This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer File: p6TiNIImhHXBuTVjfQACwv0pk7g.cer (raw, json) Hash identifier: SIW/r8+98Q98LMgApT1afLZk9OV/CiSYC83qhX4koqA= Subject key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE69C9D09309DECBFB5AAF06133D07 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213703 IP: 195.72.32.0/24 IP: 2a14:ae00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:69:c9:d0:93:09:de:cb:fb:5a:af:06:13:3d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7f:4d:c0:c0:3a:9a:b0:08:2b:55:55:35:10: d1:72:16:52:e1:bb:6f:5c:bf:a1:1c:43:a2:12:bd: bc:08:ed:6a:7a:3b:87:8a:52:07:27:eb:07:74:60: ae:46:87:52:6f:35:68:c2:0f:5b:da:f8:61:10:ad: cb:82:29:e8:d0:49:7f:07:f9:e7:28:3c:8b:49:8e: 50:8f:a5:db:84:a8:df:b4:88:55:44:ba:f6:24:ea: a1:55:ae:84:59:96:bd:f4:96:96:c7:8a:e8:c9:9a: 53:be:23:5e:0e:ad:09:9c:95:b5:e7:1c:00:6c:74: 24:b2:85:2d:b6:6e:58:40:39:8f:ca:95:7e:cb:ca: 2f:13:9f:9a:5f:10:81:4f:3a:24:47:01:aa:66:46: 31:ca:76:77:5d:be:05:eb:46:49:35:82:ba:36:5d: 3f:05:55:01:b8:98:c7:1a:0b:61:a8:4f:57:17:b2: a1:0a:c7:ed:0d:74:59:9a:08:ad:5a:e3:15:7c:1f: 91:8a:fd:2c:fb:b9:c6:11:45:ae:f3:8f:ea:84:df: 63:3e:30:5f:92:cc:c0:e4:9c:15:9c:a5:b3:74:89: 34:df:9d:89:06:87:60:d0:43:ae:44:16:e1:1b:64: 22:0d:42:ff:10:04:5f:6c:76:34:8d:5c:0c:b0:b9: 60:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.72.32.0/24 IPv6: 2a14:ae00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213703 Signature Algorithm: sha256WithRSAEncryption 66:6a:e8:b0:fb:15:e2:39:16:56:4f:31:67:d2:a9:e2:49:46: 85:86:40:e1:e2:ae:11:98:e6:3a:8d:5b:62:0a:85:80:1c:33: 77:91:60:28:ba:e8:ba:ca:e4:d2:be:b1:b4:b4:0c:aa:c3:29: 8a:10:ab:1e:34:a3:db:14:10:b7:41:f8:b5:b2:fb:d4:75:7b: 29:ea:c7:02:62:a5:7f:92:9d:17:7f:d9:ce:70:7a:b8:71:07: 31:75:a3:b4:c1:2d:44:81:b8:5d:15:7d:28:1d:a5:22:f6:31: 80:42:1f:b7:07:75:9a:f2:27:92:4d:47:0c:8b:96:88:f4:80: 65:2f:0e:ff:05:82:87:c3:70:b3:97:df:00:c2:f7:87:67:69: e0:e1:bd:81:78:98:6a:8c:b7:8e:7e:45:19:b0:7d:5a:c8:52: e4:2f:52:07:00:1b:b3:9d:b7:22:08:80:9a:5f:8c:af:85:c1: 13:3e:88:7f:10:33:9b:ed:c9:b9:3f:59:a2:a4:53:4c:49:1f: 1c:d2:39:1d:eb:c8:91:46:4e:33:94:66:d2:8d:4a:94:07:ec: e2:de:4a:e7:b6:43:31:7a:24:f4:24:65:dd:37:f7:a0:7a:b5: 45:66:ad:aa:d3:00:42:73:5d:f3:b2:77:45:e0:61:1d:9d:97: 9e:02:b2:fd -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87mnJ0JMJ3sv7Wq8GEz0HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2E0ZTIzNDgyMjY4NDc1YzFiOTM1NjM3ZDAwMDJjMmZkMjk5M2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon9NwMA6mrAIK1VVNRDRchZS4btv XL+hHEOiEr28CO1qejuHilIHJ+sHdGCuRodSbzVowg9b2vhhEK3Lgino0El/B/nn KDyLSY5Qj6XbhKjftIhVRLr2JOqhVa6EWZa99JaWx4royZpTviNeDq0JnJW15xwA bHQksoUttm5YQDmPypV+y8ovE5+aXxCBTzokRwGqZkYxynZ3Xb4F60ZJNYK6Nl0/ BVUBuJjHGgthqE9XF7KhCsftDXRZmgitWuMVfB+Riv0s+7nGEUWu84/qhN9jPjBf kszA5JwVnKWzdIk0352JBodg0EOuRBbhG2QiDUL/EARfbHY0jVwMsLlgsQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKek4jSCJoR1wbk1Y30AAsL9KZO4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjLzA3ZjYy My0xNGZiLTRhODAtOWY0Ni0yMzMzMWI2NDkxNmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvMDdmNjIz LTE0ZmItNGE4MC05ZjQ2LTIzMzMxYjY0OTE2Yy8xL3A2VGlOSUltaEhYQnVUVmpm UUFDd3YwcGs3Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAw0ggMA0EAgACMAcDBQMqFK4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNCxzANBgkqhkiG9w0BAQsFAAOCAQEAZmrosPsV4jkW Vk8xZ9Kp4klGhYZA4eKuEZjmOo1bYgqFgBwzd5FgKLrousrk0r6xtLQMqsMpihCr HjSj2xQQt0H4tbL71HV7KerHAmKlf5KdF3/ZznB6uHEHMXWjtMEtRIG4XRV9KB2l IvYxgEIftwd1mvInkk1HDIuWiPSAZS8O/wWCh8Nws5ffAML3h2dp4OG9gXiYaoy3 jn5FGbB9WshS5C9SBwAbs523IgiAml+Mr4XBEz6IfxAzm+3JuT9ZoqRTTEkfHNI5 HevIkUZOM5Rm0o1KlAfs4t5K57ZDMXok9CRl3Tf3oHq1RWatqtMAQnNd87J3ReBh HZ2XngKy/Q== -----END CERTIFICATE-----Generated at Mon Jan 12 22:56:43 2026 by rpki-client