This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer File: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer (raw, json) Hash identifier: FTxpwB79V8J21UT8i3a/v6v+wfViY0UD/x1yBLNXyt4= Subject key identifier: 19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910E8F8D0834B8944106BA22A5AFEAC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205984 IP: 62.192.160.0/22 IP: 2a06:1380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e8:f8:d0:83:4b:89:44:10:6b:a2:2a:5a:fe:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:99:89:87:fc:68:a0:0e:23:0b:5c:30:d3:fa: 2e:9d:0d:ea:03:31:b8:ac:f4:73:76:13:f9:71:5f: 58:b7:0f:bd:0a:0b:56:22:0b:9c:b4:f9:09:db:e5: da:8d:25:8c:d9:59:5e:c3:59:5e:1b:56:fd:6e:ca: 2e:f9:66:0a:6d:8f:06:83:2a:fd:f3:f7:cf:c0:c2: 00:7f:f6:27:8d:30:f5:0f:2c:5b:4b:89:51:29:6b: 3c:ec:b9:0e:fe:df:8b:72:f2:ca:ec:ed:b0:77:6b: e5:08:4e:a5:3d:80:58:61:c1:0f:8c:7c:0e:f4:c7: 2e:e4:df:ac:4e:8c:f8:79:86:66:08:cf:ec:2b:d4: 28:c0:33:70:c9:08:73:db:cb:7a:44:dc:b9:65:8c: 34:4a:07:84:0f:25:64:dd:8f:4c:a0:d4:3f:d4:58: 43:68:5e:1a:47:ae:a1:ff:61:09:dd:5a:21:2b:e6: 17:4a:c6:7c:53:3a:08:5f:cd:e7:24:e5:9d:9c:ea: a5:51:e4:79:85:3e:d0:e2:88:d3:91:fa:bd:36:62: de:38:b9:75:1e:97:f7:72:b1:0d:ba:a4:2a:8d:98: d6:ff:10:39:b2:68:a5:8a:8b:5b:a4:79:9c:54:ad: d4:01:4b:14:f4:cf:89:01:64:0e:d1:4c:5c:4b:ab: fb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.192.160.0/22 IPv6: 2a06:1380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205984 Signature Algorithm: sha256WithRSAEncryption 7e:73:2d:bd:42:de:85:ca:01:75:73:a0:75:af:60:c6:f1:45: aa:6a:ca:c7:79:a7:3a:49:44:73:77:13:e7:2e:b8:3e:d3:53: 1e:46:f0:86:bf:bc:ae:82:7d:b6:8d:4c:b0:f2:be:ec:c7:65: 46:58:26:88:e5:74:17:8b:e0:f5:a1:da:c9:7e:fa:66:1e:ea: eb:85:af:74:72:4e:a7:cb:f4:d7:42:ea:4d:39:58:04:47:48: 61:d9:9d:15:f0:74:44:fa:6f:ca:d8:02:27:31:68:20:65:76: dd:b4:c4:b7:b8:79:76:3f:9f:a2:89:f7:87:a5:16:b8:1e:cd: 52:3a:ca:8a:f6:c0:d1:75:b7:d0:7a:55:e6:a7:8c:8f:7e:aa: 78:cd:4c:ee:20:dc:2f:51:a0:5e:02:a3:67:bc:2c:49:bf:1a: b6:a7:f4:49:ab:1c:31:ea:56:8f:5d:b9:b8:d9:16:db:bc:7b: 81:0c:13:14:cb:2e:7e:d9:27:5b:42:67:78:9b:5a:db:38:72: b1:11:12:68:c5:6e:37:9e:93:74:02:79:67:8c:23:73:9e:eb: 27:a4:5a:5f:5c:ea:96:55:0c:55:6a:11:89:d4:74:e3:1d:7c: cc:6a:71:13:0f:eb:9d:76:b0:45:13:f9:c6:2c:8f:ae:e1:84: ee:13:58:17 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EOj40INLiUQQa6IqWv6sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTY1MjNmZTBkNmJkOWM2N2UwYmNiMDA5OGEzYzM2M2YyZjkwZjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5mJh/xooA4jC1ww0/ounQ3qAzG4 rPRzdhP5cV9Ytw+9CgtWIguctPkJ2+XajSWM2Vlew1leG1b9bsou+WYKbY8Ggyr9 8/fPwMIAf/YnjTD1DyxbS4lRKWs87LkO/t+LcvLK7O2wd2vlCE6lPYBYYcEPjHwO 9Mcu5N+sToz4eYZmCM/sK9QowDNwyQhz28t6RNy5ZYw0SgeEDyVk3Y9MoNQ/1FhD aF4aR66h/2EJ3VohK+YXSsZ8UzoIX83nJOWdnOqlUeR5hT7Q4ojTkfq9NmLeOLl1 Hpf3crENuqQqjZjW/xA5smiliotbpHmcVK3UAUsU9M+JAWQO0UxcS6v7qwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBllI/4Na9nGfgvLAJijw2Py+Q98MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzc0Mzhk ZC1lMzYyLTQwMzQtYTA0MC1kZTgzNTQ1OGRhOGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvNzQzOGRk LWUzNjItNDAzNC1hMDQwLWRlODM1NDU4ZGE4ZC8xL0dXVWpfZzFyMmNaLUM4c0Ft S1BEWV9MNUQzdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCPsCgMA0EAgACMAcDBQMqBhOAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMkoDANBgkqhkiG9w0BAQsFAAOCAQEAfnMtvULehcoB dXOgda9gxvFFqmrKx3mnOklEc3cT5y64PtNTHkbwhr+8roJ9to1MsPK+7MdlRlgm iOV0F4vg9aHayX76Zh7q64WvdHJOp8v010LqTTlYBEdIYdmdFfB0RPpvytgCJzFo IGV23bTEt7h5dj+foon3h6UWuB7NUjrKivbA0XW30HpV5qeMj36qeM1M7iDcL1Gg XgKjZ7wsSb8atqf0SascMepWj125uNkW27x7gQwTFMsuftknW0JneJta2zhysRES aMVuN56TdAJ5Z4wjc57rJ6RaX1zqllUMVWoRidR04x18zGpxEw/rnXawRRP5xiyP ruGE7hNYFw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:34 2026 by rpki-client