This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer File: 6CLYReFTmSp46PRFIyZNJhSxe50.cer (raw, json) Hash identifier: u6XJGpGvX+vx0sTtTyBEKx5CrpBkUaF8fykb92jt86M= Subject key identifier: E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A373A0A60CBFA2C6A4C8DA73FE1A99 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204308 IP: 46.167.32.0/21 IP: 185.101.52.0/22 IP: 2a0a:63c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:73:a0:a6:0c:bf:a2:c6:a4:c8:da:73:fe:1a:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e822d845e153992a78e8f44523264d2614b17b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c9:f8:c0:bb:7c:45:90:10:85:de:da:cf:ef: 14:1c:61:8e:fd:07:3c:08:50:ac:18:b5:4c:20:b2: 94:38:68:44:5a:d7:94:da:ac:71:a3:78:2c:2b:b4: b3:12:92:4e:14:40:b2:e4:16:fc:7d:d5:e0:66:54: cb:61:47:5d:6b:55:63:04:e8:a7:67:0f:9d:47:e4: bb:a2:dd:f4:92:42:cd:6e:b2:6c:e1:be:80:58:11: 78:7a:08:19:a7:24:6f:44:de:84:01:18:d9:ff:84: 04:31:f9:7a:81:4d:e1:b1:07:fa:28:6d:7c:d3:d0: aa:87:a3:69:17:da:6d:ce:53:a5:cb:16:fe:2a:c8: af:6e:56:43:05:f7:ca:93:b2:a7:ea:03:f9:4e:72: d0:e6:5a:51:67:63:ec:ac:50:cc:29:b5:ad:12:63: 0a:50:64:50:8b:42:08:c6:48:f5:7e:70:16:6f:bd: f7:b0:19:bf:0b:d4:fa:5c:d9:a1:44:9b:6b:78:00: fa:1f:02:3b:b0:8f:55:8d:5f:82:14:74:ff:88:b6: 04:18:db:67:14:d9:72:b0:41:00:9c:7f:b9:3c:7d: 49:1d:a6:9b:ed:0d:a7:25:62:56:07:4b:f9:32:d0: 99:f3:f5:ca:ad:f3:5a:2a:49:77:36:7f:fe:4c:0c: 58:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.167.32.0/21 185.101.52.0/22 IPv6: 2a0a:63c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204308 Signature Algorithm: sha256WithRSAEncryption 7d:21:d3:b6:d9:a6:fe:ec:28:c1:11:9c:c9:08:83:eb:7f:a0: d4:70:c6:39:67:70:6c:0d:ca:47:7e:ee:38:aa:35:a6:63:a9: 68:dc:39:da:4e:4b:54:46:f2:06:9a:97:da:00:9e:66:99:09: 47:ca:72:fa:78:b8:05:fa:e4:a5:a2:40:7e:e0:ad:1d:4a:de: 12:65:4e:07:36:d2:06:13:d4:94:97:39:a2:68:42:47:70:0b: 56:bb:c8:b8:c9:68:f2:a8:8f:07:6d:27:82:31:64:10:04:88: 39:61:ef:73:21:8b:0c:eb:25:da:42:2e:2c:ec:e6:c4:8e:83: 61:d8:92:83:ff:0d:b4:a1:db:1a:e0:ae:08:75:81:e6:86:12: db:12:ec:2a:d7:7d:a0:51:d9:01:27:c4:b7:40:90:62:8f:1a: 16:a1:2e:e0:71:5c:48:3f:b3:12:0a:d4:06:ad:eb:83:47:d5: 33:28:89:95:9d:9e:ef:7f:6e:0c:1c:5e:01:f5:f7:60:9d:2c: c0:43:d8:8a:3c:1c:4f:03:59:38:48:d5:f8:dd:73:14:6e:ab: aa:3f:72:52:c5:25:83:08:c8:7c:b6:b0:b1:31:2c:b8:47:04: 9e:c1:e7:27:4f:cf:9c:94:9e:7b:c4:57:de:fb:ec:d3:6b:57: 06:d1:93:cf -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4o3Ogpgy/osakyNpz/hqZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODIyZDg0NWUxNTM5OTJhNzhlOGY0NDUyMzI2NGQyNjE0YjE3YjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48n4wLt8RZAQhd7az+8UHGGO/Qc8 CFCsGLVMILKUOGhEWteU2qxxo3gsK7SzEpJOFECy5Bb8fdXgZlTLYUdda1VjBOin Zw+dR+S7ot30kkLNbrJs4b6AWBF4eggZpyRvRN6EARjZ/4QEMfl6gU3hsQf6KG18 09Cqh6NpF9ptzlOlyxb+KsivblZDBffKk7Kn6gP5TnLQ5lpRZ2PsrFDMKbWtEmMK UGRQi0IIxkj1fnAWb733sBm/C9T6XNmhRJtreAD6HwI7sI9VjV+CFHT/iLYEGNtn FNlysEEAnH+5PH1JHaab7Q2nJWJWB0v5MtCZ8/XKrfNaKkl3Nn/+TAxYfQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFOgi2EXhU5kqeOj0RSMmTSYUsXudMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkLzdmMWE4 Yy00OGU0LTRkOTctYjA0Mi0xZDQyNDZkN2YxNTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvN2YxYThj LTQ4ZTQtNGQ5Ny1iMDQyLTFkNDI0NmQ3ZjE1NS8xLzZDTFlSZUZUbVNwNDZQUkZJ eVpOSmhTeGU1MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDLqcgAwQCuWU0MA0EAgACMAcDBQMqCmPAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMeFDANBgkqhkiG9w0BAQsFAAOCAQEAfSHT ttmm/uwowRGcyQiD63+g1HDGOWdwbA3KR37uOKo1pmOpaNw52k5LVEbyBpqX2gCe ZpkJR8py+ni4BfrkpaJAfuCtHUreEmVOBzbSBhPUlJc5omhCR3ALVrvIuMlo8qiP B20ngjFkEASIOWHvcyGLDOsl2kIuLOzmxI6DYdiSg/8NtKHbGuCuCHWB5oYS2xLs Ktd9oFHZASfEt0CQYo8aFqEu4HFcSD+zEgrUBq3rg0fVMyiJlZ2e739uDBxeAfX3 YJ0swEPYijwcTwNZOEjV+N1zFG6rqj9yUsUlgwjIfLawsTEsuEcEnsHnJ0/PnJSe e8RX3vvs02tXBtGTzw== -----END CERTIFICATE-----Generated at Fri Jan 2 09:50:51 2026 by rpki-client