This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer File: 6vlt8xs_QE31t345nOeTcbT0REM.cer (raw, json) Hash identifier: oNJLE6CnblgSvqrlVojmo16nq9J9BdBbf9Xs/LSz20U= Subject key identifier: EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED2A07136FB59CDE7C75C86B62C20F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56886 IP: 91.229.233.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:2a:07:13:6f:b5:9c:de:7c:75:c8:6b:62:c2:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eaf96df31b3f404df5b77e399ce79371b4f44443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b4:83:3b:cb:f2:bf:b9:7a:8a:b7:32:bf:c4: e7:24:45:b6:84:cc:4b:4f:41:a0:8a:70:3a:08:01: 21:5b:9b:92:d2:89:6c:af:de:2f:ce:bc:52:63:b0: 86:84:56:08:e9:d5:1b:15:23:3c:df:d7:30:60:4e: 00:57:89:d0:4b:bf:44:ab:ad:3b:b0:57:94:16:3d: 0a:dc:ba:d0:2e:34:a1:7a:3d:80:9d:c4:e3:b5:e2: 37:7a:ef:42:16:a8:11:f1:b0:4e:e9:e3:8b:e8:3e: fd:c4:41:dc:16:63:c3:d7:d5:ce:89:2f:6b:e6:34: 1d:15:e5:6b:08:b8:3e:d9:fb:05:4f:43:04:b9:15: bc:6e:52:74:d6:8f:c2:16:8e:68:63:41:c0:db:b1: 5c:cc:6d:5d:f5:9b:97:1f:59:32:fc:c8:fb:89:56: b8:1a:07:54:76:b6:8e:25:11:51:83:77:39:20:55: 73:25:60:cd:09:8a:82:fe:8b:24:a9:67:3f:45:b4: 81:d0:b4:de:a0:26:54:e6:0a:44:8c:0f:df:e8:f8: 01:f3:0a:90:b0:53:7c:2f:c9:c0:05:c1:f1:e0:84: d4:28:4f:86:d7:4a:b3:e9:57:b8:c4:21:7e:4d:95: e1:65:af:13:cc:32:0e:52:15:0d:34:cf:54:0a:60: 98:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.233.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56886 Signature Algorithm: sha256WithRSAEncryption 99:07:cc:64:03:b9:bd:19:a9:27:ec:62:df:ce:47:03:d7:b6: 6e:6b:85:ae:4c:f6:f1:47:f4:f6:03:77:e4:15:bd:60:f5:24: 24:bf:7c:9f:78:a8:de:e8:c8:af:47:96:43:27:16:46:d5:ef: 62:a5:76:7d:9b:0c:7d:c3:09:73:14:6b:9a:19:39:5c:da:8d: 93:a7:f6:b8:e1:8d:2c:82:6f:a9:bd:75:13:ce:28:6f:60:98: da:d5:41:61:4c:2c:41:fc:b3:81:f4:66:c1:81:15:bd:66:dc: 44:ed:80:28:4a:50:82:4f:0e:58:39:86:56:13:42:ca:b1:e6: 16:2f:fd:2e:1a:f1:87:cb:cb:3b:25:92:2a:c4:92:6d:13:ba: d4:e7:f0:75:9e:c6:88:c4:83:73:77:3b:07:b8:e0:3d:b7:b8: 66:32:ec:88:cc:a4:01:7e:a8:06:07:f2:b2:5f:43:46:d2:c9: d9:79:53:06:10:86:fd:cf:d0:1a:50:2d:be:1e:01:2c:9f:ac: 10:8f:b3:22:32:1b:ca:ca:54:6b:13:9f:50:3b:b6:86:2c:f9: 31:c8:36:4b:29:fe:00:ee:6d:04:3c:bf:f3:4a:c6:c1:91:33: 1b:92:85:44:9a:98:aa:93:88:76:62:0b:be:af:8c:16:fd:82: a5:13:9e:e6 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87SoHE2+1nN58dchrYsIPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWY5NmRmMzFiM2Y0MDRkZjViNzdlMzk5Y2U3OTM3MWI0ZjQ0NDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLSDO8vyv7l6ircyv8TnJEW2hMxL T0GginA6CAEhW5uS0olsr94vzrxSY7CGhFYI6dUbFSM839cwYE4AV4nQS79Eq607 sFeUFj0K3LrQLjShej2AncTjteI3eu9CFqgR8bBO6eOL6D79xEHcFmPD19XOiS9r 5jQdFeVrCLg+2fsFT0MEuRW8blJ01o/CFo5oY0HA27FczG1d9ZuXH1ky/Mj7iVa4 GgdUdraOJRFRg3c5IFVzJWDNCYqC/oskqWc/RbSB0LTeoCZU5gpEjA/f6PgB8wqQ sFN8L8nABcHx4ITUKE+G10qz6Ve4xCF+TZXhZa8TzDIOUhUNNM9UCmCY7QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOr5bfMbP0BN9bd+OZznk3G09ERDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzBlMDM5 YS1iZTk2LTQxZmMtYWJjZC05NjRiNjFiYzMxOWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvMGUwMzlh LWJlOTYtNDFmYy1hYmNkLTk2NGI2MWJjMzE5Yi8xLzZ2bHQ4eHNfUUUzMXQzNDVu T2VUY2JUMFJFTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+XpMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDeNjANBgkqhkiG9w0BAQsFAAOCAQEAmQfMZAO5vRmpJ+xi385HA9e2bmuFrkz2 8Uf09gN35BW9YPUkJL98n3io3ujIr0eWQycWRtXvYqV2fZsMfcMJcxRrmhk5XNqN k6f2uOGNLIJvqb11E84ob2CY2tVBYUwsQfyzgfRmwYEVvWbcRO2AKEpQgk8OWDmG VhNCyrHmFi/9Lhrxh8vLOyWSKsSSbRO61OfwdZ7GiMSDc3c7B7jgPbe4ZjLsiMyk AX6oBgfysl9DRtLJ2XlTBhCG/c/QGlAtvh4BLJ+sEI+zIjIbyspUaxOfUDu2hiz5 Mcg2Syn+AO5tBDy/80rGwZEzG5KFRJqYqpOIdmILvq+MFv2CpROe5g== -----END CERTIFICATE-----Generated at Mon Jan 12 10:50:03 2026 by rpki-client