79:ee:99:b6:ca:66:e9:53:1e:85:58:c0:5d: e0:c4:46:09:38:56:c7:53:2d:41:cd:18:ce:39:48:8b:d9:eb: 17:8f:17:f9:04:e5:f8:c4:1b:a7:8c:35:96:67:0c:cc:bf:fb: 3f:91:d7:9b:35:54:1b:3f:9b:de:1d:ac:71:1c:ef:fd:ba:4d: b1:7e:5f:08:62:c0:c1:30:e5:ab:80:70:ae:d3:fe:de:79:fa: 4f:88:ec:e6:52:a3:8b:18:aa:72:67:b1:50:29:90:0c:39:e4: d7:1d:25:68:f2:e2:0d:a3:b8:64:f3:20:1c:26:bb:0b:18:06: 35:6c:ca:b8:40:99:e1:40:fc:6f:6d:fd:67:61:d4:a2:da:d9: e3:c2:24:7e:65:f3:88:d1:67:c3:d4:f3:14:92:e6:1b:bc:d8: ab:a9:ae:5b -----BEGIN CERTIFICATE----- MIIF8TCCBNmgAwIBAgISAZt9ymCbvGFN++HQ00gkcgKHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmE1MTE2NWFhNTAzNmFjZGExMWZlZTAwMjBlMzRmY2M0MzllZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRoRGIL4Z9wK3PV6TT5SDbL0klJX lDYk0YPpumsD5Y8m2Ivu3ZlywBaj1S1B6D4saKhQrRH0gHtHU/IcoAky1ya1EyWH WuYFj2ZcrEVZBBtB3JnhqA8j3wPoMoPBxSp/k/dk5mFZDh996NLb+nxCS7GF1jMP SdPK38puqb/w9IecnPyDvGsut87sQ3FLl4bCPMT5dYFInGjXXOLQITvgsNn8gClz BHY1nnMi8IUCE/BomqZ4PMWttOwjkZrskfuMzDezU4/soVDmCqfoseCXScECAXrL ZfCsVdRxU/tfQJSLKvKiY5bttcENc7lFqZyGWww5tKo58DkzgjpZSX6wBQIDAQAB o4IC/TCCAvkwHQYDVR0OBBYEFK+lEWWqUDas2hH+4AIONPzEOe3mMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzJkYTFl Yy1hYTRiLTRkOTQtOThjYi1hNzc2ZTRhNjNlNmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvMmRhMWVj LWFhNGItNGQ5NC05OGNiLWE3NzZlNGE2M2U2Zi8xL3I2VVJaYXBRTnF6YUVmN2dB ZzQwX01RNTdlWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHMGCCsGAQUF BwEHAQH/BGQwYjBIBAIAATBCAwQDU/M4AwQDWcioAwQAW9+NAwQAW+ZTAwQEXmbQ AwQDbes4AwQEl/wwAwQDnjqQAwQCuVroAwQDwf64AwQBw79cMBYEAgACMBADBwAg AQZ8I5QDBQMqABngMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4CAmOgAgMAoHYCAwDf GzANBgkqhkiG9w0BAQsFAAOCAQEAQoHnEas94psIBBgTMYY2NJX8HdTwTYFxdKFM uY3t7FsCG19SQaWPM66RqllDW3BfC1EVhupcE1UPzQGD9XHxFZvqYlrIBPx8zbAE oTgQUsGkUtd58ud2aWKPTtMD9Sx57pm2ymbpUx6FWMBd4MRGCThWx1MtQc0YzjlI i9nrF48X+QTl+MQbp4w1lmcMzL/7P5HXmzVUGz+b3h2scRzv/bpNsX5fCGLAwTDl q4BwrtP+3nn6T4js5lKjixiqcmexUCmQDDnk1x0laPLiDaO4ZPMgHCa7CxgGNWzK uECZ4UD8b239Z2HUotrZ48IkfmXziNFnw9TzFJLmG7zYq6muWw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:21 2026 by rpki-client