This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer File: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer (raw, json) Hash identifier: pb95e1OaX0TEVkaSUBpwRhYISAGhUipibufQV+WI6so= Subject key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6A6B37EDBE90CB9B9E5AB24A8A2B1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198622 IP: 37.157.0.0/21 IP: 185.84.60.0/22 IP: 2a00:e7c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a6:b3:7e:db:e9:0c:b9:b9:e5:ab:24:a8:a2:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eab9a157e12a2ef717d13231af06fd85454b3151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fb:a9:e4:16:df:05:c1:47:e8:5f:c2:cc:d0: 5a:6a:ed:cc:a1:ec:3c:f1:0b:8f:3d:6d:af:45:19: 8a:a9:a0:0d:bf:6b:40:77:76:55:c9:ef:3a:fc:ac: f3:33:4b:92:05:db:88:7f:da:34:05:29:ed:d7:c2: e6:f9:15:15:ec:13:bb:d1:ab:0a:09:ca:b3:9b:a9: 93:dc:89:b4:49:a3:33:2b:82:9f:5d:22:9e:0e:6c: e4:85:df:66:0b:3e:46:df:c1:eb:b5:13:b8:4f:f7: ff:61:b8:5e:43:a0:ad:95:e6:f8:7e:fb:eb:ee:48: 03:fc:c4:40:61:05:c4:0e:96:08:e8:1c:ad:48:d3: 18:d9:54:20:ed:28:42:49:57:84:02:3b:84:83:35: 68:31:b3:6c:12:10:2a:5f:be:c6:a6:c8:a5:84:60: 57:22:b9:51:fc:ac:f7:ee:c1:0a:fa:a3:98:9b:33: 67:dd:f1:e8:e9:0f:ed:0c:7b:6e:92:32:7b:87:1a: e7:c9:db:9d:4e:86:85:2d:fd:ca:89:06:56:47:c9: d4:b1:e0:ea:1b:02:6c:cd:3e:1f:74:c6:6a:f7:25: af:72:1e:06:27:34:5c:4b:f7:78:e3:e2:de:d1:f5: 9a:77:4d:e0:d4:76:8d:05:4a:db:18:cb:9b:8d:03: 6d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.157.0.0/21 185.84.60.0/22 IPv6: 2a00:e7c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198622 Signature Algorithm: sha256WithRSAEncryption 1c:53:47:30:c7:c1:7f:5b:3f:1e:f9:e6:d5:b1:88:15:53:2f: dd:e4:bf:96:b1:1f:e3:3d:3d:e4:d4:91:1d:6a:ea:44:3d:ab: dc:97:f6:7a:5a:b3:fd:9d:4a:d5:03:db:6b:b3:5b:1b:9f:a5: 53:0c:ad:ab:77:79:b9:79:28:ab:bc:1f:43:cf:be:6d:78:a6: 4f:4a:3a:f5:2e:85:b6:d9:7d:1f:df:ac:cf:f1:7a:2b:0a:5c: 0a:7d:9c:93:f5:17:50:b0:66:c5:23:ca:d0:d1:01:10:34:e2: aa:28:1c:cd:0d:a5:23:6f:74:34:3d:be:95:0f:61:a7:87:32: 7f:b5:3d:74:c6:ad:f2:8f:06:0b:bf:80:a9:b0:67:66:9e:c2: 43:66:48:a9:2d:b0:4c:d9:b0:55:5d:3a:35:66:6b:06:9a:16: f5:d0:51:49:d8:9f:e8:76:7f:e6:65:45:3c:eb:7b:42:d0:3a: c8:de:6a:4a:48:d7:26:91:a7:8e:72:b7:49:e6:d6:fa:4a:89: 33:3d:5c:01:36:1c:a0:07:f1:87:b6:93:3e:1b:87:ec:dd:91: b0:c9:e9:6b:d2:12:8e:c1:8b:cf:b9:e3:e5:f6:d1:9f:fc:cf: 66:fa:91:99:ca:3f:4c:d5:02:51:ba:34:6c:6d:1c:93:9b:59: 17:74:f5:84 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3xqazftvpDLm55askqKKxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWI5YTE1N2UxMmEyZWY3MTdkMTMyMzFhZjA2ZmQ4NTQ1NGIzMTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vup5BbfBcFH6F/CzNBaau3Moew8 8QuPPW2vRRmKqaANv2tAd3ZVye86/KzzM0uSBduIf9o0BSnt18Lm+RUV7BO70asK Ccqzm6mT3Im0SaMzK4KfXSKeDmzkhd9mCz5G38HrtRO4T/f/YbheQ6Ctleb4fvvr 7kgD/MRAYQXEDpYI6BytSNMY2VQg7ShCSVeEAjuEgzVoMbNsEhAqX77GpsilhGBX IrlR/Kz37sEK+qOYmzNn3fHo6Q/tDHtukjJ7hxrnydudToaFLf3KiQZWR8nUseDq GwJszT4fdMZq9yWvch4GJzRcS/d44+Le0fWad03g1HaNBUrbGMubjQNtzQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFOq5oVfhKi73F9EyMa8G/YVFSzFRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzRkYjc3 MC1kN2Y1LTRiY2ItYmE0NC04NTc3MTI3MjBhMzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvNGRiNzcw LWQ3ZjUtNGJjYi1iYTQ0LTg1NzcxMjcyMGEzNS8xLzZybWhWLUVxTHZjWDBUSXhy d2I5aFVWTE1WRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDJZ0AAwQCuVQ8MA0EAgACMAcDBQAqAOfAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMH3jANBgkqhkiG9w0BAQsFAAOCAQEAHFNH MMfBf1s/Hvnm1bGIFVMv3eS/lrEf4z095NSRHWrqRD2r3Jf2elqz/Z1K1QPba7Nb G5+lUwytq3d5uXkoq7wfQ8++bXimT0o69S6Fttl9H9+sz/F6KwpcCn2ck/UXULBm xSPK0NEBEDTiqigczQ2lI290ND2+lQ9hp4cyf7U9dMat8o8GC7+AqbBnZp7CQ2ZI qS2wTNmwVV06NWZrBpoW9dBRSdif6HZ/5mVFPOt7QtA6yN5qSkjXJpGnjnK3SebW +kqJMz1cATYcoAfxh7aTPhuH7N2RsMnpa9ISjsGLz7nj5fbRn/zPZvqRmco/TNUC Ubo0bG0ck5tZF3T1hA== -----END CERTIFICATE-----Generated at Thu Jan 1 12:29:06 2026 by rpki-client