This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gc-3wMI0noD-5RtHgxU1Es2dodI.cer File: gc-3wMI0noD-5RtHgxU1Es2dodI.cer (raw, json) Hash identifier: /nfHZOecUirGbiLP2JMBv54wFN26FeskTko+BIUBxMc= Subject key identifier: 81:CF:B7:C0:C2:34:9E:80:FE:E5:1B:47:83:15:35:12:CD:9D:A1:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A823906E1BF89E12BB1C6D5890D23B058 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 14 Nov 2025 11:56:06 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 210449 IP: 146.19.224.0/24 IP: 178.211.141.0/24 IP: 2a12:1080::/29 IP: 2a13:7600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:39:06:e1:bf:89:e1:2b:b1:c6:d5:89:0d:23:b0:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 14 11:56:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=81cfb7c0c2349e80fee51b4783153512cd9da1d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:26:7a:75:85:29:cc:0b:32:42:df:f1:88: 70:a0:c2:28:f9:11:26:cd:0a:9f:90:e7:55:51:70: 5a:e7:e0:f6:37:ea:5b:57:7d:d3:33:79:e3:60:78: 98:d2:83:9f:7b:8c:c5:00:d7:29:7e:ad:2b:5d:95: ef:51:74:f6:7f:a9:37:dd:4d:41:85:44:76:1c:f5: dd:d9:13:aa:29:94:26:b4:1d:25:e5:62:d1:3d:e4: e1:49:2b:04:8a:5d:28:4d:56:d9:8c:c7:be:0f:12: 91:e8:a5:86:fe:44:68:2e:88:66:70:23:47:98:ae: a9:4c:c3:19:38:17:5e:19:fc:ff:28:7e:90:75:0f: 5a:4f:5d:1c:29:b4:b2:ba:68:82:bc:a2:5f:78:eb: 27:f2:6c:93:0f:c9:f7:8c:04:84:2b:76:03:4e:f4: d8:dc:93:93:61:ba:e0:e7:90:f5:9e:07:46:1b:de: 21:82:55:37:f6:73:f9:e6:b8:2f:26:22:87:11:78: aa:6f:cc:e2:9d:b6:fa:ee:df:98:2d:03:59:1b:51: f2:ec:9a:9e:a2:29:50:6c:65:8c:33:f3:21:91:d4: 3b:3a:ac:df:a7:a1:0c:a5:14:a6:c3:b8:c8:ed:80: 06:81:4f:5e:40:ec:6b:e3:02:31:40:b5:af:9c:bb: 72:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CF:B7:C0:C2:34:9E:80:FE:E5:1B:47:83:15:35:12:CD:9D:A1:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.224.0/24 178.211.141.0/24 IPv6: 2a12:1080::/29 2a13:7600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210449 Signature Algorithm: sha256WithRSAEncryption 69:d4:b4:d4:25:74:af:94:4c:da:bf:bf:00:e5:f4:db:27:2e: ae:0d:47:77:a0:a4:80:b3:0b:a3:37:42:d3:ca:38:83:68:ba: c0:5a:33:94:9a:cc:56:30:79:02:81:94:b4:f3:8c:39:85:b2: 0d:b3:5f:4b:81:2c:e2:08:b0:b1:3e:5b:32:e5:e9:25:0f:73: df:2b:aa:74:8e:88:ca:e5:16:89:6a:1a:01:4e:24:c3:e5:3a: 15:9b:36:93:0c:35:d9:47:8c:b4:95:07:4c:8f:21:41:ed:dc: b7:3e:ce:c6:0f:38:bf:f2:cd:8e:e8:7d:a4:07:52:6e:71:1d: 33:2b:5d:6e:b1:00:3b:85:a6:ad:02:66:51:7f:4c:d4:15:f8: 86:02:06:fb:ca:13:1d:b8:97:94:2d:b3:1f:20:db:44:be:5d: c7:d2:35:43:34:8d:c2:8d:2b:c8:70:d5:f5:25:4a:e2:f7:0e: 37:94:37:54:21:92:56:32:52:eb:96:8d:dd:9a:80:00:21:fa: 6a:b9:c3:35:04:f4:a1:5e:53:f3:59:3b:d3:83:79:3a:05:e3: 0e:e3:c4:c6:19:f0:98:a4:6a:38:7f:42:ca:f5:f0:3c:80:fd: 99:c9:6e:5d:f0:c7:f4:a8:0c:58:b9:8a:aa:fd:b9:f1:20:4a: 84:6c:5f:09 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZqCOQbhv4nhK7HG1YkNI7BYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE0MTE1NjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWNmYjdjMGMyMzQ5ZTgwZmVlNTFiNDc4MzE1MzUxMmNkOWRhMWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmMmenWFKcwLMkLf8YhwoMIo+REm zQqfkOdVUXBa5+D2N+pbV33TM3njYHiY0oOfe4zFANcpfq0rXZXvUXT2f6k33U1B hUR2HPXd2ROqKZQmtB0l5WLRPeThSSsEil0oTVbZjMe+DxKR6KWG/kRoLohmcCNH mK6pTMMZOBdeGfz/KH6QdQ9aT10cKbSyumiCvKJfeOsn8myTD8n3jASEK3YDTvTY 3JOTYbrg55D1ngdGG94hglU39nP55rgvJiKHEXiqb8zinbb67t+YLQNZG1Hy7Jqe oilQbGWMM/MhkdQ7Oqzfp6EMpRSmw7jI7YAGgU9eQOxr4wIxQLWvnLtyEQIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFIHPt8DCNJ6A/uUbR4MVNRLNnaHSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3LzAwNzI5 Ny1jNDQzLTQyN2UtYTBlNy03ZGMwMDU3ZWQ5NmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvMDA3Mjk3 LWM0NDMtNDI3ZS1hMGU3LTdkYzAwNTdlZDk2ZC8xL2djLTN3TUkwbm9ELTVSdEhn eFUxRXMyZG9kSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQAkhPgAwQAstONMBQEAgACMA4DBQMqEhCAAwUD KhN2ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDNhEwDQYJKoZIhvcNAQELBQAD ggEBAGnUtNQldK+UTNq/vwDl9NsnLq4NR3egpICzC6M3QtPKOINousBaM5SazFYw eQKBlLTzjDmFsg2zX0uBLOIIsLE+WzLl6SUPc98rqnSOiMrlFolqGgFOJMPlOhWb NpMMNdlHjLSVB0yPIUHt3Lc+zsYPOL/yzY7ofaQHUm5xHTMrXW6xADuFpq0CZlF/ TNQV+IYCBvvKEx24l5Qtsx8g20S+XcfSNUM0jcKNK8hw1fUlSuL3DjeUN1QhklYy UuuWjd2agAAh+mq5wzUE9KFeU/NZO9ODeToF4w7jxMYZ8Jikajh/Qsr18DyA/ZnJ bl3wx/SoDFi5iqr9ufEgSoRsXwk= -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:47 2025 by rpki-client