This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer File: t6hswzTG4Oq4PyUr2D7ulWklykA.cer (raw, json) Hash identifier: Bu8iyCC4fN+3J8oXDKz1l/OvzHWFewLyA4msJ7FZb78= Subject key identifier: B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79107FD7AC290F25D3A97F872A342246 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200962 IP: 185.90.72.0/22 IP: 2a05:e040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:7f:d7:ac:29:0f:25:d3:a9:7f:87:2a:34:22:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7a86cc334c6e0eab83f252bd83eee956925ca40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:30:c2:24:42:33:c2:b9:47:b8:6b:2f:04:40: b2:33:41:e3:b3:b2:52:8f:2c:4a:24:9d:b1:55:a4: cd:1b:5c:5c:12:53:cb:0d:36:8f:7e:12:09:50:2d: 68:5f:fe:e0:40:99:ed:df:11:f7:f4:d4:24:e9:20: 87:c5:df:7b:7f:06:cc:db:51:07:2f:5a:e8:56:99: b3:49:0e:cd:8e:7e:e1:45:ad:3c:82:6b:85:27:4f: 7c:89:ba:9b:84:42:ca:e5:15:0c:d9:c0:f8:b2:2f: 07:25:64:30:f6:86:4f:85:b8:86:25:f8:2f:5b:26: b4:e0:41:de:f1:e9:e0:ae:5f:af:a0:1d:88:11:99: 20:fe:b3:e2:2f:44:1e:f5:85:0d:11:09:d9:3d:e5: 2a:08:a8:80:6e:43:d9:f8:2f:b2:22:91:5d:f6:27: 67:57:c2:0a:a0:06:1a:7f:1e:51:fc:9f:2d:0e:72: b1:ae:04:74:4f:b8:4e:4a:55:9e:ff:be:9f:0b:cb: 2c:e2:a2:6a:fe:77:e6:e3:97:f5:cc:17:2e:1a:9a: f0:27:9b:0b:8a:89:ea:34:78:03:a5:e6:9c:65:26: 96:3a:6a:44:02:a9:05:3d:de:1b:8e:02:2d:d1:dc: ef:7d:96:d3:c4:73:be:fd:52:33:d9:e9:9e:99:a9: 59:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.90.72.0/22 IPv6: 2a05:e040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200962 Signature Algorithm: sha256WithRSAEncryption 91:6e:9e:a4:c2:15:aa:18:c6:9b:b6:57:14:cf:43:01:52:09: 32:df:e6:75:ab:8e:d9:f8:ea:65:2c:15:71:cc:c2:2c:b1:33: c2:72:48:c5:72:8b:d9:4d:27:3f:cc:5a:55:77:f1:55:1a:43: ad:d7:26:f6:c6:10:76:4a:21:60:b9:78:7e:6e:8d:c8:40:b9: a1:25:54:52:08:22:d7:51:bb:91:b5:57:75:bc:ce:20:fc:be: 46:d3:3e:90:5e:f7:0b:41:c1:24:27:34:3d:cc:c0:fb:ec:71: 76:27:fe:1e:ed:f1:e2:86:1f:c2:1f:bd:b5:39:62:2c:b1:a4: 56:b9:25:f1:a5:64:44:0e:2d:6e:f7:71:d0:8a:6e:58:b3:68: fd:46:36:34:a5:48:dd:c4:ff:63:a6:ef:3d:d5:d8:53:53:8b: c9:45:8d:85:67:0b:cc:cd:d2:00:58:c9:5e:ec:41:87:54:10: 75:5f:22:6d:83:b8:65:74:dc:a1:7b:43:af:ea:5c:f3:67:dc: 7e:31:59:dd:93:88:d1:4a:98:48:3e:61:58:b7:e1:ae:eb:38: d2:67:a9:5e:e4:22:4f:29:4c:9b:7d:02:ae:2e:5d:42:53:b7: c5:80:90:3b:2c:9b:f5:74:23:cf:82:cb:f6:86:99:de:34:07: 40:8c:7f:ce -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EH/XrCkPJdOpf4cqNCJGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2E4NmNjMzM0YzZlMGVhYjgzZjI1MmJkODNlZWU5NTY5MjVjYTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzDCJEIzwrlHuGsvBECyM0Hjs7JS jyxKJJ2xVaTNG1xcElPLDTaPfhIJUC1oX/7gQJnt3xH39NQk6SCHxd97fwbM21EH L1roVpmzSQ7Njn7hRa08gmuFJ098ibqbhELK5RUM2cD4si8HJWQw9oZPhbiGJfgv Wya04EHe8engrl+voB2IEZkg/rPiL0Qe9YUNEQnZPeUqCKiAbkPZ+C+yIpFd9idn V8IKoAYafx5R/J8tDnKxrgR0T7hOSlWe/76fC8ss4qJq/nfm45f1zBcuGprwJ5sL ionqNHgDpeacZSaWOmpEAqkFPd4bjgIt0dzvfZbTxHO+/VIz2ememalZYQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLeobMM0xuDquD8lK9g+7pVpJcpAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkLzUwMzZi ZS0xMzhiLTQ0MmUtOTYzZi01N2NkNzI5NTdiODkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvNTAzNmJl LTEzOGItNDQyZS05NjNmLTU3Y2Q3Mjk1N2I4OS8xL3Q2aHN3elRHNE9xNFB5VXIy RDd1bFdrbHlrQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVpIMA0EAgACMAcDBQMqBeBAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMRAjANBgkqhkiG9w0BAQsFAAOCAQEAkW6epMIVqhjG m7ZXFM9DAVIJMt/mdauO2fjqZSwVcczCLLEzwnJIxXKL2U0nP8xaVXfxVRpDrdcm 9sYQdkohYLl4fm6NyEC5oSVUUggi11G7kbVXdbzOIPy+RtM+kF73C0HBJCc0PczA ++xxdif+Hu3x4oYfwh+9tTliLLGkVrkl8aVkRA4tbvdx0IpuWLNo/UY2NKVI3cT/ Y6bvPdXYU1OLyUWNhWcLzM3SAFjJXuxBh1QQdV8ibYO4ZXTcoXtDr+pc82fcfjFZ 3ZOI0UqYSD5hWLfhrus40mepXuQiTylMm30Cri5dQlO3xYCQOyyb9XQjz4LL9oaZ 3jQHQIx/zg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:41 2026 by rpki-client