This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer File: GCJVGHajpiZZn0Z8eucJuBwU30k.cer (raw, json) Hash identifier: RVl1AhWHhyGk9Oh/wWxJ0wkgq9/XnOOb8UOHbRPIxC0= Subject key identifier: 18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDD2677806E6ED7742D2AB816234FD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.225.208.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d2:67:78:06:e6:ed:77:42:d2:ab:81:62:34:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1822551876a3a626599f467c7ae709b81c14df49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:58:08:37:d3:8c:86:6a:2e:fd:65:e9:b5:f6: d8:7d:17:35:fe:35:29:c5:c5:77:9a:d8:1c:87:11: fd:87:a0:6d:99:c8:e3:d1:9d:c7:52:e3:09:06:84: 8f:31:8c:af:e0:89:f1:b3:d8:5a:2f:d6:38:5f:63: 60:26:1f:9d:06:da:ec:a5:e5:87:26:ac:9b:1d:78: 8a:1d:6a:60:c4:d3:00:63:5d:ec:f2:91:a6:35:ff: 73:09:fb:0b:e3:54:92:d8:5c:52:f5:b7:a6:cf:f5: 2b:2c:a1:21:75:ef:92:ca:f3:ae:8d:1e:2f:03:a2: cf:39:1e:61:19:28:fe:10:48:db:74:7b:e6:24:ec: 8d:63:e1:a7:d7:d3:bc:89:9e:fa:5c:fe:b5:66:8e: b2:67:75:ab:b3:e1:e9:6e:b2:8e:17:bd:e6:83:f9: 71:a1:32:a4:89:76:4b:07:0d:96:1b:49:f7:7e:17: 31:3b:da:20:64:5c:ce:92:93:a4:48:26:51:8e:8f: 33:56:17:e7:59:a1:16:54:e7:57:54:11:b9:08:85: d8:51:09:10:f6:e0:06:d7:6a:94:22:c5:97:23:e4: 5a:57:62:94:77:0b:5c:1f:b9:56:36:5c:13:ef:0a: 82:a6:f7:f3:3f:b9:4f:0d:3b:9b:27:f8:9f:c5:6d: 2a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.208.0/22 Signature Algorithm: sha256WithRSAEncryption 06:64:60:7c:cd:99:85:e4:11:f7:d7:d4:62:76:62:3a:83:31: ec:5b:49:78:9a:26:62:0f:d6:eb:34:62:07:d3:b4:52:15:55: 18:1c:09:76:c7:bc:38:d2:8a:d3:4d:16:ee:a6:69:0f:40:b2: 49:fb:d0:42:de:c0:a1:ff:1a:3f:96:ee:2e:bc:fb:31:25:6e: 45:a3:a6:ea:a5:f5:30:ff:17:6c:2e:ce:ad:0c:68:d8:94:85: 46:b7:cc:ab:1a:d3:ef:05:32:ae:83:e7:af:1f:1d:0d:d0:24: 97:0b:95:45:85:fd:d0:0f:3f:7a:31:3b:dc:6e:59:1d:ac:47: 6e:74:eb:1a:92:77:64:05:da:55:68:2f:24:b3:38:5a:76:a9: 38:9f:42:3c:e2:a1:24:52:a2:3e:29:c8:20:89:2a:bc:06:8e: 32:09:ef:b4:29:40:a2:11:72:7d:0e:e1:0c:98:91:4d:40:36: 0b:df:be:e0:e2:83:d8:cc:c8:b7:ee:ed:7b:3d:9d:00:3a:71: cc:15:99:a9:56:a9:86:8d:83:74:fe:eb:e9:86:3f:75:1a:59: ad:f6:88:eb:be:e3:fc:3d:76:af:7d:24:9e:ac:5b:e1:ee:3a: dc:22:f9:9a:ed:0d:08:73:ff:31:5e:29:2c:b8:c3:52:15:cf: f8:c0:34:8a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87dJneAbm7XdC0quBYjT9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODIyNTUxODc2YTNhNjI2NTk5ZjQ2N2M3YWU3MDliODFjMTRkZjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlgIN9OMhmou/WXptfbYfRc1/jUp xcV3mtgchxH9h6Btmcjj0Z3HUuMJBoSPMYyv4Inxs9haL9Y4X2NgJh+dBtrspeWH JqybHXiKHWpgxNMAY13s8pGmNf9zCfsL41SS2FxS9bemz/UrLKEhde+SyvOujR4v A6LPOR5hGSj+EEjbdHvmJOyNY+Gn19O8iZ76XP61Zo6yZ3Wrs+HpbrKOF73mg/lx oTKkiXZLBw2WG0n3fhcxO9ogZFzOkpOkSCZRjo8zVhfnWaEWVOdXVBG5CIXYUQkQ 9uAG12qUIsWXI+RaV2KUdwtcH7lWNlwT7wqCpvfzP7lPDTubJ/ifxW0qywIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFBgiVRh2o6YmWZ9GfHrnCbgcFN9JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0L2JjNjY5 NC0xNDE3LTQ5ZmUtYjRjNS00MTJiNDc2N2FjNDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvYmM2Njk0 LTE0MTctNDlmZS1iNGM1LTQxMmI0NzY3YWM0NS8xL0dDSlZHSGFqcGlaWm4wWjhl dWNKdUJ3VTMway5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCueHQMA0GCSqGSIb3DQEBCwUAA4IBAQAGZGB8 zZmF5BH319RidmI6gzHsW0l4miZiD9brNGIH07RSFVUYHAl2x7w40orTTRbupmkP QLJJ+9BC3sCh/xo/lu4uvPsxJW5Fo6bqpfUw/xdsLs6tDGjYlIVGt8yrGtPvBTKu g+evHx0N0CSXC5VFhf3QDz96MTvcblkdrEdudOsakndkBdpVaC8kszhadqk4n0I8 4qEkUqI+KcggiSq8Bo4yCe+0KUCiEXJ9DuEMmJFNQDYL377g4oPYzMi37u17PZ0A OnHMFZmpVqmGjYN0/uvphj91Glmt9ojrvuP8PXavfSSerFvh7jrcIvma7Q0Ic/8x XiksuMNSFc/4wDSK -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:11 2026 by rpki-client