This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer File: 6w649Uh9dBqMxtbfOzkhke0-7T8.cer (raw, json) Hash identifier: EFxhVQuJFjSjJqFk6kfxd2VGd5p1NFlLKs2yLLjwQNA= Subject key identifier: EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6A5C086CF63CAB7B0977AAA243DA5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60132 IP: 195.191.90.0/23 IP: 195.191.128.0/23 IP: 2a13:2080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a5:c0:86:cf:63:ca:b7:b0:97:7a:aa:24:3d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f2:1c:00:77:9b:0a:66:02:45:ef:4c:61:84: 06:53:86:a3:c0:b4:48:68:38:71:cf:de:27:e9:82: 75:87:8c:0b:d4:ad:bd:59:4d:44:48:89:8d:53:7e: d1:d9:30:f7:ae:1b:81:6d:bf:b6:88:24:7e:65:b3: 31:be:1e:57:bc:3c:32:76:a0:5c:e7:5f:a4:24:47: a1:9e:2e:f7:95:e0:0d:d2:a5:6f:14:8a:d6:03:fe: 55:57:54:1a:83:2a:e8:6f:85:f9:58:f1:69:87:9c: 2b:3e:de:14:36:ba:b1:0f:ad:01:cf:c8:ab:aa:bb: 31:c9:35:be:96:47:2a:b5:1c:a0:6c:5b:4d:15:4b: 38:dc:7d:3b:ef:dc:1d:a5:6a:15:43:25:ea:6b:99: ae:15:8d:41:7b:4e:a0:2d:8d:6f:2e:15:e9:f2:e2: 40:9b:92:e8:58:5b:15:ab:93:e3:6d:b1:a5:7d:9e: ba:f3:4f:cc:d0:5a:fd:cf:8a:6f:0b:e3:9c:88:14: 20:68:e3:cf:6d:5d:68:14:a8:77:cd:7f:1d:e2:5d: 76:2c:f3:5f:b7:74:b0:55:d9:09:6d:7e:8e:ea:25: 3f:7c:99:cd:d7:a6:f0:ba:2b:94:92:a5:f9:62:66: 53:9c:ee:69:4e:cb:b0:73:3d:40:51:c9:3a:0c:80: f6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.90.0/23 195.191.128.0/23 IPv6: 2a13:2080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60132 Signature Algorithm: sha256WithRSAEncryption ae:b8:eb:32:c2:34:d8:aa:a9:c0:9c:60:00:f2:b3:77:6e:59: e6:a9:dd:15:5a:05:1b:57:31:cf:02:58:9a:92:37:17:91:7a: 3f:48:ae:da:d5:e6:b2:ad:5f:02:fa:d5:f3:0d:59:2d:eb:36: a1:62:a0:c4:e7:56:3e:6e:a8:7b:8d:7b:f2:8a:ea:37:9c:75: 39:88:69:a7:26:93:f8:61:04:35:a4:a2:ec:df:de:c3:dc:1e: 90:65:67:c3:13:71:14:05:3b:64:47:e7:25:0d:fc:18:58:3c: 48:64:aa:1b:39:3c:c7:37:fe:e8:b7:65:03:a0:28:bc:2f:60: 8d:46:1b:cf:e7:d9:d9:3e:48:e2:ee:9e:ff:19:a1:7e:bb:86: 1c:fa:e5:82:d8:54:5c:14:00:d4:e3:cf:1e:71:f1:55:10:0e: a4:d8:c6:12:ff:a4:a9:c0:18:38:2c:9f:64:ef:cc:69:82:9e: 0a:7e:7e:47:6e:79:06:dc:a8:81:43:87:61:d9:64:bc:61:bf: 7a:c5:c7:6b:c1:8c:04:ac:20:18:b1:e3:e5:ce:d0:b5:00:d6: 6f:3e:b8:bc:f8:92:a7:ac:f7:c9:88:e9:77:85:b6:41:f4:9e: 2d:10:6d:51:1c:92:8e:08:d9:e1:55:5b:b0:e4:92:74:f6:56: 2b:e0:91:1b -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3xqXAhs9jyrewl3qqJD2lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjBlYjhmNTQ4N2Q3NDFhOGNjNmQ2ZGYzYjM5MjE5MWVkM2VlZDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/IcAHebCmYCRe9MYYQGU4ajwLRI aDhxz94n6YJ1h4wL1K29WU1ESImNU37R2TD3rhuBbb+2iCR+ZbMxvh5XvDwydqBc 51+kJEehni73leAN0qVvFIrWA/5VV1Qagyrob4X5WPFph5wrPt4UNrqxD60Bz8ir qrsxyTW+lkcqtRygbFtNFUs43H0779wdpWoVQyXqa5muFY1Be06gLY1vLhXp8uJA m5LoWFsVq5PjbbGlfZ6680/M0Fr9z4pvC+OciBQgaOPPbV1oFKh3zX8d4l12LPNf t3SwVdkJbX6O6iU/fJnN16bwuiuUkqX5YmZTnO5pTsuwcz1AUck6DID2gQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFOsOuPVIfXQajMbW3zs5IZHtPu0/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwL2QxNmI0 Ni1iOGNjLTQ0NTYtYTQ1MC0yN2UyN2MxNjMxMDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvZDE2YjQ2 LWI4Y2MtNDQ1Ni1hNDUwLTI3ZTI3YzE2MzEwMi8xLzZ3NjQ5VWg5ZEJxTXh0YmZP emtoa2UwLTdUOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBw79aAwQBw7+AMA0EAgACMAcDBQMqEyCAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDq5DANBgkqhkiG9w0BAQsFAAOCAQEArrjr MsI02KqpwJxgAPKzd25Z5qndFVoFG1cxzwJYmpI3F5F6P0iu2tXmsq1fAvrV8w1Z Les2oWKgxOdWPm6oe4178orqN5x1OYhppyaT+GEENaSi7N/ew9wekGVnwxNxFAU7 ZEfnJQ38GFg8SGSqGzk8xzf+6LdlA6AovC9gjUYbz+fZ2T5I4u6e/xmhfruGHPrl gthUXBQA1OPPHnHxVRAOpNjGEv+kqcAYOCyfZO/MaYKeCn5+R255BtyogUOHYdlk vGG/esXHa8GMBKwgGLHj5c7QtQDWbz64vPiSp6z3yYjpd4W2QfSeLRBtURySjgjZ 4VVbsOSSdPZWK+CRGw== -----END CERTIFICATE-----Generated at Thu Jan 8 23:15:26 2026 by rpki-client