This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer File: GsvdANJ7iovvyGbK83jxkCdoR2k.cer (raw, json) Hash identifier: wsA1jtl5T4m+H4yIUFRimy+/vyKIMsm1nNgLFUUn2ww= Subject key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1243BD0AB918B95C5BD76A1B386303 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35717 IP: 185.12.48.0/22 IP: 185.114.4.0/22 IP: 185.128.236.0/22 IP: 185.129.44.0/22 IP: 185.162.80.0/22 IP: 185.199.40.0/22 IP: 185.200.192.0/22 IP: 193.36.45.0/24 IP: 195.137.184.0/24 IP: 195.200.195.0/24 IP: 2a03:7fc0::/32 IP: 2a06:6ac0::/29 IP: 2a06:d0c0::/29 IP: 2a06:d100::/29 IP: 2a07:c900::/29 IP: 2a0a:9540::/29 IP: 2a0a:b740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:43:bd:0a:b9:18:b9:5c:5b:d7:6a:1b:38:63:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1acbdd00d27b8a8befc866caf378f19027684769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7c:8f:d2:e7:d5:27:32:d7:d6:2c:fd:76:6c: 6b:18:58:a1:f8:ee:9b:9e:6a:a4:6c:e2:58:db:9a: ba:bf:53:3d:c6:5a:cb:fb:97:1a:7e:0d:9a:ba:47: d2:e6:85:8c:db:50:8a:ee:6e:f0:b9:ff:c2:dd:f8: 8e:00:e1:7e:b0:64:9e:8e:65:36:aa:96:bc:c9:da: 51:7d:25:53:37:a8:89:32:9b:c0:83:8e:06:0b:da: df:87:2b:0e:27:85:69:db:1f:1c:7b:48:dd:75:44: 0b:0b:89:59:11:98:b0:db:75:91:a4:c1:8f:09:b2: 58:64:5d:c0:df:54:5f:ac:b7:bc:48:cd:9f:d5:5d: b7:d0:3b:00:74:99:c1:92:84:26:26:a5:af:f6:31: e4:a1:91:3b:54:92:f5:49:d9:e5:df:db:40:00:b2: 6a:75:04:72:5e:ca:2a:0d:d0:35:0b:71:e8:72:53: 3d:eb:2e:8a:fb:05:e2:72:e4:6f:d9:4f:f2:3d:05: 76:24:ff:c8:78:ad:a2:f7:0a:bb:81:9d:b6:b2:2c: c3:09:e1:82:be:2d:33:a7:99:92:b0:7d:b3:36:d4: 2a:d9:44:45:f3:f7:69:7c:88:26:eb:2d:b2:3b:a0: f4:df:61:a7:d4:eb:6a:a7:4d:f9:28:86:e0:42:b9: 3c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.12.48.0/22 185.114.4.0/22 185.128.236.0/22 185.129.44.0/22 185.162.80.0/22 185.199.40.0/22 185.200.192.0/22 193.36.45.0/24 195.137.184.0/24 195.200.195.0/24 IPv6: 2a03:7fc0::/32 2a06:6ac0::/29 2a06:d0c0::/29 2a06:d100::/29 2a07:c900::/29 2a0a:9540::/29 2a0a:b740::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35717 Signature Algorithm: sha256WithRSAEncryption 4a:90:b9:0d:20:67:7c:f4:7b:0e:fc:9b:ad:82:e9:38:4f:84: 6f:d5:85:6d:22:96:d6:ca:c2:e0:c6:cc:f9:4d:61:70:ed:f1: ea:7c:55:9a:f9:0c:ca:37:60:7a:e6:d1:a1:44:23:ad:42:e0: