This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer File: 6eWwFOVpGG-4SiAklUzMyckbHj8.cer (raw, json) Hash identifier: EPoj65XuBWsQ8UZ8DLT4TI7YCmMoq2sPz9/SesZjwQg= Subject key identifier: E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79100CCB9E1C3CA939E07908C487E412 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9146 IP: 31.176.128.0/17 IP: 37.203.64.0/18 IP: 80.65.64.0/19 IP: 85.92.224.0/19 IP: 89.146.128.0/18 IP: 92.36.128.0/17 IP: 109.163.128.0/18 IP: 109.175.0.0/17 IP: 185.12.76.0/22 IP: 195.222.32.0/19 IP: 2a02:27b0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0c:cb:9e:1c:3c:a9:39:e0:79:08:c4:87:e4:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d1:d7:66:6a:e8:0f:d2:05:3f:2c:86:b8:2c: f2:35:78:5f:62:ce:dd:01:29:fa:3c:2c:49:f5:83: 09:29:f8:ab:7a:cd:60:e8:13:4a:e3:76:ab:59:4f: c3:df:21:d2:a6:39:15:bc:5e:0d:67:34:29:f7:d2: be:ae:ea:81:96:01:84:e6:39:c3:e7:61:8c:ce:8d: f7:4f:e8:ad:06:f7:f9:3e:9b:65:dc:be:41:8d:3d: 92:7a:d6:d0:61:f1:fc:86:d2:6d:93:5d:a1:4c:f9: 47:91:6f:2a:95:5e:49:fb:05:98:cf:86:68:97:6a: eb:6b:8b:27:69:7c:ad:2a:da:2f:a8:04:a7:ac:a7: 69:94:21:b7:e2:84:cb:af:3d:0e:1d:7a:7f:4f:c6: a3:3b:5c:b8:f7:9f:6a:94:8f:37:fc:5c:5e:4d:0d: 0b:28:14:a1:0b:1c:56:65:d0:b9:93:cd:c1:fe:70: f7:f4:62:80:52:a9:60:74:9f:b0:55:50:a3:da:83: 4b:75:53:18:c0:ad:a5:c1:6d:d7:ca:35:82:a8:20: a4:68:73:d3:c3:29:ef:da:a1:4d:7a:1e:4b:d2:67: 51:95:5d:bd:d4:bc:e8:fd:a5:36:a0:a8:72:90:81: db:e0:6d:bd:a0:31:28:a6:a8:5b:2b:2e:a4:86:ed: 3c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.176.128.0/17 37.203.64.0/18 80.65.64.0/19 85.92.224.0/19 89.146.128.0/18 92.36.128.0/17 109.163.128.0/18 109.175.0.0/17 185.12.76.0/22 195.222.32.0/19 IPv6: 2a02:27b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9146 Signature Algorithm: sha256WithRSAEncryption 00:4e:ae:ed:ef:d9:a2:a1:5b:28:5e:3e:2f:cc:df:7c:ce:a0: eb:59:10:8f:29:34:31:df:5a:63:70:3c:cd:f0:f0:a4:41:b2: 69:d2:60:91:66:58:41:87:05:81:05:11:1a:8a:88:99:23:50: 15:d6:9e:5f:2d:92:a5:af:ad:0b:c4:ad:91:56:58:3d:05:4e: 6f:59:97:9b:5f:03:08:6b:35:80:b0:12:d1:40:a6:60:65:a1: 29:5c:54:5a:e6:05:2d:7f:42:82:f0:db:d2:34:31:98:04:94: 7d:ee:3b:50:9d:ef:c3:77:b9:f8:2c:ab:3f:c8:1b:01:32:14: 18:13:d8:f6:11:25:da:b8:3c:e4:12:be:cd:37:d9:59:17:91: 56:7a:08:9a:4f:81:40:59:66:d4:21:05:6c:0c:da:c1:9f:4e: 37:3f:40:5a:8a:44:a9:11:4d:cc:1f:cf:60:a0:04:a9:7b:2a: af:c2:b6:ae:3e:9a:e9:c0:4d:18:cd:dc:66:c0:60:26:94:d8: f3:c3:33:be:b2:4b:d8:43:04:8d:a4:66:a1:42:32:18:3c:43: c4:b0:76:b9:48:fc:e2:b0:1d:82:99:ae:df:a6:61:6a:83:47: 3a:cb:95:f5:35:67:09:b6:57:fb:23:53:08:07:8e:3d:0d:c8: 27:a4:26:95 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgISAZt5EAzLnhw8qTngeQjEh+QSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWU1YjAxNGU1NjkxODZmYjg0YTIwMjQ5NTRjY2NjOWM5MWIxZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNHXZmroD9IFPyyGuCzyNXhfYs7d ASn6PCxJ9YMJKfires1g6BNK43arWU/D3yHSpjkVvF4NZzQp99K+ruqBlgGE5jnD 52GMzo33T+itBvf5Pptl3L5BjT2SetbQYfH8htJtk12hTPlHkW8qlV5J+wWYz4Zo l2rra4snaXytKtovqASnrKdplCG34oTLrz0OHXp/T8ajO1y4959qlI83/FxeTQ0L KBShCxxWZdC5k83B/nD39GKAUqlgdJ+wVVCj2oNLdVMYwK2lwW3XyjWCqCCkaHPT wynv2qFNeh5L0mdRlV291Lzo/aU2oKhykIHb4G29oDEopqhbKy6khu08WQIDAQAB o4IC5DCCAuAwHQYDVR0OBBYEFOnlsBTlaRhvuEogJJVMzMnJGx4/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4L2Q3MzY3 ZC03YmJmLTQ2OTctOTZjZC0yYmIxZWZjNTdhODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvZDczNjdk LTdiYmYtNDY5Ny05NmNkLTJiYjFlZmM1N2E4Ni8xLzZlV3dGT1ZwR0ctNFNpQWts VXpNeWNrYkhqOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGCCsGAQUF BwEHAQH/BFUwUzBCBAIAATA8AwQHH7CAAwQGJctAAwQFUEFAAwQFVVzgAwQGWZKA AwQHXCSAAwQGbaOAAwQHba8AAwQCuQxMAwQFw94gMA0EAgACMAcDBQAqAiewMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAiO6MA0GCSqGSIb3DQEBCwUAA4IBAQAATq7t 79mioVsoXj4vzN98zqDrWRCPKTQx31pjcDzN8PCkQbJp0mCRZlhBhwWBBREaioiZ I1AV1p5fLZKlr60LxK2RVlg9BU5vWZebXwMIazWAsBLRQKZgZaEpXFRa5gUtf0KC 8NvSNDGYBJR97jtQne/Dd7n4LKs/yBsBMhQYE9j2ESXauDzkEr7NN9lZF5FWegia T4FAWWbUIQVsDNrBn043P0BaikSpEU3MH89goASpeyqvwrauPprpwE0YzdxmwGAm lNjzwzO+skvYQwSNpGahQjIYPEPEsHa5SPzisB2Cma7fpmFqg0c6y5X1NWcJtlf7 I1MIB449DcgnpCaV -----END CERTIFICATE-----Generated at Thu Jan 1 12:29:08 2026 by rpki-client