This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer File: s6qVFyKhmXGkTmLKktHJEoTRLiE.cer (raw, json) Hash identifier: GPV0UMGZtXYev2QvIGF3xN1V61gktzXYnslWfZzTe+k= Subject key identifier: B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C72575A9C6DA81BB282C32674F25D4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 132.187.0.0/16 IP: 141.27.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:25:75:a9:c6:da:81:bb:28:2c:32:67:4f:25:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3aa951722a19971a44e62ca92d1c91284d12e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a5:b2:f4:54:53:9f:c1:67:6a:d5:e7:26:9f: b4:97:38:0d:e4:bf:9e:b0:84:9e:2b:27:ba:bb:a3: c6:fe:4a:ff:76:82:c9:84:ee:8c:da:24:b7:ab:d8: 73:94:65:f6:23:6f:95:b5:fe:0b:be:1a:ba:01:2e: e1:8b:a1:f9:20:f9:55:cf:35:76:34:9f:9a:77:c0: 29:4a:50:6f:eb:9a:58:b1:33:a2:28:64:57:a8:ec: 4f:23:c8:4c:68:2f:f2:62:54:42:39:d9:08:cf:d9: e8:be:00:64:a4:49:ce:07:46:13:c7:47:db:f8:0f: fc:20:26:18:e8:82:64:1b:99:30:3e:4d:8f:a8:13: 6d:3c:3b:5f:56:ed:67:20:8a:d6:f9:1a:c5:d5:ab: 69:75:99:51:e6:3d:2e:0e:95:12:b5:f4:8d:36:d2: 5c:9b:fa:da:1c:87:20:6a:6f:a8:2a:21:86:53:85: 08:27:b0:83:14:78:7a:19:c5:8b:af:93:10:c2:5a: 32:d2:c7:f3:15:78:b1:48:71:e4:9a:3e:26:2d:c4: a4:c1:6f:ac:12:38:c7:38:6d:6c:ed:b2:3f:46:82: 7a:34:d7:5e:29:33:15:82:cc:85:13:00:a2:69:17: c7:c2:72:9b:05:42:53:ed:a6:3c:c9:9d:d1:7b:3f: be:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.187.0.0/16 141.27.0.0/16 Signature Algorithm: sha256WithRSAEncryption 69:2e:fd:84:39:2e:66:fa:a9:d3:ad:d9:d7:c3:25:a3:a2:a1: b3:b7:10:fe:5a:b6:be:e7:ec:a1:40:ca:d3:10:32:7c:0a:82: 47:87:11:90:4f:73:5a:2d:ba:19:33:f8:e3:f2:26:1e:f8:ef: 21:71:74:c4:30:c0:3a:12:64:57:af:8c:3b:58:8a:48:e6:72: 02:6a:a0:17:79:a3:d0:e3:e9:cf:a0:64:e1:24:c7:1b:58:6e: a1:ba:16:a5:35:1a:e1:c6:bc:1b:1b:37:02:ce:30:c0:2b:54: c1:c6:2a:2a:f9:2a:07:eb:a1:4d:59:a8:f4:00:04:db:4d:04: 35:06:a5:5f:f7:6e:7b:92:07:00:04:2f:4e:e1:86:ec:14:1f: 77:08:b2:ee:29:72:f8:43:51:ee:10:76:9d:e3:68:24:40:23: 93:51:2f:de:dd:b4:f8:bb:87:47:a5:0a:ad:5b:69:e2:82:8e: 3b:28:a5:b0:b0:08:2c:a9:09:1f:31:23:d5:67:42:50:10:80: 46:34:87:1c:17:c0:ad:35:81:14:d9:ba:5e:cf:f8:86:36:39: 17:b7:d2:e1:75:2e:d0:d5:f6:bd:78:42:52:12:92:5d:1f:5c: dc:81:38:29:47:c6:28:27:67:64:b1:09:be:52:bb:20:90:ea: db:5a:eb:3e -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgISAZt3xyV1qcbagbsoLDJnTyXUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2FhOTUxNzIyYTE5OTcxYTQ0ZTYyY2E5MmQxYzkxMjg0ZDEyZTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKWy9FRTn8FnatXnJp+0lzgN5L+e sISeKye6u6PG/kr/doLJhO6M2iS3q9hzlGX2I2+Vtf4Lvhq6AS7hi6H5IPlVzzV2 NJ+ad8ApSlBv65pYsTOiKGRXqOxPI8hMaC/yYlRCOdkIz9novgBkpEnOB0YTx0fb +A/8ICYY6IJkG5kwPk2PqBNtPDtfVu1nIIrW+RrF1atpdZlR5j0uDpUStfSNNtJc m/raHIcgam+oKiGGU4UIJ7CDFHh6GcWLr5MQwloy0sfzFXixSHHkmj4mLcSkwW+s EjjHOG1s7bI/RoJ6NNdeKTMVgsyFEwCiaRfHwnKbBUJT7aY8yZ3Rez++4QIDAQAB o4ICiDCCAoQwHQYDVR0OBBYEFLOqlRcioZlxpE5iypLRyRKE0S4hMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3L2ZkZWE3 Yy1hMWJjLTQ4YTktYWNkMy1hMDAzYzRiNjFhNWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvZmRlYTdj LWExYmMtNDhhOS1hY2QzLWEwMDNjNGI2MWE1Zi8xL3M2cVZGeUtobVhHa1RtTEtr dEhKRW9UUkxpRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCMGCCsGAQUF BwEHAQH/BBQwEjAQBAIAATAKAwMAhLsDAwCNGzANBgkqhkiG9w0BAQsFAAOCAQEA aS79hDkuZvqp063Z18Mlo6Khs7cQ/lq2vufsoUDK0xAyfAqCR4cRkE9zWi26GTP4 4/ImHvjvIXF0xDDAOhJkV6+MO1iKSOZyAmqgF3mj0OPpz6Bk4STHG1huoboWpTUa 4ca8Gxs3As4wwCtUwcYqKvkqB+uhTVmo9AAE200ENQalX/due5IHAAQvTuGG7BQf dwiy7ily+ENR7hB2neNoJEAjk1Ev3t20+LuHR6UKrVtp4oKOOyilsLAILKkJHzEj 1WdCUBCARjSHHBfArTWBFNm6Xs/4hjY5F7fS4XUu0NX2vXhCUhKSXR9c3IE4KUfG KCdnZLEJvlK7IJDq21rrPg== -----END CERTIFICATE-----Generated at Tue Jan 27 12:54:34 2026 by rpki-client