This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer File: Gspj3ySLet893QfowtPu3QLO-TM.cer (raw, json) Hash identifier: dphydvGo+aGdoHRKf3m2hWAh/JNhD7vf/ZIQ3a3HA28= Subject key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CF668F8B47324D1FBF2BF69FDC84B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6714 AS: 8246 IP: 78.133.128.0/17 IP: 85.219.128.0/17 IP: 89.174.0.0/16 IP: 94.42.0.0/16 IP: 157.25.0.0/16 IP: 195.94.192.0/19 IP: 217.8.160.0/19 IP: 217.153.0.0/16 IP: 2001:4190::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f6:68:f8:b4:73:24:d1:fb:f2:bf:69:fd:c8:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8a:ca:ac:8a:a4:18:18:cb:9a:2e:5a:65:ab: 21:bb:87:fe:94:90:50:a4:67:e1:7f:d2:dd:36:1f: ac:e6:a5:be:4a:4d:a4:26:be:00:33:85:5b:16:30: ab:6b:67:bd:d7:43:4a:16:0f:a1:56:81:e7:d5:39: 3e:c4:77:a7:83:b7:a7:55:70:f7:b7:c5:8f:2d:67: 92:9c:9c:03:f0:e7:95:45:18:05:ae:11:b8:68:6b: aa:93:49:bc:f4:e6:63:3b:29:0c:18:7c:6e:c0:28: 75:0d:6d:30:28:49:5d:36:c9:19:dc:c4:ed:0a:04: 84:bc:88:73:81:59:7c:c7:6a:c7:85:f8:72:9f:65: c2:c1:1d:89:98:3c:8a:98:cb:5d:d7:8b:c1:3e:92: e2:42:66:1b:3b:43:60:6b:2c:af:fb:40:b1:8e:3c: 41:c6:e9:a1:11:3e:fd:58:38:82:6a:d4:6b:ef:80: 19:ea:68:1a:05:09:99:4a:c7:c0:91:2b:b9:7c:98: 54:1f:9c:4c:59:b9:25:71:f2:40:03:93:96:d4:6c: 14:8d:a5:ee:10:e5:d7:e2:47:76:56:36:d1:ae:34: 07:b6:a1:73:3d:d0:8c:59:f3:9c:44:b3:66:f7:6a: f6:7f:db:18:dd:07:73:9a:a2:7b:c1:49:ad:f9:bc: d9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.133.128.0/17 85.219.128.0/17 89.174.0.0/16 94.42.0.0/16 157.25.0.0/16 195.94.192.0/19 217.8.160.0/19 217.153.0.0/16 IPv6: 2001:4190::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6714 8246 Signature Algorithm: sha256WithRSAEncryption b1:0a:e1:3f:7c:28:d0:f6:65:1b:ed:df:eb:4a:a1:b4:78:61: 0c:20:be:83:54:7f:97:12:eb:cc:96:aa:bf:89:8a:3d:13:9c: 52:0e:d9:93:3f:ed:a8:84:44:f9:1f:9f:2f:de:4e:59:d5:e8: d7:cc:2a:b3:d3:f9:65:0a:93:15:bf:a2:83:02:8a:4c:4f:63: 70:ba:e8:ec:37:5c:a5:54:94:ff:62:d9:a5:55:35:e8:78:12: c0:16:9c:96:35:dc:57:b8:21:3a:16:cd:49:cb:34:a5:34:46: 51:8c:84:e7:ee:c5:cc:c9:2a:26:2f:fe:e0:81:0a:9d:2e:50: 27:3b:e3:12:33:8f:f9:7e:85:89:b0:54:bd:7e:f0:11:a8:86: e7:b6:c1:56:93:71:7f:aa:85:00:7a:bd:a6:65:40:af:b6:ca: f5:32:0c:e5:ca:90:c3:d0:ca:6e:2d:e6:0c:25:3e:84:35:cb: 35:a3:26:65:32:b2:a9:27:e2:1c:20:88:7a:1c:3f:5e:05:a5: 74:5d:8f:48:23:45:c6:27:41:86:b3:05:4e:7d:3f:64:2a:57: 7d:1f:c5:c2:10:49:4d:4f:d8:a9:c6:76:a6:64:ff:b4:5b:0f: ab:7b:ff:51:a3:f4:20:0a:8a:d6:f9:e4:2b:84:44:f2:12:6c: ab:32:ee:c0 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt9XPZo+LRzJNH78r9p/chLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWNhNjNkZjI0OGI3YWRmM2RkZDA3ZThjMmQzZWVkZDAyY2VmOTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYrKrIqkGBjLmi5aZashu4f+lJBQ pGfhf9LdNh+s5qW+Sk2kJr4AM4VbFjCra2e910NKFg+hVoHn1Tk+xHeng7enVXD3 t8WPLWeSnJwD8OeVRRgFrhG4aGuqk0m89OZjOykMGHxuwCh1DW0wKEldNskZ3MTt CgSEvIhzgVl8x2rHhfhyn2XCwR2JmDyKmMtd14vBPpLiQmYbO0Ngayyv+0CxjjxB xumhET79WDiCatRr74AZ6mgaBQmZSsfAkSu5fJhUH5xMWbklcfJAA5OW1GwUjaXu EOXX4kd2VjbRrjQHtqFzPdCMWfOcRLNm92r2f9sY3QdzmqJ7wUmt+bzZDwIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFBrKY98ki3rfPd0H6MLT7t0CzvkzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlLzFmNjQ1 OC1kYzc1LTRhZGQtYWU3Mi05MWUzMTg0YmIwYWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvMWY2NDU4 LWRjNzUtNGFkZC1hZTcyLTkxZTMxODRiYjBhYi8xL0dzcGozeVNMZXQ4OTNRZm93 dFB1M1FMTy1UTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF BwEHAQH/BEUwQzAyBAIAATAsAwQHToWAAwQHVduAAwMAWa4DAwBeKgMDAJ0ZAwQF w17AAwQF2QigAwMA2ZkwDQQCAAIwBwMFACABQZAwHQYIKwYBBQUHAQgBAf8EDjAM oAowCAICGjoCAiA2MA0GCSqGSIb3DQEBCwUAA4IBAQCxCuE/fCjQ9mUb7d/rSqG0 eGEMIL6DVH+XEuvMlqq/iYo9E5xSDtmTP+2ohET5H58v3k5Z1ejXzCqz0/llCpMV v6KDAopMT2NwuujsN1ylVJT/YtmlVTXoeBLAFpyWNdxXuCE6Fs1JyzSlNEZRjITn 7sXMySomL/7ggQqdLlAnO+MSM4/5foWJsFS9fvARqIbntsFWk3F/qoUAer2mZUCv tsr1MgzlypDD0MpuLeYMJT6ENcs1oyZlMrKpJ+IcIIh6HD9eBaV0XY9II0XGJ0GG swVOfT9kKld9H8XCEElNT9ipxnamZP+0Ww+re/9Ro/QgCorW+eQrhETyEmyrMu7A -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:40 2026 by rpki-client