This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer File: Gq51omzPhiEiKBakccy3wNXnFuI.cer (raw, json) Hash identifier: I2UotH0Dpsndvm1O+ay/ZTNjFRHQgbcni1dNQgAJmRo= Subject key identifier: 1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B8B3A2E3E3376E86246F88639A7D1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211691 IP: 91.195.22.0/23 IP: 91.198.51.0/24 IP: 2001:67c:2fe4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:8b:3a:2e:3e:33:76:e8:62:46:f8:86:39:a7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4f:ae:15:0e:70:af:4f:c2:c9:95:40:5a:03: c6:30:4d:3d:26:be:07:24:67:97:2a:c1:53:65:6b: 0b:14:08:5f:e0:57:05:da:b1:a4:66:78:be:29:8e: 68:77:3f:94:72:92:88:e1:20:11:e6:32:36:8d:ab: 54:04:74:58:bd:ca:57:bb:46:67:9a:a2:95:be:4a: 3d:c7:45:87:97:a3:62:6a:06:63:6a:76:4d:4b:aa: 75:f7:34:cf:54:9f:4e:9e:75:94:fd:df:04:cc:4e: 18:9d:6d:0a:aa:3e:91:e6:45:2e:a2:a9:8b:33:37: 98:2c:67:ef:d8:18:bd:4a:ec:67:3d:9b:a4:6a:09: bf:91:10:f4:51:a4:78:e7:d4:c6:33:2d:fa:4a:fd: 94:f1:77:46:48:0e:8f:97:a4:ce:c4:da:89:dd:8c: 25:03:9e:71:0c:80:ee:40:08:05:3e:1e:32:91:4a: 05:14:91:0d:90:62:63:c2:4c:b3:a9:cf:81:0f:23: 32:be:79:35:98:25:f7:b8:01:66:d4:b7:dd:43:db: 0b:a2:92:92:20:5c:ff:b4:2e:8d:25:bb:c5:2b:21: e4:9a:6e:ec:65:d4:ad:c1:78:81:b3:23:de:68:a7: e5:b4:ef:34:9a:08:37:b7:92:8c:b6:80:54:a6:1a: 44:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.22.0/23 91.198.51.0/24 IPv6: 2001:67c:2fe4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211691 Signature Algorithm: sha256WithRSAEncryption 75:b1:23:e3:4c:75:25:34:0a:57:e5:83:54:76:6e:8e:8c:da: 43:00:9b:63:d1:c8:89:9c:93:59:c9:66:e7:e6:40:7c:4e:22: 3a:e7:ed:00:3e:7a:72:85:bd:9b:fa:85:92:2b:0a:14:db:00: b7:ec:58:82:d8:89:85:ec:0d:0b:ed:a4:63:c9:f2:f5:6d:c2: 02:53:b2:ec:62:12:94:5f:63:39:7d:5c:73:14:17:01:6b:b9: 35:de:c6:c4:26:92:21:0b:4c:10:4e:61:fd:5b:77:a4:bf:ac: 13:3a:2f:3b:7c:7f:f9:31:d5:b1:bf:1a:c9:87:78:83:fd:f0: 44:dc:aa:1d:20:92:73:1f:fd:13:0d:09:c5:98:26:22:c6:95: c2:76:1d:bf:07:2e:4c:55:35:7c:d0:e8:4a:72:38:05:53:1e: 3f:a4:0b:8a:43:68:76:47:71:fb:df:a2:a5:83:0c:dd:64:ec: f5:fb:bf:37:f2:98:a7:27:55:aa:c2:02:da:24:13:81:57:f2: cc:a4:5f:92:8f:b4:6f:55:3b:f4:68:70:4a:bd:49:32:96:4f: 61:c3:61:b6:a0:5e:d3:7e:4b:83:68:d3:bc:c4:c6:30:50:ca: f0:dd:02:10:cb:22:01:80:11:3c:70:17:97:0a:cf:7f:91:19: 0f:c7:5d:b0 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt9W4s6Lj4zduhiRviGOafRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWFlNzVhMjZjY2Y4NjIxMjIyODE2YTQ3MWNjYjdjMGQ1ZTcxNmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk+uFQ5wr0/CyZVAWgPGME09Jr4H JGeXKsFTZWsLFAhf4FcF2rGkZni+KY5odz+UcpKI4SAR5jI2jatUBHRYvcpXu0Zn mqKVvko9x0WHl6NiagZjanZNS6p19zTPVJ9OnnWU/d8EzE4YnW0Kqj6R5kUuoqmL MzeYLGfv2Bi9SuxnPZukagm/kRD0UaR459TGMy36Sv2U8XdGSA6Pl6TOxNqJ3Ywl A55xDIDuQAgFPh4ykUoFFJENkGJjwkyzqc+BDyMyvnk1mCX3uAFm1LfdQ9sLopKS IFz/tC6NJbvFKyHkmm7sZdStwXiBsyPeaKfltO80mgg3t5KMtoBUphpEwwIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFBqudaJsz4YhIigWpHHMt8DV5xbiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjLzhlNzA1 NC1mZDUwLTRmOTEtOWNjNy0yNjRmMGNjNWZmODAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvOGU3MDU0 LWZkNTAtNGY5MS05Y2M3LTI2NGYwY2M1ZmY4MC8xL0dxNTFvbXpQaGlFaUtCYWtj Y3kzd05YbkZ1SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQBW8MWAwQAW8YzMA8EAgACMAkDBwAgAQZ8L+Qw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAzrrMA0GCSqGSIb3DQEBCwUAA4IBAQB1 sSPjTHUlNApX5YNUdm6OjNpDAJtj0ciJnJNZyWbn5kB8TiI65+0APnpyhb2b+oWS KwoU2wC37FiC2ImF7A0L7aRjyfL1bcICU7LsYhKUX2M5fVxzFBcBa7k13sbEJpIh C0wQTmH9W3ekv6wTOi87fH/5MdWxvxrJh3iD/fBE3KodIJJzH/0TDQnFmCYixpXC dh2/By5MVTV80OhKcjgFUx4/pAuKQ2h2R3H736KlgwzdZOz1+7838pinJ1WqwgLa JBOBV/LMpF+Sj7RvVTv0aHBKvUkylk9hw2G2oF7TfkuDaNO8xMYwUMrw3QIQyyIB gBE8cBeXCs9/kRkPx12w -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:29 2026 by rpki-client