This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer File: gDCVaDspR93Unu6sDb2eqVSuoUQ.cer (raw, json) Hash identifier: 1UHxmUScMXI1HOz5fMz3HJnUksCbPeJnC9lG6rT3sUo= Subject key identifier: 80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B356D7FC5F8B6F38139BBBDC173C2A3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.33.254.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:6d:7f:c5:f8:b6:f3:81:39:bb:bd:c1:73:c2:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=803095683b2947ddd49eeeac0dbd9ea954aea144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:61:9e:f6:4c:7d:8c:bf:94:dc:8b:2c:ed:44: 0d:87:9e:62:54:ba:c3:c8:8d:a4:f5:47:2c:34:67: f1:89:a4:bb:02:34:20:c3:17:51:88:1c:e3:e3:6b: 9e:2a:e0:0d:0a:25:44:cd:de:7a:90:52:59:44:6c: a2:a8:9d:d8:82:26:cc:56:bc:eb:cd:16:9c:21:a4: ad:c3:58:de:fa:10:f7:06:e9:61:d3:42:7c:e9:93: a0:e9:49:76:92:92:60:c8:4c:ff:6d:ce:15:34:88: 5b:f0:ab:4f:69:bd:7d:5a:cf:57:65:ff:42:85:20: 4e:a0:a6:08:25:6a:73:2e:a1:16:cf:48:fc:93:1e: a2:13:8a:8b:11:c3:a2:d8:75:38:6a:75:11:09:53: 7d:75:97:85:92:1a:58:9f:9c:9a:96:20:7c:77:9d: 09:da:6a:9d:6a:d2:f3:49:a7:15:c2:b5:9a:a2:e4: 82:c3:50:21:a0:42:c7:d4:91:6f:14:11:a6:e7:f3: 74:25:b9:36:47:9b:a6:5c:4a:5e:20:31:de:14:42: 3e:8f:a7:f4:0f:5c:e8:32:84:2f:6d:78:c2:33:a7: 45:af:cb:20:7e:c0:d9:f4:9e:35:9b:fd:e1:a5:40: 58:aa:19:c9:a8:43:05:d9:af:bf:c9:67:ad:09:89: d5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.254.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:80:0b:2e:2c:35:94:09:7f:86:bf:61:87:a0:af:7b:3d:b7: a3:35:d9:c7:09:d0:99:bc:f5:f4:37:9d:42:98:f4:cb:07:b5: d0:d5:22:9d:2b:b9:a4:15:26:79:ef:49:4c:aa:c1:c9:b9:1f: 4d:0a:1a:87:d6:d1:50:33:1d:80:cf:6b:2b:4b:69:8a:1e:24: 11:b5:53:81:b4:48:79:38:7e:84:ba:e9:5b:a7:55:ba:59:eb: 83:1a:3b:dc:d6:47:9b:04:3a:59:da:23:d4:4e:f1:63:15:cc: 2d:f3:35:da:53:22:a4:f9:70:ce:e8:a1:90:ac:b7:37:7a:d7: 69:2a:13:bb:04:63:1d:a5:45:d3:dc:77:d1:c0:b9:6d:6a:e0: c0:fe:bc:ab:9a:06:2d:fa:83:70:d4:5d:e2:71:a9:81:26:18: 95:c6:76:8a:68:9d:b5:01:db:9a:f7:50:2d:20:50:bd:ad:b9: be:98:df:d3:b2:d8:c5:ca:f6:b5:97:40:0c:67:18:1d:8e:4c: b7:8b:f9:0e:48:27:73:e9:f0:f5:ad:c0:ba:33:e7:dc:fd:75: 38:c0:9c:d1:7c:c4:e9:44:a4:53:5f:7d:71:46:95:35:65:fb: d8:01:90:94:e4:e5:5a:4a:e5:21:50:45:82:f9:c4:a5:73:f1: 53:23:e7:e2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7NW1/xfi284E5u73Bc8KjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDMwOTU2ODNiMjk0N2RkZDQ5ZWVlYWMwZGJkOWVhOTU0YWVhMTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGGe9kx9jL+U3Iss7UQNh55iVLrD yI2k9UcsNGfxiaS7AjQgwxdRiBzj42ueKuANCiVEzd56kFJZRGyiqJ3YgibMVrzr zRacIaStw1je+hD3Bulh00J86ZOg6Ul2kpJgyEz/bc4VNIhb8KtPab19Ws9XZf9C hSBOoKYIJWpzLqEWz0j8kx6iE4qLEcOi2HU4anURCVN9dZeFkhpYn5yaliB8d50J 2mqdatLzSacVwrWaouSCw1AhoELH1JFvFBGm5/N0Jbk2R5umXEpeIDHeFEI+j6f0 D1zoMoQvbXjCM6dFr8sgfsDZ9J41m/3hpUBYqhnJqEMF2a+/yWetCYnVBwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIAwlWg7KUfd1J7urA29nqlUrqFEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmLzM5OTI2 OS01ZTE0LTRkNWUtYTFiYy02YmRkMzQ3OGQxMGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvMzk5MjY5 LTVlMTQtNGQ1ZS1hMWJjLTZiZGQzNDc4ZDEwYy8xL2dEQ1ZhRHNwUjkzVW51NnNE YjJlcVZTdW9VUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwSH+MA0GCSqGSIb3DQEBCwUAA4IBAQB8gAsu LDWUCX+Gv2GHoK97PbejNdnHCdCZvPX0N51CmPTLB7XQ1SKdK7mkFSZ570lMqsHJ uR9NChqH1tFQMx2Az2srS2mKHiQRtVOBtEh5OH6Euulbp1W6WeuDGjvc1kebBDpZ 2iPUTvFjFcwt8zXaUyKk+XDO6KGQrLc3etdpKhO7BGMdpUXT3HfRwLltauDA/ryr mgYt+oNw1F3icamBJhiVxnaKaJ21Adua91AtIFC9rbm+mN/TstjFyva1l0AMZxgd jky3i/kOSCdz6fD1rcC6M+fc/XU4wJzRfMTpRKRTX31xRpU1ZfvYAZCU5OVaSuUh UEWC+cSlc/FTI+fi -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:07 2026 by rpki-client