This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer File: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer (raw, json) Hash identifier: divrO1+8iJxdnm9NhEz7pWQtmdnAm3UjT1+CsSCw/PY= Subject key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC943B52F18CED395760B101823761D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 213.177.176.0/24 IP: 2a01:f700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:43:b5:2f:18:ce:d3:95:76:0b:10:18:23:76:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:48:d0:92:3b:1a:89:85:8b:cd:36:0b:4b:b7: f8:cb:1c:90:2d:aa:c8:14:30:7e:cc:59:60:f7:0d: ba:70:c2:8c:c1:f7:a9:ca:7e:1f:86:2b:12:54:24: 89:08:53:12:49:b0:5a:61:dd:9f:02:dd:2c:0c:0e: b8:b3:44:c2:a9:77:0f:ca:53:74:d1:e7:8c:ca:f4: 4a:18:fe:47:43:e9:d2:9d:a3:e9:ee:50:12:c2:64: 12:b6:03:57:1e:ce:1d:84:32:1e:7a:87:5e:c3:9c: df:ff:81:b9:a2:83:57:d9:69:7a:f9:d4:87:0d:37: e1:e4:02:1d:9a:b5:31:d1:1d:52:98:39:74:eb:6f: 81:78:89:f0:2c:ec:fd:13:96:7b:e7:64:30:1e:7a: a7:91:98:89:bc:b1:a5:b2:0a:d5:62:b9:27:b6:92: cd:8d:cf:be:be:ad:06:a5:3d:aa:76:39:f7:42:f5: 5e:a4:52:5f:be:a9:2b:4a:91:af:fb:f7:04:48:49: 6d:83:90:e0:46:d2:6b:03:c6:d2:84:c9:62:57:a5: fe:4d:56:6b:87:51:29:36:7c:33:7e:67:dd:e6:f3: 21:c9:5b:b1:94:f3:41:84:78:10:63:1e:42:cd:aa: 5d:ed:68:05:39:a8:ae:d7:27:bb:c5:43:a8:50:7f: f5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.177.176.0/24 IPv6: 2a01:f700::/29 Signature Algorithm: sha256WithRSAEncryption 20:0f:4c:40:44:db:b7:49:ed:4e:98:34:b1:6d:62:1d:94:6d: a7:f0:8c:84:e0:80:8a:16:05:d3:c4:ce:8c:e2:04:1d:23:50: 7a:d1:c7:6b:80:fb:fb:3a:1a:df:1d:10:88:dc:38:cb:e1:1d: 38:c7:0f:64:bc:ac:12:b3:7e:85:40:11:59:2e:2c:e3:d0:d3: 26:03:16:f8:5e:26:e6:d9:08:e1:93:d2:72:e6:3f:2f:b4:90: 68:7f:c7:2e:1a:4d:45:43:54:4f:bf:fc:ed:d5:22:d7:53:b0: 03:f4:a5:30:d9:63:c9:cc:10:9f:92:a1:d5:27:0a:05:97:7b: 15:98:59:ed:a6:1d:fa:d8:cf:e3:e2:2f:99:59:34:0d:06:a6: 8b:b7:02:ff:2a:8f:05:59:a2:06:4e:af:06:fd:02:fb:de:72: 27:82:59:d5:8e:d6:d5:f3:21:7f:4a:ea:41:72:b2:c1:38:07: 4f:64:d7:37:b8:45:ad:9d:d9:d7:8e:60:09:02:82:ac:2f:b1: f0:80:ea:e0:ac:80:2e:82:69:bc:78:33:5f:84:80:e1:1b:5e: f6:8a:e3:5c:22:db:18:60:6b:b3:05:b9:85:9a:02:90:a6:c9: 44:30:6e:a6:7a:58:50:d1:23:84:dd:75:64:99:5c:39:c1:78: 0c:95:c2:6b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6yUO1LxjO05V2CxAYI3YdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDYyZWNlNTQ3NTcyYWRlY2ExYTlmZjA1N2UwYmE4ZWFlOGM1ZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikjQkjsaiYWLzTYLS7f4yxyQLarI FDB+zFlg9w26cMKMwfepyn4fhisSVCSJCFMSSbBaYd2fAt0sDA64s0TCqXcPylN0 0eeMyvRKGP5HQ+nSnaPp7lASwmQStgNXHs4dhDIeeodew5zf/4G5ooNX2Wl6+dSH DTfh5AIdmrUx0R1SmDl062+BeInwLOz9E5Z752QwHnqnkZiJvLGlsgrVYrkntpLN jc++vq0GpT2qdjn3QvVepFJfvqkrSpGv+/cESEltg5DgRtJrA8bShMliV6X+TVZr h1EpNnwzfmfd5vMhyVuxlPNBhHgQYx5Czapd7WgFOaiu1ye7xUOoUH/1FQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNRi7OVHVyreyhqf8Ffguo6ujF1eMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0LzhhOTQx Ny1iYzI4LTRhMDItYTkyZi1hNDA4YmJhNzM1ZWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvOGE5NDE3 LWJjMjgtNGEwMi1hOTJmLWE0MDhiYmE3MzVlZS8xLzFHTHM1VWRYS3Q3S0dwX3dW LUM2anE2TVhWNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA1bGwMA0EAgACMAcDBQMqAfcAMA0GCSqGSIb3 DQEBCwUAA4IBAQAgD0xARNu3Se1OmDSxbWIdlG2n8IyE4ICKFgXTxM6M4gQdI1B6 0cdrgPv7OhrfHRCI3DjL4R04xw9kvKwSs36FQBFZLizj0NMmAxb4Xibm2Qjhk9Jy 5j8vtJBof8cuGk1FQ1RPv/zt1SLXU7AD9KUw2WPJzBCfkqHVJwoFl3sVmFntph36 2M/j4i+ZWTQNBqaLtwL/Ko8FWaIGTq8G/QL73nInglnVjtbV8yF/SupBcrLBOAdP ZNc3uEWtndnXjmAJAoKsL7HwgOrgrIAugmm8eDNfhIDhG172iuNcItsYYGuzBbmF mgKQpslEMG6melhQ0SOE3XVkmVw5wXgMlcJr -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:31 2026 by rpki-client