This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer File: gcEVEu7o_tkcQi8ztljWi8NOt4A.cer (raw, json) Hash identifier: SsR5rshchXN5wKp+YXAbxo1JtS28D3iwg3DffT1yDtE= Subject key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED7344A7F8D1DE8C3DFC64B1341A3D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50625 IP: 94.232.216.0/21 IP: 178.212.160.0/21 IP: 192.162.172.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:73:44:a7:f8:d1:de:8c:3d:fc:64:b1:34:1a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81c11512eee8fed91c422f33b658d68bc34eb780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bd:0e:f9:6f:9c:7a:84:ca:2b:b9:d7:44:aa: 3e:1a:21:36:fd:b6:6e:59:42:79:2a:d4:72:b6:81: f7:2b:03:e6:5e:72:58:9e:a2:b0:96:13:84:39:51: 89:5d:f8:37:b6:d0:c8:39:0d:c7:a6:dc:a9:30:1b: 68:16:de:85:03:cc:73:2a:a1:d6:b0:50:0c:c6:74: c2:a6:a5:1c:61:da:84:cc:da:a5:53:1b:07:7e:a7: b3:9b:ce:37:7a:84:1d:2c:ef:88:27:35:89:3f:06: db:1c:1d:9a:40:38:ca:9f:3d:97:f6:b1:ca:16:96: cb:ee:97:a4:62:cc:8c:68:4a:b6:87:e7:f8:ed:c0: d6:e0:a0:72:15:da:24:9a:6f:91:22:e7:a3:25:87: 22:75:1e:dd:8a:db:09:f2:9d:53:45:5e:78:1b:d4: c9:6b:70:75:f9:85:26:5d:3d:f8:18:85:b3:b5:2c: 7d:cf:88:8e:e3:a0:cc:99:62:8d:49:2b:0a:8b:90: 53:fd:c1:43:eb:fd:a7:21:fe:af:df:ce:5d:8d:a0: 40:b3:ff:a0:23:cd:fc:7b:6a:43:51:a7:41:35:75: 7f:77:ee:a3:e1:d1:74:bc:61:42:bf:67:98:c1:3c: 87:5f:b8:62:13:8f:0d:b3:b9:b6:44:e6:bb:9a:59: e9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.232.216.0/21 178.212.160.0/21 192.162.172.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50625 Signature Algorithm: sha256WithRSAEncryption 07:7c:e9:51:2d:b0:7c:59:e5:2d:e7:d2:aa:3e:97:b5:59:e1: 62:18:48:74:0c:b1:90:50:0c:b2:28:7c:3b:1d:19:6f:64:88: 18:af:13:cf:29:0b:3a:6d:6c:71:56:8d:49:55:7d:31:f6:1d: d7:5b:93:74:7f:3a:a9:90:93:21:5f:fe:b2:d2:27:ec:85:af: 06:1f:ff:44:31:c2:f3:84:69:67:d3:ff:5d:97:5d:41:33:bb: 80:7d:ce:7c:d3:3d:86:40:20:c0:8e:da:b7:85:83:14:02:e7: 9b:fa:2c:ca:9d:94:29:7d:df:41:0f:25:c1:7a:84:cf:3f:ec: 8b:a3:6e:29:b7:1e:01:09:54:bb:0f:d4:00:3e:38:60:64:e2: 35:d3:43:12:d7:ad:f8:22:3d:64:5e:27:7f:6a:43:b3:11:12: 18:7e:59:fb:14:cc:61:67:4f:31:d1:f6:e5:91:80:b0:70:d4: 53:9e:ec:db:8a:72:57:21:a7:fa:4e:c6:1c:36:e5:3f:31:b7: 2b:1d:24:96:d7:fd:b9:0d:bb:0b:d1:ab:fe:97:0f:10:69:4a: 51:47:7c:7c:a6:2e:3a:17:79:a4:d0:1a:49:1c:e0:51:83:4f: 40:fb:f6:10:06:99:a6:dc:a8:92:ee:c5:6e:28:75:b1:3c:07: 1e:37:e9:d0 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt87XNEp/jR3ow9/GSxNBo9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWMxMTUxMmVlZThmZWQ5MWM0MjJmMzNiNjU4ZDY4YmMzNGViNzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs70O+W+ceoTKK7nXRKo+GiE2/bZu WUJ5KtRytoH3KwPmXnJYnqKwlhOEOVGJXfg3ttDIOQ3HptypMBtoFt6FA8xzKqHW sFAMxnTCpqUcYdqEzNqlUxsHfqezm843eoQdLO+IJzWJPwbbHB2aQDjKnz2X9rHK FpbL7pekYsyMaEq2h+f47cDW4KByFdokmm+RIuejJYcidR7ditsJ8p1TRV54G9TJ a3B1+YUmXT34GIWztSx9z4iO46DMmWKNSSsKi5BT/cFD6/2nIf6v385djaBAs/+g I838e2pDUadBNXV/d+6j4dF0vGFCv2eYwTyHX7hiE48Ns7m2ROa7mlnpbwIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFIHBFRLu6P7ZHEIvM7ZY1ovDTreAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5L2MyYzAz ZS01NmUxLTQwM2EtOTNkZS1lMjNhZDc5OWIxZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvYzJjMDNl LTU2ZTEtNDAzYS05M2RlLWUyM2FkNzk5YjFkMS8xL2djRVZFdTdvX3RrY1FpOHp0 bGpXaThOT3Q0QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQDXujYAwQDstSgAwQCwKKsMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDFwTANBgkqhkiG9w0BAQsFAAOCAQEAB3zpUS2wfFnlLefS qj6XtVnhYhhIdAyxkFAMsih8Ox0Zb2SIGK8TzykLOm1scVaNSVV9MfYd11uTdH86 qZCTIV/+stIn7IWvBh//RDHC84RpZ9P/XZddQTO7gH3OfNM9hkAgwI7at4WDFALn m/osyp2UKX3fQQ8lwXqEzz/si6NuKbceAQlUuw/UAD44YGTiNdNDEtet+CI9ZF4n f2pDsxESGH5Z+xTMYWdPMdH25ZGAsHDUU57s24pyVyGn+k7GHDblPzG3Kx0kltf9 uQ27C9Gr/pcPEGlKUUd8fKYuOhd5pNAaSRzgUYNPQPv2EAaZptyoku7Fbih1sTwH Hjfp0A== -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:26 2026 by rpki-client