This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer File: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer (raw, json) Hash identifier: BUHsVh7d1Alscnj0V0Upwd7euYBczZ7sVUrt3ESsgpg= Subject key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA5E1AA0D846E7BFEC71F260307A23 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48437 AS: 57774 IP: 94.232.176.0/21 IP: 176.107.192.0/21 IP: 178.54.128.0/17 IP: 2001:678:d38::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:5e:1a:a0:d8:46:e7:bf:ec:71:f2:60:30:7a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afa929be73491acd99d590372a52b815fa1f23f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ab:cf:33:3f:e5:c0:f7:df:7f:17:04:7a:ae: 06:46:30:af:28:1f:01:1b:de:79:32:5f:7e:43:99: de:5c:f1:ca:89:82:e0:92:12:35:c7:d8:75:71:16: a8:93:a6:21:ff:f6:10:ca:c3:d6:ad:a1:2a:a6:b4: 06:75:b2:6f:26:15:40:f7:c7:48:68:a0:c3:4d:6a: 47:17:07:40:5e:9b:bc:46:c8:af:4e:91:bc:ad:c1: f7:55:d8:ef:0c:ba:00:33:2f:de:6d:d8:c9:6f:96: a1:3c:82:f0:f1:b0:9b:4e:20:06:fc:1a:60:14:ad: da:ca:06:15:c3:7a:94:f2:5f:d2:81:5c:a8:3c:60: 0b:7c:b8:3c:7a:c2:56:86:43:ac:7d:35:bc:20:cb: fa:a2:06:05:70:3f:47:dd:02:eb:4e:74:a7:5b:f0: e9:1d:90:14:34:10:54:ce:bd:af:36:80:c5:87:f6: ef:e0:06:17:8e:c6:d7:9e:0b:cb:85:f9:82:09:81: 3f:78:37:6e:0f:12:bc:93:e1:49:d4:36:28:68:d4: 1d:43:8c:43:9c:72:6a:eb:6f:7d:d1:7c:ee:09:11: 42:81:c7:ce:92:9e:7b:89:96:0b:24:7a:e4:ef:61: 88:88:cd:87:d7:09:51:c4:36:ed:a1:0a:b2:79:ba: 4e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.232.176.0/21 176.107.192.0/21 178.54.128.0/17 IPv6: 2001:678:d38::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48437 57774 Signature Algorithm: sha256WithRSAEncryption a1:9f:5d:cd:ed:56:85:0b:d9:4b:bf:a7:0a:51:07:d9:8f:e4: 69:db:4c:89:17:91:fb:77:f2:bd:3d:8e:ae:84:2a:26:fa:ed: 54:24:b2:29:73:95:83:2e:c7:5c:b4:8d:5e:6e:b0:04:fe:cf: d2:b2:b5:b1:05:72:74:84:ce:53:16:94:b9:dc:75:56:66:bb: 8f:a3:65:6e:87:a2:16:b7:99:ce:ef:10:57:3a:3e:c3:3c:25: ee:3e:d1:ef:e1:43:f0:d3:60:d6:d1:4d:20:24:93:45:12:7d: 85:5c:ae:48:b8:1e:5d:82:13:21:f1:c8:46:d4:61:ef:6d:7b: 57:85:9e:20:bd:43:84:4c:d9:f6:72:4b:7a:8d:da:37:84:b1: 7f:5a:97:11:81:cf:6b:52:5d:8b:68:e5:33:29:50:11:37:23: 3d:b3:1a:fb:23:a8:ae:11:8c:06:f6:9b:f5:2c:9e:73:c8:9e: 1d:14:d4:5c:f9:82:d0:ef:cb:90:43:e0:53:47:94:65:68:4e: 42:5a:46:e4:d6:09:b5:2e:8a:a1:f0:25:18:b7:33:37:21:ba: 1d:e2:d2:7f:2e:d1:33:a2:c3:75:38:39:ec:f9:75:eb:6d:1b: f5:78:4b:f0:8e:ad:0c:8c:3d:3c:4c:c4:b1:af:53:4c:f3:76: b5:0a:87:3b -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZt9yl4aoNhG57/scfJgMHojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmE5MjliZTczNDkxYWNkOTlkNTkwMzcyYTUyYjgxNWZhMWYyM2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KvPMz/lwPfffxcEeq4GRjCvKB8B G955Ml9+Q5neXPHKiYLgkhI1x9h1cRaok6Yh//YQysPWraEqprQGdbJvJhVA98dI aKDDTWpHFwdAXpu8RsivTpG8rcH3VdjvDLoAMy/ebdjJb5ahPILw8bCbTiAG/Bpg FK3aygYVw3qU8l/SgVyoPGALfLg8esJWhkOsfTW8IMv6ogYFcD9H3QLrTnSnW/Dp HZAUNBBUzr2vNoDFh/bv4AYXjsbXngvLhfmCCYE/eDduDxK8k+FJ1DYoaNQdQ4xD nHJq62990XzuCRFCgcfOkp57iZYLJHrk72GIiM2H1wlRxDbtoQqyebpONwIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFK+pKb5zSRrNmdWQNypSuBX6HyP1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5LzI2OTRm OC1mYTFmLTRjODEtODMxMi0zYjZmMWJkZjQxMmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvMjY5NGY4 LWZhMWYtNGM4MS04MzEyLTNiNmYxYmRmNDEyYS8xL3I2a3B2bk5KR3MyWjFaQTNL bEs0RmZvZklfVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAYBAIAATASAwQDXuiwAwQDsGvAAwQHsjaAMA8EAgACMAkDBwAg AQZ4DTgwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAL01AgMA4a4wDQYJKoZIhvcN AQELBQADggEBAKGfXc3tVoUL2Uu/pwpRB9mP5GnbTIkXkft38r09jq6EKib67VQk silzlYMux1y0jV5usAT+z9KytbEFcnSEzlMWlLncdVZmu4+jZW6Hoha3mc7vEFc6 PsM8Je4+0e/hQ/DTYNbRTSAkk0USfYVcrki4Hl2CEyHxyEbUYe9te1eFniC9Q4RM 2fZyS3qN2jeEsX9alxGBz2tSXYto5TMpUBE3Iz2zGvsjqK4RjAb2m/UsnnPInh0U 1Fz5gtDvy5BD4FNHlGVoTkJaRuTWCbUuiqHwJRi3Mzchuh3i0n8u0TOiw3U4Oez5 dettG/V4S/COrQyMPTxMxLGvU0zzdrUKhzs= -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:48 2026 by rpki-client