This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer File: GdlgBYpVOz9d-f5ychkDfEirUOE.cer (raw, json) Hash identifier: OY8ggniwfkQr5iIzea4t2WJRIPXdEV/NoBH4j+7ZOSw= Subject key identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8077BE06D95FC06BDA214CFC7E7EF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39383 IP: 193.84.64.0/24 IP: 2001:678:514::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:07:7b:e0:6d:95:fc:06:bd:a2:14:cf:c7:e7:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19d960058a553b3f5df9fe727219037c48ab50e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:94:4f:6c:a7:74:3c:9c:6c:71:58:f1:3d:7f: f3:bb:cc:b0:f3:1b:a5:a2:b5:47:52:7d:b6:18:e4: db:df:58:97:f9:ef:bc:f3:04:f8:7a:35:00:8a:77: 33:4e:22:8e:54:8e:6b:60:b4:a9:cb:25:b0:68:d1: d9:82:3d:55:96:7a:44:f4:ce:3b:aa:6c:7d:57:3d: 25:1f:eb:c4:bf:a3:d8:0c:bb:5a:19:a7:f6:26:64: 03:1b:ba:62:e0:df:2d:82:bc:59:55:08:ba:39:2f: 1e:86:0a:e3:1e:66:52:eb:40:ca:15:33:27:91:ce: fc:d3:cf:99:28:4c:95:6b:58:c9:d5:39:87:85:46: a1:82:0f:f4:cd:8f:e8:a5:d7:70:76:d2:a9:1c:42: ca:64:d2:7c:a4:3b:20:1d:41:57:b3:ad:12:39:d5: 3b:08:dd:24:ed:12:24:ee:cf:3a:36:47:2a:c2:24: 5c:e9:af:f5:3d:c5:a0:97:6c:04:4b:50:b6:55:b5: ac:45:44:0e:3f:e1:89:d0:e8:78:34:4c:5f:01:a6: 59:e8:27:f0:e7:79:e6:c0:5b:dd:9f:da:ac:6b:dc: 07:eb:a3:d9:4a:3b:48:ef:39:fb:e2:c9:ea:ee:f8: b1:ca:a5:19:f0:3d:83:a6:4e:78:10:66:ad:68:92: b3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.84.64.0/24 IPv6: 2001:678:514::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39383 Signature Algorithm: sha256WithRSAEncryption 78:e6:4b:e7:35:6b:fc:7a:df:4e:21:f8:d0:f5:c9:a6:d9:d1: f1:d5:35:77:24:66:38:09:95:48:e9:48:a7:ca:be:ad:0d:dc: f9:7f:f4:9f:f8:65:f9:d7:9c:2f:e0:34:6a:5d:a7:33:e9:88: 82:88:c4:84:2b:90:69:6f:e6:7e:b1:08:79:a1:c7:a6:64:ef: d1:76:64:64:a8:f3:0a:bc:d3:c8:14:97:ba:01:4b:92:3d:f6: 7c:c1:26:15:cc:3b:33:4b:d5:3b:c6:2a:b5:ee:9e:56:a2:f2: 6e:7e:cb:26:ac:92:cc:9f:1f:6c:f1:8f:d4:ab:5c:6a:85:28: 72:98:28:65:7d:94:f5:1a:9f:30:f5:03:35:5d:2a:8a:ec:8a: 47:0a:66:90:ea:4d:1d:25:04:f8:49:3a:47:a8:33:68:79:69: da:b0:de:93:be:db:5a:fe:6a:e4:9a:87:af:2d:de:af:9e:b6: e2:d9:46:3d:bd:1f:49:73:94:2c:ad:54:d3:a7:61:dc:9b:b7: d2:da:f1:7b:e3:f0:ef:db:5e:7b:dd:e9:11:14:4c:b6:c8:17: c7:91:d1:b4:c6:b5:f6:0b:32:9b:ab:7a:c8:03:a0:91:16:dd: 51:61:ad:f1:0d:7f:70:ae:21:53:a1:dc:af:c5:b2:52:87:75: 2f:99:e9:f4 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt6yAd74G2V/Aa9ohTPx+fvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWQ5NjAwNThhNTUzYjNmNWRmOWZlNzI3MjE5MDM3YzQ4YWI1MGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5RPbKd0PJxscVjxPX/zu8yw8xul orVHUn22GOTb31iX+e+88wT4ejUAinczTiKOVI5rYLSpyyWwaNHZgj1VlnpE9M47 qmx9Vz0lH+vEv6PYDLtaGaf2JmQDG7pi4N8tgrxZVQi6OS8ehgrjHmZS60DKFTMn kc7808+ZKEyVa1jJ1TmHhUahgg/0zY/opddwdtKpHELKZNJ8pDsgHUFXs60SOdU7 CN0k7RIk7s86NkcqwiRc6a/1PcWgl2wES1C2VbWsRUQOP+GJ0Oh4NExfAaZZ6Cfw 53nmwFvdn9qsa9wH66PZSjtI7zn74snq7vixyqUZ8D2Dpk54EGataJKzeQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFBnZYAWKVTs/Xfn+cnIZA3xIq1DhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3L2JmNTgw Yi1lOTEyLTRjMWQtOWU1MC01N2I5MWU4MTUzMzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvYmY1ODBi LWU5MTItNGMxZC05ZTUwLTU3YjkxZTgxNTMzMC8xL0dkbGdCWXBWT3o5ZC1mNXlj aGtEZkVpclVPRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwVRAMA8EAgACMAkDBwAgAQZ4BRQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAJnXMA0GCSqGSIb3DQEBCwUAA4IBAQB45kvnNWv8 et9OIfjQ9cmm2dHx1TV3JGY4CZVI6Uinyr6tDdz5f/Sf+GX515wv4DRqXacz6YiC iMSEK5Bpb+Z+sQh5ocemZO/RdmRkqPMKvNPIFJe6AUuSPfZ8wSYVzDszS9U7xiq1 7p5WovJufssmrJLMnx9s8Y/Uq1xqhShymChlfZT1Gp8w9QM1XSqK7IpHCmaQ6k0d JQT4STpHqDNoeWnasN6Tvtta/mrkmoevLd6vnrbi2UY9vR9Jc5QsrVTTp2Hcm7fS 2vF74/Dv21573ekRFEy2yBfHkdG0xrX2CzKbq3rIA6CRFt1RYa3xDX9wriFTodyv xbJSh3Uvmen0 -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:13 2026 by rpki-client