This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer File: e6Ix0pxKI7PpixSBPawJg-OjQFk.cer (raw, json) Hash identifier: 1qZUST46uusTwpDW5oAapMXkgpM5c9pEoIxwV3g+P2w= Subject key identifier: 7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C809E0E3C0E07AE63FD9D1E946513F7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42291 IP: 91.192.20.0/22 IP: 176.62.176.0/20 IP: 185.13.44.0/22 IP: 2a01:4080::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9e:0e:3c:0e:07:ae:63:fd:9d:1e:94:65:13:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ba231d29c4a23b3e98b14813dac0983e3a34059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:5b:8c:aa:86:c9:dc:f2:e4:b4:f7:02:4c: 54:6c:fc:93:5c:06:94:39:9a:b5:69:56:80:bc:b7: 95:8d:6c:f8:20:2a:c9:85:be:e8:14:48:b8:c8:ce: 70:08:b0:ad:4c:26:a5:ac:b0:9d:f4:a7:f4:77:d6: 40:06:d2:ce:01:46:54:c3:96:a5:f7:cc:04:4f:40: 97:57:c3:6f:41:e5:5b:72:f2:94:f5:03:0a:f5:5b: da:a9:7c:29:f4:03:a6:20:87:4b:5d:bf:20:77:ad: e5:dd:d6:77:eb:ed:8f:3d:e0:f4:0a:40:28:3f:02: c5:59:76:6d:12:65:b5:68:53:c9:56:79:d4:a1:51: 65:af:9b:26:14:5c:86:db:c2:3a:7f:ae:a7:8c:b6: 49:10:77:0c:74:6f:31:29:7d:f0:77:84:5b:ee:11: f0:ef:5c:8e:f5:45:1f:e2:e1:bf:91:88:54:c9:ee: ab:71:59:e1:6f:c9:42:54:d3:34:be:ce:df:3c:93: f1:2c:87:c4:b6:ef:a1:bb:4c:63:a3:ee:3b:cf:7d: c2:d9:89:90:34:48:4a:cd:61:a0:94:bf:b8:41:cb: 89:a3:6d:01:09:35:64:15:89:45:bd:9e:17:1a:db: d0:aa:55:13:65:61:39:91:0b:38:2b:13:b3:e9:cc: bb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.20.0/22 176.62.176.0/20 185.13.44.0/22 IPv6: 2a01:4080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42291 Signature Algorithm: sha256WithRSAEncryption 27:a7:05:bb:73:d7:9b:b6:f2:b4:c5:e4:56:74:5a:4e:48:ec: 6a:e2:8f:90:1d:e5:3b:29:3f:05:35:c8:82:b3:45:4d:5e:55: 60:e4:51:f4:84:c2:e0:16:ec:04:32:80:42:aa:4d:a8:ed:fb: 68:b9:24:74:7c:6a:2b:9a:70:bc:86:de:2f:cb:53:d7:e3:81: 02:dd:f6:a0:4f:fc:74:f1:81:4e:8c:d9:f6:dd:76:d5:b3:a6: 16:a3:16:24:02:65:03:06:84:45:cc:e2:7e:55:ae:70:e4:f6: 41:64:11:4c:c3:55:b3:90:be:ba:e6:11:ba:1f:75:50:c5:ae: 59:9e:d6:e8:2a:e6:a4:73:38:ae:07:82:df:17:e7:d9:ed:ce: 8f:86:57:a4:79:6b:3a:fc:78:f8:c7:af:3a:2f:6d:07:d3:4b: f2:13:1d:a9:92:8c:30:f3:5a:18:72:16:ac:4c:b4:2e:b3:c5: 20:44:fc:30:c2:10:7a:fc:dc:c8:52:d6:72:ba:02:24:34:6c: a6:3b:a9:7b:a8:89:e0:a9:76:16:c3:86:4a:59:f2:a1:f9:10: 2c:03:bd:72:30:e1:c2:ec:28:f2:47:a2:d2:bc:89:83:2e:ef: 45:11:0e:4e:74:35:aa:bc:a1:6e:7a:57:9c:94:02:05:52:ca: 90:88:99:c1 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt8gJ4OPA4HrmP9nR6UZRP3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmEyMzFkMjljNGEyM2IzZTk4YjE0ODEzZGFjMDk4M2UzYTM0MDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXxbjKqGydzy5LT3AkxUbPyTXAaU OZq1aVaAvLeVjWz4ICrJhb7oFEi4yM5wCLCtTCalrLCd9Kf0d9ZABtLOAUZUw5al 98wET0CXV8NvQeVbcvKU9QMK9VvaqXwp9AOmIIdLXb8gd63l3dZ36+2PPeD0CkAo PwLFWXZtEmW1aFPJVnnUoVFlr5smFFyG28I6f66njLZJEHcMdG8xKX3wd4Rb7hHw 71yO9UUf4uG/kYhUye6rcVnhb8lCVNM0vs7fPJPxLIfEtu+hu0xjo+47z33C2YmQ NEhKzWGglL+4QcuJo20BCTVkFYlFvZ4XGtvQqlUTZWE5kQs4KxOz6cy7JQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFHuiMdKcSiOz6YsUgT2sCYPjo0BZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzY1YjFh ZS03ZDlmLTRkNzAtOWY4Yi01MTI0ZTk1MTViMTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvNjViMWFl LTdkOWYtNGQ3MC05ZjhiLTUxMjRlOTUxNWIxNC8xL2U2SXgwcHhLSTdQcGl4U0JQ YXdKZy1PalFGay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCW8AUAwQEsD6wAwQCuQ0sMA0EAgACMAcDBQAq AUCAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwClMzANBgkqhkiG9w0BAQsFAAOC AQEAJ6cFu3PXm7bytMXkVnRaTkjsauKPkB3lOyk/BTXIgrNFTV5VYORR9ITC4Bbs BDKAQqpNqO37aLkkdHxqK5pwvIbeL8tT1+OBAt32oE/8dPGBTozZ9t121bOmFqMW JAJlAwaERcziflWucOT2QWQRTMNVs5C+uuYRuh91UMWuWZ7W6CrmpHM4rgeC3xfn 2e3Oj4ZXpHlrOvx4+MevOi9tB9NL8hMdqZKMMPNaGHIWrEy0LrPFIET8MMIQevzc yFLWcroCJDRspjupe6iJ4Kl2FsOGSlnyofkQLAO9cjDhwuwo8kei0ryJgy7vRREO TnQ1qryhbnpXnJQCBVLKkIiZwQ== -----END CERTIFICATE-----Generated at Thu Jan 8 23:15:17 2026 by rpki-client