This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer File: gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer (raw, json) Hash identifier: Ws29HSu/4v1OOyDxrzUiEFKro7mYqZdCUxdSKN79w8g= Subject key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1363398BA725C47461F5AC87F494D5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:20:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41435 AS: 42670 IP: 79.110.128.0/20 IP: 91.193.32.0/22 IP: 176.104.0.0/18 IP: 194.9.36.0/23 IP: 213.109.80.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:63:39:8b:a7:25:c4:74:61:f5:ac:87:f4:94:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=808c3a6c5cbff0739e438d05744405b16197b15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:96:1a:1f:ff:f6:4f:4c:31:01:b5:62:24:b2: 63:64:ab:ce:23:db:4f:c3:c3:79:64:f3:11:7b:c5: 77:02:a4:8a:37:7f:6e:85:86:da:d5:3d:b7:5a:c4: 0c:21:01:91:02:cc:bd:d7:f4:67:c9:ae:49:c5:31: c7:53:70:19:5e:24:2e:8e:25:0a:ac:ba:39:0a:88: 3c:5d:a6:f6:d9:ca:f6:68:39:11:f4:57:b2:f9:81: 91:0f:9e:5a:ba:10:9f:37:ba:52:93:d1:43:a6:54: 95:42:51:87:cb:76:5e:e4:95:dc:d4:53:5b:bb:02: 70:19:ca:c0:13:91:f9:57:b5:c1:5e:42:57:d1:31: 32:ad:6f:40:73:e6:95:f6:19:c4:26:16:b2:cb:85: 70:c0:be:be:02:f2:41:a5:73:54:2d:7f:51:f7:17: cb:53:f2:85:a9:ff:32:a8:35:1a:db:1a:b5:8c:b2: 9c:a1:70:d8:5b:a4:b6:53:41:6c:52:8f:dd:4d:a5: f3:0d:8a:71:1d:2d:46:7c:07:2d:90:26:b5:18:ea: 5b:8c:f9:e9:e0:c9:c7:7d:fd:61:c0:3a:0f:2f:d9: be:00:45:79:6a:34:69:a9:72:ce:0e:64:61:74:b5: 16:6f:7d:b6:1d:6d:3a:c5:41:46:71:7e:74:ca:65: 8d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.110.128.0/20 91.193.32.0/22 176.104.0.0/18 194.9.36.0/23 213.109.80.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41435 42670 Signature Algorithm: sha256WithRSAEncryption 8d:a4:fb:38:f4:83:02:30:ba:3d:1b:39:c0:df:46:23:54:b4: 49:d9:04:7b:be:01:e9:ef:90:5e:d0:11:30:f9:dc:e7:e3:cf: 64:1f:5a:17:75:a0:f3:f7:42:bd:a1:4b:f5:ff:45:30:85:a3: b6:ce:be:fb:92:aa:eb:05:22:24:2e:03:19:fb:c8:48:44:03: 48:eb:05:ff:09:26:53:5a:33:dc:da:9a:4d:e4:83:8f:ed:16: fc:07:14:22:86:6b:ab:c5:c6:e3:e2:71:c6:02:af:5e:f5:a0: 98:f2:90:cd:ba:3f:fc:ab:6d:fe:60:a0:fa:d2:1b:aa:b7:a6: 25:52:12:bc:0a:a3:ff:b0:57:f4:17:63:2e:dc:27:6b:44:4c: fd:52:86:24:21:49:11:01:54:27:33:29:6e:30:31:82:7a:4a: 76:51:8a:d9:65:e4:0f:82:69:a3:49:58:61:ae:79:ae:47:65: 7d:ab:87:30:41:33:e1:a6:0c:02:f9:e9:2b:d1:6a:38:4a:d6: 07:e6:6e:40:17:d2:58:c9:1f:c9:3c:c0:97:d2:5e:9e:a5:31: 21:64:6b:e7:b4:5b:cd:73:bf:59:6a:84:fd:a6:90:12:6c:21: 6c:4b:4e:4c:bd:55:8f:fa:e2:10:21:13:1a:96:bd:4e:59:5b: e3:4d:41:2f -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt8E2M5i6clxHRh9ayH9JTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDhjM2E2YzVjYmZmMDczOWU0MzhkMDU3NDQ0MDViMTYxOTdiMTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpYaH//2T0wxAbViJLJjZKvOI9tP w8N5ZPMRe8V3AqSKN39uhYba1T23WsQMIQGRAsy91/Rnya5JxTHHU3AZXiQujiUK rLo5Cog8Xab22cr2aDkR9Fey+YGRD55auhCfN7pSk9FDplSVQlGHy3Ze5JXc1FNb uwJwGcrAE5H5V7XBXkJX0TEyrW9Ac+aV9hnEJhayy4VwwL6+AvJBpXNULX9R9xfL U/KFqf8yqDUa2xq1jLKcoXDYW6S2U0FsUo/dTaXzDYpxHS1GfActkCa1GOpbjPnp 4MnHff1hwDoPL9m+AEV5ajRpqXLODmRhdLUWb322HW06xUFGcX50ymWNIQIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFICMOmxcv/BznkONBXREBbFhl7FbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkLzY5OGU0 ZS0wYTM5LTQxNmItYWZmZS02MTgxOWM0ODBjYmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvNjk4ZTRl LTBhMzktNDE2Yi1hZmZlLTYxODE5YzQ4MGNiZS8xL2dJdzZiRnlfOEhPZVE0MEZk RVFGc1dHWHNWcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAkBAIAATAeAwQET26AAwQCW8EgAwQGsGgAAwQBwgkkAwQE1W1Q MB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCh2wIDAKauMA0GCSqGSIb3DQEBCwUA A4IBAQCNpPs49IMCMLo9GznA30YjVLRJ2QR7vgHp75Be0BEw+dzn489kH1oXdaDz 90K9oUv1/0UwhaO2zr77kqrrBSIkLgMZ+8hIRANI6wX/CSZTWjPc2ppN5IOP7Rb8 BxQihmurxcbj4nHGAq9e9aCY8pDNuj/8q23+YKD60huqt6YlUhK8CqP/sFf0F2Mu 3CdrREz9UoYkIUkRAVQnMyluMDGCekp2UYrZZeQPgmmjSVhhrnmuR2V9q4cwQTPh pgwC+ekr0Wo4StYH5m5AF9JYyR/JPMCX0l6epTEhZGvntFvNc79ZaoT9ppASbCFs S05MvVWP+uIQIRMalr1OWVvjTUEv -----END CERTIFICATE-----Generated at Mon Jan 26 01:54:49 2026 by rpki-client