This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer File: x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer (raw, json) Hash identifier: BIrbEc2hJD8fZkFaGqMQSRWTlLWtyWA2OIV/9G5DAhI= Subject key identifier: C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B1813F1F1FA1A84460A0710DF267D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62452 IP: 194.33.68.0/24 IP: 194.33.70.0/23 IP: 2001:67c:2994::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:18:13:f1:f1:fa:1a:84:46:0a:07:10:df:26:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:39:11:2d:69:5f:81:aa:2d:82:4d:3d:62:61: 04:d1:09:55:0b:8e:e2:cd:88:2d:2c:85:7e:28:75: a7:4e:a0:58:12:27:23:84:fe:95:aa:f9:ec:22:e4: 33:d5:1f:e4:1e:a3:ce:51:82:11:9a:7c:bc:b1:da: 63:23:5f:46:27:5b:86:4f:e8:93:a1:27:a9:ee:4c: 3d:21:1e:7e:33:a1:2f:95:6a:1d:04:12:0c:0f:e8: b6:7e:a2:22:3e:71:08:70:d4:62:eb:77:2e:a1:9f: 23:bd:ba:35:0b:bd:75:a6:2e:65:f8:36:21:28:f6: 9b:b1:5d:18:9d:b9:34:74:83:2b:75:97:24:31:d4: b3:42:c1:20:6c:a4:de:e2:f7:61:ae:68:23:1b:1e: e6:c6:ad:5e:0d:dc:7b:d5:ad:34:d8:f9:95:b3:d0: 28:5f:6c:fe:4e:5c:d6:97:b0:6a:8f:9c:c0:db:c3: e8:21:5d:12:9c:7b:2e:43:9e:28:9f:4d:e6:cd:2b: 1a:6e:98:63:43:b6:60:b3:f6:9e:b7:f3:ed:c8:75: 32:36:47:2e:d1:3b:ae:b9:0b:19:4e:4b:ec:d0:91: 7e:b1:d2:4b:94:60:ee:86:2b:01:77:4c:6e:09:69: d9:25:cb:fe:b3:43:0c:c7:2e:41:3f:09:83:fd:a1: 7e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.68.0/24 194.33.70.0/23 IPv6: 2001:67c:2994::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62452 Signature Algorithm: sha256WithRSAEncryption 95:24:57:c5:ca:0a:95:81:a7:7f:5f:56:2c:1d:4f:af:3e:94: 30:2f:1d:64:ab:c5:0d:cd:3d:87:b9:27:fd:f2:b6:d2:a4:df: 6f:33:d7:88:5a:b0:a9:58:17:8d:c0:5f:63:a5:96:c3:40:9d: 6c:d1:0a:e0:57:8f:93:67:38:df:37:e0:8c:68:a4:62:56:10: d5:ca:07:3a:91:70:11:a8:24:a9:02:f0:71:a3:9a:a0:90:dd: 32:21:52:fa:68:26:86:c3:e3:9a:eb:33:14:5f:b6:ae:87:db: cc:59:c0:d1:8b:73:45:7e:07:c7:ff:75:ac:66:d0:0f:eb:93: ee:1c:4a:6e:ae:ec:d4:23:8b:34:2e:03:f8:54:37:fa:f1:d0: 8e:7b:7c:be:27:08:26:89:50:63:8f:65:0c:9c:b0:ff:a4:e3: d4:2a:8e:9f:5e:91:65:ef:a4:8a:e1:d1:34:5a:6c:46:ad:57: 32:8d:66:6b:bd:b4:ad:a0:b1:19:90:53:1b:c3:ae:54:14:05: cb:3b:ff:2b:a2:22:44:dd:c4:05:9b:a0:a4:90:bc:18:43:2f: be:54:7d:33:db:73:63:9f:a8:79:ef:7f:f7:da:0d:01:81:9c: 69:6a:8f:7a:f6:a8:f0:a4:5e:1a:1a:00:4e:d0:23:d0:f1:d3: 63:e1:f4:b4 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt6WxgT8fH6GoRGCgcQ3yZ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2EyZTRlYjlmZDNjY2QxYmE0NGEzNjJmNzZmOTg5YjdiNDRkNWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDkRLWlfgaotgk09YmEE0QlVC47i zYgtLIV+KHWnTqBYEicjhP6VqvnsIuQz1R/kHqPOUYIRmny8sdpjI19GJ1uGT+iT oSep7kw9IR5+M6EvlWodBBIMD+i2fqIiPnEIcNRi63cuoZ8jvbo1C711pi5l+DYh KPabsV0Ynbk0dIMrdZckMdSzQsEgbKTe4vdhrmgjGx7mxq1eDdx71a002PmVs9Ao X2z+TlzWl7Bqj5zA28PoIV0SnHsuQ54on03mzSsabphjQ7Zgs/aet/PtyHUyNkcu 0TuuuQsZTkvs0JF+sdJLlGDuhisBd0xuCWnZJcv+s0MMxy5BPwmD/aF+NQIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFMei5Ouf08zRukSjYvdvmJt7RNXyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjLzBlNDk3 Ni1lNzUwLTQ1NjgtODU4My1kZTZlZjdjOTU1MjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvMGU0OTc2 LWU3NTAtNDU2OC04NTgzLWRlNmVmN2M5NTUyNi8xL3g2TGs2NV9Uek5HNlJLTmk5 Mi1ZbTN0RTFmSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQAwiFEAwQBwiFGMA8EAgACMAkDBwAgAQZ8KZQw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPP0MA0GCSqGSIb3DQEBCwUAA4IBAQCV JFfFygqVgad/X1YsHU+vPpQwLx1kq8UNzT2HuSf98rbSpN9vM9eIWrCpWBeNwF9j pZbDQJ1s0QrgV4+TZzjfN+CMaKRiVhDVygc6kXARqCSpAvBxo5qgkN0yIVL6aCaG w+Oa6zMUX7auh9vMWcDRi3NFfgfH/3WsZtAP65PuHEpuruzUI4s0LgP4VDf68dCO e3y+JwgmiVBjj2UMnLD/pOPUKo6fXpFl76SK4dE0WmxGrVcyjWZrvbStoLEZkFMb w65UFAXLO/8roiJE3cQFm6CkkLwYQy++VH0z23Njn6h573/32g0BgZxpao969qjw pF4aGgBO0CPQ8dNj4fS0 -----END CERTIFICATE-----Generated at Tue Jan 20 09:41:17 2026 by rpki-client