This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer File: glLEw3Iyf9wsF7SVuFiRp23kJRA.cer (raw, json) Hash identifier: yyPDGwWYXUqb1EXY+5dsncR7oZPLg6ouTZUlF165UJ4= Subject key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C75274127F3EB02FD8845E9FE588FB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.203.225.0 -- 193.203.226.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:52:74:12:7f:3e:b0:2f:d8:84:5e:9f:e5:88:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8252c4c372327fdc2c17b495b85891a76de42510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ba:61:de:a8:31:2f:b8:a0:d8:cb:a5:6b:c2: 41:24:ee:39:b0:ee:11:03:f8:58:01:2b:ca:ce:68: 35:59:6c:72:6a:05:59:58:51:87:79:07:f8:b8:f3: b8:64:44:a8:0b:a6:72:42:ef:54:42:26:4b:e1:e8: ee:8c:5c:9b:51:9c:2d:8c:e8:81:70:b8:66:fe:16: ca:ef:f3:86:17:32:a6:4e:a0:0d:a7:31:5d:e0:96: fb:cf:7e:02:d2:90:1e:15:83:58:59:86:7b:71:2b: 0d:78:8c:ca:3b:cb:c1:a6:5b:90:62:70:47:bf:cf: fc:12:2f:e3:50:62:98:9f:05:4b:af:61:ed:f7:1c: 6a:bb:8f:11:7d:c6:b2:bc:40:4f:74:9c:d8:f9:55: 78:62:5c:3d:1a:9c:04:6e:59:33:67:87:13:6e:73: 26:a7:2b:d6:0a:3a:e8:23:ee:1b:41:b3:a9:d9:20: 52:38:a1:86:27:7c:33:a1:29:83:b2:02:af:4c:6c: 33:02:ba:d7:70:a9:c1:ac:67:b9:73:4f:ee:b4:5b: 1c:e2:22:19:63:1b:9a:83:03:a9:32:d4:8f:69:fb: 15:8a:dd:cc:30:61:5b:16:d7:f1:13:a7:e2:be:4a: be:8e:9c:bd:63:fa:70:d4:85:f4:f6:c6:1d:05:c6: 9e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.225.0-193.203.226.255 Signature Algorithm: sha256WithRSAEncryption 4c:31:ec:a2:65:06:e4:10:2b:29:9a:b2:fa:c3:0a:5c:0c:fe: bc:ff:bf:73:75:7a:44:22:89:95:99:4b:66:f7:9d:14:3a:3a: f8:ff:0c:69:a4:0a:10:4c:ac:c9:de:51:10:3b:7f:96:75:5f: f7:41:f3:5c:d2:a5:c2:73:2d:a6:a7:88:d8:09:ca:e0:74:3f: f7:8c:fc:97:d2:b5:2d:dc:b5:fd:62:4d:88:10:ae:60:18:4c: b3:53:08:1a:a3:c1:18:7e:90:d2:62:f2:6a:06:91:52:e8:a0: cc:0c:8b:fd:ee:0a:37:db:e3:5a:48:e9:1d:a7:2c:58:70:fd: c4:52:6c:33:59:a4:7e:5f:7d:33:1c:a3:d9:8a:b3:f9:7b:df: 52:d1:b7:8e:19:f2:94:56:d1:4c:1c:f9:13:8e:da:72:d9:c4: 9a:4f:04:8c:4e:fe:0f:54:e4:95:66:a6:6f:8f:2b:8c:18:3f: b2:10:59:01:01:29:64:13:b5:d0:cf:8a:be:78:2f:d3:49:75: 0e:73:d4:74:4f:e5:28:67:eb:b7:4c:db:2d:80:44:14:a1:83: 03:b3:cd:51:eb:e3:77:8c:5b:4e:ca:c7:76:10:50:f0:31:5b: e9:52:59:bf:b5:bd:96:e9:c9:c5:c3:6f:96:a4:d0:ff:8c:58: d0:27:79:08 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt3x1J0En8+sC/YhF6f5Yj7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjUyYzRjMzcyMzI3ZmRjMmMxN2I0OTViODU4OTFhNzZkZTQyNTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurph3qgxL7ig2Mula8JBJO45sO4R A/hYASvKzmg1WWxyagVZWFGHeQf4uPO4ZESoC6ZyQu9UQiZL4ejujFybUZwtjOiB cLhm/hbK7/OGFzKmTqANpzFd4Jb7z34C0pAeFYNYWYZ7cSsNeIzKO8vBpluQYnBH v8/8Ei/jUGKYnwVLr2Ht9xxqu48RfcayvEBPdJzY+VV4Ylw9GpwEblkzZ4cTbnMm pyvWCjroI+4bQbOp2SBSOKGGJ3wzoSmDsgKvTGwzArrXcKnBrGe5c0/utFsc4iIZ YxuagwOpMtSPafsVit3MMGFbFtfxE6fivkq+jpy9Y/pw1IX09sYdBcaeMwIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFIJSxMNyMn/cLBe0lbhYkadt5CUQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzZjNDUz Mi0wN2Q4LTRkYjMtOWI1NS1mZWUxZDAyZjEzMDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvNmM0NTMy LTA3ZDgtNGRiMy05YjU1LWZlZTFkMDJmMTMwMy8xL2dsTEV3M0l5Zjl3c0Y3U1Z1 RmlScDIza0pSQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBADBy+EDBADBy+IwDQYJKoZIhvcNAQELBQAD ggEBAEwx7KJlBuQQKymasvrDClwM/rz/v3N1ekQiiZWZS2b3nRQ6Ovj/DGmkChBM rMneURA7f5Z1X/dB81zSpcJzLaaniNgJyuB0P/eM/JfStS3ctf1iTYgQrmAYTLNT CBqjwRh+kNJi8moGkVLooMwMi/3uCjfb41pI6R2nLFhw/cRSbDNZpH5ffTMco9mK s/l731LRt44Z8pRW0Uwc+ROO2nLZxJpPBIxO/g9U5JVmpm+PK4wYP7IQWQEBKWQT tdDPir54L9NJdQ5z1HRP5Shn67dM2y2ARBShgwOzzVHr43eMW07Kx3YQUPAxW+lS Wb+1vZbpycXDb5ak0P+MWNAneQg= -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:22 2026 by rpki-client