This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer File: t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer (raw, json) Hash identifier: eZPeD9llHHYstqGjiMTKUPItL8Dx/9Oz3ZN0KvgB/OA= Subject key identifier: B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A659088C1E427F9E26013F4341691 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203836 IP: 185.66.132.0/22 IP: 2a03:2160::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:65:90:88:c1:e4:27:f9:e2:60:13:f4:34:16:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2d:05:9c:9c:3d:93:1d:ba:a3:dc:0f:17:e5: a0:05:f5:a2:8a:ea:0a:62:00:4a:32:29:38:8a:03: cc:1c:4a:f8:1a:87:09:1b:6e:c0:ca:1f:d0:06:3d: 9f:24:2d:45:8d:78:dd:97:bc:5e:c2:3d:63:75:a2: be:d3:69:6b:0a:82:68:da:7d:aa:78:ac:35:15:3c: 71:59:d3:cd:85:1a:c7:cb:ea:9d:19:a1:51:ee:c4: ca:dc:2a:cd:7e:54:d5:68:de:80:f9:4e:ae:fc:07: c8:ec:42:bd:2b:3b:1b:4c:c8:e3:9b:58:5b:cd:c1: c5:46:10:2c:26:b0:ae:8e:ea:df:83:51:85:25:0e: 3c:f5:38:e3:87:81:6a:f3:f8:20:f3:73:a6:90:dc: a8:53:5d:3d:09:b5:cc:3e:e2:f3:d8:b6:6f:46:98: 8c:28:10:d8:97:74:71:dd:5a:bf:7a:2f:b3:e6:04: 46:4e:81:f7:19:32:07:1d:1b:fe:d2:91:12:21:00: 5f:1d:27:29:37:a8:65:93:13:ca:52:17:1e:a4:53: 73:b2:df:2a:6b:96:fa:28:d0:82:62:0c:61:26:98: a2:6a:3e:af:8b:11:6f:a6:14:2c:cf:5c:b8:c1:3b: cf:38:a4:74:d0:3b:00:b3:f4:8a:c8:2c:dc:38:77: 1e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.66.132.0/22 IPv6: 2a03:2160::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203836 Signature Algorithm: sha256WithRSAEncryption 6e:f0:17:e8:b5:a6:95:7d:14:f2:b6:a1:17:a6:db:34:d7:b3: 19:fe:2e:60:9d:5b:9e:ee:70:4b:bb:5d:bd:1a:87:cc:98:b8: a6:c7:0a:ac:29:06:46:d5:30:46:41:e7:74:32:8e:48:79:78: 61:ee:06:80:4f:43:19:7b:00:db:61:e5:3a:c1:50:96:cf:6c: 79:3d:5d:e1:94:e9:66:7c:d9:3e:91:12:9b:4f:1e:9d:2f:81: 58:2b:6f:ee:2d:c2:a9:93:14:3e:bf:eb:d8:54:95:a5:d5:00: 03:3e:ad:ad:6f:b1:15:f2:b4:21:e9:7d:01:13:73:a9:7d:b6: 53:6b:6a:13:ad:dc:90:32:0b:dc:b6:60:30:bd:32:9c:ac:b8: 74:c3:9a:88:51:71:fa:cb:4f:29:80:77:c7:a3:be:8b:1d:a0: 4a:cc:9d:be:80:7c:12:7d:de:42:5c:19:ad:8e:5b:d1:24:05: 4d:28:d7:2d:b7:9a:9d:c8:4b:cc:c0:f1:6a:bf:aa:16:9e:13: b7:95:73:2e:15:7c:d5:77:b7:84:0f:44:db:9b:61:93:8b:08: 90:6d:14:21:1b:88:78:e0:3b:49:83:29:38:c3:06:3f:db:4c: e2:1a:ed:fd:c6:72:df:b1:d2:fa:4a:0b:99:60:2e:ce:67:99: 04:43:a4:01 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WmWQiMHkJ/niYBP0NBaRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2EyMzAzMTZiM2UyNThlOTI1NWY0NmIyMDgwMmFlMmYzY2I0NmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS0FnJw9kx26o9wPF+WgBfWiiuoK YgBKMik4igPMHEr4GocJG27Ayh/QBj2fJC1FjXjdl7xewj1jdaK+02lrCoJo2n2q eKw1FTxxWdPNhRrHy+qdGaFR7sTK3CrNflTVaN6A+U6u/AfI7EK9KzsbTMjjm1hb zcHFRhAsJrCujurfg1GFJQ489Tjjh4Fq8/gg83OmkNyoU109CbXMPuLz2LZvRpiM KBDYl3Rx3Vq/ei+z5gRGToH3GTIHHRv+0pESIQBfHScpN6hlkxPKUhcepFNzst8q a5b6KNCCYgxhJpiiaj6vixFvphQsz1y4wTvPOKR00DsAs/SKyCzcOHceKQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLeiMDFrPiWOklX0ayCAKuLzy0agMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyLzdmZTU1 OS0yZjFkLTQ3ZTgtODQ2Ni1lZjkxMzVhMmM4MmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvN2ZlNTU5 LTJmMWQtNDdlOC04NDY2LWVmOTEzNWEyYzgyZi8xL3Q2SXdNV3MtSlk2U1ZmUnJJ SUFxNHZQTFJxQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUKEMA0EAgACMAcDBQAqAyFgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMcPDANBgkqhkiG9w0BAQsFAAOCAQEAbvAX6LWmlX0U 8rahF6bbNNezGf4uYJ1bnu5wS7tdvRqHzJi4pscKrCkGRtUwRkHndDKOSHl4Ye4G gE9DGXsA22HlOsFQls9seT1d4ZTpZnzZPpESm08enS+BWCtv7i3CqZMUPr/r2FSV pdUAAz6trW+xFfK0Iel9ARNzqX22U2tqE63ckDIL3LZgML0ynKy4dMOaiFFx+stP KYB3x6O+ix2gSsydvoB8En3eQlwZrY5b0SQFTSjXLbeanchLzMDxar+qFp4Tt5Vz LhV81Xe3hA9E25thk4sIkG0UIRuIeOA7SYMpOMMGP9tM4hrt/cZy37HS+koLmWAu zmeZBEOkAQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:20 2026 by rpki-client