This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer File: gNYIoUEYsajc3eu7QPluzUj4XHE.cer (raw, json) Hash identifier: KPGZiGyuVBhXV61NlFvUrKohhlk715Mbe2l/mFAUg3c= Subject key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB8D8E2FC8DC8C2E6F7E9B2C7D0FDB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.228.92.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8d:8e:2f:c8:dc:8c:2e:6f:7e:9b:2c:7d:0f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:95:db:d3:2e:9a:32:17:f5:53:2f:5b:97:92: 5e:f1:8d:45:b7:16:0a:04:f7:12:c3:55:61:67:30: 89:10:f7:de:97:d5:4e:af:10:b8:33:dc:c2:71:82: a5:68:4a:54:32:39:1a:e3:c6:47:95:21:5f:a1:77: c1:1d:3b:42:a9:e8:d9:aa:59:b4:ab:f8:44:8e:3f: ed:aa:2e:e0:ca:f9:d9:51:65:da:42:31:e3:75:66: e6:fe:b9:4c:2a:27:d2:ff:67:2f:3a:24:17:03:76: 34:97:ff:a2:d3:36:6e:66:cd:a2:38:58:77:cc:6b: 9d:af:c4:5e:51:45:46:78:c1:58:97:0a:d2:19:de: 34:f5:33:e1:5f:04:27:05:a5:59:1d:89:bc:ea:50: dc:62:7a:7a:af:54:fd:0b:31:21:46:1e:38:ec:25: c2:bf:12:75:ed:b7:12:db:65:f1:36:7d:9f:d9:dc: 5c:9d:8a:d3:2b:a8:79:b6:ef:ee:8e:4f:a4:02:ff: 91:aa:20:1a:40:a6:38:ae:25:70:dd:b2:0f:bc:6a: 6d:cc:66:7f:91:a2:b3:93:19:f2:54:1a:d8:33:60: eb:f5:c8:0e:87:6e:e7:2d:08:95:d6:56:15:e7:3f: 35:28:c7:8b:dd:5d:b0:11:0e:a5:c9:fd:4b:6a:db: 6d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.92.0/22 Signature Algorithm: sha256WithRSAEncryption 30:b2:8e:a0:17:da:9c:fc:62:05:6a:16:a7:53:9c:3f:c9:57: 78:49:72:ec:77:be:ed:f7:50:c5:1e:36:29:43:0c:95:57:21: 12:65:57:7b:0b:d2:6f:33:8e:49:be:30:15:ac:b3:b8:7a:22: 06:55:cc:43:8f:c4:7b:f5:a9:b2:d4:19:e4:8d:0b:a0:fb:2f: cb:9c:3c:52:37:69:1c:a4:11:fc:b1:6d:3e:c7:0a:47:fc:00: 93:c9:51:e4:b3:e6:d2:14:92:18:61:ab:6a:23:92:7a:cd:50: b3:77:85:ff:68:02:79:d4:4e:6d:44:a6:b0:77:2e:41:43:07: 47:61:34:42:66:ce:07:5c:6d:5e:b6:7b:f6:66:b6:8a:d5:56: 5e:ae:25:b6:68:8b:06:54:da:6b:9a:4e:91:95:af:b7:f0:b0: 03:66:46:3a:58:91:2a:17:26:b8:84:07:00:38:80:32:b5:68: b3:1a:b6:78:27:bc:4c:a8:2d:b2:ec:9e:dd:4a:50:30:52:32: 49:f4:d2:e5:2e:b7:e2:80:cb:b9:64:17:2d:0d:a1:fb:70:61: e3:6f:da:cf:1f:b5:1c:20:59:69:38:7e:4d:01:cb:4e:c0:6a: 09:b2:61:7a:05:0b:be:4b:e6:bc:3f:72:30:14:7d:66:a3:67: 40:28:4d:89 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt2642OL8jcjC5vfpssfQ/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGQ2MDhhMTQxMThiMWE4ZGNkZGViYmI0MGY5NmVjZDQ4Zjg1YzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JXb0y6aMhf1Uy9bl5Je8Y1FtxYK BPcSw1VhZzCJEPfel9VOrxC4M9zCcYKlaEpUMjka48ZHlSFfoXfBHTtCqejZqlm0 q/hEjj/tqi7gyvnZUWXaQjHjdWbm/rlMKifS/2cvOiQXA3Y0l/+i0zZuZs2iOFh3 zGudr8ReUUVGeMFYlwrSGd409TPhXwQnBaVZHYm86lDcYnp6r1T9CzEhRh447CXC vxJ17bcS22XxNn2f2dxcnYrTK6h5tu/ujk+kAv+RqiAaQKY4riVw3bIPvGptzGZ/ kaKzkxnyVBrYM2Dr9cgOh27nLQiV1lYV5z81KMeL3V2wEQ6lyf1LatttOwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIDWCKFBGLGo3N3ru0D5bs1I+FxxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyLzAxMjEz MC04MTAzLTRjMjUtOTNiYS05OTI4ZGQzZjJmODIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvMDEyMTMw LTgxMDMtNGMyNS05M2JhLTk5MjhkZDNmMmY4Mi8xL2dOWUlvVUVZc2FqYzNldTdR UGx1elVqNFhIRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCueRcMA0GCSqGSIb3DQEBCwUAA4IBAQAwso6g F9qc/GIFahanU5w/yVd4SXLsd77t91DFHjYpQwyVVyESZVd7C9JvM45JvjAVrLO4 eiIGVcxDj8R79amy1BnkjQug+y/LnDxSN2kcpBH8sW0+xwpH/ACTyVHks+bSFJIY YatqI5J6zVCzd4X/aAJ51E5tRKawdy5BQwdHYTRCZs4HXG1etnv2ZraK1VZeriW2 aIsGVNprmk6Rla+38LADZkY6WJEqFya4hAcAOIAytWizGrZ4J7xMqC2y7J7dSlAw UjJJ9NLlLrfigMu5ZBctDaH7cGHjb9rPH7UcIFlpOH5NActOwGoJsmF6BQu+S+a8 P3IwFH1mo2dAKE2J -----END CERTIFICATE-----Generated at Sun Jan 25 20:26:43 2026 by rpki-client