This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer File: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer (raw, json) Hash identifier: NAeKnzQLRrMattnDpxQZuvG2yBsospHwY6aVaSi3I0w= Subject key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE401183F8D227BFAA5D298D27A0D9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61992 IP: 45.89.22.0/24 IP: 2a14:e900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:40:11:83:f8:d2:27:bf:aa:5d:29:8d:27:a0:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a0:e3:bc:28:d8:b2:fa:c6:f0:87:b4:e8:37: 6d:4f:52:fa:41:82:97:c8:29:ba:7b:09:e0:3f:af: df:a9:67:a6:ee:bb:12:1a:10:f9:2d:14:42:5d:ac: dd:0e:95:7f:a1:4d:de:93:fc:cd:44:61:07:73:a0: bf:e3:15:f7:e0:ac:45:c1:6b:5b:f2:2e:62:d5:61: 66:3a:31:4a:cb:85:e2:f0:dc:e8:92:12:9e:1e:02: db:0b:ba:2b:d7:5d:a3:bb:19:5c:e8:d9:69:6f:4b: 0a:95:a8:1d:41:13:4e:12:cb:84:87:17:51:a5:f4: 64:67:34:d0:e9:48:d2:fe:d3:49:34:59:0e:45:f5: 1a:22:7e:a1:56:da:1b:fa:3a:60:a0:24:ff:3b:30: 83:5e:cd:44:dc:73:4a:01:e3:2d:66:46:62:15:7a: 86:97:86:48:0b:f0:f8:d0:ad:74:93:ad:5e:9e:48: d1:25:e2:e7:16:e8:1d:4f:ce:3c:3f:be:05:e1:1b: e5:8e:14:d9:32:3b:40:ad:e4:e4:be:95:c1:a5:93: 43:99:e2:ab:0b:c6:f9:43:90:08:36:a9:d2:43:89: 19:aa:9c:db:76:93:8d:89:37:a4:9e:11:15:3e:39: 04:4f:1e:c2:96:ba:08:5a:b6:79:fd:4a:4e:a1:1c: d6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.22.0/24 IPv6: 2a14:e900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61992 Signature Algorithm: sha256WithRSAEncryption 57:d5:0c:0e:d6:3f:44:8b:92:a7:54:08:96:b3:32:a1:04:71: e4:aa:67:15:f3:8b:c8:cb:a1:b4:4a:26:9c:61:69:fd:49:b4: 78:6c:5d:08:5b:71:b5:1c:56:15:d8:18:5e:7d:24:8e:44:35: b0:de:fa:9e:ca:82:b1:e6:44:92:ee:70:c1:62:76:2e:03:5b: e4:dc:b1:32:36:52:d5:5a:6f:fc:4e:cf:91:9c:a2:da:1d:3a: 79:34:3d:0b:81:12:94:15:d5:e8:3f:0a:6e:a1:cb:fe:2f:93: fa:52:62:c2:a9:b0:ea:9a:18:57:e6:3a:02:b3:d2:86:96:13: 81:01:0e:01:b5:66:77:77:be:61:81:17:03:b0:02:64:c3:b4: 3a:94:3c:57:95:5d:6a:99:f4:5b:d2:b8:a6:7b:d2:88:b9:97: 93:4e:f2:88:92:e2:a8:da:96:e9:ad:99:9a:4c:b9:c1:92:cc: a0:15:04:3e:43:c2:13:44:d7:a7:49:24:ef:90:4b:f1:bc:78: 9c:87:bc:54:6c:06:da:73:3e:8b:3a:60:e5:f9:82:21:d0:30: 6d:10:6f:3a:c8:8b:c8:35:33:4b:4f:cf:38:b0:34:2c:6d:4d: fe:27:21:7f:00:40:66:5f:db:df:a5:78:4e:b4:ec:7e:8a:ab: 15:8b:ba:f4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87kARg/jSJ7+qXSmNJ6DZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGZmZDlkZjQ1NmFkYmUzYjFlNjYxZWUxNTYyNjg2NWZlMTY4OGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqDjvCjYsvrG8Ie06DdtT1L6QYKX yCm6ewngP6/fqWem7rsSGhD5LRRCXazdDpV/oU3ek/zNRGEHc6C/4xX34KxFwWtb 8i5i1WFmOjFKy4Xi8NzokhKeHgLbC7or112juxlc6Nlpb0sKlagdQRNOEsuEhxdR pfRkZzTQ6UjS/tNJNFkORfUaIn6hVtob+jpgoCT/OzCDXs1E3HNKAeMtZkZiFXqG l4ZIC/D40K10k61enkjRJeLnFugdT848P74F4RvljhTZMjtAreTkvpXBpZNDmeKr C8b5Q5AINqnSQ4kZqpzbdpONiTeknhEVPjkETx7ClroIWrZ5/UpOoRzWLwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFID/2d9FatvjseZh7hViaGX+FojIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2LzkwMGNl Zi02NDgxLTRmZjgtOGUwNC0zY2I4ZDgxN2UwMjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvOTAwY2Vm LTY0ODEtNGZmOC04ZTA0LTNjYjhkODE3ZTAyNy8xL2dQX1ozMFZxMi1PeDVtSHVG V0pvWmY0V2lNZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQALVkWMA0EAgACMAcDBQMqFOkAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDyKDANBgkqhkiG9w0BAQsFAAOCAQEAV9UMDtY/RIuS p1QIlrMyoQRx5KpnFfOLyMuhtEomnGFp/Um0eGxdCFtxtRxWFdgYXn0kjkQ1sN76 nsqCseZEku5wwWJ2LgNb5NyxMjZS1Vpv/E7PkZyi2h06eTQ9C4ESlBXV6D8KbqHL /i+T+lJiwqmw6poYV+Y6ArPShpYTgQEOAbVmd3e+YYEXA7ACZMO0OpQ8V5Vdapn0 W9K4pnvSiLmXk07yiJLiqNqW6a2Zmky5wZLMoBUEPkPCE0TXp0kk75BL8bx4nIe8 VGwG2nM+izpg5fmCIdAwbRBvOsiLyDUzS0/POLA0LG1N/ichfwBAZl/b36V4TrTs foqrFYu69A== -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:03 2026 by rpki-client