This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer File: 1-GSAgviI1Al6xM26hGYLkw91A18.cer (raw, json) Hash identifier: hY4dE0nJYcHKroROnoUCoZcnztxcrZUu3eX7hSxnu+0= Subject key identifier: F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AC959E07E555172C53F935CE2E9F8918E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 28 Nov 2025 07:25:01 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 213532 IP: 91.241.29.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:59:e0:7e:55:51:72:c5:3f:93:5c:e2:e9:f8:91:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 28 07:25:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f8648082f888d4097ac4cdba84660b930f75035f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cb:cc:ea:cc:03:7e:93:6a:3e:0e:36:5d:51: a0:f5:78:ba:02:c0:95:a3:1d:1d:d9:9b:67:f6:55: 2d:c6:f4:2b:d8:26:9f:69:3b:8b:2f:eb:9b:85:82: bb:6b:c4:32:26:ad:fc:e9:c9:5d:ab:71:1e:fe:e6: 84:a3:6a:f2:5f:84:89:19:da:cb:56:a1:46:4d:76: 4f:40:4a:a0:af:58:2f:e9:41:26:1e:8b:03:1e:87: 40:a2:7a:ea:42:da:75:30:20:cd:02:6a:60:d0:62: 15:99:16:dd:f2:8b:78:7b:d0:f4:ee:c5:55:1d:37: 6d:c4:30:ee:a6:ac:37:66:d4:2d:d2:40:e5:a9:d4: 71:46:ca:2d:64:3c:59:52:10:c8:50:19:f5:b6:be: b9:07:89:a9:11:c6:dc:10:92:6b:6b:f8:cf:db:d1: 92:f8:f6:a4:dc:0d:6e:9c:40:6c:8b:64:59:87:c0: bd:23:93:b9:80:92:49:86:93:92:9d:36:1d:6b:4c: aa:2f:f8:18:af:34:14:18:99:69:a5:ef:3b:8f:fe: 85:36:ab:5c:7c:d0:07:3d:e4:d3:6d:7b:30:61:dc: a2:5d:f3:17:ac:6b:a3:67:8b:24:35:28:82:5a:90: 5c:30:f6:83:99:af:0f:53:04:d6:f8:80:0a:fd:9f: 01:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.241.29.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213532 Signature Algorithm: sha256WithRSAEncryption 20:cd:20:9c:2b:cc:78:04:0f:f2:16:28:e1:a9:90:86:a9:4e: 5b:b6:f6:f0:5a:4e:b8:b5:0b:2f:27:bb:50:10:02:ec:74:fb: 75:76:44:c4:4c:16:c5:5c:6b:91:c8:42:49:6b:f9:01:99:ac: 0e:57:82:9e:0b:d0:26:d0:3d:f1:c8:5d:de:f7:60:0a:4c:e5: 8d:4b:bf:d6:42:7f:9d:7c:9e:35:a0:33:50:2c:29:2f:11:ee: 78:14:2f:ca:8f:0d:6d:a4:ef:f8:e3:63:08:fa:da:55:f8:83: 23:5f:da:4d:99:c0:ac:27:cb:3e:97:c9:5e:04:d3:e9:4a:cb: f1:6c:49:2c:fe:bf:69:df:6a:3f:c8:71:ff:b5:7d:1e:dd:bb: da:f5:db:38:15:4e:ca:24:0f:a3:8d:48:0c:26:c3:c8:03:5e: 1a:5e:8b:d3:7b:69:35:02:2b:d5:47:e1:ff:c7:5c:7b:d2:7f: 99:07:32:00:02:dd:09:82:83:6a:05:7a:ed:0e:60:7b:a3:37: 2e:be:45:5c:86:d2:09:2e:74:51:a5:82:20:83:a5:a2:e8:eb: 1d:8a:f1:e5:99:a6:ec:cf:c6:c3:5e:d9:e1:d8:4e:04:2e:13: 21:a4:43:ed:2f:bf:da:aa:d3:a9:23:f5:a4:6c:06:76:7a:eb: f0:b3:13:93 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZrJWeB+VVFyxT+TXOLp+JGOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI4MDcyNTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODY0ODA4MmY4ODhkNDA5N2FjNGNkYmE4NDY2MGI5MzBmNzUwMzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssvM6swDfpNqPg42XVGg9Xi6AsCV ox0d2Ztn9lUtxvQr2CafaTuLL+ubhYK7a8QyJq386cldq3Ee/uaEo2ryX4SJGdrL VqFGTXZPQEqgr1gv6UEmHosDHodAonrqQtp1MCDNAmpg0GIVmRbd8ot4e9D07sVV HTdtxDDupqw3ZtQt0kDlqdRxRsotZDxZUhDIUBn1tr65B4mpEcbcEJJra/jP29GS +Pak3A1unEBsi2RZh8C9I5O5gJJJhpOSnTYda0yqL/gYrzQUGJlppe87j/6FNqtc fNAHPeTTbXswYdyiXfMXrGujZ4skNSiCWpBcMPaDma8PUwTW+IAK/Z8BLwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPhkgIL4iNQJesTNuoRmC5MPdQNfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmL2I2NjEy Yi05NTNlLTRjNmMtYWFkMC0zYWY5YTRiMGE4NzMvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvYjY2MTJi LTk1M2UtNGM2Yy1hYWQwLTNhZjlhNGIwYTg3My8xLzEtR1NBZ3ZpSTFBbDZ4TTI2 aEdZTGt3OTFBMTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvxHTAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDQhwwDQYJKoZIhvcNAQELBQADggEBACDNIJwrzHgED/IWKOGpkIapTlu29vBa Tri1Cy8nu1AQAux0+3V2RMRMFsVca5HIQklr+QGZrA5Xgp4L0CbQPfHIXd73YApM 5Y1Lv9ZCf518njWgM1AsKS8R7ngUL8qPDW2k7/jjYwj62lX4gyNf2k2ZwKwnyz6X yV4E0+lKy/FsSSz+v2nfaj/Icf+1fR7du9r12zgVTsokD6ONSAwmw8gDXhpei9N7 aTUCK9VH4f/HXHvSf5kHMgAC3QmCg2oFeu0OYHujNy6+RVyG0gkudFGlgiCDpaLo 6x2K8eWZpuzPxsNe2eHYTgQuEyGkQ+0vv9qq06kj9aRsBnZ66/CzE5M= -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:19 2025 by rpki-client