This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer (raw, json) Hash identifier: yJTaqRTeN8txrZx6oU0E4XVoPb1f8l6LTBqhb4vXY18= Subject key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA703C251089B87A7B4EC8E36A91947 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204171 IP: 2.59.180.0/22 IP: 45.156.144.0/22 IP: 185.103.120.0/22 IP: 2a06:2bc0::/29 IP: 2a09:f740::/29 IP: 2a0f:2280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:03:c2:51:08:9b:87:a7:b4:ec:8e:36:a9:19:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d5:ba:da:7f:53:76:e0:4d:d5:ed:80:29:e0: 4b:e6:de:34:2a:92:d4:f2:0e:5e:82:42:38:0b:48: e2:ba:06:bf:cb:7d:dc:cc:b6:77:f8:37:52:17:19: 1f:2e:07:75:ca:a5:fa:5e:61:72:a3:98:0d:96:42: f9:d6:a4:5e:70:6f:29:fe:17:52:2f:8e:bd:4d:57: e1:72:a9:2d:3b:5d:90:d9:fe:ae:6b:1d:33:0b:2d: 49:83:9d:68:80:46:da:d3:f4:a5:d1:b5:15:ae:3d: 54:8a:74:ff:34:09:d7:ef:f2:de:9f:44:c9:11:7d: 9c:2c:70:98:73:99:4a:8d:ec:87:8c:a9:9f:6d:f5: 32:20:19:ce:48:21:7e:99:62:97:60:06:92:c4:9c: 86:56:8e:37:ba:db:6e:c3:ce:d5:7a:cc:10:48:f1: 66:3b:13:1b:60:9f:dd:3d:ec:e3:75:ee:a9:6b:94: d3:63:68:b5:2d:9b:b0:7c:dc:e7:67:66:f9:9a:c5: 20:e7:a4:5f:7a:61:de:7b:f1:02:1a:d0:33:4d:7a: 9b:3e:b5:4d:35:96:34:84:f2:d9:42:6b:c1:63:ae: 2c:38:28:0d:4e:48:9e:01:f7:bd:af:4a:a1:2b:34: 5a:fa:7f:80:03:22:4e:79:e0:8e:19:6a:35:8d:2c: 5b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.180.0/22 45.156.144.0/22 185.103.120.0/22 IPv6: 2a06:2bc0::/29 2a09:f740::/29 2a0f:2280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204171 Signature Algorithm: sha256WithRSAEncryption 1a:ed:b7:3f:e1:6a:a7:16:84:17:04:9a:39:9d:50:78:57:98: fa:7b:2d:6a:95:64:e6:08:8d:e4:2e:0e:f3:7b:09:3a:43:5f: da:f3:02:87:cb:03:05:f5:62:fd:5f:f9:95:ed:a6:b3:86:5f: 8d:bc:45:2d:0e:98:5e:a3:46:e9:38:01:97:50:c7:58:5f:54: 7d:2c:29:6b:69:63:71:c2:7f:ee:d2:82:08:44:8d:f3:68:8f: 1f:a2:97:b9:55:3c:c0:e3:68:91:db:dd:5e:d5:45:6f:b3:a1: e6:62:2b:9b:59:e5:da:76:b4:3b:6b:4f:bd:46:fb:8d:08:5e: 52:6e:c2:0c:95:9b:8b:a7:20:34:26:0b:35:8a:91:48:42:9c: cd:85:e8:6d:6e:fb:25:fe:53:9e:6f:e5:2a:43:21:57:5d:4b: e9:6a:62:7e:2a:e9:42:a7:89:4a:e8:d9:a8:18:61:c2:f7:1b: 59:96:dd:79:b4:e2:fc:ec:c5:ce:5c:4d:79:d2:a1:ad:8a:6a: 5c:21:8e:8d:32:b8:74:5e:78:3d:14:1c:32:40:81:8e:0c:4d: 12:d5:2b:79:d5:da:fc:87:95:cc:f4:ea:bf:a9:d1:22:82:29: bf:73:d0:47:bf:a5:1e:86:fc:45:c2:a8:56:1f:82:48:bc:07: 33:82:69:8e -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt+pwPCUQibh6e07I42qRlHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTdmMDM2ZTI1OTIzOTFmYjQ1YTNkZDMzY2FmMGIwNzk1Njk3M2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtW62n9TduBN1e2AKeBL5t40KpLU 8g5egkI4C0jiuga/y33czLZ3+DdSFxkfLgd1yqX6XmFyo5gNlkL51qRecG8p/hdS L469TVfhcqktO12Q2f6uax0zCy1Jg51ogEba0/Sl0bUVrj1UinT/NAnX7/Len0TJ EX2cLHCYc5lKjeyHjKmfbfUyIBnOSCF+mWKXYAaSxJyGVo43uttuw87VeswQSPFm OxMbYJ/dPezjde6pa5TTY2i1LZuwfNznZ2b5msUg56RfemHee/ECGtAzTXqbPrVN NZY0hPLZQmvBY64sOCgNTkieAfe9r0qhKzRa+n+AAyJOeeCOGWo1jSxbCwIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFBp/A24lkjkftFo90zyvCweVaXPPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkLzI0YmUx YS0xNmRhLTQ4MWMtOGJjYi0zNDBkNjI1YzZkYmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvMjRiZTFh LTE2ZGEtNDgxYy04YmNiLTM0MGQ2MjVjNmRiYS8xL0duOERiaVdTT1ItMFdqM1RQ SzhMQjVWcGM4OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAYBAIAATASAwQCAju0AwQCLZyQAwQCuWd4MBsEAgACMBUDBQMq BivAAwUDKgn3QAMFAyoPIoAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAx2LMA0G CSqGSIb3DQEBCwUAA4IBAQAa7bc/4WqnFoQXBJo5nVB4V5j6ey1qlWTmCI3kLg7z ewk6Q1/a8wKHywMF9WL9X/mV7aazhl+NvEUtDpheo0bpOAGXUMdYX1R9LClraWNx wn/u0oIIRI3zaI8fope5VTzA42iR291e1UVvs6HmYiubWeXadrQ7a0+9RvuNCF5S bsIMlZuLpyA0Jgs1ipFIQpzNhehtbvsl/lOeb+UqQyFXXUvpamJ+KulCp4lK6Nmo GGHC9xtZlt15tOL87MXOXE150qGtimpcIY6NMrh0Xng9FBwyQIGODE0S1St51dr8 h5XM9Oq/qdEigim/c9BHv6UehvxFwqhWH4JIvAczgmmO -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:16 2026 by rpki-client