This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer File: rh6ygNFyKEakQSTExi0AWfYa8kI.cer (raw, json) Hash identifier: se6PFHslvA7S6+D55uQMvrO7SeisYhuFms5PKktdaj8= Subject key identifier: AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82159430ECC3F89C22F04886D7BA2D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42428 IP: 87.230.128.0/17 IP: 88.84.96.0/19 IP: 185.90.16.0/22 IP: 212.11.160.0/19 IP: 2a02:fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:15:94:30:ec:c3:f8:9c:22:f0:48:86:d7:ba:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae1eb280d1722846a44124c4c62d0059f61af242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e1:ab:5e:d0:d3:27:e1:6b:21:4b:44:9f:73: 19:d6:68:96:d5:fa:38:86:b0:c8:e6:24:7d:9b:4b: 65:2f:75:2a:6f:2e:ea:61:95:95:57:eb:2b:2e:22: 91:a8:80:bc:3e:62:cd:c9:14:69:5a:d0:80:37:8b: fe:ec:48:74:84:d9:8a:6a:c2:a9:f1:1b:16:b6:c1: 27:61:9e:ff:58:87:d7:e4:a9:b3:72:75:97:10:85: fb:7a:04:6f:b6:88:d3:ed:10:00:bb:b7:1a:27:86: 50:c3:2c:52:9c:a4:09:47:95:02:94:5c:79:54:94: 40:6a:70:c0:b7:bf:32:72:fa:35:d1:48:b8:e0:fe: fd:c1:7c:e3:b1:16:2c:8c:b4:8d:15:bf:4c:8a:e6: f2:b3:9e:83:4c:79:f0:c6:d8:3a:9e:11:cf:35:92: 85:27:a6:89:80:b5:7a:38:5a:8e:a9:d2:a0:5e:17: fa:37:a3:f2:26:03:91:eb:e2:c8:91:22:46:69:1b: 2a:0b:7c:3f:67:06:20:bc:36:19:8d:fe:2d:6f:d2: 5b:0c:2c:22:b7:0c:64:35:a1:37:7a:2a:97:dc:90: 70:66:68:9b:b4:6a:7e:4e:46:b7:2a:0f:2c:5b:09: 9c:1f:f1:14:a0:ab:86:fe:f1:c3:43:27:49:fd:e2: bc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.230.128.0/17 88.84.96.0/19 185.90.16.0/22 212.11.160.0/19 IPv6: 2a02:fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42428 Signature Algorithm: sha256WithRSAEncryption a0:58:72:c0:4f:d3:5f:c9:e3:12:51:64:0d:14:3f:bd:98:d6: 6e:40:e6:19:21:10:1e:b0:3f:2e:35:a9:7e:c6:f7:a1:40:39: 4a:17:97:53:5b:ae:36:9d:61:1c:53:54:23:c9:79:cd:7e:8e: 85:6e:71:0d:53:54:4c:99:dd:7e:cb:8b:d9:4c:fd:a1:c1:7e: 5a:c1:8e:ca:6c:af:03:ce:49:6e:bb:df:cb:04:08:77:ca:0e: fe:4c:5e:37:7a:57:9f:c3:c0:6d:f4:3c:9c:22:23:6b:4c:e1: d8:1b:08:59:56:f9:aa:e8:0d:3b:7e:55:df:37:ba:9c:1f:d2: 9e:df:91:2a:ee:f8:93:1a:02:42:5b:01:76:34:37:66:60:3e: f5:d8:4a:f3:cb:33:ae:17:c9:5c:aa:23:5d:21:f8:44:d7:b4: 83:90:ba:7d:3f:24:29:e2:c9:14:64:c8:22:cb:63:03:ea:76: 65:fa:cb:1b:38:65:24:69:4e:eb:62:de:0b:94:13:8a:ca:26: 87:76:a5:5e:6a:f3:19:f3:ee:66:61:fd:bf:ab:86:83:0a:b7: 4e:76:d3:75:64:a0:32:b3:ea:b8:ec:5b:e3:3f:2b:17:c7:c9: b6:ae:fd:fe:44:db:f0:e6:04:1f:b2:95:19:93:2c:50:b5:0e: 97:ce:85:5b -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt/ghWUMOzD+Jwi8EiG17otMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTFlYjI4MGQxNzIyODQ2YTQ0MTI0YzRjNjJkMDA1OWY2MWFmMjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOGrXtDTJ+FrIUtEn3MZ1miW1fo4 hrDI5iR9m0tlL3Uqby7qYZWVV+srLiKRqIC8PmLNyRRpWtCAN4v+7Eh0hNmKasKp 8RsWtsEnYZ7/WIfX5KmzcnWXEIX7egRvtojT7RAAu7caJ4ZQwyxSnKQJR5UClFx5 VJRAanDAt78ycvo10Ui44P79wXzjsRYsjLSNFb9Miubys56DTHnwxtg6nhHPNZKF J6aJgLV6OFqOqdKgXhf6N6PyJgOR6+LIkSJGaRsqC3w/ZwYgvDYZjf4tb9JbDCwi twxkNaE3eiqX3JBwZmibtGp+Tka3Kg8sWwmcH/EUoKuG/vHDQydJ/eK8TwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFK4esoDRcihGpEEkxMYtAFn2GvJCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0LzFmZGYw NC04YjRlLTQzMzItYTRkZS03NzkzYjllZmIxYmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvMWZkZjA0 LThiNGUtNDMzMi1hNGRlLTc3OTNiOWVmYjFiZC8xL3JoNnlnTkZ5S0Vha1FTVEV4 aTBBV2ZZYThrSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQHV+aAAwQFWFRgAwQCuVoQAwQF1AugMA0EAgAC MAcDBQMqAg/AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwClvDANBgkqhkiG9w0B AQsFAAOCAQEAoFhywE/TX8njElFkDRQ/vZjWbkDmGSEQHrA/LjWpfsb3oUA5SheX U1uuNp1hHFNUI8l5zX6OhW5xDVNUTJndfsuL2Uz9ocF+WsGOymyvA85JbrvfywQI d8oO/kxeN3pXn8PAbfQ8nCIja0zh2BsIWVb5qugNO35V3ze6nB/Snt+RKu74kxoC QlsBdjQ3ZmA+9dhK88szrhfJXKojXSH4RNe0g5C6fT8kKeLJFGTIIstjA+p2ZfrL GzhlJGlO62LeC5QTisomh3alXmrzGfPuZmH9v6uGgwq3TnbTdWSgMrPquOxb4z8r F8fJtq79/kTb8OYEH7KVGZMsULUOl86FWw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:51 2026 by rpki-client