This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer File: GYOwLhDKghv-G-bnUdks9z1tTAs.cer (raw, json) Hash identifier: 4Cykvs8dieG99bCimEfFYvCmmUDlRG7EoLxy6jdZUGs= Subject key identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1592B20776DF44156A2DF60E5BC83D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208472 IP: 37.186.31.0/24 IP: 194.11.247.0/24 IP: 2a12:7dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:92:b2:07:76:df:44:15:6a:2d:f6:0e:5b:c8:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:86:cd:e4:9f:7c:e5:66:ae:32:d0:61:f7:c8: a6:3c:29:b1:bb:e1:bd:f7:ed:92:e9:cc:c6:28:85: 4b:4b:f5:af:7b:3f:ee:dc:6f:fd:75:d8:5f:6a:30: 9d:aa:e3:f3:b5:e9:3a:95:c0:6e:22:c6:c2:73:d3: c5:d7:55:11:8a:ae:a7:93:c6:dd:eb:85:5c:4e:f9: be:9e:b9:1b:b9:dc:61:ac:7c:f0:40:72:99:dc:77: 16:76:c5:b8:f3:ef:e6:70:31:d9:0c:ed:b5:3f:57: 10:4c:f9:57:6e:ad:cf:f7:86:0f:70:1b:89:06:52: 37:22:86:e0:e5:e5:5b:ec:38:d0:79:c6:b2:af:ed: 18:af:91:2d:a2:5d:1f:26:43:e7:05:92:4d:bf:44: c6:15:32:d0:76:e7:04:b7:4c:0c:63:97:d8:5a:10: 1b:2f:e0:8a:72:e8:4e:f4:95:6d:c6:9d:51:0f:fe: eb:17:81:a9:d9:c7:3b:bf:6c:46:dd:4f:cf:13:3b: f4:c3:dd:46:99:f0:a0:ef:b7:82:64:e2:1b:8a:43: 3a:9a:ad:cc:d1:7c:af:2a:66:57:c2:5c:a0:56:53: d1:cf:de:31:fe:f2:7e:82:a2:24:3f:8f:c0:9a:5b: 8e:14:69:e0:6b:80:f7:65:13:f2:15:75:de:fa:10: 0c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.186.31.0/24 194.11.247.0/24 IPv6: 2a12:7dc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208472 Signature Algorithm: sha256WithRSAEncryption 2a:0d:4c:92:5f:9f:52:47:d9:35:2c:12:c1:91:cf:c7:ce:47: ba:ad:8c:57:dd:0b:88:a6:aa:7d:cc:aa:fe:f8:b2:2b:d2:75: 3f:da:18:48:00:94:c5:b1:6c:d2:03:7d:3e:59:da:64:5d:55: 21:b0:0f:f4:3d:db:b2:95:d0:61:68:a2:81:5b:ff:f6:f5:28: 01:03:8f:3d:79:ff:4b:ce:44:0a:f9:e0:13:6f:27:48:c3:14: 41:12:e6:78:4e:ab:7d:5d:6f:95:7f:cd:dc:c1:58:a4:06:9a: 2e:e0:65:85:3a:a9:ef:73:7c:25:6b:7a:c1:97:2b:42:72:87: 5f:b8:ce:22:30:02:03:3d:cf:3c:5c:a2:dc:9f:fb:b5:d9:f5: 69:4c:36:05:3c:ab:2a:2c:05:86:bd:3e:6c:d3:5b:9d:ac:2a: c1:85:f2:e5:75:0a:af:50:c7:f6:4d:5d:39:54:40:a3:f4:1e: 4c:59:ce:9a:e8:df:57:a4:1c:0c:6a:dc:fa:f3:23:17:fe:6d: c4:80:59:86:95:82:d1:6b:57:34:f2:52:dd:36:5a:4e:6b:25: b0:40:3e:2d:5c:0e:c4:ec:ed:d3:7a:36:d5:bd:46:e9:ca:76: 3e:d1:2f:06:72:e8:3c:a6:33:d6:4d:d6:17:80:e7:d9:4c:60: 41:7e:8e:76 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/FZKyB3bfRBVqLfYOW8g9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTgzYjAyZTEwY2E4MjFiZmUxYmU2ZTc1MWQ5MmNmNzNkNmQ0YzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIbN5J985WauMtBh98imPCmxu+G9 9+2S6czGKIVLS/Wvez/u3G/9ddhfajCdquPztek6lcBuIsbCc9PF11URiq6nk8bd 64VcTvm+nrkbudxhrHzwQHKZ3HcWdsW48+/mcDHZDO21P1cQTPlXbq3P94YPcBuJ BlI3Iobg5eVb7DjQecayr+0Yr5Etol0fJkPnBZJNv0TGFTLQducEt0wMY5fYWhAb L+CKcuhO9JVtxp1RD/7rF4Gp2cc7v2xG3U/PEzv0w91GmfCg77eCZOIbikM6mq3M 0XyvKmZXwlygVlPRz94x/vJ+gqIkP4/AmluOFGnga4D3ZRPyFXXe+hAMswIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFBmDsC4QyoIb/hvm51HZLPc9bUwLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3LzA5NmMx Ny1kZDgzLTQwNTgtODJlMS1jZGEzNjI1NjI5NmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMDk2YzE3 LWRkODMtNDA1OC04MmUxLWNkYTM2MjU2Mjk2Yy8xL0dZT3dMaERLZ2h2LUctYm5V ZGtzOXoxdFRBcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAJbofAwQAwgv3MA0EAgACMAcDBQMqEn3AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMuWDANBgkqhkiG9w0BAQsFAAOCAQEAKg1M kl+fUkfZNSwSwZHPx85Huq2MV90LiKaqfcyq/viyK9J1P9oYSACUxbFs0gN9Plna ZF1VIbAP9D3bspXQYWiigVv/9vUoAQOPPXn/S85ECvngE28nSMMUQRLmeE6rfV1v lX/N3MFYpAaaLuBlhTqp73N8JWt6wZcrQnKHX7jOIjACAz3PPFyi3J/7tdn1aUw2 BTyrKiwFhr0+bNNbnawqwYXy5XUKr1DH9k1dOVRAo/QeTFnOmujfV6QcDGrc+vMj F/5txIBZhpWC0WtXNPJS3TZaTmslsEA+LVwOxOzt03o21b1G6cp2PtEvBnLoPKYz 1k3WF4Dn2UxgQX6Odg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:06:32 2026 by rpki-client