This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer (raw, json) Hash identifier: tkYuV6tD0/6G0gCFfiDE0q2yvmGNlHFLIu5nYa5ykkw= Subject key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6B6B7E9FA36C3EBFF4A26C236C7E9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.18.148.0 -- 185.18.150.255 IP: 2a04:b80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b6:b7:e9:fa:36:c3:eb:ff:4a:26:c2:36:c7:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80043f23936622824111e8865a50002067d95a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:69:b5:29:ca:67:2b:b0:f8:bc:c7:d0:79:76: 0b:91:17:3e:25:6d:b7:df:f2:08:27:27:c9:2c:59: f7:4c:c7:0c:a7:99:85:7b:30:2c:88:06:70:5f:10: 8a:b1:25:21:dc:89:f9:40:38:ca:6e:26:e9:6c:ee: 6e:df:3b:be:87:16:10:b3:d2:a0:1d:26:46:39:c6: 5c:62:30:9f:aa:ca:98:c0:82:a9:5c:6b:af:07:6c: 93:a3:c3:8d:b1:94:ad:c9:74:e1:10:26:93:c4:40: 8b:ce:58:9a:87:51:75:cc:60:f9:12:70:8b:c6:11: b3:56:5e:45:b0:2b:69:3e:99:07:c6:38:f1:30:03: f8:fb:d7:2b:92:ab:01:ea:70:f1:49:74:7a:a3:66: 07:97:91:fa:37:38:55:e1:c6:be:ea:68:22:82:bd: bd:16:9c:48:e0:90:89:99:7a:1d:cd:dd:20:d5:cc: 09:d3:a2:4f:d1:34:7e:8c:99:f9:91:3a:5f:f1:6c: 88:64:89:bf:f7:33:a7:37:ca:f7:2d:47:e2:2f:9e: 3b:05:07:f6:8e:15:a0:e3:16:53:b0:22:c3:de:59: 6c:04:d1:8e:73:ba:aa:98:25:a8:38:c3:4b:9a:4e: ac:5f:f4:34:67:fe:d0:e2:b0:d6:4c:ef:3a:84:43: 47:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.18.148.0-185.18.150.255 IPv6: 2a04:b80::/29 Signature Algorithm: sha256WithRSAEncryption 09:62:69:20:4f:8f:76:c0:dd:3e:a8:a0:f0:4e:0c:38:87:29: 34:37:22:5f:c5:ef:07:74:bc:56:90:7e:b2:af:09:70:03:cd: ff:8a:e8:af:96:03:a9:7b:d7:33:9e:72:54:f7:e4:94:bb:5e: 1b:3b:bb:6b:8c:60:1b:47:92:22:45:6c:2b:83:70:ce:48:f4: 76:82:a8:5f:c7:ba:c6:7e:a2:6f:5f:08:8e:67:47:10:7c:30: e0:63:33:13:b2:d0:3b:f4:55:f4:2b:40:37:78:cc:82:8b:46: c0:64:a7:8c:44:74:58:0a:8b:dc:83:09:23:d3:e3:e7:5e:77: a6:f6:7c:fc:88:9b:45:05:b0:5f:88:c1:73:9f:22:99:8b:12: 2d:31:42:14:d0:53:80:21:be:07:8c:f0:85:9b:e5:63:8e:d6: b1:2d:3b:6c:0f:d3:d8:67:aa:10:f9:8e:2a:a8:9a:6e:36:38: d0:79:96:df:c1:f9:ab:2f:46:52:9f:9a:97:1d:c1:58:c4:2f: fd:8c:61:52:d0:be:9e:c6:4e:39:19:11:d0:0d:3f:24:63:60: df:2b:86:eb:ca:7c:b2:28:8c:66:5b:41:fc:c0:b0:9b:19:5f: 83:fe:20:8c:33:ba:44:da:a9:27:71:6d:13:41:f0:d6:09:0e: 55:f1:ca:a2 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt+pra36fo2w+v/SibCNsfpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDA0M2YyMzkzNjYyMjgyNDExMWU4ODY1YTUwMDAyMDY3ZDk1YTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Wm1KcpnK7D4vMfQeXYLkRc+JW23 3/IIJyfJLFn3TMcMp5mFezAsiAZwXxCKsSUh3In5QDjKbibpbO5u3zu+hxYQs9Kg HSZGOcZcYjCfqsqYwIKpXGuvB2yTo8ONsZStyXThECaTxECLzliah1F1zGD5EnCL xhGzVl5FsCtpPpkHxjjxMAP4+9crkqsB6nDxSXR6o2YHl5H6NzhV4ca+6mgigr29 FpxI4JCJmXodzd0g1cwJ06JP0TR+jJn5kTpf8WyIZIm/9zOnN8r3LUfiL547BQf2 jhWg4xZTsCLD3llsBNGOc7qqmCWoOMNLmk6sX/Q0Z/7Q4rDWTO86hENH5QIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFIAEPyOTZiKCQRHohlpQACBn2VpiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1LzM5ZjI4 Yy05ZWI4LTRjYWUtOGQ5OC02OGNkYzY5MmFkMDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvMzlmMjhj LTllYjgtNGNhZS04ZDk4LTY4Y2RjNjkyYWQwOS8xL2dBUV9JNU5tSW9KQkVlaUdX bEFBSUdmWldtSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTAUBAIAATAOMAwDBAK5EpQDBAC5EpYwDQQCAAIwBwMFAyoEC4Aw DQYJKoZIhvcNAQELBQADggEBAAliaSBPj3bA3T6ooPBODDiHKTQ3Il/F7wd0vFaQ frKvCXADzf+K6K+WA6l71zOeclT35JS7Xhs7u2uMYBtHkiJFbCuDcM5I9HaCqF/H usZ+om9fCI5nRxB8MOBjMxOy0Dv0VfQrQDd4zIKLRsBkp4xEdFgKi9yDCSPT4+de d6b2fPyIm0UFsF+IwXOfIpmLEi0xQhTQU4AhvgeM8IWb5WOO1rEtO2wP09hnqhD5 jiqomm42ONB5lt/B+asvRlKfmpcdwVjEL/2MYVLQvp7GTjkZEdANPyRjYN8rhuvK fLIojGZbQfzAsJsZX4P+IIwzukTaqSdxbRNB8NYJDlXxyqI= -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:26 2026 by rpki-client