This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer File: 6cPULzspIbp0GPOCAy1rNccVm4g.cer (raw, json) Hash identifier: g0ykgvG5cqGHnd9XcaxG77yr7biSXgl1ea113EkRI0o= Subject key identifier: E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FCBAB84D18BBD0E21E595C6A539C6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206882 IP: 91.205.4.0/22 IP: 91.206.194.0/23 IP: 103.198.80.0/23 IP: 193.135.112.0/22 IP: 193.238.120.0/22 IP: 194.187.128.0/22 IP: 2a0c:ac40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:cb:ab:84:d1:8b:bd:0e:21:e5:95:c6:a5:39:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ee:05:49:bd:c8:ed:95:f4:4e:fb:65:63:92: 11:95:e9:76:77:c8:03:cf:a0:60:ee:01:8c:0e:a6: a0:fa:21:0d:60:d5:26:6c:42:04:cd:10:b6:94:c8: 88:26:78:79:1b:ea:9b:10:4c:33:b8:d8:57:df:ce: d5:5f:90:be:e9:c6:f2:8c:d9:db:3c:1f:33:12:9b: f1:45:6d:d8:c8:e7:2c:d7:db:06:eb:d9:56:03:81: e1:18:44:89:2a:82:52:f2:4b:49:2c:1a:9a:91:5f: a2:2e:4e:0b:bb:4a:8e:62:38:7b:fd:32:ce:c1:5f: 7e:b4:8a:26:15:9f:bf:25:28:03:39:43:b2:c9:cf: c2:08:80:fe:2f:7b:fc:80:67:83:b7:eb:e9:ff:8d: b2:7a:d5:be:6f:f9:30:f9:e4:89:94:1b:a2:c0:43: b2:75:32:05:9a:76:0f:5b:ea:ab:e6:e0:a4:62:94: a6:30:4d:d4:86:73:13:5e:8c:48:b7:27:5e:c1:ac: 79:a7:1d:37:c2:2c:be:c7:84:5e:32:7f:34:7d:e6: fa:68:7b:f8:6e:ba:24:c8:b6:54:a1:58:14:d8:4c: 40:b6:1b:f7:3f:c3:4a:02:44:bb:76:3b:2f:4c:a2: 44:17:07:63:f5:75:dd:cf:a5:78:7f:86:cd:3f:ea: 51:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.4.0/22 91.206.194.0/23 103.198.80.0/23 193.135.112.0/22 193.238.120.0/22 194.187.128.0/22 IPv6: 2a0c:ac40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206882 Signature Algorithm: sha256WithRSAEncryption 06:2c:51:b8:89:12:cc:4a:98:a3:bf:9c:49:98:56:87:cb:b7: 35:e9:30:d0:67:5b:53:b0:3a:81:7d:3e:97:91:c3:ab:5c:f6: 0f:0c:a3:8a:d4:c3:5c:3b:fa:01:8b:63:36:ff:7d:64:47:92: 11:ae:ac:2f:48:db:dd:7f:ff:e3:5c:1b:34:d1:fe:9c:02:be: 76:31:9e:ba:bd:7e:ca:d7:8e:6e:dc:53:5a:3e:87:89:51:0e: 0e:fc:8e:4c:5b:19:c7:0f:86:f2:ef:6d:f6:28:e9:62:37:9c: b3:25:aa:e8:96:1a:76:c1:4b:a6:c6:04:35:30:e2:b8:8b:5d: 78:aa:ce:14:d6:64:fa:63:59:75:96:9e:8c:d1:0e:56:b9:d4: 03:b8:42:3f:a2:85:fd:3e:a2:66:63:36:1f:59:e6:31:ee:74: 4c:a4:35:56:c6:35:50:68:6f:e7:84:1a:b6:3b:06:b8:e9:34: 99:f3:62:89:3b:a2:4a:fb:32:5e:ff:80:56:aa:4e:08:3c:08: 15:01:a1:e6:58:d9:e4:4e:33:a1:70:dc:df:1e:1d:4f:b7:98: 68:3b:ff:b1:3a:fe:f7:92:cd:91:fd:6d:5e:3b:82:b0:5a:df: 66:ac:01:5f:58:1d:27:33:5d:2a:78:9a:27:25:7b:3a:21:11: 5b:26:fc:7a -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt8f8urhNGLvQ4h5ZXGpTnGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWMzZDQyZjNiMjkyMWJhNzQxOGYzODIwMzJkNmIzNWM3MTU5Yjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+4FSb3I7ZX0TvtlY5IRlel2d8gD z6Bg7gGMDqag+iENYNUmbEIEzRC2lMiIJnh5G+qbEEwzuNhX387VX5C+6cbyjNnb PB8zEpvxRW3YyOcs19sG69lWA4HhGESJKoJS8ktJLBqakV+iLk4Lu0qOYjh7/TLO wV9+tIomFZ+/JSgDOUOyyc/CCID+L3v8gGeDt+vp/42yetW+b/kw+eSJlBuiwEOy dTIFmnYPW+qr5uCkYpSmME3UhnMTXoxItydewax5px03wiy+x4ReMn80feb6aHv4 brokyLZUoVgU2ExAthv3P8NKAkS7djsvTKJEFwdj9XXdz6V4f4bNP+pRgQIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFOnD1C87KSG6dBjzggMtazXHFZuIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdmL2JkYzQ1 Yi0wOTZhLTQ5M2EtOTJkMi0xYTFlYWQyY2QyYjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2YvYmRjNDVi LTA5NmEtNDkzYS05MmQyLTFhMWVhZDJjZDJiMS8xLzZjUFVMenNwSWJwMEdQT0NB eTFyTmNjVm00Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQCW80EAwQBW87CAwQBZ8ZQAwQCwYdwAwQCwe54 AwQCwruAMA0EAgACMAcDBQMqDKxAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMo IjANBgkqhkiG9w0BAQsFAAOCAQEABixRuIkSzEqYo7+cSZhWh8u3Nekw0GdbU7A6 gX0+l5HDq1z2DwyjitTDXDv6AYtjNv99ZEeSEa6sL0jb3X//41wbNNH+nAK+djGe ur1+yteObtxTWj6HiVEODvyOTFsZxw+G8u9t9ijpYjecsyWq6JYadsFLpsYENTDi uItdeKrOFNZk+mNZdZaejNEOVrnUA7hCP6KF/T6iZmM2H1nmMe50TKQ1VsY1UGhv 54QatjsGuOk0mfNiiTuiSvsyXv+AVqpOCDwIFQGh5ljZ5E4zoXDc3x4dT7eYaDv/ sTr+95LNkf1tXjuCsFrfZqwBX1gdJzNdKniaJyV7OiERWyb8eg== -----END CERTIFICATE-----Generated at Sun Jan 11 11:22:27 2026 by rpki-client