This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer File: 6ch0aZeAldiv9jJygEuy810UkQM.cer (raw, json) Hash identifier: WrrChTxzduIM6GrFj3OhxgVDyZUMVv+Lnf4cAC/O2mg= Subject key identifier: E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F3B8A025526B7D1E2FE74865159BF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204394 IP: 185.250.100.0/22 IP: 2a0e:e580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:3b:8a:02:55:26:b7:d1:e2:fe:74:86:51:59:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9c87469978095d8aff63272804bb2f35d149103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:31:60:e8:6b:78:25:74:9e:40:ac:2f:cd:00: dd:65:76:a5:50:c6:3b:a1:5f:04:34:d0:d4:d3:c6: e9:8a:ac:19:ef:30:92:c6:a3:16:b8:d6:fd:c8:1c: c9:83:24:58:be:21:67:3a:54:82:73:8e:f1:03:a9: 46:c7:ca:33:2e:1c:59:33:a9:72:eb:d6:71:de:47: 5e:07:b3:67:70:e2:f2:74:e4:2f:e2:67:5d:64:dd: a4:16:22:53:5b:e6:69:03:32:35:cb:50:b2:ae:a4: 23:d7:96:e8:d2:85:64:32:27:e4:d4:88:4f:87:91: 05:32:c0:ec:61:e3:f9:e2:c4:e1:7a:5f:bd:c8:d5: e3:6e:46:d0:bb:e1:b8:29:ee:34:9a:1d:c0:e3:98: ec:8d:e6:d1:47:52:d6:75:92:51:35:a6:50:fc:c0: a9:c7:5e:01:dc:50:51:6c:d7:e5:ae:9b:9e:e9:fb: 3b:53:f9:e2:0a:01:43:c2:52:a8:44:9e:c8:cb:b9: 08:f1:16:9c:d9:68:f4:1b:5c:99:b9:4b:f8:9d:f9: 51:0e:5e:f6:aa:7b:5c:df:e8:f9:53:08:5c:1f:f6: 01:a4:e7:b0:76:d2:92:72:82:96:ad:9f:dd:b2:77: 7c:ad:60:73:b1:8c:70:58:52:a7:8b:67:56:5a:34: c7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.100.0/22 IPv6: 2a0e:e580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204394 Signature Algorithm: sha256WithRSAEncryption 15:52:d3:15:c4:05:fa:f7:c8:e2:f2:9b:83:3b:7a:52:af:43: 0f:53:d9:23:9f:52:7d:56:c7:aa:12:ba:d8:df:4f:80:85:25: 6c:c7:18:84:b5:00:4b:e9:84:be:c9:63:1d:0a:1d:c8:a7:df: b7:30:56:83:2b:ff:81:24:bd:04:4b:f7:2e:3c:5c:ef:28:28: 11:7b:d3:e1:eb:a9:8a:83:0f:60:4c:84:34:47:80:ab:14:68: 3a:c9:33:f6:5a:35:d6:89:14:b6:2d:47:a3:25:5b:b7:96:f0: 21:c1:89:ae:2f:58:72:05:7e:df:37:66:9a:fe:37:05:04:c5: f6:e0:3c:61:08:41:30:26:dc:d4:dd:7e:8c:0b:9b:af:ae:e9: 4f:dd:d7:85:6a:fd:3a:88:41:56:c0:76:a9:c6:21:da:67:c3: ab:a6:cc:00:2a:32:e6:a7:b4:46:7b:40:12:77:d0:9f:3a:f8: 0a:50:ff:4e:35:76:86:a0:80:00:92:87:f3:e7:b7:ce:57:33: 7f:b1:13:24:d0:25:08:61:54:f0:86:4b:2a:54:00:bd:43:c4: dc:a6:db:fb:a6:c8:30:4a:50:bd:a6:a4:03:de:b4:8d:d2:c1: b3:65:46:36:35:3d:0c:f3:d0:42:18:3f:45:7d:4b:cd:9d:e4: 6b:04:8e:51 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fzuKAlUmt9Hi/nSGUVm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWM4NzQ2OTk3ODA5NWQ4YWZmNjMyNzI4MDRiYjJmMzVkMTQ5MTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DFg6Gt4JXSeQKwvzQDdZXalUMY7 oV8ENNDU08bpiqwZ7zCSxqMWuNb9yBzJgyRYviFnOlSCc47xA6lGx8ozLhxZM6ly 69Zx3kdeB7NncOLydOQv4mddZN2kFiJTW+ZpAzI1y1CyrqQj15bo0oVkMifk1IhP h5EFMsDsYeP54sThel+9yNXjbkbQu+G4Ke40mh3A45jsjebRR1LWdZJRNaZQ/MCp x14B3FBRbNflrpue6fs7U/niCgFDwlKoRJ7Iy7kI8Rac2Wj0G1yZuUv4nflRDl72 qntc3+j5UwhcH/YBpOewdtKScoKWrZ/dsnd8rWBzsYxwWFKni2dWWjTH+QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOnIdGmXgJXYr/YycoBLsvNdFJEDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4LzlhZDlk Yy1iODRjLTRhNTktYmIxYy0wY2MzYjRjYWY2ODMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvOWFkOWRj LWI4NGMtNGE1OS1iYjFjLTBjYzNiNGNhZjY4My8xLzZjaDBhWmVBbGRpdjlqSnln RXV5ODEwVWtRTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufpkMA0EAgACMAcDBQMqDuWAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMeajANBgkqhkiG9w0BAQsFAAOCAQEAFVLTFcQF+vfI 4vKbgzt6Uq9DD1PZI59SfVbHqhK62N9PgIUlbMcYhLUAS+mEvsljHQodyKfftzBW gyv/gSS9BEv3Ljxc7ygoEXvT4eupioMPYEyENEeAqxRoOskz9lo11okUti1HoyVb t5bwIcGJri9YcgV+3zdmmv43BQTF9uA8YQhBMCbc1N1+jAubr67pT93XhWr9OohB VsB2qcYh2mfDq6bMACoy5qe0RntAEnfQnzr4ClD/TjV2hqCAAJKH8+e3zlczf7ET JNAlCGFU8IZLKlQAvUPE3Kbb+6bIMEpQvaakA960jdLBs2VGNjU9DPPQQhg/RX1L zZ3kawSOUQ== -----END CERTIFICATE-----Generated at Thu Jan 1 15:55:56 2026 by rpki-client