This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer File: gHmvy6Wodi-3n05eDXo17oTNPfQ.cer (raw, json) Hash identifier: WxGn6qB/Paar39hAGfh+D+SRWDa7D55Yh1u5njBjgSo= Subject key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED47B34D7D1FC96AC81C2DD1214378 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21346 IP: 193.19.196.0/22 IP: 194.125.246.0/23 IP: 195.22.158.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:47:b3:4d:7d:1f:c9:6a:c8:1c:2d:d1:21:43:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c0:d0:7a:07:68:1a:4b:5e:84:6c:cc:aa:8a: 3e:40:a7:e2:13:ad:98:da:0d:31:43:74:18:04:41: 57:29:fa:c0:77:f1:6b:d8:5b:e4:8a:88:bd:9c:7f: 16:0a:04:42:e6:b8:ce:c8:be:0c:67:35:85:a5:af: ec:22:65:bb:ab:e3:c7:21:24:99:9e:cf:8d:0e:9e: 36:a0:3f:fb:4b:ca:37:a4:5f:f6:23:61:84:db:62: 21:99:4c:50:f9:d8:26:f3:e3:a8:bb:0f:33:b8:92: 96:62:6f:65:d3:30:d3:c3:cd:85:09:81:be:cf:14: b3:e6:1b:84:7d:58:07:4b:15:b8:77:5e:98:11:f6: d4:69:10:bd:b1:51:46:3c:b1:96:b1:d1:45:e9:00: 10:bf:b7:d1:d5:5e:a4:c4:66:b5:1d:f2:70:8d:7a: 25:1c:3a:aa:51:56:4d:b5:01:7c:68:f7:7a:77:7f: fd:3b:f5:a6:ff:d1:0b:ee:73:60:03:c3:a3:40:7a: ed:6b:2a:9c:34:c3:1f:63:7e:4f:96:ed:bd:1c:00: 9f:25:b3:ff:51:53:bf:21:f6:cc:06:87:77:ad:b1: e1:48:78:a7:1b:b5:28:46:30:e2:57:12:fd:2e:50: d7:2a:ed:90:31:78:6d:13:4a:38:a1:89:24:e2:c5: 14:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.19.196.0/22 194.125.246.0/23 195.22.158.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21346 Signature Algorithm: sha256WithRSAEncryption 7b:30:4d:d8:8e:09:0c:8c:76:18:09:00:a6:dd:c8:38:91:79: e0:87:8a:24:54:45:ee:ee:f6:ab:49:e7:52:85:56:31:8a:bd: 89:68:94:ca:f2:b4:0a:55:55:9f:04:b3:1c:6d:2a:80:20:17: d9:05:ae:c6:28:4f:61:09:97:e8:51:05:a6:e1:c4:a6:f8:6e: 56:a7:60:bf:fa:52:5e:01:13:17:17:35:3a:a2:b2:79:a6:9d: 10:92:6e:7c:97:51:a8:8d:b8:f6:e3:b8:d5:9d:b3:e2:87:fd: 00:6c:0d:77:e9:e2:5b:24:66:f4:bd:83:35:b7:09:4a:37:ae: 84:0b:0a:8f:31:f7:5e:c7:dc:15:7c:74:f6:91:23:15:7a:da: 4c:99:c5:65:53:a7:95:de:46:ec:97:e8:17:c5:4b:41:c2:01: 68:df:93:a2:69:85:15:22:ad:e9:c4:40:44:a7:1e:35:cb:90: 8a:b1:44:13:d3:f2:9a:28:02:43:0b:99:c7:0c:22:bd:6b:a1: b2:f3:a8:2e:af:c6:f8:0d:70:09:0b:5d:c6:06:47:58:6e:ef: 19:c1:e3:7e:e8:69:f2:b0:87:75:01:69:5f:2a:68:6f:d3:f5: 78:4f:72:43:eb:83:01:3a:31:51:49:94:22:36:13:6f:7c:1c: 30:82:64:3a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt87UezTX0fyWrIHC3RIUN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDc5YWZjYmE1YTg3NjJmYjc5ZjRlNWUwZDdhMzVlZTg0Y2QzZGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sDQegdoGktehGzMqoo+QKfiE62Y 2g0xQ3QYBEFXKfrAd/Fr2Fvkioi9nH8WCgRC5rjOyL4MZzWFpa/sImW7q+PHISSZ ns+NDp42oD/7S8o3pF/2I2GE22IhmUxQ+dgm8+Oouw8zuJKWYm9l0zDTw82FCYG+ zxSz5huEfVgHSxW4d16YEfbUaRC9sVFGPLGWsdFF6QAQv7fR1V6kxGa1HfJwjXol HDqqUVZNtQF8aPd6d3/9O/Wm/9EL7nNgA8OjQHrtayqcNMMfY35Plu29HACfJbP/ UVO/IfbMBod3rbHhSHinG7UoRjDiVxL9LlDXKu2QMXhtE0o4oYkk4sUUKQIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFIB5r8ulqHYvt59OXg16Ne6EzT30MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1L2Q1ZWI2 Zi1iNzgxLTRkNTItODI4My1kMmUxMGM5NzY0NWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvZDVlYjZm LWI3ODEtNGQ1Mi04MjgzLWQyZTEwYzk3NjQ1Zi8xL2dIbXZ5NldvZGktM24wNWVE WG8xN29UTlBmUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQCwRPEAwQBwn32AwQBwxaeMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAlNiMA0GCSqGSIb3DQEBCwUAA4IBAQB7ME3YjgkMjHYYCQCm 3cg4kXngh4okVEXu7varSedShVYxir2JaJTK8rQKVVWfBLMcbSqAIBfZBa7GKE9h CZfoUQWm4cSm+G5Wp2C/+lJeARMXFzU6orJ5pp0Qkm58l1Gojbj247jVnbPih/0A bA136eJbJGb0vYM1twlKN66ECwqPMfdex9wVfHT2kSMVetpMmcVlU6eV3kbsl+gX xUtBwgFo35OiaYUVIq3pxEBEpx41y5CKsUQT0/KaKAJDC5nHDCK9a6Gy86gur8b4 DXAJC13GBkdYbu8ZweN+6GnysId1AWlfKmhv0/V4T3JD64MBOjFRSZQiNhNvfBww gmQ6 -----END CERTIFICATE-----Generated at Sun Jan 25 22:19:46 2026 by rpki-client