This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer File: p6dweK84e0jXCBDrFgTfCt4Rj9o.cer (raw, json) Hash identifier: jYhfZGnCMJ5+W9cj0xK06qvccfzFj7n/CeJ90AJYkI4= Subject key identifier: A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834FE5F0366742BDDBCD55A95ACF075 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51809 IP: 45.82.140.0/22 IP: 63.135.72.0/21 IP: 67.208.52.0/22 IP: 185.232.119.0/24 IP: 2a10:d580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:fe:5f:03:66:74:2b:dd:bc:d5:5a:95:ac:f0:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7a77078af387b48d70810eb1604df0ade118fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0b:ae:d6:b7:ff:65:2d:92:81:3a:60:c2:a5: bc:9f:3e:12:1f:a5:b0:94:50:0e:ea:d9:63:66:23: 74:b8:37:95:3d:a8:6f:fd:9a:a4:d9:8a:3a:2e:ee: 98:be:55:6e:42:21:16:02:d3:f0:e2:ff:3f:3c:21: c6:ba:61:b2:7e:68:cc:bc:ff:d5:11:79:13:05:07: cd:80:fd:59:9a:7d:3e:75:8e:29:0f:49:d7:37:84: 1e:36:d2:e8:f9:1f:ff:0a:d3:7c:ab:6e:c9:df:c3: a8:23:87:24:dd:a4:eb:97:ca:a7:8e:f3:97:13:bf: 99:2f:93:2f:3a:7b:9b:dc:0b:87:67:04:11:0d:06: e8:e7:45:2c:49:9a:18:fd:13:90:19:9d:19:32:8e: 42:7a:8b:a2:a2:ab:d2:9a:e5:00:0a:d2:f9:8c:a9: 07:95:08:22:5d:06:ee:39:74:d4:52:25:49:a2:d7: aa:4e:b0:c9:a3:ab:1a:e3:c6:30:fd:dd:70:72:b7: 1f:f6:39:0c:9a:bd:f2:13:e0:ce:91:f5:ee:12:a2: 87:da:bf:35:64:3a:71:11:33:b2:b0:c6:27:ab:d4: d0:81:9a:e0:d0:84:cb:53:36:35:f0:17:a6:e4:e4: e2:22:b6:4a:74:c1:a6:ad:df:30:19:c2:84:f1:84: c9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.140.0/22 63.135.72.0/21 67.208.52.0/22 185.232.119.0/24 IPv6: 2a10:d580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51809 Signature Algorithm: sha256WithRSAEncryption 8b:d1:89:c4:f2:3c:64:75:2d:a3:d0:bb:f1:76:49:c0:6d:8c: 45:c5:6d:4f:fc:62:fb:6a:44:7e:7c:74:74:c9:8b:4b:4b:89: 70:78:09:9d:fe:b9:f8:c7:ab:03:35:0f:f0:a0:5c:d0:af:e3: 8a:08:88:5d:25:6b:47:35:6c:12:b5:5e:6d:15:c8:d6:51:59: 85:58:c2:30:29:d7:49:fb:f7:34:e1:51:97:a9:25:94:86:80: b2:fb:62:29:d9:a3:c5:15:19:e6:ee:4e:cf:0c:ea:b8:34:8b: 86:ae:37:84:98:36:81:05:68:f1:85:11:11:59:c5:c6:93:0a: c4:74:28:81:a0:a3:79:b2:9d:be:fa:aa:cf:2f:84:25:43:ed: 2c:d8:65:74:23:74:e1:bf:95:40:5b:f0:5d:44:b3:b0:db:41: 4a:78:b3:fd:0f:c1:3c:82:c3:e5:4f:02:31:4a:a5:9d:2a:0d: 78:7d:fc:e5:63:75:35:c8:bd:45:b0:f6:08:1e:07:cc:f6:b0: 81:f0:6f:30:5e:d7:30:23:1d:70:0d:9b:fa:b6:d4:fb:50:3c: 56:7c:37:36:ab:1b:f8:10:b8:c5:3d:7a:90:b8:82:1d:8e:ed: a5:95:d3:43:62:4c:07:a4:3e:3d:fa:45:92:cd:ee:47:15:a9: be:b3:e6:1c -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt4NP5fA2Z0K9281VqVrPB1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2E3NzA3OGFmMzg3YjQ4ZDcwODEwZWIxNjA0ZGYwYWRlMTE4ZmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAuu1rf/ZS2SgTpgwqW8nz4SH6Ww lFAO6tljZiN0uDeVPahv/Zqk2Yo6Lu6YvlVuQiEWAtPw4v8/PCHGumGyfmjMvP/V EXkTBQfNgP1Zmn0+dY4pD0nXN4QeNtLo+R//CtN8q27J38OoI4ck3aTrl8qnjvOX E7+ZL5MvOnub3AuHZwQRDQbo50UsSZoY/ROQGZ0ZMo5CeouioqvSmuUACtL5jKkH lQgiXQbuOXTUUiVJoteqTrDJo6sa48Yw/d1wcrcf9jkMmr3yE+DOkfXuEqKH2r81 ZDpxETOysMYnq9TQgZrg0ITLUzY18Bem5OTiIrZKdMGmrd8wGcKE8YTJrQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFKencHivOHtI1wgQ6xYE3wreEY/aMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1LzAyMWY2 Yi02ZmQwLTQzNjUtOTJmNy00ZGU0N2I4MDQ0MGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvMDIxZjZi LTZmZDAtNDM2NS05MmY3LTRkZTQ3YjgwNDQwYS8xL3A2ZHdlSzg0ZTBqWENCRHJG Z1RmQ3Q0Umo5by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCLVKMAwQDP4dIAwQCQ9A0AwQAueh3MA0EAgAC MAcDBQMqENWAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDKYTANBgkqhkiG9w0B AQsFAAOCAQEAi9GJxPI8ZHUto9C78XZJwG2MRcVtT/xi+2pEfnx0dMmLS0uJcHgJ nf65+MerAzUP8KBc0K/jigiIXSVrRzVsErVebRXI1lFZhVjCMCnXSfv3NOFRl6kl lIaAsvtiKdmjxRUZ5u5OzwzquDSLhq43hJg2gQVo8YUREVnFxpMKxHQogaCjebKd vvqqzy+EJUPtLNhldCN04b+VQFvwXUSzsNtBSniz/Q/BPILD5U8CMUqlnSoNeH38 5WN1Nci9RbD2CB4HzPawgfBvMF7XMCMdcA2b+rbU+1A8Vnw3Nqsb+BC4xT16kLiC HY7tpZXTQ2JMB6Q+PfpFks3uRxWpvrPmHA== -----END CERTIFICATE-----Generated at Sun Jan 11 22:48:41 2026 by rpki-client