This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer File: GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer (raw, json) Hash identifier: bUPffERbYYDVzkM40m2F8YLh/ZDXW3iDAG/BF8p9YsI= Subject key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A30C9665C9B2A1E5C338742B6FAC38 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43868 AS: 197208 AS: 206915 IP: 46.28.112.0/21 IP: 91.217.26.0/23 IP: 193.29.27.0/24 IP: 194.31.3.0/24 IP: 194.76.29.0/24 IP: 194.99.56.0/24 IP: 2a01:6ac0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0c:96:65:c9:b2:a1:e5:c3:38:74:2b:6f:ac:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b1:8a:cd:5e:8f:50:36:78:05:86:2e:cf:39: b6:34:5c:3c:da:44:40:92:1d:9f:8b:fe:c6:f1:f4: c7:6a:44:6d:5a:e5:82:b3:c9:82:83:72:9e:f7:98: 57:66:b2:a0:62:46:c6:97:51:53:79:bf:31:b1:70: 2d:97:70:9b:a6:8b:17:f6:3b:72:06:74:bd:1d:01: 5f:45:e2:f1:ba:b8:5e:e7:9a:fb:45:23:51:da:ba: b2:c7:d5:d8:c3:99:76:79:8d:f4:95:fb:1e:94:15: 86:01:49:27:c3:77:83:98:fe:f3:48:04:9e:84:0b: fd:6f:a8:b9:fc:e7:d9:07:fe:bb:c4:1b:d4:0a:84: 04:07:8b:86:d3:67:db:0b:37:4b:c5:e1:75:cc:46: 2e:43:2f:58:cd:b6:2e:90:7e:9a:98:88:19:bc:07: 4d:cc:8e:da:ec:fe:48:02:40:4b:c7:e5:49:0a:9b: a2:4a:86:1a:52:f1:90:8d:f7:dd:7f:44:65:ae:3f: 26:52:6b:39:40:d8:95:41:dd:88:48:0c:a3:b8:4b: 76:18:ad:e6:9d:a8:12:1e:fb:ff:ef:79:55:b5:99: bb:42:eb:ed:ec:df:40:86:89:53:25:19:3b:2a:38: ba:20:82:8c:84:0b:21:06:7e:f6:e5:e1:3b:c2:2c: db:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.112.0/21 91.217.26.0/23 193.29.27.0/24 194.31.3.0/24 194.76.29.0/24 194.99.56.0/24 IPv6: 2a01:6ac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43868 197208 206915 Signature Algorithm: sha256WithRSAEncryption 8c:07:4a:b6:9d:8b:ff:56:b6:b0:56:06:eb:13:1e:85:da:91: 1b:a7:76:55:d3:b2:d9:cd:72:21:0d:a5:54:bc:35:0c:56:c1: 08:d1:dd:5b:41:8b:13:6e:80:13:a9:80:a5:4e:a9:db:d2:02: 34:89:dd:3c:16:bb:a5:f6:9a:a3:89:d6:c7:1b:e4:88:6f:c3: 17:4c:a7:c0:3b:81:09:1e:2f:38:51:26:e8:f8:93:99:12:71: 1b:9f:b5:b7:bc:e3:7d:df:f3:40:35:98:2b:8c:4c:a1:ca:a3: 46:33:02:72:4f:2a:ac:5a:2f:1e:f8:92:cf:1c:2a:f7:45:ad: 8f:1a:7b:e4:99:5c:b9:82:ae:5f:f2:70:f8:33:88:70:60:94: ad:81:1c:cf:9a:cb:8c:13:04:d7:cd:91:61:45:b8:3d:00:ab: 9b:67:69:23:7b:2c:c7:20:b4:d6:bc:b2:1b:7a:78:61:0d:b1: df:3e:c8:80:85:c5:f4:08:5e:f3:bf:58:93:3a:38:f0:86:75: 95:d1:46:de:35:0a:a1:e6:e1:27:bb:95:ef:7f:e4:99:f6:e8: d7:bd:85:be:37:0e:b4:e8:2c:70:ea:5b:27:26:99:cc:9f:1c: b8:4d:27:d0:74:d0:42:f7:60:92:02:4e:c3:25:8b:e8:28:e5: 6e:b4:2f:9d -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgISAZt4owyWZcmyoeXDOHQrb6w4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGNhZWIxNGEwMWVlMTZkODM2NTY1ZTE0ZmE1M2I0YWIzYzNjZDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LGKzV6PUDZ4BYYuzzm2NFw82kRA kh2fi/7G8fTHakRtWuWCs8mCg3Ke95hXZrKgYkbGl1FTeb8xsXAtl3CbposX9jty BnS9HQFfReLxurhe55r7RSNR2rqyx9XYw5l2eY30lfselBWGAUknw3eDmP7zSASe hAv9b6i5/OfZB/67xBvUCoQEB4uG02fbCzdLxeF1zEYuQy9YzbYukH6amIgZvAdN zI7a7P5IAkBLx+VJCpuiSoYaUvGQjffdf0Rlrj8mUms5QNiVQd2ISAyjuEt2GK3m nagSHvv/73lVtZm7Quvt7N9AholTJRk7Kji6IIKMhAshBn725eE7wizbKwIDAQAB o4IC1zCCAtMwHQYDVR0OBBYEFBjK6xSgHuFtg2Vl4U+lO0qzw80mMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1L2U3YjFk Ny0zZDdhLTQ2YWItODEwZi1lZGRmMjNjMWJhNmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvZTdiMWQ3 LTNkN2EtNDZhYi04MTBmLWVkZGYyM2MxYmE2ZC8xL0dNcnJGS0FlNFcyRFpXWGhU NlU3U3JQRHpTWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQDLhxwAwQBW9kaAwQAwR0bAwQAwh8DAwQAwkwd AwQAwmM4MA0EAgACMAcDBQAqAWrAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwCr XAIDAwJYAgMDKEMwDQYJKoZIhvcNAQELBQADggEBAIwHSradi/9WtrBWBusTHoXa kRundlXTstnNciENpVS8NQxWwQjR3VtBixNugBOpgKVOqdvSAjSJ3TwWu6X2mqOJ 1scb5IhvwxdMp8A7gQkeLzhRJuj4k5kScRuftbe8433f80A1mCuMTKHKo0YzAnJP KqxaLx74ks8cKvdFrY8ae+SZXLmCrl/ycPgziHBglK2BHM+ay4wTBNfNkWFFuD0A q5tnaSN7LMcgtNa8sht6eGENsd8+yICFxfQIXvO/WJM6OPCGdZXRRt41CqHm4Se7 le9/5Jn26Ne9hb43DrToLHDqWycmmcyfHLhNJ9B00EL3YJICTsMli+go5W60L50= -----END CERTIFICATE-----Generated at Mon Jan 26 14:25:00 2026 by rpki-client