This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer File: 6aqxRGEAqPzgPfGddV4GMp7iRxM.cer (raw, json) Hash identifier: owGBysTnVa5hpzv6+ZapyGINK/jdWiKcd8NnBVEJU4Y= Subject key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A23F44C6CC208D1DB64A68C317FBA0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35382 AS: 42708 AS: 43948 AS: 50168 AS: 62131 IP: 5.23.56.0/21 IP: 5.178.72.0/21 IP: 31.192.224.0/21 IP: 37.152.56.0/21 IP: 46.21.96.0/20 IP: 46.246.0.0/17 IP: 79.99.0.0/21 IP: 80.67.0.0/20 IP: 83.143.216.0/21 IP: 91.213.246.0/24 IP: 91.217.189.0/24 IP: 91.223.232.0/24 IP: 91.228.193.0 -- 91.228.195.255 IP: 91.230.108.0/23 IP: 94.247.168.0/21 IP: 109.74.0.0/20 IP: 159.253.24.0/21 IP: 178.73.192.0/18 IP: 185.11.96.0/22 IP: 185.21.88.0/22 IP: 185.39.144.0/22 IP: 185.118.36.0/22 IP: 185.157.220.0/22 IP: 188.126.64.0/19 IP: 193.33.138.0/23 IP: 193.108.196.0/24 IP: 193.201.96.0/24 IP: 194.54.164.0/22 IP: 195.20.206.0/23 IP: 195.149.101.0/24 IP: 195.238.76.0/23 IP: 195.246.120.0/23 IP: 212.112.0.0/19 IP: 2a00:14c0::/32 IP: 2a00:1a28::/32 IP: 2a02:750::/29 IP: 2a02:e400::/29 IP: 2a03:5e00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3f:44:c6:cc:20:8d:1d:b6:4a:68:c3:17:fb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9aab1446100a8fce03df19d755e06329ee24713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6d:54:61:28:d7:56:3a:13:93:70:e1:87:6c: eb:85:82:cd:b9:16:3d:5b:48:fc:a4:d6:97:10:7d: 1d:1b:89:a6:f9:ba:3c:63:58:ca:ae:fc:02:4a:6f: 9b:16:c0:2f:6e:68:83:85:8e:e7:b4:9f:aa:e5:41: ff:39:48:9c:92:6a:35:f2:ca:e7:54:8e:b5:4f:1d: 88:ad:0f:38:64:82:00:ba:c2:d3:84:a4:99:e8:2c: f6:d9:95:9c:d2:e1:81:02:ce:9b:ee:1c:a2:e0:fc: 9b:12:82:16:90:98:59:5f:59:20:69:c1:a8:d6:4d: 07:af:00:73:51:dc:cc:fc:de:e7:8a:b8:72:cd:35: dd:22:4a:5b:18:63:90:7a:c1:17:21:23:d8:ff:e1: b3:3f:fe:48:f4:1b:7b:c0:67:70:f4:be:7c:28:d9: dc:8a:51:d6:6a:02:00:da:08:04:f2:27:95:c1:2f: 89:48:49:f3:6e:b1:98:fd:bb:f4:e1:fe:df:1b:87: 0b:d6:b9:fa:6b:87:54:5c:64:2c:da:e5:b3:d1:17: 88:a0:0f:67:a9:60:18:31:ad:10:a7:7c:a3:a4:6d: 22:01:85:e2:01:d9:46:19:d8:fa:8b:4a:32:e2:8b: d9:1c:10:16:1c:2c:23:1f:1e:55:65:6e:b4:99:8a: a1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.23.56.0/21 5.178.72.0/21 31.192.224.0/21 37.152.56.0/21 46.21.96.0/20 46.246.0.0/17 79.99.0.0/21 80.67.0.0/20 83.143.216.0/21 91.213.246.0/24 91.217.189.0/24 91.223.232.0/24 91.228.193.0-91.228.195.255 91.230.108.0/23 94.247.168.0/21 109.74.0.0/20 159.253.24.0/21 178.73.192.0/18 185.11.96.0/22 185.21.88.0/22 185.39.144.0/22 185.118.36.0/22 185.157.220.0/22 188.126.64.0/19 193.33.138.0/23 193.108.196.0/24 193.201.96.0/24 194.54.164.0/22 195.20.206.0/23 195.149.101.0/24 195.238.76.0/23 195.246.120.0/23 212.112.0.0/19 IPv6: 2a00:14c0::/32 2a00:1a28::/32 2a02:750::/29 