This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer File: 6EA7XkXNWL5fbF0z-lZatJIj49s.cer (raw, json) Hash identifier: K66a7hPMGIW2NymkDb2ZPxjokLN4ae7oHAcfPohPQKM= Subject key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECFA8918F29056F3B51F440D715855 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12462 AS: 13186 IP: 185.123.120.0/22 IP: 212.66.160.0/24 IP: 212.80.160.0/19 IP: 213.170.32.0/19 IP: 2a0c:f5c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:fa:89:18:f2:90:56:f3:b5:1f:44:0d:71:58:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d1:e8:6a:e9:7d:26:15:18:6b:73:64:e0:d1: a8:52:97:29:04:ab:6f:25:e8:17:4b:17:85:16:93: 5f:7d:7e:bb:3f:ae:bf:91:b4:07:dc:aa:b7:09:f5: 50:92:9b:43:e6:a0:22:24:ed:92:9b:dd:cf:d3:c4: fd:26:cc:8b:8b:a5:5c:19:bd:30:b8:28:ed:69:0a: f8:30:6f:e0:2b:75:1f:3a:9f:2a:a7:e5:0e:91:28: ff:1a:27:8c:5c:3f:44:86:64:75:1e:7b:a8:34:33: af:93:1d:bd:bd:ad:74:d6:3a:42:aa:0e:20:cc:00: 0c:dc:b1:09:90:bd:e0:42:7e:e1:2a:da:4e:a4:4e: 85:f8:9a:f0:36:c1:8f:b6:96:3e:25:5d:88:48:ec: f2:2f:e8:bb:93:d8:97:74:81:1a:f9:61:a2:90:62: 00:e7:2c:04:be:4a:c0:c2:27:46:42:06:e2:fb:9e: 6a:f6:9e:84:91:e9:90:29:06:c9:d5:9b:ad:a9:9b: 82:dd:ec:ce:76:a6:34:6d:0a:80:0b:0d:69:6a:bb: 15:82:95:e5:e3:17:3a:5c:1f:82:7f:f8:aa:e7:61: a0:d1:bb:06:c7:87:1f:53:66:9a:12:d8:21:d3:5c: a7:c6:f3:85:93:c6:56:69:87:ec:04:3f:2d:57:32: 84:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.123.120.0/22 212.66.160.0/24 212.80.160.0/19 213.170.32.0/19 IPv6: 2a0c:f5c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12462 13186 Signature Algorithm: sha256WithRSAEncryption 9b:70:7a:c0:01:20:53:9f:ff:b7:44:2e:3c:b9:0f:b3:04:36: da:05:1d:2f:da:1e:44:61:cb:3d:82:99:5d:9f:0c:00:c3:7b: f5:65:bb:6b:45:b6:ed:e0:49:0e:5b:e8:0a:36:f7:b5:59:3e: 9d:a1:fb:64:35:bc:08:41:1d:1a:dc:11:c2:97:62:c7:77:ed: 27:50:fc:11:5f:43:70:20:ac:7d:6a:05:9b:d6:76:27:dc:03: ea:8e:c7:d8:c0:34:01:b6:49:93:74:a4:2c:9d:3d:11:cc:aa: 3c:87:f2:2f:df:3f:68:f4:7e:92:25:b8:b4:e2:6d:d4:2b:09: 6a:8f:fe:a2:01:03:a7:67:1c:4f:49:58:64:df:b9:bd:ae:28: 17:b7:66:16:b8:d5:cf:9a:df:69:61:9f:c9:a0:1b:4a:ad:c4: 34:b4:6d:d9:ba:2a:26:c5:58:b7:5d:1f:9b:8a:5b:47:53:ce: 3f:4d:13:3b:5c:bf:25:9c:7e:fa:d3:23:e4:c5:48:df:38:b4: 70:03:66:f0:48:cd:a1:85:d1:ef:2b:0c:62:7f:6d:8d:f7:60: 2a:7a:3c:dc:cb:2d:ec:1d:d7:a6:50:ec:0c:ab:71:65:6c:e0: 16:9e:db:0f:a9:da:ac:c0:01:44:b3:42:44:78:f7:08:7c:00: 73:e0:04:6d -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZt87PqJGPKQVvO1H0QNcVhVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODQwM2I1ZTQ1Y2Q1OGJlNWY2YzVkMzNmYTU2NWFiNDkyMjNlM2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tHoaul9JhUYa3Nk4NGoUpcpBKtv JegXSxeFFpNffX67P66/kbQH3Kq3CfVQkptD5qAiJO2Sm93P08T9JsyLi6VcGb0w uCjtaQr4MG/gK3UfOp8qp+UOkSj/GieMXD9EhmR1HnuoNDOvkx29va101jpCqg4g zAAM3LEJkL3gQn7hKtpOpE6F+JrwNsGPtpY+JV2ISOzyL+i7k9iXdIEa+WGikGIA 5ywEvkrAwidGQgbi+55q9p6EkemQKQbJ1ZutqZuC3ezOdqY0bQqACw1parsVgpXl 4xc6XB+Cf/iq52Gg0bsGx4cfU2aaEtgh01ynxvOFk8ZWaYfsBD8tVzKE7QIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFOhAO15FzVi+X2xdM/pWWrSSI+PbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3Lzg5NzZl ZC1kYTBhLTQ5YTUtYTc1MS1hODcxZWNjMjEyYTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvODk3NmVk LWRhMGEtNDlhNS1hNzUxLWE4NzFlY2MyMTJhNi8xLzZFQTdYa1hOV0w1ZmJGMHot bFphdEpJajQ5cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCuXt4AwQA1EKgAwQF1FCgAwQF1aogMA0EAgAC MAcDBQAqDPXAMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAjCuAgIzgjANBgkqhkiG 9w0BAQsFAAOCAQEAm3B6wAEgU5//t0QuPLkPswQ22gUdL9oeRGHLPYKZXZ8MAMN7 9WW7a0W27eBJDlvoCjb3tVk+naH7ZDW8CEEdGtwRwpdix3ftJ1D8EV9DcCCsfWoF m9Z2J9wD6o7H2MA0AbZJk3SkLJ09EcyqPIfyL98/aPR+kiW4tOJt1CsJao/+ogED p2ccT0lYZN+5va4oF7dmFrjVz5rfaWGfyaAbSq3ENLRt2boqJsVYt10fm4pbR1PO P00TO1y/JZx++tMj5MVI3zi0cANm8EjNoYXR7ysMYn9tjfdgKno83Mst7B3XplDs DKtxZWzgFp7bD6narMABRLNCRHj3CHwAc+AEbQ== -----END CERTIFICATE-----Generated at Sat Jan 3 03:54:14 2026 by rpki-client