This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer File: GUKBeimILUM78buOvFmy_yVugD8.cer (raw, json) Hash identifier: nhoHqEIYOja9lYTA5YkHARoRqnXYtL/EY3nkZqDmIdQ= Subject key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC81E466B6ACAFE37B32C963EE917B0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214945 IP: 31.130.168.0/21 IP: 2a14:5940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:1e:46:6b:6a:ca:fe:37:b3:2c:96:3e:e9:17:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:23:c0:2b:35:e4:43:f2:7c:4d:e6:a9:8e:2f: 36:f0:c2:e7:7e:ae:5c:e9:dd:17:5b:f3:22:31:ac: 57:38:8b:0e:33:ba:bc:15:c3:13:36:50:41:e7:ca: 2d:17:d5:c6:53:3a:5d:3b:f6:e2:d4:dd:c5:b2:0f: 02:9d:2f:be:0f:9f:04:19:89:47:8b:e5:67:01:f4: 51:fb:32:05:71:ab:bc:c1:da:fa:83:e8:ff:32:12: 15:a3:20:47:2f:c0:f6:35:d5:ed:ba:17:91:96:60: 6c:d5:ce:5c:01:36:58:97:0f:0e:04:15:7a:c6:21: 93:22:cf:48:00:7a:12:09:13:67:92:6e:3d:8b:42: 7d:c3:14:23:cc:39:5f:9e:82:d6:73:8e:c2:8a:57: d4:3b:6b:4d:6f:56:d1:3a:cb:09:5a:8f:64:5a:56: 30:9a:b7:02:13:17:77:f1:ae:46:d9:a6:d5:03:12: c2:72:3a:96:c8:f3:f3:ce:8d:69:03:ee:c5:24:b5: d2:63:7b:54:1a:2f:88:cd:be:46:27:25:4f:6b:80: ce:78:2a:12:64:a5:56:4d:98:af:6f:54:17:d3:b9: 87:31:65:9f:e4:a3:8d:47:30:9b:7c:3f:46:54:eb: 78:2e:34:53:6b:bc:c4:b0:e0:ac:3e:09:28:a2:dc: b9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.130.168.0/21 IPv6: 2a14:5940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214945 Signature Algorithm: sha256WithRSAEncryption 87:cf:fd:99:9b:1a:5f:b3:a0:8d:43:10:e0:df:88:bd:38:fc: d7:74:4d:b4:bf:44:df:91:83:f8:75:09:b1:b6:28:d1:c3:6b: 08:ff:9f:40:11:71:ec:9b:be:67:54:0a:17:38:2a:5d:94:73: 28:55:f2:cf:09:4f:04:8f:43:04:2b:b7:39:f5:90:d3:fd:25: 50:7a:7c:c4:a3:6e:4a:cc:f0:6f:4c:36:ca:c3:f7:ef:ea:90: e5:41:67:a1:1b:01:8e:35:da:51:d0:71:d2:56:5d:27:66:38: 92:8c:46:24:58:3c:88:2a:d8:25:71:40:36:35:ca:01:bb:7d: 93:aa:9f:69:57:fd:1b:2a:53:c7:d5:1e:61:6e:d8:90:d6:30: 5e:00:8e:dc:49:10:9b:a6:de:f9:32:e7:22:42:e4:31:ae:59: f1:ff:c1:71:e7:d0:99:a3:12:7e:ec:d8:e5:1c:f6:3b:69:f7: bc:2e:7d:66:4b:cc:a1:5f:6b:ec:a2:b5:01:49:cc:79:6c:43: 61:3f:3a:f0:af:ac:b9:c8:5f:c3:37:d4:46:5e:e3:58:8b:25: 57:2d:2b:30:08:9e:bf:ce:bc:5e:43:94:00:4a:3f:62:1a:d2: f9:e6:15:8c:3f:d4:b5:54:2c:4f:ae:16:10:61:43:d3:2f:aa: 18:e5:f0:ff -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yB5Ga2rK/jezLJY+6RewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTQyODE3YTI5ODgyZDQzM2JmMWJiOGViYzU5YjJmZjI1NmU4MDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yPAKzXkQ/J8Teapji828MLnfq5c 6d0XW/MiMaxXOIsOM7q8FcMTNlBB58otF9XGUzpdO/bi1N3Fsg8CnS++D58EGYlH i+VnAfRR+zIFcau8wdr6g+j/MhIVoyBHL8D2NdXtuheRlmBs1c5cATZYlw8OBBV6 xiGTIs9IAHoSCRNnkm49i0J9wxQjzDlfnoLWc47CilfUO2tNb1bROssJWo9kWlYw mrcCExd38a5G2abVAxLCcjqWyPPzzo1pA+7FJLXSY3tUGi+Izb5GJyVPa4DOeCoS ZKVWTZivb1QX07mHMWWf5KONRzCbfD9GVOt4LjRTa7zEsOCsPgkooty5QwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBlCgXopiC1DO/G7jrxZsv8lboA/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5LzUzMDA2 NC0yNDgyLTQ1YmUtYmZmZS1mZGRlNThhYjI5ZjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvNTMwMDY0 LTI0ODItNDViZS1iZmZlLWZkZGU1OGFiMjlmOS8xL0dVS0JlaW1JTFVNNzhidU92 Rm15X3lWdWdEOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDH4KoMA0EAgACMAcDBQMqFFlAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNHoTANBgkqhkiG9w0BAQsFAAOCAQEAh8/9mZsaX7Og jUMQ4N+IvTj813RNtL9E35GD+HUJsbYo0cNrCP+fQBFx7Ju+Z1QKFzgqXZRzKFXy zwlPBI9DBCu3OfWQ0/0lUHp8xKNuSszwb0w2ysP37+qQ5UFnoRsBjjXaUdBx0lZd J2Y4koxGJFg8iCrYJXFANjXKAbt9k6qfaVf9GypTx9UeYW7YkNYwXgCO3EkQm6be +TLnIkLkMa5Z8f/BcefQmaMSfuzY5Rz2O2n3vC59ZkvMoV9r7KK1AUnMeWxDYT86 8K+suchfwzfURl7jWIslVy0rMAiev868XkOUAEo/YhrS+eYVjD/UtVQsT64WEGFD 0y+qGOXw/w== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:50 2026 by rpki-client