This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer File: GtoiXLfylBbnU0aV-_shdi_uk8g.cer (raw, json) Hash identifier: 5+wdjBYwtX4Yyw/py5CZ76kNm/WCticFGHNa7FRxy9s= Subject key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F13AF35046891D8A945DB0C27FD9A3A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6749 AS: 8546 AS: 13144 AS: 25135 AS: 25310 AS: 203237 IP: 62.49.0.0/16 IP: 62.56.0.0/17 IP: 77.233.128.0/19 IP: 80.176.0.0/15 IP: 83.104.0.0/14 IP: 83.146.0.0/18 IP: 84.9.0.0/16 IP: 85.255.224.0/20 IP: 87.74.0.0/15 IP: 88.82.0.0/19 IP: 141.195.192.0/18 IP: 148.185.0.0/16 IP: 148.252.128.0/18 IP: 185.69.144.0/22 IP: 185.205.28.0/22 IP: 185.205.36.0/22 IP: 193.38.49.0/24 IP: 193.237.0.0/16 IP: 194.62.232.0/24 IP: 194.62.235.0/24 IP: 194.62.238.0/23 IP: 194.222.0.0/16 IP: 195.8.160.0/19 IP: 195.58.64.0/19 IP: 212.158.192.0/18 IP: 212.183.128.0/19 IP: 212.225.0.0/17 IP: 212.228.0.0/15 IP: 212.248.128.0/17 IP: 2001:958::/32 IP: 2a0a:ef40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:af:35:04:68:91:d8:a9:45:db:0c:27:fd:9a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ada225cb7f29416e7534695fbfb21762fee93c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:30:12:a2:f0:b6:3a:d5:f5:60:d5:48:fe:97: 6d:43:64:cd:92:a8:33:54:f7:c2:a5:2a:16:25:08: 6a:20:09:ac:c0:08:4d:1d:b5:89:50:ba:91:8b:75: ed:02:11:4a:e5:03:53:ad:81:f9:43:58:db:41:25: c6:8f:56:98:32:e2:ef:9f:d1:1f:0c:a4:cf:e4:7f: d2:ee:81:8d:80:4c:48:3e:5f:25:9d:f4:09:0a:b3: ff:ef:e5:65:f0:2f:18:dc:63:95:4c:f2:6e:7a:16: f0:e9:69:fa:31:69:72:af:72:1a:96:64:e6:51:24: 6a:90:4e:71:1e:1f:4e:e0:c2:67:fb:b0:cc:5d:38: d7:ed:ab:5b:1c:2a:d9:4c:bd:99:fd:7c:ce:ee:c5: 52:d5:17:fd:90:5c:87:03:df:31:1e:d7:ea:1a:33: cb:11:2c:6c:b5:ff:dc:23:01:3f:ae:5b:46:de:40: 18:54:72:4e:33:57:70:37:29:b8:0f:55:59:16:98: 30:a1:ea:36:a3:4e:38:cd:eb:88:a5:62:1f:09:e7: d4:18:a9:a9:67:65:9d:17:15:6e:18:8b:a4:35:3e: 54:e1:47:ed:1a:97:f5:ba:1f:5f:4b:c9:76:63:74: a4:a8:57:16:5e:a2:f2:5e:c0:64:b8:d0:e9:8b:87: d0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.49.0.0/16 62.56.0.0/17 77.233.128.0/19 80.176.0.0/15 83.104.0.0/14 83.146.0.0/18 84.9.0.0/16 85.255.224.0/20 87.74.0.0/15 88.82.0.0/19 141.195.192.0/18 148.185.0.0/16 148.252.128.0/18 185.69.144.0/22 185.205.28.0/22 185.205.36.0/22 193.38.49.0/24 193.237.0.0/16 194.62.232.0/24 194.62.235.0/24 194.62.238.0/23 194.222.0.0/16 195.8.160.0/19 195.58.64.0/19 212.158.192.0/18 212.183.128.0/19 212.225.0.0/17 212.228.0.0/15 212.248.128.0/17 IPv6: 2001:958::/32 2a0a:ef40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6749 8546 13144 25135 25310 203237 