This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer File: 6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer (raw, json) Hash identifier: tUTlnYKOM0LfnHsAdeDRvzRm+lj1wqJkxrMlLmtBJpg= Subject key identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECFF190AA7A14D68D1D4DC77EC84EE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50597 AS: 212692 IP: 37.98.224.0/21 IP: 85.113.90.0/23 IP: 85.194.196.0/22 IP: 109.205.112.0/21 IP: 185.76.32.0/22 IP: 2a05:55c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:ff:19:0a:a7:a1:4d:68:d1:d4:dc:77:ec:84:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebf760c05773c15d73676450344668fefb723447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1c:30:b1:c8:a9:9a:1e:5a:d7:dc:4e:c3:a3: fc:36:6e:6f:cc:73:ec:12:70:41:d5:b0:60:5f:d1: 19:34:5b:0b:7e:eb:67:24:56:df:94:3d:d4:d5:c6: 67:37:23:cd:63:f6:0a:cf:47:cf:6d:9f:80:66:72: 0a:0d:ea:1c:81:ed:cb:53:57:22:67:08:40:91:32: d1:dd:38:df:25:9f:63:f0:1a:7c:70:6c:b3:7d:41: 20:be:08:8a:e9:1b:79:45:bd:ba:77:24:28:2f:45: fb:10:a1:e3:64:4b:0b:f6:13:99:a3:50:e8:c1:19: be:64:ad:80:8b:36:01:e6:ea:76:30:ae:5e:e7:21: b0:c6:f3:c6:26:dd:8e:22:4b:44:9c:b3:f0:6b:13: 19:bb:4d:71:bb:26:e1:02:5a:4c:a4:53:a3:31:06: dd:13:5f:c1:f8:a8:49:57:15:97:f5:f8:92:ce:41: 38:d1:a3:47:fe:4a:de:d0:52:61:aa:59:04:27:fb: 70:29:1e:af:f7:37:4a:12:27:18:51:6a:b1:87:04: d5:03:f8:ec:32:3d:43:8d:58:36:d4:ff:2d:44:36: 7b:a5:2d:74:bf:54:21:fa:3c:1b:1d:2a:bb:95:7b: f6:e3:05:e6:63:60:ca:ad:97:d9:e8:0c:f7:9e:7d: fa:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.98.224.0/21 85.113.90.0/23 85.194.196.0/22 109.205.112.0/21 185.76.32.0/22 IPv6: 2a05:55c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50597 212692 Signature Algorithm: sha256WithRSAEncryption 3a:d8:22:da:66:00:d0:26:44:ea:e5:f8:4e:cd:41:76:57:a4: 83:22:d9:ab:41:de:24:7e:34:9a:ea:af:cc:41:f5:84:47:85: de:fd:1c:22:97:d3:b8:cc:fd:63:27:2f:75:56:12:6c:45:a9: 56:4c:68:df:77:b4:5e:ca:f2:c7:97:35:57:f2:92:0e:d5:b8: c5:0c:c5:29:32:21:a7:00:1e:3a:07:98:42:81:dc:8c:f1:83: f9:33:49:27:73:fb:da:fb:b7:d6:de:1b:37:4f:08:95:61:1b: 02:13:28:76:07:44:51:1d:17:34:d3:66:01:75:0a:85:88:73: 02:d4:3b:1f:3d:6a:6b:d5:33:f7:1e:c3:f8:76:91:d7:e2:37: 04:1a:bc:a3:64:7d:d7:04:4e:62:11:39:ac:c0:67:ef:88:eb: 17:12:7c:66:10:58:0e:37:f6:32:36:f5:96:1e:64:22:be:6d: b5:67:1a:b6:b0:f3:b2:22:8e:4b:cf:5c:be:ba:ad:ef:c6:75: 7a:c5:45:45:82:ae:5e:b0:0e:0f:70:ee:2b:89:60:03:ee:0f: 35:1b:03:38:51:05:e9:5c:72:06:4e:2e:d4:2a:e0:23:75:18: e9:8d:9b:eb:35:65:89:5f:c0:d2:fc:4b:44:49:da:5f:51:04: 6d:61:b7:b2 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt87P8ZCqehTWjR1Nx37ITuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmY3NjBjMDU3NzNjMTVkNzM2NzY0NTAzNDQ2NjhmZWZiNzIzNDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRwwscipmh5a19xOw6P8Nm5vzHPs EnBB1bBgX9EZNFsLfutnJFbflD3U1cZnNyPNY/YKz0fPbZ+AZnIKDeocge3LU1ci ZwhAkTLR3TjfJZ9j8Bp8cGyzfUEgvgiK6Rt5Rb26dyQoL0X7EKHjZEsL9hOZo1Do wRm+ZK2AizYB5up2MK5e5yGwxvPGJt2OIktEnLPwaxMZu01xuybhAlpMpFOjMQbd E1/B+KhJVxWX9fiSzkE40aNH/kre0FJhqlkEJ/twKR6v9zdKEicYUWqxhwTVA/js Mj1DjVg21P8tRDZ7pS10v1Qh+jwbHSq7lXv24wXmY2DKrZfZ6Az3nn36GQIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFOv3YMBXc8Fdc2dkUDRGaP77cjRHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzkzMWY4 MS1jNDA5LTRkM2EtOTVkZi00OTA5ODg5N2VlNGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvOTMxZjgx LWM0MDktNGQzYS05NWRmLTQ5MDk4ODk3ZWU0YS8xLzZfZGd3RmR6d1YxeloyUlFO RVpvX3Z0eU5FYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQDJWLgAwQBVXFaAwQCVcLEAwQDbc1wAwQCuUwg MA0EAgACMAcDBQMqBVXAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDFpQIDAz7U MA0GCSqGSIb3DQEBCwUAA4IBAQA62CLaZgDQJkTq5fhOzUF2V6SDItmrQd4kfjSa 6q/MQfWER4Xe/Rwil9O4zP1jJy91VhJsRalWTGjfd7ReyvLHlzVX8pIO1bjFDMUp MiGnAB46B5hCgdyM8YP5M0knc/va+7fW3hs3TwiVYRsCEyh2B0RRHRc002YBdQqF iHMC1DsfPWpr1TP3HsP4dpHX4jcEGryjZH3XBE5iETmswGfviOsXEnxmEFgON/Yy NvWWHmQivm21Zxq2sPOyIo5Lz1y+uq3vxnV6xUVFgq5esA4PcO4riWAD7g81GwM4 UQXpXHIGTi7UKuAjdRjpjZvrNWWJX8DS/EtESdpfUQRtYbey -----END CERTIFICATE-----Generated at Mon Jan 12 06:29:41 2026 by rpki-client