This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c_guDtDzbgmSN8xCz4d4tAeCgAE.cer File: c_guDtDzbgmSN8xCz4d4tAeCgAE.cer (raw, json) Hash identifier: 7s9QuNLXVyCSUXNxa/d3W2luFeIQ77kw1JtwWfu/wWs= Subject key identifier: 73:F8:2E:0E:D0:F3:6E:09:92:37:CC:42:CF:87:78:B4:07:82:80:01 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35C39D243BB0448D93FDA4B60E8ADB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200998 IP: 141.98.32.0/22 IP: 195.114.100.0/23 IP: 195.182.1.0/24 IP: 2a09:e40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c3:9d:24:3b:b0:44:8d:93:fd:a4:b6:0e:8a:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73f82e0ed0f36e099237cc42cf8778b407828001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d5:f2:fb:97:fb:7e:91:f2:6e:d6:d8:82:77: 8e:08:11:d8:23:0a:1b:c4:65:02:8d:be:fb:4a:d5: 44:87:9b:ee:86:96:da:47:d8:c3:8f:a7:a2:3d:5c: 00:22:f0:69:20:3c:f1:25:bd:d7:97:0c:98:0c:9e: e4:7b:2b:01:e6:76:60:7a:c0:c1:03:b8:c4:37:f3: f9:d3:60:d7:af:71:b3:0f:26:f7:69:86:f5:2c:a5: 0e:07:8f:3f:c5:62:cf:a5:37:e1:7b:41:af:96:d0: b3:bb:36:10:04:10:bb:02:dd:ab:1e:c5:58:8f:e8: fd:42:0c:52:c7:ca:d6:e3:fe:a7:d5:98:27:f8:94: 6b:c4:c6:8f:e4:c7:c1:8b:54:48:24:66:0f:8f:ba: de:8b:e7:81:5d:67:0a:7a:67:b4:da:76:2b:9a:cf: 6e:0c:74:03:c9:63:c7:42:c2:ab:f6:b8:ea:f9:e0: e4:72:88:03:ab:d2:16:26:71:e4:ba:59:85:da:0e: 5f:45:f4:3d:c2:4a:29:91:17:4a:5d:0d:5b:c5:b2: bc:62:05:3c:7d:03:46:4a:fc:8b:dd:5d:a9:eb:fb: bf:4d:0e:d1:c7:69:cb:54:cb:49:8b:04:43:40:b6: eb:a5:66:f6:22:63:44:77:c8:ff:48:fa:0c:4c:6e: 0e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F8:2E:0E:D0:F3:6E:09:92:37:CC:42:CF:87:78:B4:07:82:80:01 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.32.0/22 195.114.100.0/23 195.182.1.0/24 IPv6: 2a09:e40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200998 Signature Algorithm: sha256WithRSAEncryption 43:0f:82:60:22:07:88:26:c6:35:a8:4d:10:29:e3:43:40:65: 31:93:35:47:1e:ea:67:1c:e0:9a:03:43:10:8b:52:cf:e0:61: 20:01:f2:b5:c6:76:8f:e7:e2:cf:b1:c9:86:3a:15:f8:e4:9c: 38:3e:90:02:bb:aa:19:2c:85:ed:65:f6:80:8b:19:c5:e9:2e: db:7e:8a:eb:b2:0d:41:db:10:e8:24:0f:31:ae:fa:17:3b:c2: c0:69:a3:0d:6f:74:67:88:62:38:fb:a2:de:e5:b0:a3:a2:f1: 23:47:73:ae:f0:c2:b5:6b:90:e8:6d:78:53:2a:36:16:9c:8a: 13:d1:5f:df:cf:c0:64:04:1a:08:86:de:e3:fe:72:5c:e7:8c: 1d:21:f0:14:88:4a:96:e1:2f:97:de:13:c5:6b:61:39:e5:df: 01:cc:3c:7c:63:ac:dc:78:e8:84:93:f1:e7:6f:71:94:ad:7b: 22:d6:c6:c1:f8:10:1d:e2:34:b8:34:89:6c:3b:22:cb:89:2a: 65:97:d0:e4:a9:9f:24:52:3d:b1:1a:55:c1:dd:e3:9d:36:5f: 09:9d:31:cf:b9:65:42:6e:dc:f1:8c:c3:1d:d1:42:71:d0:a6: e5:b6:00:1d:73:0d:65:9d:c5:1b:13:45:ad:3c:09:0d:88:be: 9e:8d:0f:1f -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt7NcOdJDuwRI2T/aS2DorbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2Y4MmUwZWQwZjM2ZTA5OTIzN2NjNDJjZjg3NzhiNDA3ODI4MDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudXy+5f7fpHybtbYgneOCBHYIwob xGUCjb77StVEh5vuhpbaR9jDj6eiPVwAIvBpIDzxJb3XlwyYDJ7keysB5nZgesDB A7jEN/P502DXr3GzDyb3aYb1LKUOB48/xWLPpTfhe0GvltCzuzYQBBC7At2rHsVY j+j9QgxSx8rW4/6n1Zgn+JRrxMaP5MfBi1RIJGYPj7rei+eBXWcKeme02nYrms9u DHQDyWPHQsKr9rjq+eDkcogDq9IWJnHkulmF2g5fRfQ9wkopkRdKXQ1bxbK8YgU8 fQNGSvyL3V2p6/u/TQ7Rx2nLVMtJiwRDQLbrpWb2ImNEd8j/SPoMTG4OIwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFHP4Lg7Q824JkjfMQs+HeLQHgoABMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyL2U4YWQ0 NC03MTk3LTQyYTctOGY0NS1lMGZkY2NmYjlmYTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvZThhZDQ0 LTcxOTctNDJhNy04ZjQ1LWUwZmRjY2ZiOWZhMy8xL2NfZ3VEdER6YmdtU044eEN6 NGQ0dEFlQ2dBRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCjWIgAwQBw3JkAwQAw7YBMA0EAgACMAcDBQAq CQ5AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMRJjANBgkqhkiG9w0BAQsFAAOC AQEAQw+CYCIHiCbGNahNECnjQ0BlMZM1Rx7qZxzgmgNDEItSz+BhIAHytcZ2j+fi z7HJhjoV+OScOD6QAruqGSyF7WX2gIsZxeku236K67INQdsQ6CQPMa76FzvCwGmj DW90Z4hiOPui3uWwo6LxI0dzrvDCtWuQ6G14Uyo2FpyKE9Ff38/AZAQaCIbe4/5y XOeMHSHwFIhKluEvl94TxWthOeXfAcw8fGOs3HjohJPx529xlK17ItbGwfgQHeI0 uDSJbDsiy4kqZZfQ5KmfJFI9sRpVwd3jnTZfCZ0xz7llQm7c8YzDHdFCcdCm5bYA HXMNZZ3FGxNFrTwJDYi+no0PHw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:13:22 2026 by rpki-client