This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer File: gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer (raw, json) Hash identifier: rf4Vwg0LCRWSJLwwyuJWrJtgRek7h0XVuQ5yuTh8yMc= Subject key identifier: 81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3881E89353D3E021C84EE49CABB492 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48203 AS: 61391 IP: 2a0c:b100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:81:e8:93:53:d3:e0:21:c8:4e:e4:9c:ab:b4:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=813e051cb831d1989607bb76c0bc5693ff947b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:68:3b:2c:79:d7:c9:92:b0:ff:0d:66:ed:1c: 4d:87:d5:e8:ca:1c:0d:1b:e2:68:fc:53:ac:b4:8d: 0b:96:fe:08:a1:b6:86:b2:7a:18:b6:d9:ae:7f:0c: c7:0e:68:8a:58:65:dc:42:61:82:ee:f6:5e:88:3c: 2e:75:41:af:34:c9:7e:21:3b:69:1a:b5:df:d4:d0: 83:81:c9:87:a4:fe:4e:8a:00:6a:f4:1d:1d:bf:e0: e0:25:74:6b:a3:19:4c:74:1f:ee:97:c8:ae:2a:b7: 28:75:3c:63:cf:58:2f:2a:10:35:e9:1a:d7:aa:b0: d7:df:64:19:a3:dc:aa:09:69:21:75:84:0f:a8:35: 07:01:eb:3b:17:4f:8c:37:2b:a8:e9:05:80:57:ba: 5c:14:f5:a6:60:da:13:b6:95:c2:31:63:1e:03:c1: 04:76:94:da:77:d6:f3:21:23:fe:8f:7d:43:14:71: 10:ac:c8:d3:c5:2d:2c:51:c3:26:ca:08:bb:79:65: 2f:c8:7c:ba:43:a3:f5:f6:a5:eb:64:7c:a5:7a:a5: 53:ac:76:18:3d:d7:a1:75:c2:0a:ff:c3:23:78:d6: db:4d:d2:cb:a9:fd:59:ed:e1:2d:ba:67:14:7a:8f: 18:b2:22:e3:f0:d8:32:1c:18:d8:23:3b:86:a0:71: 7d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48203 61391 Signature Algorithm: sha256WithRSAEncryption 4d:9c:fe:63:3a:1d:b0:82:3b:02:7e:f4:b7:ad:fe:93:09:a5: ca:e5:cf:54:93:20:6e:a6:e7:ec:ef:63:65:94:11:25:27:7c: b7:0d:7f:7e:d8:39:18:40:fd:01:ce:20:52:4f:a9:15:6c:1d: 2b:0a:c1:91:a5:a9:0b:a6:b6:06:5d:08:d5:30:72:a0:b3:1f: a3:0d:c7:ca:cd:56:f5:2a:56:b1:c3:78:8d:04:3c:3d:08:2d: ce:9d:da:bf:d1:d3:42:68:01:33:35:99:4b:27:53:f9:71:f0: a6:d0:aa:6c:5d:08:8f:69:ab:cb:94:a7:9c:1d:05:d6:ab:a4: ff:61:db:f4:ae:05:62:18:32:5e:f1:88:56:fc:5d:a0:08:50: 8a:0f:92:fb:de:3b:1e:b4:1e:7a:51:05:47:cb:03:20:ac:2f: 61:74:19:6a:43:1f:a8:69:09:0a:00:f4:a9:54:c0:02:d1:64: bd:9d:70:41:b0:33:49:f0:07:1d:99:56:31:9d:a4:89:0a:d1: 28:54:8b:78:d0:9b:1b:73:d9:52:b7:99:e1:75:cc:e5:7a:f3: ad:a2:c8:0a:04:35:10:45:a1:18:65:2c:e4:b1:fa:59:70:1f: 50:5d:0b:54:1d:88:67:af:5d:80:17:82:fc:fa:63:7c:2c:4e: e1:12:6a:af -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt+OIHok1PT4CHITuScq7SSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTNlMDUxY2I4MzFkMTk4OTYwN2JiNzZjMGJjNTY5M2ZmOTQ3YjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2g7LHnXyZKw/w1m7RxNh9XoyhwN G+Jo/FOstI0Llv4IobaGsnoYttmufwzHDmiKWGXcQmGC7vZeiDwudUGvNMl+ITtp GrXf1NCDgcmHpP5OigBq9B0dv+DgJXRroxlMdB/ul8iuKrcodTxjz1gvKhA16RrX qrDX32QZo9yqCWkhdYQPqDUHAes7F0+MNyuo6QWAV7pcFPWmYNoTtpXCMWMeA8EE dpTad9bzISP+j31DFHEQrMjTxS0sUcMmygi7eWUvyHy6Q6P19qXrZHyleqVTrHYY PdehdcIK/8MjeNbbTdLLqf1Z7eEtumcUeo8YsiLj8NgyHBjYIzuGoHF9vQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFIE+BRy4MdGYlge7dsC8VpP/lHtTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5L2U0NWFk Ni1lNWFlLTQ4MTktOWYyNC1mNTc3YWE0NmRlODMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvZTQ1YWQ2 LWU1YWUtNDgxOS05ZjI0LWY1NzdhYTQ2ZGU4My8xL2dUNEZITGd4MFppV0I3dDJ3 THhXa18tVWUxTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKgyxADAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMAvEsCAwDvzzANBgkqhkiG9w0BAQsFAAOCAQEATZz+YzodsII7An70t63+kwml yuXPVJMgbqbn7O9jZZQRJSd8tw1/ftg5GED9Ac4gUk+pFWwdKwrBkaWpC6a2Bl0I 1TByoLMfow3Hys1W9SpWscN4jQQ8PQgtzp3av9HTQmgBMzWZSydT+XHwptCqbF0I j2mry5SnnB0F1quk/2Hb9K4FYhgyXvGIVvxdoAhQig+S+947HrQeelEFR8sDIKwv YXQZakMfqGkJCgD0qVTAAtFkvZ1wQbAzSfAHHZlWMZ2kiQrRKFSLeNCbG3PZUreZ 4XXM5XrzraLICgQ1EEWhGGUs5LH6WXAfUF0LVB2IZ69dgBeC/PpjfCxO4RJqrw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:46:06 2026 by rpki-client