This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer File: gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer (raw, json) Hash identifier: oiD5wWX9jA5Rj4mUbvO50GUfqofBC1pANM2gHxYivv8= Subject key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37C1E4C0ECE814942207E211C1F2AC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212950 IP: 45.12.96.0/22 IP: 2a0e:a500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:c1:e4:c0:ec:e8:14:94:22:07:e2:11:c1:f2:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8c:5d:c8:f0:8f:9f:6e:42:6f:c4:b7:ee:9c: 5f:8b:10:ad:b5:4c:08:79:03:44:e7:5e:68:70:c1: ce:22:b0:09:ff:18:71:c9:77:81:ac:08:63:0b:10: 6c:2c:d1:37:74:d3:75:9c:15:b4:da:bb:6b:73:7a: 1d:db:0f:ba:62:54:3e:b9:5f:30:68:ad:e5:77:32: c6:7f:49:ee:4b:24:58:2d:a0:23:b0:4c:2b:8f:bb: d7:d6:bf:65:5c:d4:cf:8f:02:a7:93:81:ff:37:0d: 9a:f3:04:b6:b3:18:51:5c:fb:5c:55:96:9c:c2:e7: b5:0c:24:8e:c7:ec:8e:9c:41:72:fe:6c:dd:1b:56: 6e:04:63:5b:60:28:0c:17:c7:0d:05:e8:99:9c:0e: c2:29:61:4d:28:16:3a:19:61:9f:7f:7e:d1:b1:00: 77:eb:21:e4:69:d9:1c:65:8f:cc:1e:26:7d:35:01: ac:b3:1d:36:0b:a1:b1:8c:7d:29:33:51:81:a3:21: 11:2f:4b:63:81:eb:43:8f:36:24:9c:03:28:8f:6d: ef:49:13:ce:33:c0:dc:eb:5f:8e:12:a8:24:cd:56: 2b:ff:2a:9a:32:68:b4:0a:0b:08:20:a4:c9:36:18: ec:e4:03:52:b7:fb:b8:5a:92:75:fb:72:87:e5:5a: 32:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.96.0/22 IPv6: 2a0e:a500::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212950 Signature Algorithm: sha256WithRSAEncryption 49:d4:ca:3b:48:fe:15:da:bb:9e:8e:e7:8e:e9:2f:c1:53:2e: 44:d2:7e:59:33:1e:74:f1:7a:43:fe:1b:ca:86:2e:35:43:7b: aa:58:47:19:1a:97:49:f9:4c:3a:15:88:e2:68:e9:9a:db:e3: 98:e0:20:ee:ec:e0:33:14:3d:99:77:50:38:ef:d6:2e:c2:9f: 24:9f:c7:49:2c:93:27:f5:a8:51:59:3a:05:19:02:fb:01:a3: 18:f6:a2:cb:94:ac:1a:7e:30:ca:ca:7c:61:17:9f:c5:14:e8: 50:69:af:de:bd:02:b1:3d:db:79:69:56:d0:77:f1:aa:1b:8c: 92:09:d1:76:0c:6d:f9:ca:7d:89:71:05:07:6d:69:fb:70:7e: ad:37:7c:8a:81:19:57:d6:60:0a:76:af:80:18:7b:1b:ae:f6: 00:35:36:ff:91:e2:b3:a5:1b:10:b7:48:e3:72:d3:1f:ae:90: 1d:a4:7f:f1:97:c2:91:08:aa:87:f4:69:62:c2:c9:d0:5a:62: 39:8b:d3:a5:31:e9:26:35:c5:fd:fb:b2:a3:5a:2e:71:25:f7: 9b:19:4d:d9:ff:91:b6:11:f0:33:9a:c8:1f:2f:95:16:de:1a: ca:19:32:51:11:ae:d4:37:32:05:56:62:a3:37:02:fb:b8:97: 12:ad:72:82 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+N8HkwOzoFJQiB+IRwfKsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWNkYzE3ZGFkMDNiY2I5YmMzNGE5ZTM3N2FiMjA3MDg1MmRjYTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4xdyPCPn25Cb8S37pxfixCttUwI eQNE515ocMHOIrAJ/xhxyXeBrAhjCxBsLNE3dNN1nBW02rtrc3od2w+6YlQ+uV8w aK3ldzLGf0nuSyRYLaAjsEwrj7vX1r9lXNTPjwKnk4H/Nw2a8wS2sxhRXPtcVZac wue1DCSOx+yOnEFy/mzdG1ZuBGNbYCgMF8cNBeiZnA7CKWFNKBY6GWGff37RsQB3 6yHkadkcZY/MHiZ9NQGssx02C6GxjH0pM1GBoyERL0tjgetDjzYknAMoj23vSRPO M8Dc61+OEqgkzVYr/yqaMmi0CgsIIKTJNhjs5ANSt/u4WpJ1+3KH5VoygQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIHNwX2tA7y5vDSp43erIHCFLcplMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk2L2VmYzlm MS1iZWMzLTQ3NzEtYjQ4MC0wMTg0ZTgxYWVhZDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvZWZjOWYx LWJlYzMtNDc3MS1iNDgwLTAxODRlODFhZWFkOS8xL2djM0JmYTBEdkxtOE5Lbmpk NnNnY0lVdHltVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLQxgMA0EAgACMAcDBQMqDqUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM/1jANBgkqhkiG9w0BAQsFAAOCAQEASdTKO0j+Fdq7 no7njukvwVMuRNJ+WTMedPF6Q/4byoYuNUN7qlhHGRqXSflMOhWI4mjpmtvjmOAg 7uzgMxQ9mXdQOO/WLsKfJJ/HSSyTJ/WoUVk6BRkC+wGjGPaiy5SsGn4wysp8YRef xRToUGmv3r0CsT3beWlW0HfxqhuMkgnRdgxt+cp9iXEFB21p+3B+rTd8ioEZV9Zg CnavgBh7G672ADU2/5His6UbELdI43LTH66QHaR/8ZfCkQiqh/RpYsLJ0FpiOYvT pTHpJjXF/fuyo1oucSX3mxlN2f+RthHwM5rIHy+VFt4ayhkyURGu1DcyBVZiozcC +7iXEq1ygg== -----END CERTIFICATE-----Generated at Mon Jan 26 13:40:42 2026 by rpki-client