This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer File: 6T86Qea-UkEVxsK1WLwoAEOgIk4.cer (raw, json) Hash identifier: obNAmsRBRXJJL+QgAWsHnfVA0fxbPv1mh+2RWwaCYIk= Subject key identifier: E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F2FC5FE995D81EA86DB48C259E0FD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39311 AS: 51859 IP: 87.237.200.0/21 IP: 91.214.200.0/22 IP: 91.222.4.0/22 IP: 92.249.52.0/22 IP: 185.29.100.0/22 IP: 188.93.120.0/22 IP: 2a04:2e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2f:c5:fe:99:5d:81:ea:86:db:48:c2:59:e0:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e93f3a41e6be524115c6c2b558bc280043a0224e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:24:73:2d:51:7a:fd:48:85:60:77:75:84:24: db:6b:09:32:81:a7:0f:7a:31:7b:59:8a:73:8e:91: 5a:6c:c8:e8:1c:85:5b:79:19:1c:86:c6:79:ff:99: 7b:58:eb:b5:b1:1d:08:09:a1:ab:0a:c1:87:d2:c7: 60:02:08:b7:ee:0b:1a:c6:26:19:63:5a:5c:e7:46: 30:be:85:46:fa:7f:45:1a:0a:07:fb:7b:0b:b1:4d: 1f:c1:2d:fa:da:8c:44:57:f3:5c:bf:26:65:fe:b2: fb:5b:a6:2f:cb:30:67:d9:31:1a:f0:ed:7c:36:61: 98:3c:05:ad:e7:86:36:2d:da:d4:c1:ab:c4:12:69: 31:82:0f:b8:94:f8:0e:6d:76:9c:b9:e9:e8:67:e2: d9:76:b8:17:70:c3:39:87:23:55:1c:96:27:2c:d4: 96:66:9e:40:d4:b9:10:3a:29:c6:6a:02:60:81:f5: 92:92:84:c0:92:38:15:4c:d1:4a:ac:ef:89:b2:61: a8:ef:90:e5:61:df:75:17:89:df:68:9a:9f:cb:eb: ea:fb:50:6d:cd:c9:24:96:53:d4:db:e3:b2:d8:40: 3f:97:9b:39:b1:46:91:ff:e1:79:36:1f:7d:ac:f2: a9:59:5e:39:48:06:68:41:d1:65:bb:8e:e7:3a:08: 81:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.237.200.0/21 91.214.200.0/22 91.222.4.0/22 92.249.52.0/22 185.29.100.0/22 188.93.120.0/22 IPv6: 2a04:2e40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39311 51859 Signature Algorithm: sha256WithRSAEncryption 00:82:8c:6e:5f:dc:90:18:79:50:96:2f:59:88:f1:36:8b:d0: 2b:63:50:b1:24:33:f5:a2:28:8a:d3:69:1a:3e:13:ed:e7:ec: ce:8e:5e:d8:65:33:5b:d6:bb:41:a9:5e:29:e2:e2:97:bf:9a: 06:4e:82:ea:ba:3c:c5:09:ea:69:70:ff:14:8c:c1:37:bc:c5: f8:6b:bd:a4:58:7e:59:04:78:17:bf:74:3a:fc:53:fa:b6:c9: 90:c8:1b:57:78:20:a5:7e:16:ee:26:4f:91:24:cd:f1:fe:f7: 2f:52:ee:fa:50:bf:9a:23:fb:00:b4:64:ec:b9:ac:50:df:ba: 2e:32:46:6d:8a:54:c3:fd:86:db:7d:a1:0c:43:47:43:bf:83: 34:ad:97:71:62:54:22:02:c1:b9:36:60:aa:8b:b0:c8:ad:7e: 91:6d:b0:e6:70:8d:0f:ae:bb:54:56:cd:9f:d8:1e:ec:ad:da: c0:5d:40:30:2b:f3:77:02:75:54:2c:43:56:66:5d:36:a1:d6: ff:4a:5d:7d:38:1f:2b:80:6b:64:b3:85:17:60:46:06:94:cc: 18:e4:63:ec:bb:cf:3c:9e:6f:43:31:71:97:79:47:77:75:16: 47:db:51:bc:9e:9a:0f:c8:22:77:fe:14:ac:2c:9c:00:43:cd: da:73:18:45 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt5fy/F/pldgeqG20jCWeD9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTNmM2E0MWU2YmU1MjQxMTVjNmMyYjU1OGJjMjgwMDQzYTAyMjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiRzLVF6/UiFYHd1hCTbawkygacP ejF7WYpzjpFabMjoHIVbeRkchsZ5/5l7WOu1sR0ICaGrCsGH0sdgAgi37gsaxiYZ Y1pc50YwvoVG+n9FGgoH+3sLsU0fwS362oxEV/NcvyZl/rL7W6YvyzBn2TEa8O18 NmGYPAWt54Y2LdrUwavEEmkxgg+4lPgObXacuenoZ+LZdrgXcMM5hyNVHJYnLNSW Zp5A1LkQOinGagJggfWSkoTAkjgVTNFKrO+JsmGo75DlYd91F4nfaJqfy+vq+1Bt zckkllPU2+Oy2EA/l5s5sUaR/+F5Nh99rPKpWV45SAZoQdFlu47nOgiBHwIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFOk/OkHmvlJBFcbCtVi8KABDoCJOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkL2ExNzQw ZS04NDA0LTQyZDItYWY1Yy0xMGUyNDYyNWE0ZDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvYTE3NDBl LTg0MDQtNDJkMi1hZjVjLTEwZTI0NjI1YTRkNC8xLzZUODZRZWEtVWtFVnhzSzFX THdvQUVPZ0lrNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQDV+3IAwQCW9bIAwQCW94EAwQCXPk0AwQCuR1k AwQCvF14MA0EAgACMAcDBQMqBC5AMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCZ jwIDAMqTMA0GCSqGSIb3DQEBCwUAA4IBAQAAgoxuX9yQGHlQli9ZiPE2i9ArY1Cx JDP1oiiK02kaPhPt5+zOjl7YZTNb1rtBqV4p4uKXv5oGToLqujzFCeppcP8UjME3 vMX4a72kWH5ZBHgXv3Q6/FP6tsmQyBtXeCClfhbuJk+RJM3x/vcvUu76UL+aI/sA tGTsuaxQ37ouMkZtilTD/YbbfaEMQ0dDv4M0rZdxYlQiAsG5NmCqi7DIrX6RbbDm cI0PrrtUVs2f2B7srdrAXUAwK/N3AnVULENWZl02odb/Sl19OB8rgGtks4UXYEYG lMwY5GPsu888nm9DMXGXeUd3dRZH21G8npoPyCJ3/hSsLJwAQ83acxhF -----END CERTIFICATE-----Generated at Mon Jan 12 07:42:38 2026 by rpki-client