This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer File: gFPZtR9HqlX55ScEdUhp9VNrrkw.cer (raw, json) Hash identifier: PrXE6qozs/b7RcPlAhar9qHwhnojswi6BrRjUrasDLg= Subject key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F13904BD2DB73141B60087CCC880708 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.113.9.0/24 IP: 2a12:9340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:90:4b:d2:db:73:14:1b:60:08:7c:cc:88:07:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8053d9b51f47aa55f9e52704754869f5536bae4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cf:95:fa:8e:5c:c8:83:d3:32:13:75:86:f5: 38:ae:df:7a:7f:53:d4:e0:65:da:6e:92:62:79:d7: 2e:11:78:e9:e2:ff:0c:a6:3c:f2:3e:88:35:af:97: e6:f1:25:6d:b0:8a:54:cb:d4:a8:ab:b2:52:ac:cd: 0f:13:63:dd:54:c0:04:2a:ae:b5:19:c3:8f:f4:a3: 39:e4:d5:c3:bc:35:c3:0e:eb:55:28:f8:38:36:50: 5f:bd:c4:91:60:6b:c6:9d:07:15:0b:25:8d:61:be: 3d:73:8c:8f:42:14:c6:3c:01:d7:48:6a:6e:1d:c7: c6:13:cb:23:40:49:7b:0e:f5:b9:27:2a:25:3f:be: 1e:11:31:ad:97:89:36:56:87:83:fa:d8:b7:71:30: 81:31:8d:d2:75:c1:3d:c4:0b:78:2a:a5:1c:b1:9f: cc:86:15:77:4b:92:dc:51:32:06:3a:0b:39:bf:01: b0:00:9d:eb:e3:21:42:7b:70:42:f7:1a:27:cf:9c: 74:9e:ae:3e:c8:27:30:0b:d0:b5:83:34:4e:24:fb: e2:ce:0d:b9:a1:60:73:2f:a0:a7:61:e3:9e:4f:dc: 6f:93:b6:1e:4b:b3:89:fe:dc:ac:88:2d:31:31:1b: 92:85:6f:d0:ef:bd:cb:9a:60:bb:b2:d7:9c:14:ad: a0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.9.0/24 IPv6: 2a12:9340::/29 Signature Algorithm: sha256WithRSAEncryption 4d:7b:ab:0e:91:e9:2d:50:3d:47:f7:8a:bd:18:c2:7f:a3:e1: c8:a3:ca:be:13:12:3b:cc:47:16:40:49:65:16:f6:fb:b2:f8: fa:e1:5d:b9:08:51:21:22:0f:32:04:f7:eb:fa:e7:60:88:11: 21:23:90:2c:8f:f9:38:cd:9f:8c:07:ea:b8:05:5b:31:a5:7b: 8b:a9:50:ea:d4:91:06:dd:ea:ea:ac:1a:1d:25:ac:2e:02:1c: a1:4b:64:79:76:04:db:f1:f4:69:5a:d8:9e:34:23:fb:1f:21: c4:96:3f:d5:ea:85:1d:80:61:a5:7f:57:42:49:38:32:2a:d5: 9f:53:61:36:b2:e7:18:45:33:13:3a:45:b8:33:ba:5f:8d:b8: 8e:a1:57:1b:c2:10:87:8b:8e:d2:6d:7c:f3:e7:17:cc:93:7c: 34:34:38:0e:8e:63:1c:81:fc:45:4f:96:be:cd:0b:b3:83:71: 66:1a:54:02:67:32:04:44:bf:4f:e0:d8:7d:de:b5:dd:42:80: 97:49:62:74:e1:0f:e5:57:87:6f:e7:d1:fc:71:92:01:0b:c7: 75:d0:9d:24:14:70:1c:29:f2:04:58:4d:ae:7b:c4:0c:43:43: 62:f4:14:a3:e3:84:89:6b:74:30:f3:2a:e8:8d:6b:28:0b:9c: 21:6f:15:6f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/E5BL0ttzFBtgCHzMiAcIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDUzZDliNTFmNDdhYTU1ZjllNTI3MDQ3NTQ4NjlmNTUzNmJhZTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc+V+o5cyIPTMhN1hvU4rt96f1PU 4GXabpJiedcuEXjp4v8MpjzyPog1r5fm8SVtsIpUy9Soq7JSrM0PE2PdVMAEKq61 GcOP9KM55NXDvDXDDutVKPg4NlBfvcSRYGvGnQcVCyWNYb49c4yPQhTGPAHXSGpu HcfGE8sjQEl7DvW5JyolP74eETGtl4k2VoeD+ti3cTCBMY3SdcE9xAt4KqUcsZ/M hhV3S5LcUTIGOgs5vwGwAJ3r4yFCe3BC9xonz5x0nq4+yCcwC9C1gzROJPvizg25 oWBzL6CnYeOeT9xvk7YeS7OJ/tysiC0xMRuShW/Q773LmmC7stecFK2gmwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFIBT2bUfR6pV+eUnBHVIafVTa65MMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiL2E0NmJm NS1jYzhmLTQwYzctOTE1Yi1hMTVhZjVlOGYxM2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvYTQ2YmY1 LWNjOGYtNDBjNy05MTViLWExNWFmNWU4ZjEzYy8xL2dGUFp0UjlIcWxYNTVTY0Vk VWhwOVZOcnJrdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuXEJMA0EAgACMAcDBQMqEpNAMA0GCSqGSIb3 DQEBCwUAA4IBAQBNe6sOkektUD1H94q9GMJ/o+HIo8q+ExI7zEcWQEllFvb7svj6 4V25CFEhIg8yBPfr+udgiBEhI5Asj/k4zZ+MB+q4BVsxpXuLqVDq1JEG3erqrBod JawuAhyhS2R5dgTb8fRpWtieNCP7HyHElj/V6oUdgGGlf1dCSTgyKtWfU2E2sucY RTMTOkW4M7pfjbiOoVcbwhCHi47SbXzz5xfMk3w0NDgOjmMcgfxFT5a+zQuzg3Fm GlQCZzIERL9P4Nh93rXdQoCXSWJ04Q/lV4dv59H8cZIBC8d10J0kFHAcKfIEWE2u e8QMQ0Ni9BSj44SJa3Qw8yrojWsoC5whbxVv -----END CERTIFICATE-----Generated at Mon Jan 26 00:17:46 2026 by rpki-client