This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer File: GxISDDUcFO7CIQn2AySfzawdMyE.cer (raw, json) Hash identifier: 6vDNsCVYgfW0FBc85J7mfTlusCb78mz9dFXB0BsOOy0= Subject key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1530F8D3418A1F398D0FAFF5A0E2D6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.92.240.0/22 IP: 91.206.71.0/24 IP: 158.94.208.0/22 IP: 178.16.52.0/22 IP: 185.7.240.0/22 IP: 2a14:db80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:30:f8:d3:41:8a:1f:39:8d:0f:af:f5:a0:e2:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b12120c351c14eec22109f603249fcdac1d3321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4e:4a:3c:b7:2a:19:04:42:5d:1c:d1:40:c7: e9:e5:9b:75:3d:b0:0a:08:de:12:cd:2f:74:8c:ef: ec:1f:eb:85:dc:c8:ba:da:9f:9e:0c:3f:c9:dc:57: 3a:d0:cd:4b:74:0c:54:09:d2:26:aa:d6:e1:36:3d: d8:2b:4a:4e:2e:03:26:1e:21:69:8e:89:c5:73:92: f9:ed:0f:64:01:d9:aa:25:ba:e6:d9:e9:8e:ac:70: eb:a6:eb:3a:54:6f:7c:dd:05:0d:3a:c2:2e:ea:a4: 6c:0c:23:7c:da:a5:4d:8b:f9:76:c7:b4:a9:a4:c4: de:9d:ac:b0:54:8a:dc:bf:a4:a4:60:96:97:1f:05: 5d:e8:ba:85:a5:d7:35:5e:f3:2b:44:bc:8a:68:23: 48:21:06:03:61:c7:15:ed:e7:db:5b:b2:86:36:ae: 37:65:0d:0d:65:b0:4f:6d:48:19:ec:00:94:4c:93: ae:9d:94:fc:8c:3d:aa:67:91:d8:d6:57:03:8b:6a: 9d:df:bf:4b:d0:0f:0d:a9:de:43:a4:78:44:90:f3: 8a:b2:2d:a9:7c:4e:56:94:b5:03:63:0a:24:1e:f4: 5e:62:2d:d1:ec:dd:a5:83:1d:6b:ae:55:d4:a3:f5: 39:be:ce:64:14:05:21:04:9b:cd:4a:97:e8:fc:e7: 68:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.92.240.0/22 91.206.71.0/24 158.94.208.0/22 178.16.52.0/22 185.7.240.0/22 IPv6: 2a14:db80::/29 Signature Algorithm: sha256WithRSAEncryption a4:fc:7a:c1:38:b6:26:6d:21:ec:01:9b:ef:8c:03:a5:e5:cb: 71:60:cc:e2:de:0a:37:7a:42:95:3e:08:09:cf:da:dc:4b:70: 97:14:18:39:7c:57:a3:ef:45:6a:fb:3e:1e:66:b0:5f:a3:d8: 37:87:c6:a8:ea:de:35:c5:72:4d:48:2c:88:18:d5:bf:26:f7: e4:95:3f:ef:e9:c1:10:23:c9:cf:8a:9c:1f:d8:d4:4d:ec:48: a5:93:8e:25:01:dc:50:7b:22:83:00:c6:ff:9b:75:c4:09:0b: ca:c4:eb:7b:c9:9c:d7:2d:92:be:e9:a7:6c:b8:67:76:d9:39: db:cc:57:b0:bb:e2:5a:7a:99:34:b8:be:a0:d5:50:10:9e:c6: 7f:ad:a6:a1:ab:d2:e1:ca:48:73:36:f6:97:23:91:3f:16:7f: 9d:9e:d7:98:2c:2e:ed:8d:9c:fd:6c:31:7e:67:da:23:7e:97: 43:84:f9:38:97:6b:9c:a7:20:48:a0:a1:2b:70:a5:16:8d:1d: 87:0d:90:77:58:02:08:e1:11:19:2a:ef:f2:73:1c:fc:b1:c9: e6:14:07:c9:37:a8:71:f5:d1:8e:71:fc:cc:1b:b9:20:9a:41: 0f:c0:2f:a5:97:f5:ea:93:69:26:d2:8c:af:0a:da:92:c6:2f: f1:f0:a3:b6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt/FTD400GKHzmND6/1oOLWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjEyMTIwYzM1MWMxNGVlYzIyMTA5ZjYwMzI0OWZjZGFjMWQzMzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw05KPLcqGQRCXRzRQMfp5Zt1PbAK CN4SzS90jO/sH+uF3Mi62p+eDD/J3Fc60M1LdAxUCdImqtbhNj3YK0pOLgMmHiFp jonFc5L57Q9kAdmqJbrm2emOrHDrpus6VG983QUNOsIu6qRsDCN82qVNi/l2x7Sp pMTenaywVIrcv6SkYJaXHwVd6LqFpdc1XvMrRLyKaCNIIQYDYccV7efbW7KGNq43 ZQ0NZbBPbUgZ7ACUTJOunZT8jD2qZ5HY1lcDi2qd379L0A8Nqd5DpHhEkPOKsi2p fE5WlLUDYwokHvReYi3R7N2lgx1rrlXUo/U5vs5kFAUhBJvNSpfo/OdoMwIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFBsSEgw1HBTuwiEJ9gMkn82sHTMhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1LzNkYWY3 Zi0zMDFkLTQyM2UtOTQ2ZS00M2RmNDdkNWExZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvM2RhZjdm LTMwMWQtNDIzZS05NDZlLTQzZGY0N2Q1YTFlNy8xL0d4SVNERFVjRk83Q0lRbjJB eVNmemF3ZE15RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCW1zwAwQAW85HAwQCnl7QAwQCshA0AwQCuQfw MA0EAgACMAcDBQMqFNuAMA0GCSqGSIb3DQEBCwUAA4IBAQCk/HrBOLYmbSHsAZvv jAOl5ctxYMzi3go3ekKVPggJz9rcS3CXFBg5fFej70Vq+z4eZrBfo9g3h8ao6t41 xXJNSCyIGNW/JvfklT/v6cEQI8nPipwf2NRN7Eilk44lAdxQeyKDAMb/m3XECQvK xOt7yZzXLZK+6adsuGd22TnbzFewu+Jaepk0uL6g1VAQnsZ/raahq9LhykhzNvaX I5E/Fn+dnteYLC7tjZz9bDF+Z9ojfpdDhPk4l2ucpyBIoKErcKUWjR2HDZB3WAII 4REZKu/ycxz8scnmFAfJN6hx9dGOcfzMG7kgmkEPwC+ll/Xqk2km0oyvCtqSxi/x 8KO2 -----END CERTIFICATE-----Generated at Sun Jan 25 16:44:00 2026 by rpki-client