This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer File: gWZdbPJtk3SE27RjN0PgZX7M3F4.cer (raw, json) Hash identifier: Z7B3IM09H8nMp4ewED7Mrc/0NtWtHb3nAgR8V+RZVaU= Subject key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED3FD93549360B2ECAB1F1B3897CF5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207580 IP: 45.135.104.0/22 IP: 2a0e:6b40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:3f:d9:35:49:36:0b:2e:ca:b1:f1:b3:89:7c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81665d6cf26d937484dbb4633743e0657eccdc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d6:62:8c:3e:09:74:5d:ee:dc:63:ab:98:25: ef:be:2f:20:98:e3:33:fc:69:a1:da:1b:51:58:15: 36:b7:b4:56:03:ad:37:76:3a:8f:a9:84:be:a0:ef: 44:95:f3:8e:7d:7b:1a:aa:6c:12:d6:83:42:6f:d7: e0:32:02:d6:60:66:3b:a6:5d:df:2c:d6:4c:16:0c: 40:8f:b0:31:79:3e:93:ed:d0:06:4c:05:63:cd:d1: e9:5a:6d:8b:f4:ab:d5:74:94:a8:6e:8a:1f:84:7b: 59:12:23:35:93:44:8b:90:af:f8:26:d0:0a:a6:26: 58:7f:61:9e:8f:78:c1:34:4f:92:fb:ff:9a:20:9f: 08:5a:31:cf:fd:1f:f7:f0:a2:0a:b9:b5:f1:a1:da: a9:c1:0c:1b:ff:e4:84:79:2e:f4:9f:36:4c:c2:61: 89:bf:20:7f:82:b9:da:ae:09:7d:a8:71:1a:09:b2: f5:63:99:c1:c6:76:c6:53:34:62:6c:da:02:5e:fb: cb:5f:dd:27:4d:62:9b:c4:60:eb:5c:a0:9b:98:e1: 27:88:99:29:7e:1a:3e:6b:60:1f:ea:21:55:89:3c: 8e:51:89:ec:62:15:c2:4b:5c:d9:18:82:5b:3b:bd: ee:d1:f6:9e:cf:87:4b:6c:56:46:92:e0:0b:93:07: c6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.104.0/22 IPv6: 2a0e:6b40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207580 Signature Algorithm: sha256WithRSAEncryption 1d:f3:a3:e7:bb:52:d2:aa:f0:bc:dd:94:d7:b9:09:1b:14:2d: 79:2e:3f:f2:53:46:b9:f5:c8:8f:69:22:35:f3:fd:5a:e8:31: 2c:30:50:2e:74:26:46:cd:3c:67:79:90:41:17:55:54:19:a9: 69:0b:38:c8:99:5e:85:c1:b9:cd:4d:6a:73:e6:2f:e2:30:6f: c1:eb:08:99:4b:c1:96:f5:53:77:cc:f7:5a:bc:ee:5f:97:d7: 70:00:6e:93:a5:ae:66:66:52:87:23:6f:95:b2:8c:0e:ab:a3: c2:26:5b:6a:6d:94:05:c5:91:42:f3:70:4d:db:78:c1:ca:1d: 60:3e:79:bb:52:29:7b:9f:62:9f:46:81:11:fe:88:01:d9:df: 64:7a:4b:85:b9:40:b6:cb:31:89:8b:25:6f:ff:ef:ea:1e:e0: e6:48:87:75:7e:51:19:b9:33:7f:c1:96:0c:b5:3e:c1:e3:cb: 13:cd:4d:57:b4:7d:df:24:b8:25:14:5b:b6:ea:5b:3d:c8:c5: 94:37:3c:17:1b:71:23:b4:77:87:5e:8d:82:00:38:66:ab:5e: 56:c5:fb:f2:1e:00:c2:f9:14:40:0d:6f:9e:4b:f5:4e:e5:4f: 99:7e:23:f4:9c:df:da:d4:af:d3:91:e6:b9:0d:92:53:88:4d: 47:14:9f:b9 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87T/ZNUk2Cy7KsfGziXz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTY2NWQ2Y2YyNmQ5Mzc0ODRkYmI0NjMzNzQzZTA2NTdlY2NkYzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdZijD4JdF3u3GOrmCXvvi8gmOMz /Gmh2htRWBU2t7RWA603djqPqYS+oO9ElfOOfXsaqmwS1oNCb9fgMgLWYGY7pl3f LNZMFgxAj7AxeT6T7dAGTAVjzdHpWm2L9KvVdJSoboofhHtZEiM1k0SLkK/4JtAK piZYf2Gej3jBNE+S+/+aIJ8IWjHP/R/38KIKubXxodqpwQwb/+SEeS70nzZMwmGJ vyB/grnargl9qHEaCbL1Y5nBxnbGUzRibNoCXvvLX90nTWKbxGDrXKCbmOEniJkp fho+a2Af6iFViTyOUYnsYhXCS1zZGIJbO73u0faez4dLbFZGkuALkwfG7QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIFmXWzybZN0hNu0YzdD4GV+zNxeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzLzAwZjY2 Yi1mZTgzLTRjY2QtODJlZS1jNTZmMDVkYTNkMjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvMDBmNjZi LWZlODMtNGNjZC04MmVlLWM1NmYwNWRhM2QyNS8xL2dXWmRiUEp0azNTRTI3UmpO MFBnWlg3TTNGNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLYdoMA0EAgACMAcDBQAqDmtAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMq3DANBgkqhkiG9w0BAQsFAAOCAQEAHfOj57tS0qrw vN2U17kJGxQteS4/8lNGufXIj2kiNfP9WugxLDBQLnQmRs08Z3mQQRdVVBmpaQs4 yJlehcG5zU1qc+Yv4jBvwesImUvBlvVTd8z3WrzuX5fXcABuk6WuZmZShyNvlbKM DqujwiZbam2UBcWRQvNwTdt4wcodYD55u1Ipe59in0aBEf6IAdnfZHpLhblAtssx iYslb//v6h7g5kiHdX5RGbkzf8GWDLU+wePLE81NV7R93yS4JRRbtupbPcjFlDc8 FxtxI7R3h16NggA4ZqteVsX78h4AwvkUQA1vnkv1TuVPmX4j9Jzf2tSv05HmuQ2S U4hNRxSfuQ== -----END CERTIFICATE-----Generated at Mon Jan 26 15:03:42 2026 by rpki-client