Signature Algorithm: sha256WithRSAEncryption 55:e7:e5:f7:b0:21:ef:66:bb:63:e4:1e:41:47:d3:db:a4:81: cf:74:33:ec:7e:60:bb:8a:81:c2:50:c0:76:dd:93:67:7a:83: b3:ba:9e:28:6a:60:3e:ea:f9:85:bc:f9:34:0b:6d:74:fc:85: 95:a7:fb:66:31:1e:4b:38:b9:6c:18:b8:ee:1a:e0:c0:30:02: 72:68:ae:38:f0:c1:35:b8:b6:78:e1:7b:21:ee:43:f4:8f:c0: 70:e0:48:aa:66:3d:7c:14:25:ac:94:0c:f7:eb:07:61:e9:b9: da:e7:fa:d7:dd:31:5d:b8:98:aa:c0:57:f7:fe:12:05:56:2e: 8e:f1:a4:f9:12:95:86:44:fd:ac:4c:ec:f6:0a:8c:88:7e:07: 4b:0b:c4:16:18:76:34:3d:7e:65:d0:73:9a:81:57:d7:97:9f: 3e:e6:be:f4:11:4f:62:3f:aa:23:a7:bc:ed:66:61:f6:19:1f: 84:c3:70:46:e2:66:e5:6e:38:57:39:42:1d:0a:d9:bc:78:00: e0:d3:a9:05:05:2a:df:cc:4d:9c:ed:2f:bb:cd:38:f0:e7:7a: 38:b6:42:9c:f0:12:56:be:39:90:e3:3f:1b:c1:a4:30:45:99: 3f:12:8b:5b:b3:c6:94:0d:62:8d:93:48:d9:d1:c3:31:a7:31: 53:01:25:fd -----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgISAZt/E681BGiR2KlF2wwn/Zo6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWRhMjI1Y2I3ZjI5NDE2ZTc1MzQ2OTVmYmZiMjE3NjJmZWU5M2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjASovC2OtX1YNVI/pdtQ2TNkqgz VPfCpSoWJQhqIAmswAhNHbWJULqRi3XtAhFK5QNTrYH5Q1jbQSXGj1aYMuLvn9Ef DKTP5H/S7oGNgExIPl8lnfQJCrP/7+Vl8C8Y3GOVTPJuehbw6Wn6MWlyr3IalmTm USRqkE5xHh9O4MJn+7DMXTjX7atbHCrZTL2Z/XzO7sVS1Rf9kFyHA98xHtfqGjPL ESxstf/cIwE/rltG3kAYVHJOM1dwNym4D1VZFpgwoeo2o044zeuIpWIfCefUGKmp Z2WdFxVuGIukNT5U4UftGpf1uh9fS8l2Y3SkqFcWXqLyXsBkuNDpi4fQgwIDAQAB o4IDbjCCA2owHQYDVR0OBBYEFBraIly38pQW51NGlfv7IXYv7pPIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0L2U5ZDlj Yy0yNjY4LTQyZmMtODMxNS03NTI1ZDRkNDA4YjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvZTlkOWNj LTI2NjgtNDJmYy04MzE1LTc1MjVkNGQ0MDhiNS8xL0d0b2lYTGZ5bEJiblUwYVYt X3NoZGlfdWs4Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHYBggrBgEF BQcBBwEB/wSByDCBxTCBrAQCAAEwgaUDAwA+MQMEBz44AAMEBU3pgAMDAVCwAwMC U2gDBAZTkgADAwBUCQMEBFX/4AMDAVdKAwQFWFIAAwQGjcPAAwMAlLkDBAaU/IAD BAK5RZADBAK5zRwDBAK5zSQDBADBJjEDAwDB7QMEAMI+6AMEAMI+6wMEAcI+7gMD AMLeAwQFwwigAwQFwzpAAwQG1J7AAwQF1LeAAwQH1OEAAwMB1OQDBAfU+IAwFAQC AAIwDgMFACABCVgDBQMqCu9AMC4GCCsGAQUFBwEIAQH/BB8wHaAbMBkCAhpdAgIh YgICM1gCAmIvAgJi3gIDAxnlMA0GCSqGSIb3DQEBCwUAA4IBAQBV5+X3sCHvZrtj 5B5BR9PbpIHPdDPsfmC7ioHCUMB23ZNneoOzup4oamA+6vmFvPk0C210/IWVp/tm MR5LOLlsGLjuGuDAMAJyaK448ME1uLZ44Xsh7kP0j8Bw4EiqZj18FCWslAz36wdh 6bna5/rX3TFduJiqwFf3/hIFVi6O8aT5EpWGRP2sTOz2CoyIfgdLC8QWGHY0PX5l 0HOagVfXl58+5r70EU9iP6ojp7ztZmH2GR+Ew3BG4mblbjhXOUIdCtm8eADg06kF BSrfzE2c7S+7zTjw53o4tkKc8BJWvjmQ4z8bwaQwRZk/Eotbs8aUDWKNk0jZ0cMx pzFTASX9 -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:32 2026 by rpki-client