2a02:e400::/29 2a03:5e00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35382 42708 43948 50168 62131 Signature Algorithm: sha256WithRSAEncryption 30:92:e5:8e:90:72:00:7d:68:0e:a3:f9:97:75:e3:9f:5d:3a: 72:45:53:a4:87:15:31:2e:8e:12:30:59:f7:19:11:b8:57:81: 13:c8:43:12:ea:1d:32:3a:5d:a0:09:54:86:1a:b2:04:69:fc: c9:da:58:3c:8c:ea:43:10:ec:f4:dd:93:d7:47:fd:6c:2a:5d: 5c:ab:e7:de:54:c0:3a:59:bb:f2:14:74:11:2a:9c:97:31:71: 21:0b:04:76:e9:91:15:77:3c:e2:ad:df:be:8d:0e:1f:20:77: da:79:26:52:e0:80:52:4c:d1:dc:6e:30:f1:71:d3:bd:9d:2c: bf:17:51:3a:9f:39:ac:a3:44:57:10:7b:d2:40:bd:e0:c9:d7: 4d:ad:04:61:0f:9d:7c:94:bf:70:9c:bb:9f:56:57:18:93:9e: aa:d8:e5:2a:90:da:2b:bf:34:db:47:b1:c2:c7:05:35:df:80: 99:20:5a:33:a2:ee:c9:e5:0b:bc:37:2c:e6:2d:1a:45:31:34: 28:47:ff:e7:21:50:d1:80:ed:6a:8c:61:8f:38:64:5e:f7:5b: 72:a9:06:9c:cb:7d:ae:e0:f9:2e:c3:52:a3:2a:76:3a:57:f0: b3:08:89:e8:87:c6:5a:e4:ae:d8:12:5f:34:7f:32:85:5e:73: 41:34:80:e8 -----BEGIN CERTIFICATE----- MIIGozCCBYugAwIBAgISAZt4oj9ExswgjR22SmjDF/ugMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWFhYjE0NDYxMDBhOGZjZTAzZGYxOWQ3NTVlMDYzMjllZTI0NzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW1UYSjXVjoTk3Dhh2zrhYLNuRY9 W0j8pNaXEH0dG4mm+bo8Y1jKrvwCSm+bFsAvbmiDhY7ntJ+q5UH/OUickmo18srn VI61Tx2IrQ84ZIIAusLThKSZ6Cz22ZWc0uGBAs6b7hyi4PybEoIWkJhZX1kgacGo 1k0HrwBzUdzM/N7nirhyzTXdIkpbGGOQesEXISPY/+GzP/5I9Bt7wGdw9L58KNnc ilHWagIA2ggE8ieVwS+JSEnzbrGY/bv04f7fG4cL1rn6a4dUXGQs2uWz0ReIoA9n qWAYMa0Qp3yjpG0iAYXiAdlGGdj6i0oy4ovZHBAWHCwjHx5VZW60mYqh6wIDAQAB o4IDrzCCA6swHQYDVR0OBBYEFOmqsURhAKj84D3xnXVeBjKe4kcTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5LzcxZTA5 Yy0yOGYzLTQ4MjUtODA2Zi1hMGRjMzU0ZjRjYTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvNzFlMDlj LTI4ZjMtNDgyNS04MDZmLWEwZGMzNTRmNGNhMy8xLzZhcXhSR0VBcVB6Z1BmR2Rk VjRHTXA3aVJ4TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBGAYIKwYB BQUHAQcBAf8EggEHMIIBAzCB1QQCAAEwgc4DBAMFFzgDBAMFskgDBAMfwOADBAMl mDgDBAQuFWADBAcu9gADBANPYwADBARQQwADBANTj9gDBABb1fYDBABb2b0DBABb 3+gwDAMEAFvkwQMEAlvkwAMEAVvmbAMEA173qAMEBG1KAAMEA5/9GAMEBrJJwAME ArkLYAMEArkVWAMEArknkAMEArl2JAMEArmd3AMEBbx+QAMEAcEhigMEAMFsxAME AMHJYAMEAsI2pAMEAcMUzgMEAMOVZQMEAcPuTAMEAcP2eAMEBdRwADApBAIAAjAj AwUAKgAUwAMFACoAGigDBQMqAgdQAwUDKgLkAAMFACoDXgAwLgYIKwYBBQUHAQgB Af8EHzAdoBswGQIDAIo2AgMAptQCAwCrrAIDAMP4AgMA8rMwDQYJKoZIhvcNAQEL BQADggEBADCS5Y6QcgB9aA6j+Zd1459dOnJFU6SHFTEujhIwWfcZEbhXgRPIQxLq HTI6XaAJVIYasgRp/MnaWDyM6kMQ7PTdk9dH/WwqXVyr595UwDpZu/IUdBEqnJcx cSELBHbpkRV3POKt376NDh8gd9p5JlLggFJM0dxuMPFx072dLL8XUTqfOayjRFcQ e9JAveDJ102tBGEPnXyUv3Ccu59WVxiTnqrY5SqQ2iu/NNtHscLHBTXfgJkgWjOi 7snlC7w3LOYtGkUxNChH/+chUNGA7WqMYY84ZF73W3KpBpzLfa7g+S7DUqMqdjpX 8LMIieiHxlrkrtgSXzR/MoVec0E0gOg= -----END CERTIFICATE-----Generated at Sat Jan 3 02:25:09 2026 by rpki-client