This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer File: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer (raw, json) Hash identifier: ifFUD481gSck+5OsBsablH0tPGtDMGdY9f+DlZZWSY8= Subject key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F8D240A3DB7C93112941BA87F013D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42316 IP: 45.159.128.0/22 IP: 176.113.47.0/24 IP: 185.187.160.0/22 IP: 2a0b:a880::/29 IP: 2a0c:9280::/29 IP: 2a0f:7680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:8d:24:0a:3d:b7:c9:31:12:94:1b:a8:7f:01:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:52:29:67:29:ce:3d:c2:8c:a5:ac:8e:3a: e1:5b:33:6b:f5:89:7b:d3:7d:22:9d:36:3b:90:5d: 95:03:e0:2b:b0:1b:30:6a:44:49:e9:b4:2c:3c:60: c4:b2:e6:9d:e1:bf:38:af:e8:92:20:73:89:19:ef: 2a:f3:e2:8b:aa:81:73:62:65:ea:20:af:b3:4b:5f: 00:6a:39:92:b3:ae:19:3a:e2:7e:8a:da:ec:78:59: d5:f3:59:85:9b:51:ba:80:97:cb:4a:a4:f1:c0:e5: ae:5f:0c:79:7c:d9:59:0a:21:71:ec:4f:b6:87:3b: 80:d4:33:67:4c:2b:13:dc:b5:59:7b:e8:52:9d:72: b6:c1:10:82:67:31:ff:81:e6:73:5d:66:fa:52:1c: 25:ee:1e:5a:ca:02:1c:41:f0:dd:01:ba:ed:b0:7d: c1:b1:84:67:b9:9a:66:2a:ef:52:41:6b:38:95:b3: 92:f1:b4:9e:93:4b:7b:35:a7:46:7f:3b:a6:72:f8: 3e:c3:0b:86:9c:93:46:31:7e:d7:dc:72:f9:da:95: a2:e3:9b:2e:d8:31:8f:7d:e1:86:29:ea:51:1f:70: fc:e4:74:1c:5a:7a:32:60:fe:86:15:bb:33:d4:f1: 65:b8:f6:4f:bb:42:36:91:dc:50:72:70:4b:d3:2c: 37:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.128.0/22 176.113.47.0/24 185.187.160.0/22 IPv6: 2a0b:a880::/29 2a0c:9280::/29 2a0f:7680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42316 Signature Algorithm: sha256WithRSAEncryption 4a:f8:f6:a2:f0:2b:b6:a2:18:34:12:5a:dc:03:ae:92:d3:83: 5d:cb:80:ce:06:9c:f5:6c:20:1e:12:74:74:8d:aa:2b:f3:07: 0a:75:28:47:61:a7:d1:54:b6:3a:45:bd:9c:d4:77:43:03:87: 1f:15:e7:ba:f4:03:70:32:b9:f0:b5:d5:90:8d:26:f8:3c:2f: 87:c6:b8:3d:c7:8b:5f:10:2c:87:ec:b7:76:48:a1:ce:d4:7e: 48:0b:75:dc:08:ea:7a:03:fd:87:d3:bf:f2:89:bc:84:07:61: f0:43:f7:5e:97:ff:33:cf:61:65:5d:e2:4f:40:ee:30:16:d3: 28:23:c0:d9:b8:51:0b:c8:ca:03:d4:92:a3:0d:ba:d7:7a:46: 92:17:8c:1a:11:0b:80:5c:10:69:a1:8c:53:d6:3b:52:31:65: b1:7c:13:fe:d3:a2:05:87:05:0c:65:af:6d:9e:82:bd:82:37: e6:b5:8d:5f:ac:c7:16:01:b6:dc:a3:28:14:a3:63:c9:d0:19: 3b:3b:63:b6:b0:8c:bc:36:5e:4d:4a:20:cb:6c:4b:67:b4:62: 22:e5:12:b1:a3:69:28:fe:49:45:4a:4c:73:d7:64:4f:ea:04: 01:73:bc:69:e2:6a:99:ab:e7:37:68:65:a5:80:c0:ce:73:c6: 49:70:52:3b -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt8f40kCj23yTESlBuofwE9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGI4ODlmMGRkYmI1MjgwMWUyZDJlN2EyZWJlMTE2N2NhZDM0YzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIdSKWcpzj3CjKWsjjrhWzNr9Yl7 030inTY7kF2VA+ArsBswakRJ6bQsPGDEsuad4b84r+iSIHOJGe8q8+KLqoFzYmXq IK+zS18AajmSs64ZOuJ+itrseFnV81mFm1G6gJfLSqTxwOWuXwx5fNlZCiFx7E+2 hzuA1DNnTCsT3LVZe+hSnXK2wRCCZzH/geZzXWb6Uhwl7h5aygIcQfDdAbrtsH3B sYRnuZpmKu9SQWs4lbOS8bSek0t7NadGfzumcvg+wwuGnJNGMX7X3HL52pWi45su 2DGPfeGGKepRH3D85HQcWnoyYP6GFbsz1PFluPZPu0I2kdxQcnBL0yw3mQIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFBi4ifDdu1KAHi0uei6+EWfK00wGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwLzZlMTk2 MS0zZGE2LTQ3YzEtOWI2ZC1kYmI2NGE2ODM1YWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvNmUxOTYx LTNkYTYtNDdjMS05YjZkLWRiYjY0YTY4MzVhZC8xL0dMaUo4TjI3VW9BZUxTNTZM cjRSWjhyVFRBWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAYBAIAATASAwQCLZ+AAwQAsHEvAwQCubugMBsEAgACMBUDBQMq C6iAAwUDKgySgAMFAyoPdoAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAKVMMA0G CSqGSIb3DQEBCwUAA4IBAQBK+Pai8Cu2ohg0ElrcA66S04Ndy4DOBpz1bCAeEnR0 jaor8wcKdShHYafRVLY6Rb2c1HdDA4cfFee69ANwMrnwtdWQjSb4PC+Hxrg9x4tf ECyH7Ld2SKHO1H5IC3XcCOp6A/2H07/yibyEB2HwQ/del/8zz2FlXeJPQO4wFtMo I8DZuFELyMoD1JKjDbrXekaSF4waEQuAXBBpoYxT1jtSMWWxfBP+06IFhwUMZa9t noK9gjfmtY1frMcWAbbcoygUo2PJ0Bk7O2O2sIy8Nl5NSiDLbEtntGIi5RKxo2ko /klFSkxz12RP6gQBc7xp4mqZq+c3aGWlgMDOc8ZJcFI7 -----END CERTIFICATE-----Generated at Sun Jan 25 19:41:59 2026 by rpki-client