This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer File: s6dYkEx1hW41haRDOuXsV_7xo8c.cer (raw, json) Hash identifier: qoNuiMI3gGTCY8+IPgf4qOy74OK3XTQnhl4gkCdSzH8= Subject key identifier: B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FEE0F6C6C966648214FF96F669093 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12662 IP: 192.162.132.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ee:0f:6c:6c:96:66:48:21:4f:f9:6f:66:90:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:86:8f:8f:79:9b:55:79:6b:bf:79:2a:49:41: 8b:19:e2:c7:f0:10:cb:82:ea:19:ae:f7:a4:dc:ba: a8:bd:11:a4:38:44:19:8d:3a:e1:5d:4f:b8:7e:60: ef:77:4d:19:02:cd:72:1b:74:de:fa:ce:00:f1:eb: d9:0d:05:45:8f:25:9a:f7:7b:29:d6:8f:63:48:a9: ec:18:0f:ce:56:ca:e6:9e:a0:04:9a:d1:6c:81:37: 9f:09:f9:1a:5d:fa:66:e4:d6:52:a3:c3:30:15:95: 54:a5:da:87:68:d2:19:21:34:be:d7:02:fd:b4:17: 15:4b:60:da:22:4e:9b:d4:45:d6:3c:ce:90:d8:4b: c8:68:c1:65:a2:90:f7:31:d4:51:66:53:fa:14:0c: 3d:88:cc:e4:42:4e:06:af:f0:a7:6f:c3:5d:59:d3: cf:ac:41:d3:38:8d:e2:f0:82:ea:fd:aa:68:7c:e4: e5:f4:34:dc:bb:5f:c0:d7:83:38:0d:2e:6a:e9:60: af:dc:10:67:69:1f:01:5c:f8:52:31:f1:23:c6:78: f1:2f:52:6d:aa:e8:4e:88:c5:cf:14:b0:20:8a:f8: 8b:4f:0a:12:de:8b:2c:03:3e:4f:8d:69:ec:6b:4e: 12:f3:79:8d:9d:9b:78:ca:0a:03:97:a1:12:42:f7: b0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.162.132.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12662 Signature Algorithm: sha256WithRSAEncryption 58:db:81:8d:07:6e:19:e1:3b:59:65:75:37:4a:22:43:db:a1: e2:8c:6c:ee:fd:a6:f2:73:ec:d1:63:aa:80:1d:80:9b:81:e7: d7:5f:d4:14:79:5f:bf:65:10:79:b1:06:20:e2:fb:c0:c6:c5: 82:e8:e2:de:ad:83:4f:63:fe:7b:2c:a5:c4:ce:a6:97:06:83: 39:74:11:ab:11:d8:2c:21:59:2f:b6:f0:8a:73:6b:0b:d7:7b: 47:29:b8:8b:23:b7:d4:ce:29:6c:df:0e:b3:69:56:00:99:67: f5:86:a0:a2:d5:63:88:4a:70:e2:6b:ab:f7:af:f8:88:f9:61: c9:20:65:9d:6d:2c:9b:4f:67:d7:9b:e2:4c:a2:08:80:8e:17: df:26:c6:83:ba:6d:8d:7b:f1:b0:2a:b6:a5:97:21:52:e6:d9: ca:54:c2:3b:ee:5d:c9:14:c5:7b:af:0f:98:25:a4:77:09:8b: 9c:82:e5:97:72:67:96:17:51:e3:42:a1:b9:7a:21:93:73:cb: 70:18:0d:c7:7d:70:b3:e6:a2:bb:c7:3e:f0:f9:28:2e:22:ea: b2:15:93:a8:3a:06:63:36:66:70:be:de:31:ab:36:61:b9:50: 1e:33:ed:ae:d7:c3:f5:51:0d:e4:d9:de:a9:9b:f8:11:b5:66: d7:71:5c:3d -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt8f+4PbGyWZkghT/lvZpCTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2E3NTg5MDRjNzU4NTZlMzU4NWE0NDMzYWU1ZWM1N2ZlZjFhM2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIaPj3mbVXlrv3kqSUGLGeLH8BDL guoZrvek3LqovRGkOEQZjTrhXU+4fmDvd00ZAs1yG3Te+s4A8evZDQVFjyWa93sp 1o9jSKnsGA/OVsrmnqAEmtFsgTefCfkaXfpm5NZSo8MwFZVUpdqHaNIZITS+1wL9 tBcVS2DaIk6b1EXWPM6Q2EvIaMFlopD3MdRRZlP6FAw9iMzkQk4Gr/Cnb8NdWdPP rEHTOI3i8ILq/apofOTl9DTcu1/A14M4DS5q6WCv3BBnaR8BXPhSMfEjxnjxL1Jt quhOiMXPFLAgiviLTwoS3ossAz5PjWnsa04S83mNnZt4ygoDl6ESQvewWQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFLOnWJBMdYVuNYWkQzrl7Ff+8aPHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzLzE0OWMw MS04NDBkLTQ1ZjYtODIzZi1lMmYwZTFjMjYxMDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvMTQ5YzAx LTg0MGQtNDVmNi04MjNmLWUyZjBlMWMyNjEwNS8xL3M2ZFlrRXgxaFc0MWhhUkRP dVhzVl83eG84Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwKKEMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AjF2MA0GCSqGSIb3DQEBCwUAA4IBAQBY24GNB24Z4TtZZXU3SiJD26HijGzu/aby c+zRY6qAHYCbgefXX9QUeV+/ZRB5sQYg4vvAxsWC6OLerYNPY/57LKXEzqaXBoM5 dBGrEdgsIVkvtvCKc2sL13tHKbiLI7fUzils3w6zaVYAmWf1hqCi1WOISnDia6v3 r/iI+WHJIGWdbSybT2fXm+JMogiAjhffJsaDum2Ne/GwKrallyFS5tnKVMI77l3J FMV7rw+YJaR3CYucguWXcmeWF1HjQqG5eiGTc8twGA3HfXCz5qK7xz7w+SguIuqy FZOoOgZjNmZwvt4xqzZhuVAeM+2u18P1UQ3k2d6pm/gRtWbXcVw9 -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:56 2026 by rpki-client