This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer File: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer (raw, json) Hash identifier: /2T/+5CplrNWYMiYp8y0RkDLIXvfSgaXN1pT85ABSlI= Subject key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77587F21BEB6AAFF21EBA02CFB3381E3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39771 IP: 193.227.136.0/21 IP: 194.4.72.0 -- 194.4.99.255 IP: 195.42.0.0/18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:7f:21:be:b6:aa:ff:21:eb:a0:2c:fb:33:81:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d8:1d:dc:6d:6d:a2:39:5b:40:7e:15:7a:89: 72:55:02:ca:15:de:60:99:85:94:6b:d9:76:08:37: a1:88:f3:d5:97:d5:e1:d9:df:08:95:45:d1:e2:7d: ee:78:fc:24:c1:f0:0d:2b:27:ba:7e:34:40:33:bb: 85:27:99:42:6b:ff:ef:48:2b:32:b6:c7:e1:c3:28: 8b:6e:f1:4a:0c:29:3e:1f:60:3f:8c:3b:c2:05:34: 96:69:e7:3f:8e:42:e2:08:5d:0b:ab:e6:35:b1:86: 7b:f1:d5:c0:f0:ee:ff:71:2c:17:10:5e:d9:2d:54: 77:ae:7f:7c:87:62:7b:f8:52:77:a7:6a:0f:5d:cc: 40:61:da:b6:fa:5d:91:e8:29:9e:fd:5c:ee:84:52: 67:40:4f:33:c8:68:c6:cf:33:4c:1e:8e:70:20:90: 3c:9f:c9:37:f1:21:59:e0:be:02:b6:6d:30:5b:bc: e8:c4:c9:87:14:2b:5a:a8:32:43:bc:c5:32:79:ba: 55:45:bc:3a:f6:4b:25:1b:8b:ae:cd:03:11:68:d4: 00:74:46:08:f6:ae:ef:3b:e1:62:55:91:41:d5:91: 6d:04:15:af:ac:9c:c4:1c:b4:08:f6:25:60:2a:41: 90:fd:9e:49:a9:ba:0a:a0:e2:2a:6e:cb:ec:68:00: ab:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.227.136.0/21 194.4.72.0-194.4.99.255 195.42.0.0/18 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39771 Signature Algorithm: sha256WithRSAEncryption 58:b3:0f:10:af:92:9b:a6:34:27:c0:1a:ea:54:c1:1b:f9:2d: 2e:ac:23:df:c7:ab:df:9f:5f:f2:e1:03:99:ee:a5:3e:34:ae: 2d:7e:2c:a2:29:47:77:eb:34:a5:60:a5:a5:2b:d6:99:bd:b1: 87:c1:58:2a:6c:4f:61:46:02:9a:5d:b8:9a:b1:4f:37:2d:be: a5:89:83:a3:c0:eb:d4:49:a4:3a:09:d9:52:36:1e:6c:e9:96: b3:bc:f1:55:9d:ab:38:74:fd:1c:07:df:65:4a:05:d3:11:b3: 96:e9:d2:1a:4e:c1:d0:19:2f:69:8a:05:ba:ff:d1:08:20:53: 87:f5:04:67:3e:39:ea:9f:ff:df:da:53:0b:a1:4b:39:3f:c9: e9:38:6d:b0:f1:ba:2d:87:a2:a3:50:3e:cb:5d:07:ca:ba:8f: ec:41:59:0b:73:fb:d2:ae:67:69:e9:83:24:0f:da:7e:a4:03: 54:d0:ee:b2:02:40:69:11:14:30:0d:da:33:23:9a:17:0c:c8: 25:7d:c0:37:49:b3:7c:35:41:64:46:93:5e:49:20:48:e0:66: 95:da:f8:2f:87:5f:67:48:a9:2d:c7:65:b1:46:ec:b5:e0:24: af:2e:4f:bb:6f:2a:95:d3:7a:9d:da:e1:0a:76:d6:c8:87:07: 42:34:0a:46 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt3WH8hvraq/yHroCz7M4HjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTNlOTcwZWQ2Mjc3MTM0M2EwOTZmZmIyZWZjMjZhYmI3ZWQ2OGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49gd3G1tojlbQH4VeolyVQLKFd5g mYWUa9l2CDehiPPVl9Xh2d8IlUXR4n3uePwkwfANKye6fjRAM7uFJ5lCa//vSCsy tsfhwyiLbvFKDCk+H2A/jDvCBTSWaec/jkLiCF0Lq+Y1sYZ78dXA8O7/cSwXEF7Z LVR3rn98h2J7+FJ3p2oPXcxAYdq2+l2R6Cme/VzuhFJnQE8zyGjGzzNMHo5wIJA8 n8k38SFZ4L4Ctm0wW7zoxMmHFCtaqDJDvMUyebpVRbw69kslG4uuzQMRaNQAdEYI 9q7vO+FiVZFB1ZFtBBWvrJzEHLQI9iVgKkGQ/Z5JqboKoOIqbsvsaACrPwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFBo+lw7WJ3E0Oglv+y78Jqu37WivMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiLzBmNzA5 Mi1lM2E0LTQ3MGItODVhNS1kNDg5MDk0YzY2MDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvMGY3MDky LWUzYTQtNDcwYi04NWE1LWQ0ODkwOTRjNjYwNC8xL0dqNlhEdFluY1RRNkNXXzdM dndtcTdmdGFLOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUF BwEHAQH/BCQwIjAgBAIAATAaAwQDweOIMAwDBAPCBEgDBALCBGADBAbDKgAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAJtbMA0GCSqGSIb3DQEBCwUAA4IBAQBYsw8Q r5KbpjQnwBrqVMEb+S0urCPfx6vfn1/y4QOZ7qU+NK4tfiyiKUd36zSlYKWlK9aZ vbGHwVgqbE9hRgKaXbiasU83Lb6liYOjwOvUSaQ6CdlSNh5s6ZazvPFVnas4dP0c B99lSgXTEbOW6dIaTsHQGS9pigW6/9EIIFOH9QRnPjnqn//f2lMLoUs5P8npOG2w 8both6KjUD7LXQfKuo/sQVkLc/vSrmdp6YMkD9p+pANU0O6yAkBpERQwDdozI5oX DMglfcA3SbN8NUFkRpNeSSBI4GaV2vgvh19nSKktx2WxRuy14CSvLk+7byqV03qd 2uEKdtbIhwdCNApG -----END CERTIFICATE-----Generated at Mon Jan 26 06:06:11 2026 by rpki-client