This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer File: gXFLKnOMo96ukVr4fDqRxhPhvEk.cer (raw, json) Hash identifier: jTheW9Uy2kInbPOIwgzSnjMVvI4kCzatGKdUVSOMZ/M= Subject key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B8E7FC7A6C45BCB4681008BBDEDE7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 152.89.197.0/24 IP: 212.6.47.0/24 IP: 2a0e:9780::/29 IP: 2a11:a7c0::/29 IP: 2a11:a840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8e:7f:c7:a6:c4:5b:cb:46:81:00:8b:bd:ed:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81714b2a738ca3deae915af87c3a91c613e1bc49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:5f:4b:13:4b:a7:b5:36:6b:3d:e9:d8:f8: 4d:62:fb:4b:91:d3:de:4b:56:5c:93:b0:07:93:1b: 5d:5a:51:61:dd:06:7a:e7:0d:59:ba:89:2e:45:57: f8:f4:46:c9:db:bb:11:59:50:fa:2b:e1:95:9c:0f: a4:fd:d1:bd:9a:08:64:a8:f0:27:a5:84:71:8b:f3: 5c:e5:96:6b:5d:e1:1c:12:12:e1:c2:52:ee:60:75: 06:4e:55:9f:f2:ed:c6:49:16:38:7f:ef:4e:7d:5d: 6f:ba:4d:7f:ba:3b:63:e8:93:5b:04:d0:c0:94:7a: d4:3b:00:11:49:50:91:1d:15:5d:1b:69:4f:f7:6e: ae:08:eb:6b:fa:a3:64:a6:78:d9:c6:ec:a1:a3:e0: 1d:05:bf:cb:77:91:a7:9e:40:32:13:43:41:38:40: cf:3f:34:4b:bb:b5:0a:66:74:21:95:5d:6a:29:9e: 9a:56:f6:ae:2a:fa:a6:3e:15:3f:d3:f4:15:d9:3d: 3f:7c:8c:7e:92:40:6b:a1:6e:aa:65:1f:45:9f:9a: 46:53:94:d5:0b:76:ab:d6:9f:a6:01:9d:61:1f:ba: 6d:08:8c:2c:64:1f:70:18:ca:7d:16:71:00:a9:9d: 0d:af:4b:6b:30:c6:3a:a9:2d:c3:b1:0d:f9:30:0a: ff:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.197.0/24 212.6.47.0/24 IPv6: 2a0e:9780::/29 2a11:a7c0::/29 2a11:a840::/29 Signature Algorithm: sha256WithRSAEncryption a6:21:2e:c7:48:48:b0:b9:a5:00:71:7b:90:09:82:c0:e0:2b: eb:bd:b0:4f:ce:b0:8c:c9:da:29:6c:35:f6:67:6e:dc:64:ed: fe:90:5b:b1:d1:e9:62:e9:79:b6:96:66:b6:12:03:9d:2a:76: d6:77:4b:16:90:76:36:cd:77:f6:c3:4e:85:0e:9c:da:80:58: dc:a7:9d:b1:c5:52:94:59:fb:ce:70:46:b1:84:ee:34:ab:d8: 61:2c:bc:bc:76:c9:b6:fd:22:3a:a5:5e:5b:47:87:cc:44:f7: d2:56:8c:63:75:94:75:08:10:c9:26:07:f0:f8:86:dd:77:69: c0:39:ba:49:93:68:4b:e1:58:6a:ea:80:4d:ec:9e:da:28:ec: 17:0a:c5:8d:5c:3f:2e:fa:04:42:5c:3c:09:54:4b:01:41:e5: 38:79:1c:0b:b0:ff:13:2c:cf:4f:5d:2d:6b:ed:44:87:dc:8e: 53:73:0b:98:8a:af:d5:76:21:35:7a:e8:b5:66:1a:4c:61:be: 1b:76:90:a2:58:ee:53:2a:84:0c:c4:76:5e:78:da:d8:a2:c1: d8:e5:40:fa:d9:b4:bf:0d:9c:6c:b5:8a:e5:a9:6f:f7:f0:d4: 36:0c:41:57:b0:10:7f:39:0f:ba:7c:df:10:67:61:ad:57:33: d2:fb:77:ed -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgISAZt6W45/x6bEW8tGgQCLve3nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTcxNGIyYTczOGNhM2RlYWU5MTVhZjg3YzNhOTFjNjEzZTFiYzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3ZfSxNLp7U2az3p2PhNYvtLkdPe S1Zck7AHkxtdWlFh3QZ65w1ZuokuRVf49EbJ27sRWVD6K+GVnA+k/dG9mghkqPAn pYRxi/Nc5ZZrXeEcEhLhwlLuYHUGTlWf8u3GSRY4f+9OfV1vuk1/ujtj6JNbBNDA lHrUOwARSVCRHRVdG2lP926uCOtr+qNkpnjZxuyho+AdBb/Ld5GnnkAyE0NBOEDP PzRLu7UKZnQhlV1qKZ6aVvauKvqmPhU/0/QV2T0/fIx+kkBroW6qZR9Fn5pGU5TV C3ar1p+mAZ1hH7ptCIwsZB9wGMp9FnEAqZ0Nr0trMMY6qS3DsQ35MAr//QIDAQAB o4ICpzCCAqMwHQYDVR0OBBYEFIFxSypzjKPerpFa+Hw6kcYT4bxJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlL2ExZTcz ZC01YTFjLTRmNzQtYTQ1Yi0xODk3MjQzYzYyZWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvYTFlNzNk LTVhMWMtNGY3NC1hNDViLTE4OTcyNDNjNjJlZi8xL2dYRkxLbk9Nbzk2dWtWcjRm RHFSeGhQaHZFay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTASBAIAATAMAwQAmFnFAwQA1AYvMBsEAgACMBUDBQMqDpeAAwUD KhGnwAMFAyoRqEAwDQYJKoZIhvcNAQELBQADggEBAKYhLsdISLC5pQBxe5AJgsDg K+u9sE/OsIzJ2ilsNfZnbtxk7f6QW7HR6WLpebaWZrYSA50qdtZ3SxaQdjbNd/bD ToUOnNqAWNynnbHFUpRZ+85wRrGE7jSr2GEsvLx2ybb9IjqlXltHh8xE99JWjGN1 lHUIEMkmB/D4ht13acA5ukmTaEvhWGrqgE3sntoo7BcKxY1cPy76BEJcPAlUSwFB 5Th5HAuw/xMsz09dLWvtRIfcjlNzC5iKr9V2ITV66LVmGkxhvht2kKJY7lMqhAzE dl542tiiwdjlQPrZtL8NnGy1iuWpb/fw1DYMQVewEH85D7p83xBnYa1XM9L7d+0= -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:34 2026 by rpki-client