This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer File: t6K9aUc7So6Fp2r72OW77ptLs0s.cer (raw, json) Hash identifier: U3f4adS3Eo8V62QcfxPELxvyfVgInzcLdX+fepN1DpI= Subject key identifier: B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB877762B045F30AF9FE4BD9589517 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.170.67.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:87:77:62:b0:45:f3:0a:f9:fe:4b:d9:58:95:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1d:1d:a7:14:2c:5e:26:9d:72:91:bc:24:cf: ac:5c:59:21:21:9f:53:ee:73:9e:2a:17:f9:5b:ab: 2f:9a:46:b1:87:fa:fb:aa:26:ff:16:65:25:9b:c9: e0:79:7a:e5:9e:7a:00:f8:cd:33:f9:73:69:11:1d: 2d:45:fc:1b:2a:87:04:85:29:d7:9b:91:26:54:9a: f0:77:d5:07:fd:37:c2:dd:69:d0:44:55:a5:74:14: 08:bd:2e:a0:24:e0:50:fc:10:e6:a7:20:63:a2:f8: 2b:14:0f:04:de:87:47:7e:fb:ba:6a:ce:ae:18:bb: c1:07:39:7d:a1:d6:65:3f:2b:50:a4:65:e3:7e:eb: f8:fa:95:52:df:a1:c7:4e:81:e3:88:c4:f8:4e:c2: 28:33:7d:35:2d:dc:80:c4:b1:0f:88:86:04:81:c7: d7:7a:d4:01:f7:f8:f7:9d:79:19:d3:bf:8a:d9:4b: b6:26:1c:21:ed:e7:5d:44:9a:a5:88:f9:ff:f9:94: 2a:27:b6:cc:9a:46:bb:3e:de:1b:1a:89:a4:59:47: 12:ba:d4:1b:43:bb:de:db:a5:18:8f:8e:5d:23:5c: 9c:a9:ed:48:ea:df:ea:51:f9:eb:95:eb:73:ca:65: 5f:93:7f:2c:aa:c8:eb:cd:e1:fb:98:f7:7d:3a:82: 29:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.170.67.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:34:3c:b1:30:46:b7:b7:8a:35:63:8d:3f:85:c7:72:87:9e: 42:cc:49:87:06:d5:6f:ae:b8:68:16:79:25:d1:05:40:fa:cd: b2:8d:61:d1:52:d2:3d:7b:d2:b5:5f:d7:d4:57:a7:03:ea:ea: c2:52:51:45:c0:33:0b:71:87:c4:08:d2:07:b5:ff:25:e5:76: 4f:8b:41:d4:22:92:d0:59:59:ae:e0:68:b8:aa:76:75:b1:e0: 02:7d:3c:c5:1c:8f:75:e8:28:48:9f:8b:8a:06:1c:87:c9:f8: 87:9a:b9:18:bf:af:5d:ee:8d:07:1d:8a:c6:5a:5b:8f:19:24: c6:06:2a:92:73:46:ba:53:b4:f4:35:18:40:98:d8:9d:af:1b: b1:1c:5f:69:8a:f8:8a:e3:e4:f2:80:96:dd:1e:08:00:f6:35: c5:e7:c3:03:5e:da:50:e2:2d:44:db:20:6e:97:3a:4a:85:9c: 5b:6c:11:2b:1c:26:e2:3c:24:b1:34:0d:e3:2a:f7:58:8e:4a: 39:8f:d3:7e:33:d6:94:30:81:51:46:29:da:0e:88:d4:ba:e0: a6:33:f4:58:d0:a7:92:fd:ab:ae:62:70:0d:12:aa:9a:dd:09: b9:62:03:b5:d6:18:f0:26:4b:4a:5d:bf:50:cd:f1:ff:79:83: c2:a1:11:3c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt264d3YrBF8wr5/kvZWJUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2EyYmQ2OTQ3M2I0YThlODVhNzZhZmJkOGU1YmJlZTliNGJiMzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB0dpxQsXiadcpG8JM+sXFkhIZ9T 7nOeKhf5W6svmkaxh/r7qib/FmUlm8ngeXrlnnoA+M0z+XNpER0tRfwbKocEhSnX m5EmVJrwd9UH/TfC3WnQRFWldBQIvS6gJOBQ/BDmpyBjovgrFA8E3odHfvu6as6u GLvBBzl9odZlPytQpGXjfuv4+pVS36HHToHjiMT4TsIoM301LdyAxLEPiIYEgcfX etQB9/j3nXkZ07+K2Uu2Jhwh7eddRJqliPn/+ZQqJ7bMmka7Pt4bGomkWUcSutQb Q7ve26UYj45dI1ycqe1I6t/qUfnrletzymVfk38sqsjrzeH7mPd9OoIpuwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFLeivWlHO0qOhadq+9jlu+6bS7NLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhLzc0ZDVm Ni1lNjQxLTQ0MDgtYTc2ZS01Mzg4OWJkYzg0ZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvNzRkNWY2 LWU2NDEtNDQwOC1hNzZlLTUzODg5YmRjODRmNS8xL3Q2SzlhVWM3U282RnAycjcy T1c3N3B0THMwcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuapDMA0GCSqGSIb3DQEBCwUAA4IBAQAbNDyx MEa3t4o1Y40/hcdyh55CzEmHBtVvrrhoFnkl0QVA+s2yjWHRUtI9e9K1X9fUV6cD 6urCUlFFwDMLcYfECNIHtf8l5XZPi0HUIpLQWVmu4Gi4qnZ1seACfTzFHI916ChI n4uKBhyHyfiHmrkYv69d7o0HHYrGWluPGSTGBiqSc0a6U7T0NRhAmNidrxuxHF9p iviK4+TygJbdHggA9jXF58MDXtpQ4i1E2yBulzpKhZxbbBErHCbiPCSxNA3jKvdY jko5j9N+M9aUMIFRRinaDojUuuCmM/RY0KeS/auuYnANEqqa3Qm5YgO11hjwJktK Xb9QzfH/eYPCoRE8 -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:35 2026 by rpki-client