This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer File: cGt_6orTURHKaHqc0ApJ-aTwRZs.cer (raw, json) Hash identifier: bPHyh9ptENMbMWCJnzJVfPumPeue5WXtqIDVWv42okU= Subject key identifier: 70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F148448E9276F2F8F5FA26F0424D2DF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42835 AS: 43824 IP: 78.40.176.0/21 IP: 185.87.168.0/22 IP: 185.160.224.0/22 IP: 2a05:c300::/29 IP: 2a0b:8e80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:84:48:e9:27:6f:2f:8f:5f:a2:6f:04:24:d2:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:94:27:0a:ab:f9:35:32:c8:25:da:9e:fa:74: 30:12:9a:cf:44:22:45:aa:31:75:53:fe:60:3d:b5: 68:e4:ad:2f:8a:65:b0:67:98:bb:72:a4:54:1c:85: d4:15:61:15:5e:9a:ad:5c:fd:76:e3:7f:c9:ab:d6: 82:ac:98:69:3f:ab:c4:45:f1:42:d2:ad:d1:34:2b: c4:3e:78:77:18:8c:c8:f2:bd:e0:37:9e:34:f2:c9: fd:9c:19:c3:45:07:7a:3a:14:72:bf:f9:de:de:c2: 9f:24:78:31:2a:d6:19:fe:b9:91:54:37:41:c9:19: f3:d1:70:4b:c8:b5:34:c6:ca:c4:5e:bf:de:27:82: 4d:68:07:6d:3f:28:4f:ae:42:d3:0d:bf:b2:9a:c7: a7:bf:7b:b0:8d:44:ba:3f:02:a0:92:6f:f6:8c:6f: 61:6a:17:3e:e3:8d:4b:a5:fd:24:47:38:21:ae:cd: 27:90:79:7a:97:0d:0a:e8:53:99:b6:cf:6f:0d:b2: bd:a7:1e:9f:c8:4a:c1:b8:a1:69:9c:2e:d1:6a:22: 53:9d:b4:f9:ae:81:8f:bf:20:ae:65:9e:58:cf:e8: d1:6d:d6:b0:cd:91:e9:dc:44:1e:ef:79:df:68:a8: dd:fc:90:eb:06:9c:1e:89:c9:7a:4d:be:41:81:3b: 31:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.176.0/21 185.87.168.0/22 185.160.224.0/22 IPv6: 2a05:c300::/29 2a0b:8e80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42835 43824 Signature Algorithm: sha256WithRSAEncryption 8f:c2:57:5b:28:2e:e0:fe:20:8e:66:61:87:4b:c0:09:da:fa: 4f:7c:e9:63:cd:c6:b2:23:94:8c:2d:75:cd:1a:33:5b:42:86: d9:57:dd:f2:aa:5d:ba:cb:da:e3:c6:92:03:8d:c2:20:c7:a2: d6:94:6b:df:65:d3:25:bd:76:2c:8b:3a:15:60:eb:48:38:3c: ed:a6:8d:35:31:43:b8:7a:8c:e3:e0:dd:e8:d2:e3:09:ea:d5: a0:40:c8:2e:bc:90:ef:85:11:52:d6:36:86:cc:ec:2a:07:ad: c4:52:fa:b1:bf:74:0f:f4:b0:76:44:b8:19:e5:ef:d8:6d:3b: 12:03:96:f3:b4:c3:1d:8e:50:b7:c9:6c:7d:c2:01:01:db:09: c5:a9:44:2f:37:dc:19:0a:4b:de:e9:91:66:26:b5:59:eb:4c: ea:b1:53:9f:24:e1:51:9f:0f:6e:c2:b7:08:e2:d4:6b:05:cf: f8:2c:23:58:75:ed:84:ff:3d:50:ef:ab:88:c0:85:38:29:c1: c6:ff:fc:e6:b9:65:91:08:a4:db:0e:aa:9f:1c:e6:46:9b:44: f4:99:c7:4f:8f:83:9e:fb:5a:65:29:9b:40:c2:49:57:12:74: 19:3b:91:a3:e0:b3:53:c2:5f:ad:af:1c:ce:d7:95:97:71:6c: 1a:1f:8d:06 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt/FIRI6SdvL49fom8EJNLfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDZiN2ZlYThhZDM1MTExY2E2ODdhOWNkMDBhNDlmOWE0ZjA0NTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpQnCqv5NTLIJdqe+nQwEprPRCJF qjF1U/5gPbVo5K0vimWwZ5i7cqRUHIXUFWEVXpqtXP1243/Jq9aCrJhpP6vERfFC 0q3RNCvEPnh3GIzI8r3gN5408sn9nBnDRQd6OhRyv/ne3sKfJHgxKtYZ/rmRVDdB yRnz0XBLyLU0xsrEXr/eJ4JNaAdtPyhPrkLTDb+ymsenv3uwjUS6PwKgkm/2jG9h ahc+441Lpf0kRzghrs0nkHl6lw0K6FOZts9vDbK9px6fyErBuKFpnC7RaiJTnbT5 roGPvyCuZZ5Yz+jRbdawzZHp3EQe73nfaKjd/JDrBpweicl6Tb5BgTsxpwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFHBrf+qK01ERymh6nNAKSfmk8EWbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3L2QyOTc0 Zi03ZWZhLTQ2MTEtODgyNy0yNjBjMzc3YTMxNGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvZDI5NzRm LTdlZmEtNDYxMS04ODI3LTI2MGMzNzdhMzE0YS8xL2NHdF82b3JUVVJIS2FIcWMw QXBKLWFUd1Jacy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQDTiiwAwQCuVeoAwQCuaDgMBQEAgACMA4DBQMq BcMAAwUDKguOgDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAp1MCAwCrMDANBgkq hkiG9w0BAQsFAAOCAQEAj8JXWygu4P4gjmZhh0vACdr6T3zpY83GsiOUjC11zRoz W0KG2Vfd8qpdusva48aSA43CIMei1pRr32XTJb12LIs6FWDrSDg87aaNNTFDuHqM 4+Dd6NLjCerVoEDILryQ74URUtY2hszsKgetxFL6sb90D/SwdkS4GeXv2G07EgOW 87TDHY5Qt8lsfcIBAdsJxalELzfcGQpL3umRZia1WetM6rFTnyThUZ8PbsK3COLU awXP+CwjWHXthP89UO+riMCFOCnBxv/85rllkQik2w6qnxzmRptE9JnHT4+Dnvta ZSmbQMJJVxJ0GTuRo+CzU8Jfra8czteVl3FsGh+NBg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:44:14 2026 by rpki-client