This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6QYQQQz4AUrB2-n2q8yBxmGHr74.cer File: 6QYQQQz4AUrB2-n2q8yBxmGHr74.cer (raw, json) Hash identifier: pH3Y/U/Jbb2g81Ota8k1dtJe/77Ao5enePiHopI15Ao= Subject key identifier: E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8093F754766504094129E34027CDE0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8385 IP: 62.247.0.0/16 IP: 195.242.32.0/19 IP: 212.209.0.0/16 IP: 2a02:2ad8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:93:f7:54:76:65:04:09:41:29:e3:40:27:cd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e90610410cf8014ac1dbe9f6abcc81c66187afbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:60:22:f1:c2:44:52:1f:d2:cc:87:37:c0:1d: 15:26:db:93:9f:c7:dc:93:20:52:69:53:36:b9:6c: 02:95:58:45:99:97:a1:3c:34:53:26:79:59:a2:fe: 64:5d:d1:fd:f9:93:fd:74:b7:dc:0d:8b:f0:0f:2c: ec:ff:75:fc:b5:c8:65:60:c7:f8:97:75:b6:9f:e5: 8c:a1:72:c4:29:37:e7:be:55:3c:5a:b5:7d:38:39: 99:72:fb:19:b4:42:5d:03:91:ed:79:7b:3d:74:71: 30:62:4a:29:93:7d:d4:59:ec:7d:d0:27:78:bf:e3: 8b:aa:31:2b:84:df:24:1b:94:01:b1:38:5d:fd:67: fd:12:18:1b:e6:34:77:7d:a2:30:4e:a3:8d:ec:a4: 46:d2:4a:33:92:16:00:eb:6e:dc:1a:1e:ee:2b:25: 92:24:74:25:8f:27:b6:3b:0c:bb:76:fd:13:73:b8: 67:4a:99:80:04:b0:16:92:74:9b:04:3d:0b:55:8a: 50:37:30:79:83:d7:c1:76:e1:ac:68:91:a7:c9:11: 94:8b:5e:0f:a8:b2:a0:69:99:ce:e2:bb:bf:c6:22: 52:1b:59:fa:41:fe:ea:01:bd:05:59:5d:b0:9d:11: fc:85:f8:ba:a4:b5:38:27:54:fd:9d:ee:fe:3a:a8: 72:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:06:10:41:0C:F8:01:4A:C1:DB:E9:F6:AB:CC:81:C6:61:87:AF:BE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37930a-288f-42b6-8c64-6603eb54bb3a/1/6QYQQQz4AUrB2-n2q8yBxmGHr74.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.247.0.0/16 195.242.32.0/19 212.209.0.0/16 IPv6: 2a02:2ad8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8385 Signature Algorithm: sha256WithRSAEncryption 98:df:16:a5:55:86:7c:8c:40:36:f2:a1:13:e4:1a:6b:7a:df: 55:7e:55:bd:e8:79:33:d6:3a:10:b9:fe:6c:ac:03:90:04:a1: 99:20:e5:98:9d:24:7e:d3:03:dc:08:c9:8c:a5:81:c8:81:63: 2d:35:c4:ce:f4:6d:55:11:54:73:c8:f9:f6:91:13:66:60:5a: 9c:84:6e:65:04:61:20:a5:6a:13:31:32:a4:4a:4a:3c:51:25: 5b:54:a3:5c:dc:79:f0:4a:a3:8a:e4:1b:66:ed:27:00:64:c0: b4:a0:af:ff:6b:ec:7a:84:b7:26:32:bd:0d:e8:9e:87:bc:22: 4a:42:30:41:87:97:da:f2:9c:23:73:35:5f:d8:a3:83:5c:9f: 55:1d:87:e8:7a:58:be:59:f5:53:2b:77:9d:04:bb:5f:f2:1e: 4a:00:15:ac:a3:92:3a:23:0c:3c:bb:b5:6f:a5:12:00:e6:e5: fe:69:36:b2:8b:84:3e:74:0a:c5:a5:f7:2f:00:a0:81:61:e9: 59:fb:d1:6f:79:58:59:4a:2f:a0:26:83:82:80:d4:93:75:b4: cb:40:ab:f1:74:99:93:90:d4:60:a9:e3:20:ff:84:bc:ab:29: 80:f0:8b:2a:98:6b:cd:6e:54:18:d1:45:90:b9:d1:0e:44:5a: 06:76:3d:f4 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZt8gJP3VHZlBAlBKeNAJ83gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTA2MTA0MTBjZjgwMTRhYzFkYmU5ZjZhYmNjODFjNjYxODdhZmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGAi8cJEUh/SzIc3wB0VJtuTn8fc kyBSaVM2uWwClVhFmZehPDRTJnlZov5kXdH9+ZP9dLfcDYvwDyzs/3X8tchlYMf4 l3W2n+WMoXLEKTfnvlU8WrV9ODmZcvsZtEJdA5HteXs9dHEwYkopk33UWex90Cd4 v+OLqjErhN8kG5QBsThd/Wf9Ehgb5jR3faIwTqON7KRG0kozkhYA627cGh7uKyWS JHQljye2Owy7dv0Tc7hnSpmABLAWknSbBD0LVYpQNzB5g9fBduGsaJGnyRGUi14P qLKgaZnO4ru/xiJSG1n6Qf7qAb0FWV2wnRH8hfi6pLU4J1T9ne7+OqhynwIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFOkGEEEM+AFKwdvp9qvMgcZhh6++MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzM3OTMw YS0yODhmLTQyYjYtOGM2NC02NjAzZWI1NGJiM2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvMzc5MzBh LTI4OGYtNDJiNi04YzY0LTY2MDNlYjU0YmIzYS8xLzZRWVFRUXo0QVVyQjItbjJx OHlCeG1HSHI3NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDgGCCsGAQUF BwEHAQH/BCkwJzAWBAIAATAQAwMAPvcDBAXD8iADAwDU0TANBAIAAjAHAwUDKgIq 2DAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIgwTANBgkqhkiG9w0BAQsFAAOCAQEA mN8WpVWGfIxANvKhE+Qaa3rfVX5Vveh5M9Y6ELn+bKwDkAShmSDlmJ0kftMD3AjJ jKWByIFjLTXEzvRtVRFUc8j59pETZmBanIRuZQRhIKVqEzEypEpKPFElW1SjXNx5 8EqjiuQbZu0nAGTAtKCv/2vseoS3JjK9Deieh7wiSkIwQYeX2vKcI3M1X9ijg1yf VR2H6HpYvln1Uyt3nQS7X/IeSgAVrKOSOiMMPLu1b6USAObl/mk2souEPnQKxaX3 LwCggWHpWfvRb3lYWUovoCaDgoDUk3W0y0Cr8XSZk5DUYKnjIP+EvKspgPCLKphr zW5UGNFFkLnRDkRaBnY99A== -----END CERTIFICATE-----Generated at Sat Jan 3 03:54:11 2026 by rpki-client