This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer File: sX6_RB7hCFYx7rdxmomC39gFe-E.cer (raw, json) Hash identifier: FoUdbkUbip23sIZB06Ne6YwQFQFtlytF6t037lwqy24= Subject key identifier: B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B43692A5008D81E1DDEEB41ACECC2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199444 IP: 188.213.212.0/24 IP: 194.39.241.0/24 IP: 2a13:a080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:43:69:2a:50:08:d8:1e:1d:de:eb:41:ac:ec:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b17ebf441ee1085631eeb7719a8982dfd8057be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bb:32:26:25:61:f6:5d:c0:75:bd:e0:b7:10: 7c:9c:7d:8f:5e:32:69:45:3b:ca:97:72:66:25:8c: 79:2e:9c:4b:e7:3b:eb:12:66:55:5a:4b:ee:21:be: a5:1f:10:d2:02:af:fb:55:38:88:c1:62:d4:ea:a7: d3:b5:48:9c:e4:d2:96:fc:b2:a0:17:e6:3d:b7:01: b7:cb:eb:05:f6:65:ff:87:55:dd:91:4c:15:ad:8c: 55:52:dd:a8:24:b6:b6:14:2b:ab:4b:15:95:f9:03: a1:f9:14:a5:54:01:52:99:ce:9b:7f:88:fd:7c:62: 93:87:3f:a3:6a:32:8c:eb:9d:62:14:ef:ab:4d:4e: 56:b1:d1:4c:aa:45:b3:90:9d:bc:d1:e6:bb:bf:ba: 9d:b9:47:0c:38:3c:8b:df:97:d3:81:6b:e3:9e:c0: a6:c5:78:65:f2:32:a7:14:e5:9b:94:8c:8f:45:ae: a4:81:dc:ea:9c:76:dc:d1:0e:6e:34:fa:e2:17:64: 6b:02:f5:de:ae:8e:a3:68:cc:a3:a9:e6:1f:1b:26: 5b:bb:d2:75:f0:07:23:a5:00:67:9d:e2:70:b3:d5: 4c:3f:81:ee:ca:11:83:a7:ee:b6:a2:81:d8:d3:47: 05:88:ff:b7:73:d1:d9:39:24:20:c5:77:9c:20:72: 48:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.213.212.0/24 194.39.241.0/24 IPv6: 2a13:a080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199444 Signature Algorithm: sha256WithRSAEncryption 37:7d:98:e0:ab:bb:66:3d:b0:e8:d4:c4:9c:dd:92:17:a8:15: 12:76:f5:21:59:06:17:f0:08:f9:e9:c8:34:ec:c9:3b:43:39: 52:07:58:d6:6c:08:62:10:d7:31:aa:2f:6d:38:4c:23:d6:a5: f4:1f:db:32:43:ef:29:fe:23:61:27:a4:af:09:6e:06:67:56: 1e:b5:a1:e7:1b:05:ba:01:f1:67:47:fc:15:15:ee:62:75:be: 5f:40:7f:bb:a3:07:f6:37:d4:3b:36:23:c3:f9:7a:76:d0:cb: 40:0b:94:51:25:3c:f5:ec:50:d7:7d:8b:f3:73:e0:61:88:6b: 9a:5e:b0:56:da:28:89:05:f3:2e:82:c1:bc:86:ef:98:8b:06: 83:06:2b:3e:2f:62:4a:7b:89:2d:6e:32:78:9d:15:75:b0:8b: 6f:34:a6:c7:3c:3b:aa:f9:fa:8d:91:85:89:c9:f4:fa:4b:9c: 56:2f:cb:8e:15:04:f7:64:dc:cf:a2:83:5c:6e:4b:a7:c0:86: fe:e2:0b:3d:b1:fb:ea:a1:77:91:23:5a:ab:76:91:1c:2a:d0: 7d:19:e7:12:5d:7a:fe:6d:16:e5:46:78:13:1f:18:85:ed:b8: 3e:de:5f:7e:8e:34:d4:55:21:95:4e:c8:74:d8:3e:b0:78:bc: ca:96:7f:cf -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6W0NpKlAI2B4d3utBrOzCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTdlYmY0NDFlZTEwODU2MzFlZWI3NzE5YTg5ODJkZmQ4MDU3YmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLsyJiVh9l3Adb3gtxB8nH2PXjJp RTvKl3JmJYx5LpxL5zvrEmZVWkvuIb6lHxDSAq/7VTiIwWLU6qfTtUic5NKW/LKg F+Y9twG3y+sF9mX/h1XdkUwVrYxVUt2oJLa2FCurSxWV+QOh+RSlVAFSmc6bf4j9 fGKThz+jajKM651iFO+rTU5WsdFMqkWzkJ280ea7v7qduUcMODyL35fTgWvjnsCm xXhl8jKnFOWblIyPRa6kgdzqnHbc0Q5uNPriF2RrAvXero6jaMyjqeYfGyZbu9J1 8AcjpQBnneJws9VMP4HuyhGDp+62ooHY00cFiP+3c9HZOSQgxXecIHJISwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLF+v0Qe4QhWMe63cZqJgt/YBXvhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlLzE5YWUw NS0yZmIzLTQyNGUtYWUyNi0yMjMwZGJkNWVkYmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvMTlhZTA1 LTJmYjMtNDI0ZS1hZTI2LTIyMzBkYmQ1ZWRiYi8xL3NYNl9SQjdoQ0ZZeDdyZHht b21DMzlnRmUtRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAvNXUAwQAwifxMA0EAgACMAcDBQMqE6CAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMLFDANBgkqhkiG9w0BAQsFAAOCAQEAN32Y 4Ku7Zj2w6NTEnN2SF6gVEnb1IVkGF/AI+enINOzJO0M5UgdY1mwIYhDXMaovbThM I9al9B/bMkPvKf4jYSekrwluBmdWHrWh5xsFugHxZ0f8FRXuYnW+X0B/u6MH9jfU OzYjw/l6dtDLQAuUUSU89exQ132L83PgYYhrml6wVtooiQXzLoLBvIbvmIsGgwYr Pi9iSnuJLW4yeJ0VdbCLbzSmxzw7qvn6jZGFicn0+kucVi/LjhUE92Tcz6KDXG5L p8CG/uILPbH76qF3kSNaq3aRHCrQfRnnEl16/m0W5UZ4Ex8Yhe24Pt5ffo401FUh lU7IdNg+sHi8ypZ/zw== -----END CERTIFICATE-----Generated at Mon Jan 12 14:26:12 2026 by rpki-client