This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer File: GpFU4cVXiw_virt3n4EX5k6ITRg.cer (raw, json) Hash identifier: 9/6H+dZbc0ntn7KH5/rG72FtsvlQGfWQtvaCd53R/Uo= Subject key identifier: 1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38971B64FB789A2A95F7115E09A876 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.176.98.0/24 IP: 2a12:f3c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:97:1b:64:fb:78:9a:2a:95:f7:11:5e:09:a8:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a9154e1c5578b0fef8abb779f8117e64e884d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8a:fc:93:8b:b3:04:c7:64:fa:14:30:e1:e7: 60:70:d5:de:ae:ee:2e:97:a6:34:2c:05:f0:8c:41: 41:1d:86:7b:b6:3b:11:a7:65:ce:c2:85:d8:39:0f: 9b:2b:b9:d6:74:b7:c5:6f:b6:ea:ad:a8:c8:77:1f: 62:81:0d:fd:12:94:3e:63:33:39:5a:ea:c5:93:9f: fc:84:44:3d:ee:5b:c9:a5:1b:b5:a0:e2:8b:96:7c: fd:c2:ca:2e:1a:52:ed:3e:85:4a:d7:8f:b5:8a:ad: d2:f7:ab:81:2c:69:4d:7d:a2:32:c9:19:3e:60:86: 36:39:ff:ab:43:d5:3f:47:ee:5d:38:f7:4e:47:66: 14:c4:b9:bd:02:ac:b2:13:8b:b8:9a:71:86:17:e7: 42:73:63:6f:bd:4e:bf:be:2f:34:1e:51:de:49:89: cf:37:0a:75:19:2d:b3:10:55:2d:98:a7:86:cc:12: a8:b1:cd:88:57:69:45:9d:7e:a0:28:55:44:30:7b: cd:35:d1:14:14:97:c6:be:9a:aa:b7:f9:c3:8c:be: 24:69:30:41:75:bc:45:f1:f1:0e:c9:ed:33:80:2e: b2:82:98:04:9c:2e:00:75:f0:c8:5e:b8:f1:df:92: 4c:9b:0f:aa:89:9d:44:d0:19:89:a6:dc:40:c4:49: 0e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.98.0/24 IPv6: 2a12:f3c0::/29 Signature Algorithm: sha256WithRSAEncryption 8c:67:4d:10:4b:6e:d4:36:b1:8b:49:fd:25:26:10:bf:e6:51: b0:f4:99:5b:f5:b1:95:07:f7:78:e0:c9:b4:3e:3e:3e:84:a3: 8c:7e:17:29:88:b7:14:da:eb:10:0c:3a:47:88:25:3b:86:8f: e5:63:30:a0:ea:55:fd:c7:8f:2b:cd:70:0a:53:42:2a:d0:c5: 1b:e4:15:bb:17:2e:9c:cd:51:9a:80:5b:f6:49:34:c6:a0:ff: 9e:0d:1a:f0:0c:32:d4:1d:23:dd:b7:1b:08:7e:81:ea:cf:4a: 7e:95:29:ab:37:85:47:20:ba:6b:d2:8b:86:f3:22:15:a7:2d: d4:5d:29:2f:fd:7c:fc:5d:a3:61:bf:90:0e:b7:db:a4:b4:ed: 81:4b:5f:21:e1:d8:c8:d4:ec:85:04:80:11:47:97:7e:dd:45: 2e:01:f6:fb:24:33:1d:ec:a9:5d:4c:f8:ae:ce:85:3d:63:bd: d4:2c:b6:73:69:7a:6a:eb:60:96:30:22:c5:43:04:12:38:95: 9e:df:23:a7:b6:aa:a1:d3:65:7f:96:65:5a:55:b0:1d:b9:3f: d9:9d:cd:57:2c:85:bb:45:98:0d:36:c0:eb:93:61:ee:c9:41: 62:60:01:90:66:f4:5b:4f:7b:5f:e3:ab:d3:22:c4:2d:1f:d3: 39:16:87:00 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+OJcbZPt4miqV9xFeCah2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTkxNTRlMWM1NTc4YjBmZWY4YWJiNzc5ZjgxMTdlNjRlODg0ZDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAror8k4uzBMdk+hQw4edgcNXeru4u l6Y0LAXwjEFBHYZ7tjsRp2XOwoXYOQ+bK7nWdLfFb7bqrajIdx9igQ39EpQ+YzM5 WurFk5/8hEQ97lvJpRu1oOKLlnz9wsouGlLtPoVK14+1iq3S96uBLGlNfaIyyRk+ YIY2Of+rQ9U/R+5dOPdOR2YUxLm9AqyyE4u4mnGGF+dCc2NvvU6/vi80HlHeSYnP Nwp1GS2zEFUtmKeGzBKosc2IV2lFnX6gKFVEMHvNNdEUFJfGvpqqt/nDjL4kaTBB dbxF8fEOye0zgC6ygpgEnC4AdfDIXrjx35JMmw+qiZ1E0BmJptxAxEkOfwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFBqRVOHFV4sP74q7d5+BF+ZOiE0YMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhLzU0YmFj OC1iZjUwLTQ0ZDItYWQ0Mi0zODhkOGFkMmE1YmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvNTRiYWM4 LWJmNTAtNDRkMi1hZDQyLTM4OGQ4YWQyYTViYi8xL0dwRlU0Y1ZYaXdfdmlydDNu NEVYNWs2SVRSZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwbBiMA0EAgACMAcDBQMqEvPAMA0GCSqGSIb3 DQEBCwUAA4IBAQCMZ00QS27UNrGLSf0lJhC/5lGw9Jlb9bGVB/d44Mm0Pj4+hKOM fhcpiLcU2usQDDpHiCU7ho/lYzCg6lX9x48rzXAKU0Iq0MUb5BW7Fy6czVGagFv2 STTGoP+eDRrwDDLUHSPdtxsIfoHqz0p+lSmrN4VHILpr0ouG8yIVpy3UXSkv/Xz8 XaNhv5AOt9uktO2BS18h4djI1OyFBIARR5d+3UUuAfb7JDMd7KldTPiuzoU9Y73U LLZzaXpq62CWMCLFQwQSOJWe3yOntqqh02V/lmVaVbAduT/Znc1XLIW7RZgNNsDr k2HuyUFiYAGQZvRbT3tf46vTIsQtH9M5FocA -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:24 2026 by rpki-client