This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer File: Grj4--pJuvWfzsIuSKn-IVfYZIM.cer (raw, json) Hash identifier: GxHyNkT+CXvVRPQcfDSsMlTQlUu9GZIqW1I+QoLO5gM= Subject key identifier: 1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910E6FDAAF2FA6F9C47397AD77D044A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.104.169.0/24 IP: 195.200.230.0/23 IP: 2001:67c:b4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e6:fd:aa:f2:fa:6f:9c:47:39:7a:d7:7d:04:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b5:10:1c:0d:2e:3b:9a:00:39:8a:ac:c1:c8: 60:c5:13:cb:b5:5b:dd:be:2b:f7:98:7d:1a:e0:37: 51:42:ea:59:c5:f2:39:f8:94:6b:3e:1e:eb:73:82: b6:1a:07:80:4b:15:d5:33:10:cd:f2:0a:df:06:16: b4:5b:b4:af:11:21:74:e7:0f:07:2a:d1:9c:50:77: c8:63:ed:ca:26:cc:6e:5b:07:94:1d:c3:14:87:a6: a3:49:12:18:98:2b:0c:a9:a7:d5:ee:01:e1:4f:f4: e1:a0:31:f6:9a:51:e4:5d:20:5b:ae:c6:15:e9:19: 88:d9:6c:2d:1c:15:0e:7e:d7:f4:c3:b7:e1:4b:59: 18:29:6c:1f:a1:04:43:e2:44:f6:7d:c9:91:ed:93: a1:63:8a:5c:e8:75:4e:08:ee:91:27:40:51:c6:57: 6c:ea:4e:58:5b:bc:df:3f:11:3f:8e:b1:84:c4:f4: 04:f4:36:53:a0:bd:bc:59:40:6f:76:4e:89:5a:5a: 49:6a:79:e3:9d:62:10:06:6b:77:0e:1e:27:b1:8d: 5d:ba:a1:86:73:12:96:df:b3:70:85:2c:70:78:2e: 61:ee:48:60:c8:b1:fc:bf:b7:2b:ce:36:29:10:9c: 4c:5a:61:4b:9f:3e:1b:f0:ff:b4:8f:9a:6e:9d:8e: 90:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.169.0/24 195.200.230.0/23 IPv6: 2001:67c:b4::/48 Signature Algorithm: sha256WithRSAEncryption 73:fd:60:31:f2:9d:a1:41:79:20:54:30:fd:7c:97:38:f0:81: 87:36:c7:90:bc:42:07:29:ea:56:19:62:e8:3b:6a:d9:67:31: 1d:ca:92:99:f1:e6:96:d8:89:99:8b:89:12:26:25:59:a4:a4: 77:89:40:d7:80:6c:04:e6:3c:0a:b4:ef:98:8c:a4:72:fd:3a: 3a:70:37:bb:68:68:b1:72:bb:43:28:c3:34:e2:a9:e0:39:2b: b9:83:87:c0:4f:1b:87:e2:0d:f4:62:c6:81:26:6b:5f:bd:ec: 54:8c:c4:7c:ca:66:33:58:a0:1d:3e:bd:e0:9d:7f:40:32:72: 70:7b:31:24:28:76:e9:f0:c6:bb:e4:5c:bc:ef:e4:a8:bf:4c: 63:29:13:d8:4d:27:1a:64:3b:3b:d5:12:38:3c:e3:08:c3:be: bc:5e:70:10:1b:19:32:fe:3c:92:2b:1d:50:f5:79:db:e9:94: c4:5c:a0:5c:8d:e8:1b:06:25:ad:c7:f6:60:2b:f8:fc:9b:1d: cc:56:c1:95:6d:82:6b:73:16:b1:c0:9d:f4:bb:13:37:bb:c2: cf:fc:16:df:53:fc:c2:57:d7:d4:c4:e1:09:7e:8d:3d:1b:7a: cd:fd:f5:f3:17:28:18:ee:a6:31:a7:ec:1f:be:13:6a:1c:01: 0d:49:02:d5 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt5EOb9qvL6b5xHOXrXfQRKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWI4ZjhmYmVhNDliYWY1OWZjZWMyMmU0OGE5ZmUyMTU3ZDg2NDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLUQHA0uO5oAOYqswchgxRPLtVvd viv3mH0a4DdRQupZxfI5+JRrPh7rc4K2GgeASxXVMxDN8grfBha0W7SvESF05w8H KtGcUHfIY+3KJsxuWweUHcMUh6ajSRIYmCsMqafV7gHhT/ThoDH2mlHkXSBbrsYV 6RmI2WwtHBUOftf0w7fhS1kYKWwfoQRD4kT2fcmR7ZOhY4pc6HVOCO6RJ0BRxlds 6k5YW7zfPxE/jrGExPQE9DZToL28WUBvdk6JWlpJannjnWIQBmt3Dh4nsY1duqGG cxKW37NwhSxweC5h7khgyLH8v7crzjYpEJxMWmFLnz4b8P+0j5punY6Q+wIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFBq4+PvqSbr1n87CLkip/iFX2GSDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxL2VjYzEw Mi1hZDdlLTQxMDEtYTcyNy01ODAxOGEwMzMzMGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvZWNjMTAy LWFkN2UtNDEwMS1hNzI3LTU4MDE4YTAzMzMwYS8xL0dyajQtLXBKdXZXZnpzSXVT S24tSVZmWVpJTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQAwWipAwQBw8jmMA8EAgACMAkDBwAgAQZ8ALQw DQYJKoZIhvcNAQELBQADggEBAHP9YDHynaFBeSBUMP18lzjwgYc2x5C8Qgcp6lYZ Yug7atlnMR3Kkpnx5pbYiZmLiRImJVmkpHeJQNeAbATmPAq075iMpHL9OjpwN7to aLFyu0MowzTiqeA5K7mDh8BPG4fiDfRixoEma1+97FSMxHzKZjNYoB0+veCdf0Ay cnB7MSQodunwxrvkXLzv5Ki/TGMpE9hNJxpkOzvVEjg84wjDvrxecBAbGTL+PJIr HVD1edvplMRcoFyN6BsGJa3H9mAr+PybHcxWwZVtgmtzFrHAnfS7Eze7ws/8Ft9T /MJX19TE4Ql+jT0bes399fMXKBjupjGn7B++E2ocAQ1JAtU= -----END CERTIFICATE-----Generated at Sun Jan 25 07:38:01 2026 by rpki-client