This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer File: Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer (raw, json) Hash identifier: lkessAoSDkQMSiKq4zznhChbrpzhx5/31NQX8feVWco= Subject key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC88453DD532C80A560354EED7F838B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50864 IP: 91.220.235.0/24 IP: 195.162.88.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:84:53:dd:53:2c:80:a5:60:35:4e:ed:7f:83:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a7cafde3135a26bdd4179029eebf7414e9643af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:06:9b:d6:d7:9f:d7:b1:96:df:5f:02:cb:d8: 94:ec:ec:c1:a5:d7:f9:fa:89:ea:78:25:e4:bc:19: 2d:e2:bd:79:9b:32:0c:e2:59:fb:3c:fc:db:52:1a: bf:86:a9:b2:c0:a9:dd:f5:f1:0f:ac:fa:df:c9:06: 5f:9a:2c:9a:60:46:c3:2a:2a:6b:96:b4:07:36:04: 5a:1a:0c:bc:13:4b:f6:dd:a0:a2:f0:1e:7c:fd:5b: cd:bc:51:5a:aa:79:6c:0f:6d:e0:e1:b9:18:05:bf: ea:7f:3e:a5:17:17:d2:48:75:79:48:15:c5:99:d1: 06:df:2b:3f:d7:1a:82:6d:1a:e8:3b:8b:6c:62:a4: 7c:f0:be:d6:3e:be:91:8f:5b:b6:ed:28:32:74:50: 93:c8:d3:0a:82:27:b2:ab:87:0e:9b:0e:38:77:d0: 84:2d:3b:30:a1:9e:8b:ba:a4:25:5a:02:d6:e7:05: 72:a3:b1:d9:6b:4a:84:c0:af:0d:99:cd:d2:55:e0: 42:07:9b:be:6e:9d:18:f1:ec:7a:3f:af:05:f9:a0: 94:fa:0d:e6:3d:6c:0b:c0:a7:f7:76:aa:04:ce:4b: 70:5b:fe:e7:38:38:56:4e:57:fe:c9:f9:24:cf:8d: f6:e1:f3:5c:97:50:d5:a5:88:85:be:35:91:0c:35: b1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.235.0/24 195.162.88.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50864 Signature Algorithm: sha256WithRSAEncryption 18:ac:71:24:ab:c3:92:23:e4:07:28:30:77:39:cf:91:c2:0c: f1:17:98:88:0f:5e:38:d9:81:1d:f2:e5:f8:52:ff:60:55:91: ad:7e:3e:92:2b:af:c8:cc:44:9d:8e:ae:30:74:2d:60:0c:f6: b2:0f:12:e2:96:91:2c:8e:7b:aa:ff:48:5b:11:8a:ee:62:53: ef:3b:72:7d:37:b5:9b:68:72:ce:cd:c7:4b:7d:f3:dd:fe:26: 2d:05:4c:cd:ed:b9:f7:d3:56:01:49:99:70:3c:f7:ec:f6:df: 87:2f:9e:12:8a:13:d8:57:43:f5:78:6c:c3:06:66:e1:92:e2: 1c:e0:49:26:af:e3:18:3c:8a:38:cc:7f:c4:48:87:e8:c8:1f: 7c:8e:2a:7d:52:23:70:b2:1e:88:b6:c8:f4:ba:e3:31:12:27: fc:f6:3b:29:73:9e:fd:87:66:1a:92:66:a1:52:53:16:0c:a6: fa:94:e8:1f:c1:65:f9:f5:2c:90:13:3c:02:18:9f:a2:48:08: 51:6b:44:dc:69:6d:99:5f:2b:c0:e8:f2:61:84:62:67:59:2b: cc:e3:fa:bf:14:be:98:61:0c:a4:c3:68:ad:3d:58:21:5e:ef: d5:eb:db:04:94:10:a4:cf:e6:9b:4e:37:b6:91:52:ea:5b:7c: 19:28:f3:2d -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt6yIRT3VMsgKVgNU7tf4OLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTdjYWZkZTMxMzVhMjZiZGQ0MTc5MDI5ZWViZjc0MTRlOTY0M2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQab1tef17GW318Cy9iU7OzBpdf5 +onqeCXkvBkt4r15mzIM4ln7PPzbUhq/hqmywKnd9fEPrPrfyQZfmiyaYEbDKipr lrQHNgRaGgy8E0v23aCi8B58/VvNvFFaqnlsD23g4bkYBb/qfz6lFxfSSHV5SBXF mdEG3ys/1xqCbRroO4tsYqR88L7WPr6Rj1u27SgydFCTyNMKgieyq4cOmw44d9CE LTswoZ6LuqQlWgLW5wVyo7HZa0qEwK8Nmc3SVeBCB5u+bp0Y8ex6P68F+aCU+g3m PWwLwKf3dqoEzktwW/7nODhWTlf+yfkkz4324fNcl1DVpYiFvjWRDDWx1QIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFBp8r94xNaJr3UF5Ap7r90FOlkOvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzLzYyYWZi Yi1iOGY4LTRiMTItOTE5My0xYzUxMDdjYWIzNTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvNjJhZmJi LWI4ZjgtNGIxMi05MTkzLTFjNTEwN2NhYjM1My8xL0dueXYzakUxb212ZFFYa0Nu dXYzUVU2V1E2OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW9zrAwQCw6JYMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDGsDANBgkqhkiG9w0BAQsFAAOCAQEAGKxxJKvDkiPkBygwdznPkcIM 8ReYiA9eONmBHfLl+FL/YFWRrX4+kiuvyMxEnY6uMHQtYAz2sg8S4paRLI57qv9I WxGK7mJT7ztyfTe1m2hyzs3HS33z3f4mLQVMze2599NWAUmZcDz37Pbfhy+eEooT 2FdD9XhswwZm4ZLiHOBJJq/jGDyKOMx/xEiH6MgffI4qfVIjcLIeiLbI9LrjMRIn /PY7KXOe/YdmGpJmoVJTFgym+pToH8Fl+fUskBM8AhifokgIUWtE3GltmV8rwOjy YYRiZ1krzOP6vxS+mGEMpMNorT1YIV7v1evbBJQQpM/mm043tpFS6lt8GSjzLQ== -----END CERTIFICATE-----Generated at Tue Jan 27 04:19:15 2026 by rpki-client