This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer File: gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer (raw, json) Hash identifier: 9XX7pG2/MNfzP0h1pYL0Hty9AeFyAN2z7fLI3HsNFGA= Subject key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35C1EA9CC2DD0BA0D0EA4E387655AE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48767 AS: 56645 IP: 92.42.97.0/24 IP: 185.140.52.0/22 IP: 2a07:1a80::/29 IP: 2a13:25c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c1:ea:9c:c2:dd:0b:a0:d0:ea:4e:38:76:55:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b1:14:eb:f9:84:cd:31:b3:19:33:7c:e3:98: 79:4b:18:64:e0:62:fc:26:01:53:79:e4:fa:81:2e: 5a:03:47:f6:61:9a:d7:46:f1:65:f0:d4:f3:72:c5: ad:72:a7:a7:00:16:79:ef:a8:40:3e:7e:dc:c2:b3: af:16:4e:2c:59:de:48:5a:a6:33:ae:bf:f7:90:35: 31:a9:4e:67:f2:c2:5e:a4:27:05:f2:9c:a0:8c:f0: 41:5b:70:b0:e7:cb:a3:46:83:64:98:e4:6d:37:53: 55:19:d6:92:e4:5f:0f:49:a7:8c:8c:d6:62:a9:88: 12:f9:6c:06:76:21:18:d9:ad:53:38:b7:35:97:c5: e8:fb:22:8d:27:b1:26:9e:8b:84:04:4e:e7:a2:c6: 99:16:27:76:dd:95:1e:c4:0e:57:44:3c:ab:f1:4c: 34:a8:b0:b8:90:0d:17:88:c0:2d:54:b0:4b:08:86: 42:27:ad:2a:de:0f:89:af:68:15:67:63:d9:df:86: 5c:2a:19:15:e6:6f:b4:44:ee:cc:0c:f0:fe:c5:df: 2f:41:d3:3b:5c:32:23:90:d4:15:8c:30:72:6f:16: 13:eb:d8:7b:8a:68:14:99:20:d2:18:49:98:fb:19: 1c:97:1d:17:db:b0:10:79:bd:6e:a7:a3:ef:bc:8f: 73:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.42.97.0/24 185.140.52.0/22 IPv6: 2a07:1a80::/29 2a13:25c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48767 56645 Signature Algorithm: sha256WithRSAEncryption 19:63:54:8d:c0:26:8c:d4:36:fd:3a:f6:01:37:ee:2d:4c:e0: dd:3f:17:91:cd:27:7b:75:f5:a2:10:bb:51:29:9e:74:76:50: 3d:0d:74:10:13:04:72:4c:5b:88:a9:bc:29:3a:b8:08:6d:b7: 75:9c:c3:3a:cf:08:10:0a:65:28:8c:0b:9e:21:52:ef:72:9d: 3d:6a:e6:19:14:ae:6a:fc:df:2d:8a:00:e7:07:13:a4:b8:6a: 42:d0:bc:87:5a:2d:2d:40:fc:4b:51:92:2e:09:b0:4c:83:4a: 92:c2:21:59:81:da:a8:4d:2a:97:53:d6:e1:e3:d3:64:97:ed: 19:ce:3a:99:59:b3:e8:9b:2a:0e:de:e7:ff:1d:83:ac:9b:b0: 14:12:4b:42:7f:ca:50:eb:bc:99:c5:4b:0c:6c:d2:41:ec:f1: ac:0b:d8:30:bf:14:fd:43:31:1a:2d:38:42:c4:96:8c:86:d4: 9c:00:8f:80:ca:61:e6:b5:57:3f:01:f8:91:80:2c:31:3d:4b: 21:b5:5b:30:b9:eb:4b:4d:33:57:cb:a2:c4:f9:83:1e:44:f6: 04:b0:0c:33:64:af:ad:d2:d6:5f:6c:4c:74:8c:62:19:c2:4c: 35:7d:5e:04:07:55:73:57:db:a7:59:3e:0a:04:b7:1a:7f:78: d4:d7:0e:b7 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt7NcHqnMLdC6DQ6k44dlWuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTZkMjIwYjJiNWE0NmZiZWIyN2VmMmQ5NjlmYTIxZGQzMzhjNWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLEU6/mEzTGzGTN845h5Sxhk4GL8 JgFTeeT6gS5aA0f2YZrXRvFl8NTzcsWtcqenABZ576hAPn7cwrOvFk4sWd5IWqYz rr/3kDUxqU5n8sJepCcF8pygjPBBW3Cw58ujRoNkmORtN1NVGdaS5F8PSaeMjNZi qYgS+WwGdiEY2a1TOLc1l8Xo+yKNJ7EmnouEBE7nosaZFid23ZUexA5XRDyr8Uw0 qLC4kA0XiMAtVLBLCIZCJ60q3g+Jr2gVZ2PZ34ZcKhkV5m+0RO7MDPD+xd8vQdM7 XDIjkNQVjDBybxYT69h7imgUmSDSGEmY+xkclx0X27AQeb1up6PvvI9zDwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFIFtIgsrWkb76yfvLZafoh3TOMWzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkLzk3MTMx MS1mNDdmLTQ2ZGItOGM1Ny1lOTc4MjA0MWNjMjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvOTcxMzEx LWY0N2YtNDZkYi04YzU3LWU5NzgyMDQxY2MyNC8xL2dXMGlDeXRhUnZ2ckotOHRs cC1pSGRNNHhiTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQAXCphAwQCuYw0MBQEAgACMA4DBQMqBxqAAwUD KhMlwDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAvn8CAwDdRTANBgkqhkiG9w0B AQsFAAOCAQEAGWNUjcAmjNQ2/Tr2ATfuLUzg3T8Xkc0ne3X1ohC7USmedHZQPQ10 EBMEckxbiKm8KTq4CG23dZzDOs8IEAplKIwLniFS73KdPWrmGRSuavzfLYoA5wcT pLhqQtC8h1otLUD8S1GSLgmwTINKksIhWYHaqE0ql1PW4ePTZJftGc46mVmz6Jsq Dt7n/x2DrJuwFBJLQn/KUOu8mcVLDGzSQezxrAvYML8U/UMxGi04QsSWjIbUnACP gMph5rVXPwH4kYAsMT1LIbVbMLnrS00zV8uixPmDHkT2BLAMM2SvrdLWX2xMdIxi GcJMNX1eBAdVc1fbp1k+CgS3Gn941NcOtw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:56 2026 by rpki-client