This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer File: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer (raw, json) Hash identifier: Qvt+xNscrJ9R5YG5rvxby41WVtna/m05b/SCvabOl2c= Subject key identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF11D8EB99DD7A9F7A06A1C76FADF0B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47840 IP: 91.205.68.0/22 IP: 93.157.192.0/21 IP: 176.108.56.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:1d:8e:b9:9d:d7:a9:f7:a0:6a:1c:76:fa:df:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:db:8e:a3:7b:4f:d3:9e:b2:d6:da:f4:fe:3c: 89:b3:52:28:28:d5:1c:6d:d7:3c:ff:e5:86:2b:84: 5f:41:69:37:54:c2:9d:f5:c0:5f:78:46:2b:e3:b2: 8d:a3:27:60:28:21:41:9e:5f:50:5b:06:af:55:ec: 3e:6b:af:9f:d3:01:d5:fb:ab:33:3d:54:71:6c:26: a2:72:5d:90:e4:cd:ba:74:ea:c5:c0:af:a1:f0:ae: 43:7a:54:c6:ec:89:c8:6c:ac:97:bb:24:78:29:12: ca:7a:69:8a:39:05:82:9f:5e:1f:9f:a7:af:b1:8e: 9a:29:a5:a1:80:6a:4d:fd:92:e9:91:21:d3:1d:f0: 01:a2:52:b2:24:2b:52:d4:06:03:67:b0:a9:6e:e7: df:da:98:5c:4a:f7:65:95:66:b3:d0:2e:c5:df:55: cd:20:2c:87:0b:9a:3f:7b:fb:cc:0e:d2:e9:23:ab: 4a:ba:18:05:ae:38:03:0e:ab:1e:3a:66:ed:96:47: 09:13:b0:a1:9b:00:db:86:38:0d:91:ec:cb:87:4c: f8:fd:04:9d:04:46:fd:6f:72:52:43:fe:fb:e4:22: 62:62:04:40:57:d3:fe:0e:c3:fa:ed:67:da:6a:80: a3:ed:23:02:6d:df:b7:6b:66:6d:bb:50:d7:5d:96: 13:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.68.0/22 93.157.192.0/21 176.108.56.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47840 Signature Algorithm: sha256WithRSAEncryption 78:8a:66:21:67:dd:4c:75:e0:d4:02:27:5a:c0:09:1b:ba:8d: 3d:4c:d6:55:c6:ac:ef:b3:81:89:a1:4e:62:71:9c:1b:2c:ca: 4d:c7:aa:3d:87:a7:34:a4:e8:5a:6f:5d:5e:dd:ca:4e:cb:f9: 1e:aa:49:54:88:ef:92:da:8f:7d:a1:23:f3:ab:b2:d9:ea:17: 77:9f:98:74:79:af:b7:8e:99:11:36:a8:1c:df:75:67:eb:56: 0f:3c:22:a4:c0:b7:8c:44:d9:82:78:31:fa:11:0b:9a:cb:0d: 7e:83:32:3f:a9:30:d3:65:f9:2d:8e:fd:8b:98:11:37:ad:fd: 9b:e9:8d:97:a5:7d:0c:ef:cb:17:43:b4:3d:d9:99:b6:f0:a3: 49:8e:b5:9f:3c:a9:d4:d1:b6:53:15:3c:43:c8:55:b6:38:ba: da:52:58:3b:b3:e1:d3:7a:04:62:7a:fc:70:34:a8:c1:d1:22: ee:f7:5e:79:27:24:a8:1a:4c:1d:80:8d:c8:c2:0c:a9:f5:47: 0b:b7:6c:2a:f0:d7:02:44:2c:11:a3:0d:eb:ad:0d:ac:b1:e7: 29:33:30:d5:e0:83:66:5b:e3:c7:b6:55:e9:8f:43:57:01:f6: 99:f2:7a:27:4d:ac:d6:be:2b:69:95:4b:45:c2:74:67:e3:f9: fa:af:f3:aa -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt/8R2OuZ3Xqfegahx2+t8LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGM2OGFkNmYxNGJlMjE3MmM3ZDBjOTRmNGI0ZDRkMDAxOTMzYmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49uOo3tP056y1tr0/jyJs1IoKNUc bdc8/+WGK4RfQWk3VMKd9cBfeEYr47KNoydgKCFBnl9QWwavVew+a6+f0wHV+6sz PVRxbCaicl2Q5M26dOrFwK+h8K5DelTG7InIbKyXuyR4KRLKemmKOQWCn14fn6ev sY6aKaWhgGpN/ZLpkSHTHfABolKyJCtS1AYDZ7Cpbuff2phcSvdllWaz0C7F31XN ICyHC5o/e/vMDtLpI6tKuhgFrjgDDqseOmbtlkcJE7ChmwDbhjgNkezLh0z4/QSd BEb9b3JSQ/775CJiYgRAV9P+DsP67WfaaoCj7SMCbd+3a2Ztu1DXXZYT6QIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFBjGitbxS+IXLH0MlPS01NABkzu0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzE4OGYw My0xNjhmLTQ5NDItOTUwNS0xOTgwM2IxZmIxZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvMTg4ZjAz LTE2OGYtNDk0Mi05NTA1LTE5ODAzYjFmYjFmMC8xL0dNYUsxdkZMNGhjc2ZReVU5 TFRVMEFHVE83US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQCW81EAwQDXZ3AAwQDsGw4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwC64DANBgkqhkiG9w0BAQsFAAOCAQEAeIpmIWfdTHXg1AIn WsAJG7qNPUzWVcas77OBiaFOYnGcGyzKTceqPYenNKToWm9dXt3KTsv5HqpJVIjv ktqPfaEj86uy2eoXd5+YdHmvt46ZETaoHN91Z+tWDzwipMC3jETZgngx+hELmssN foMyP6kw02X5LY79i5gRN639m+mNl6V9DO/LF0O0PdmZtvCjSY61nzyp1NG2UxU8 Q8hVtji62lJYO7Ph03oEYnr8cDSowdEi7vdeeSckqBpMHYCNyMIMqfVHC7dsKvDX AkQsEaMN660NrLHnKTMw1eCDZlvjx7ZV6Y9DVwH2mfJ6J02s1r4raZVLRcJ0Z+P5 +q/zqg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:21 2026 by rpki-client