This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer File: gh8Shdd1qfWJJD6shErcWridl8k.cer (raw, json) Hash identifier: M8fVpjwsOcD8XdqWygffsArsMJpoDizNy+uRBsz3B3I= Subject key identifier: 82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37B0D07EE8EE8D7989F9698D8AA4C0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202062 IP: 193.31.16.0/23 IP: 193.31.254.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:b0:d0:7e:e8:ee:8d:79:89:f9:69:8d:8a:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=821f1285d775a9f589243eac844adc5ab89d97c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:80:03:a8:72:42:ff:81:11:6c:77:42:58:5f: a3:e8:f5:5a:f2:6a:87:99:9c:63:69:fa:75:20:96: 5d:5f:e0:4b:98:50:ef:93:a7:98:eb:d0:9d:bd:2f: c2:f9:d4:f5:1b:ad:e4:d2:88:a8:a2:84:82:d1:65: b1:fb:a4:82:4e:fa:1b:86:b1:a4:7b:81:ba:bc:55: 54:04:a5:98:7e:58:d7:72:13:3a:f8:38:a0:ed:61: 30:30:13:45:b2:2b:c7:c9:4b:07:92:f6:9f:16:8a: b9:74:93:cb:3d:c2:36:af:49:be:99:56:ba:a0:d1: 01:50:48:7f:b1:e5:98:a4:d8:32:39:0d:cf:e8:d8: 7d:67:1d:66:e2:76:45:ff:f2:86:73:91:e3:da:9c: 82:94:af:43:d9:49:d8:61:4f:97:42:cb:00:e6:98: 47:d4:0b:0a:45:cd:49:a0:1f:55:64:f3:68:5a:3c: 77:68:9d:a2:5e:ad:94:c0:c9:f6:59:bf:51:d0:ad: 9a:45:65:cf:80:8d:72:a8:fb:71:54:01:2c:af:af: 5b:12:58:a6:5f:2d:82:39:63:8f:03:53:ce:d5:21: 56:5e:6a:e0:7a:01:de:f8:fa:45:3f:2f:06:5b:54: 23:aa:b3:6c:08:4d:bf:65:63:c5:d6:38:19:ff:27: 18:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.31.16.0/23 193.31.254.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202062 Signature Algorithm: sha256WithRSAEncryption 51:bf:49:5e:c9:d7:95:68:03:fc:ec:eb:3c:3a:16:61:6f:b8: 71:29:59:08:66:57:80:49:9d:99:4b:ff:6b:c0:00:9d:56:8e: 67:18:68:8a:91:53:7e:5b:bf:b4:3d:e5:dc:86:05:03:cd:10: 0b:6a:4e:2f:5b:0d:0e:90:82:ff:29:c5:c2:9a:57:7d:dd:15: b4:7c:2e:9d:90:78:d9:3d:b8:27:fd:57:a7:80:31:61:a6:aa: 2b:bb:a8:93:74:4c:8e:ce:97:24:60:9d:70:e2:71:0e:3b:13: 96:69:15:1b:6f:27:2f:9b:99:4c:5b:17:1f:93:ee:44:8b:10: 14:96:a2:16:bc:05:9f:26:19:ca:40:3d:16:c9:d2:59:5b:ed: 62:57:e5:83:f5:37:6b:c8:ee:81:47:fd:55:cd:60:c2:b1:c4: 61:82:3f:25:cd:14:f0:54:0b:57:a2:b0:6c:bc:68:8f:8f:cc: fd:fb:22:11:f4:f0:29:56:08:bb:af:26:32:cb:44:ce:8f:90: ba:15:ec:9e:67:82:e3:51:ed:c3:e4:79:2b:1d:61:68:03:3d: 99:19:48:f7:bc:1d:cd:25:19:f8:66:67:e2:82:af:0e:06:e7: 76:55:ae:44:7e:fb:dc:d5:65:b0:cd:18:35:0e:e7:5a:4e:b3: ac:5d:07:17 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt+N7DQfujujXmJ+WmNiqTAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjFmMTI4NWQ3NzVhOWY1ODkyNDNlYWM4NDRhZGM1YWI4OWQ5N2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYADqHJC/4ERbHdCWF+j6PVa8mqH mZxjafp1IJZdX+BLmFDvk6eY69CdvS/C+dT1G63k0oioooSC0WWx+6SCTvobhrGk e4G6vFVUBKWYfljXchM6+Dig7WEwMBNFsivHyUsHkvafFoq5dJPLPcI2r0m+mVa6 oNEBUEh/seWYpNgyOQ3P6Nh9Zx1m4nZF//KGc5Hj2pyClK9D2UnYYU+XQssA5phH 1AsKRc1JoB9VZPNoWjx3aJ2iXq2UwMn2Wb9R0K2aRWXPgI1yqPtxVAEsr69bElim Xy2COWOPA1PO1SFWXmrgegHe+PpFPy8GW1QjqrNsCE2/ZWPF1jgZ/ycYFwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFIIfEoXXdan1iSQ+rIRK3Fq4nZfJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmLzE3ZDgx ZC0xNzNkLTQ0ODYtOTU1ZC00OGVlYThkNWZlZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvMTdkODFk LTE3M2QtNDQ4Ni05NTVkLTQ4ZWVhOGQ1ZmVmMS8xL2doOFNoZGQxcWZXSkpENnNo RXJjV3JpZGw4ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwR8QAwQBwR/+MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMVTjANBgkqhkiG9w0BAQsFAAOCAQEAUb9JXsnXlWgD/OzrPDoWYW+4 cSlZCGZXgEmdmUv/a8AAnVaOZxhoipFTflu/tD3l3IYFA80QC2pOL1sNDpCC/ynF wppXfd0VtHwunZB42T24J/1Xp4AxYaaqK7uok3RMjs6XJGCdcOJxDjsTlmkVG28n L5uZTFsXH5PuRIsQFJaiFrwFnyYZykA9FsnSWVvtYlflg/U3a8jugUf9Vc1gwrHE YYI/Jc0U8FQLV6KwbLxoj4/M/fsiEfTwKVYIu68mMstEzo+QuhXsnmeC41Htw+R5 Kx1haAM9mRlI97wdzSUZ+GZn4oKvDgbndlWuRH773NVlsM0YNQ7nWk6zrF0HFw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:52 2026 by rpki-client