This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer File: GtwAk8WviUz1ILWTbjCyFQkN6fg.cer (raw, json) Hash identifier: AwcvIxXARS1V1y46tIMdCkUEI4wR5Hx6FP7ZR/n/tkg= Subject key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CB8A8F6575263D537879E9F76530F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.209.240.0/24 IP: 193.22.141.0/24 IP: 193.188.248.0/24 IP: 212.46.51.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b8:a8:f6:57:52:63:d5:37:87:9e:9f:76:53:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1adc0093c5af894cf520b5936e30b215090de9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7b:cb:d8:a6:5b:d6:17:d9:77:fa:d5:b7:79: 69:50:a6:88:a9:bd:1b:c3:5e:82:7f:de:37:3a:5e: d2:3e:b7:21:73:7a:72:d8:6a:6a:32:85:c1:fd:49: fa:8b:c5:5b:f0:71:0c:44:8b:5e:7c:3c:3f:05:44: a1:48:ca:16:47:7a:48:4e:0d:3a:fa:0a:cd:5a:0d: bc:86:eb:64:b4:8d:9e:4b:e4:c6:e4:0e:fc:28:22: 71:5a:a6:55:02:e3:82:ea:e1:bf:e1:93:d6:5c:65: a8:4e:af:d0:28:e0:77:62:ac:39:d3:2e:be:48:d9: 0f:77:18:76:de:16:37:00:27:f5:c7:d1:fe:1a:fa: e9:a2:51:a7:fb:82:cd:12:53:8d:7f:5d:3f:62:b9: 55:2a:58:2c:3d:7e:78:a3:67:c5:e1:e8:2c:21:ab: 40:ac:93:b6:42:59:fe:7e:5b:15:34:c9:58:eb:1f: 93:22:c1:ef:4e:46:e4:2f:5e:3a:29:57:c3:cc:d6: ed:e6:99:95:4c:9b:23:7a:4b:d8:d4:5f:cd:a0:a4: f6:27:b1:d7:3e:88:93:29:56:5a:f2:7e:9b:82:19: 84:ea:54:3d:dc:51:e1:1e:64:a7:27:04:a0:68:68: a1:7e:6c:63:77:9d:ec:f1:07:d4:36:f6:b8:17:3e: 26:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.240.0/24 193.22.141.0/24 193.188.248.0/24 212.46.51.0/24 Signature Algorithm: sha256WithRSAEncryption 13:2c:79:da:91:f2:8d:a6:90:2d:74:e6:64:e3:d5:bb:f4:94: c9:22:61:fa:69:ba:3d:ff:d3:7c:f2:b5:b1:41:42:d7:a2:fd: 69:db:39:9b:4c:c4:91:9b:7f:14:24:c0:0c:29:4c:19:c0:39: 47:51:6a:46:c0:e0:7b:49:2f:00:4c:41:78:0d:6b:c1:65:3f: 23:73:d8:dc:c9:27:ab:49:e4:3a:61:7a:39:db:dc:f4:a7:85: fb:96:ff:f5:61:b7:26:9f:15:41:a8:54:8a:c7:7e:d9:17:10: 94:fd:2c:45:d2:ae:93:01:cd:e4:fb:28:ae:04:e4:3d:92:7d: b6:ca:1d:86:b9:48:45:cb:11:f0:ba:ae:b5:93:67:9f:2e:a9: a3:72:94:9c:24:0b:04:82:e5:a4:9c:43:aa:5d:8a:f1:86:94: 28:70:a7:95:8e:52:de:7e:8f:48:4e:90:b8:96:63:c4:db:eb: 7f:34:4a:4f:24:1c:48:46:15:ad:81:b5:a2:f3:06:8b:34:2c: 99:cb:67:27:5f:ea:9c:94:0a:f0:04:16:4e:85:f9:08:af:24: 5e:d3:65:40:1b:66:44:08:0f:cb:e3:0a:42:bb:cf:c9:45:3f: 94:de:47:1e:7f:b6:5a:94:1e:cd:5a:d7:b4:7e:8e:5e:31:03: 95:b2:4e:04 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZt9XLio9ldSY9U3h56fdlMPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWRjMDA5M2M1YWY4OTRjZjUyMGI1OTM2ZTMwYjIxNTA5MGRlOWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHvL2KZb1hfZd/rVt3lpUKaIqb0b w16Cf943Ol7SPrchc3py2GpqMoXB/Un6i8Vb8HEMRItefDw/BUShSMoWR3pITg06 +grNWg28hutktI2eS+TG5A78KCJxWqZVAuOC6uG/4ZPWXGWoTq/QKOB3Yqw50y6+ SNkPdxh23hY3ACf1x9H+GvrpolGn+4LNElONf10/YrlVKlgsPX54o2fF4egsIatA rJO2Qln+flsVNMlY6x+TIsHvTkbkL146KVfDzNbt5pmVTJsjekvY1F/NoKT2J7HX PoiTKVZa8n6bghmE6lQ93FHhHmSnJwSgaGihfmxjd53s8QfUNva4Fz4mWQIDAQAB o4ICljCCApIwHQYDVR0OBBYEFBrcAJPFr4lM9SC1k24wshUJDen4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4LzZiNjBl ZC0wYzQ2LTQ4NzMtOTFmZS1mNTk0OGM3MTZlMTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvNmI2MGVk LTBjNDYtNDg3My05MWZlLWY1OTQ4YzcxNmUxNi8xL0d0d0FrOFd2aVV6MUlMV1Ri akN5RlFrTjZmZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQAW9HwAwQAwRaNAwQAwbz4AwQA1C4zMA0GCSqG SIb3DQEBCwUAA4IBAQATLHnakfKNppAtdOZk49W79JTJImH6abo9/9N88rWxQULX ov1p2zmbTMSRm38UJMAMKUwZwDlHUWpGwOB7SS8ATEF4DWvBZT8jc9jcySerSeQ6 YXo529z0p4X7lv/1YbcmnxVBqFSKx37ZFxCU/SxF0q6TAc3k+yiuBOQ9kn22yh2G uUhFyxHwuq61k2efLqmjcpScJAsEguWknEOqXYrxhpQocKeVjlLefo9ITpC4lmPE 2+t/NEpPJBxIRhWtgbWi8waLNCyZy2cnX+qclArwBBZOhfkIryRe02VAG2ZECA/L 4wpCu8/JRT+U3kcef7ZalB7NWte0fo5eMQOVsk4E -----END CERTIFICATE-----Generated at Mon Jan 26 15:03:41 2026 by rpki-client