c9:74:25:bc:ba:e2:4f:ed:9b:43:0d:84:54:7b:97:2c:fe:17: 6e:c2:05:4a:b8:19:c9:8a:5f:cc:c9:af:0c:e1:3a:67:62:55: e4:86:16:cc:98:e6:85:e8:6e:1a:79:46:d5:e9:10:60:bc:f9: a7:a3:8a:5d:83:ec:e5:23:2b:0c:c8:73:d7:20:5b:a3:8e:19: 51:53:36:ce:15:68:d5:e1:97:88:bd:9e:1d:76:cd:07:14:9a: c8:ec:18:39:06:e5:b9:63:41:b1:26:4c:23:4d:e3:f6:dd:1c: 34:ff:f1:81:5b:a8:e3:81:33:87:ba:27:23:19:42:be:91:6c: 24:e2:b4:9a:87:ad:2b:6f:28:79:80:1f:d1:c7:17:43:7d:ae: 59:12:56:3a:93:6d:0d:c4:53:cd:80:09:b6:46:a9:60:4b:b3: d4:88:e0:81:68:a1:2c:9c:10:ba:d4:f2:fc:ac:4b:ac:9d:44: e3:f7:53:92:17:f2:ac:d3:69:d6:6a:00:73:3a:8c:90:ee:50: 85:da:8e:1d -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgISAZt8EkO9CrkYuVxb12obOGMDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWNiZGQwMGQyN2I4YThiZWZjODY2Y2FmMzc4ZjE5MDI3Njg0NzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3yP0ufVJzLX1iz9dmxrGFih+O6b nmqkbOJY25q6v1M9xlrL+5cafg2aukfS5oWM21CK7m7wuf/C3fiOAOF+sGSejmU2 qpa8ydpRfSVTN6iJMpvAg44GC9rfhysOJ4Vp2x8ce0jddUQLC4lZEZiw23WRpMGP CbJYZF3A31RfrLe8SM2f1V230DsAdJnBkoQmJqWv9jHkoZE7VJL1Sdnl39tAALJq dQRyXsoqDdA1C3HoclM96y6K+wXicuRv2U/yPQV2JP/IeK2i9wq7gZ22sizDCeGC vi0zp5mSsH2zNtQq2URF8/dpfIgm6y2yO6D032Gn1Otqp035KIbgQrk86wIDAQAB o4IDEDCCAwwwHQYDVR0OBBYEFBrL3QDSe4qL78hmyvN48ZAnaEdpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0L2RiNDIw NS1kNTdjLTRjYTItODg5NC05Zjk1MzZiYjJjMzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvZGI0MjA1 LWQ1N2MtNGNhMi04ODk0LTlmOTUzNmJiMmMzNy8xL0dzdmRBTko3aW92dnlHYks4 M2p4a0Nkb1Iyay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGOBggrBgEF BQcBBwEB/wR/MH0wQgQCAAEwPAMEArkMMAMEArlyBAMEArmA7AMEArmBLAMEArmi UAMEArnHKAMEArnIwAMEAMEkLQMEAMOJuAMEAMPIwzA3BAIAAjAxAwUAKgN/wAMF AyoGasADBQMqBtDAAwUDKgbRAAMFAyoHyQADBQMqCpVAAwUDKgq3QDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAi4UwDQYJKoZIhvcNAQELBQADggEBAEqQuQ0gZ3z0 ew78m62C6ThPhG/VhW0iltbKwuDGzPlNYXDt8ep8VZr5DMo3YHrm0aFEI61C4Ml0 Jby64k/tm0MNhFR7lyz+F27CBUq4GcmKX8zJrwzhOmdiVeSGFsyY5oXobhp5RtXp EGC8+aejil2D7OUjKwzIc9cgW6OOGVFTNs4VaNXhl4i9nh12zQcUmsjsGDkG5blj QbEmTCNN4/bdHDT/8YFbqOOBM4e6JyMZQr6RbCTitJqHrStvKHmAH9HHF0N9rlkS VjqTbQ3EU82ACbZGqWBLs9SI4IFooSycELrU8vysS6ydROP3U5IX8qzTadZqAHM6 jJDuUIXajh0= -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:50 2026 by rpki-client