This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer File: gmAVLt1HazFwhARFKVhhW2Xdywo.cer (raw, json) Hash identifier: FVRQ2+1hR+KVezQo7mr/sWPaTeIrhZ4GNztQTRc8EnY= Subject key identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7D93AACDCFE44641D27BB27056429 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.126.244.0/22 IP: 2a06:c440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d9:3a:ac:dc:fe:44:64:1d:27:bb:27:05:64:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8260152edd476b31708404452958615b65ddcb0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4c:66:b9:ab:fd:5f:9f:d1:76:83:3a:a6:d5: cb:ac:3e:31:9d:5b:49:a1:ee:e2:2e:4d:b2:2f:60: 53:52:ed:7a:c4:8d:9a:fd:e9:fc:c5:ca:00:88:73: 2e:57:da:ee:23:59:de:8f:0f:0b:ca:8b:4f:3c:ff: 52:87:d1:22:36:bb:7a:8f:80:aa:05:28:43:95:99: 96:00:ca:d5:1c:ab:3d:7a:2c:2c:37:50:97:92:d7: 67:08:41:0f:0e:a8:cd:e5:38:c7:da:98:0c:b2:c1: 70:a8:14:cd:7a:f9:22:1a:4a:5b:cb:30:64:eb:e2: a5:38:cf:a6:b8:c3:8b:fe:c7:b4:67:b6:5d:0e:40: c5:5c:52:e8:0d:ad:74:c2:eb:e3:f5:1e:60:c2:82: 16:90:72:79:f1:f9:37:44:29:1a:97:33:7f:43:d6: 64:58:aa:c4:e0:74:5f:9a:57:ba:90:96:40:46:8c: 29:fb:95:d0:1a:aa:82:a3:c8:cc:cf:f6:63:03:1a: 4f:97:58:a6:5c:2b:4e:a0:b5:21:af:0a:52:ab:a4: 7d:fa:5f:b7:4d:86:a7:d5:31:07:06:c7:e0:78:c1: 27:18:e8:a7:3e:76:73:83:24:42:36:64:d7:60:f2: d9:f4:c8:e4:d5:84:af:dd:48:6b:8c:6f:9c:18:62: 4f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.126.244.0/22 IPv6: 2a06:c440::/29 Signature Algorithm: sha256WithRSAEncryption 41:26:8b:7a:10:92:98:43:66:20:32:8f:90:7a:c4:a0:17:4e: bd:81:54:5f:33:a7:5b:80:b7:d4:e7:30:39:a2:cd:67:ea:63: 60:bf:43:48:ef:93:ec:9a:34:7d:46:0e:2a:2d:76:0f:de:e6: 9d:c9:e1:44:8a:7f:6b:50:16:02:b7:44:7a:5f:a2:e4:34:88: b3:98:58:da:f5:2f:f9:d4:e8:21:1e:35:ee:a0:4a:ea:d3:f8: 13:c7:6c:ec:ac:67:5e:01:b8:11:6c:1c:e9:c5:bd:b0:bb:0e: af:c0:dd:b8:9d:bb:c7:77:f5:e3:f7:25:94:e5:c5:e3:ca:98: 1c:6b:04:70:0e:2a:52:d1:86:a5:be:59:49:c2:68:fc:85:a4: 1a:5d:04:99:67:dd:26:a4:34:8b:0e:35:df:77:19:51:56:7b: 99:21:9d:f3:fd:b9:c0:d3:a4:96:10:b8:d2:e7:44:53:d0:fc: c4:59:57:84:07:3b:83:56:6b:51:1f:29:61:a9:46:60:a7:03: 0e:e6:6f:8d:b8:c4:20:23:c4:6c:72:78:df:95:5b:08:41:a8: d3:0d:87:04:5f:5f:5f:76:81:43:00:ca:4a:bc:ef:34:bd:3c: ca:6a:36:6a:77:9d:83:9b:9f:2f:68:fe:49:71:95:57:75:49: 01:eb:13:66 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6x9k6rNz+RGQdJ7snBWQpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjYwMTUyZWRkNDc2YjMxNzA4NDA0NDUyOTU4NjE1YjY1ZGRjYjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkxmuav9X5/RdoM6ptXLrD4xnVtJ oe7iLk2yL2BTUu16xI2a/en8xcoAiHMuV9ruI1nejw8LyotPPP9Sh9EiNrt6j4Cq BShDlZmWAMrVHKs9eiwsN1CXktdnCEEPDqjN5TjH2pgMssFwqBTNevkiGkpbyzBk 6+KlOM+muMOL/se0Z7ZdDkDFXFLoDa10wuvj9R5gwoIWkHJ58fk3RCkalzN/Q9Zk WKrE4HRfmle6kJZARowp+5XQGqqCo8jMz/ZjAxpPl1imXCtOoLUhrwpSq6R9+l+3 TYan1TEHBsfgeMEnGOinPnZzgyRCNmTXYPLZ9Mjk1YSv3UhrjG+cGGJPIQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFIJgFS7dR2sxcIQERSlYYVtl3csKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5LzQ5ZjQw Yy01NDQ4LTQyMTctOTU2Zi1jY2Y5YjBmMGUyMjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvNDlmNDBj LTU0NDgtNDIxNy05NTZmLWNjZjliMGYwZTIyNy8xL2dtQVZMdDFIYXpGd2hBUkZL VmhoVzJYZHl3by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuX70MA0EAgACMAcDBQMqBsRAMA0GCSqGSIb3 DQEBCwUAA4IBAQBBJot6EJKYQ2YgMo+QesSgF069gVRfM6dbgLfU5zA5os1n6mNg v0NI75PsmjR9Rg4qLXYP3uadyeFEin9rUBYCt0R6X6LkNIizmFja9S/51OghHjXu oErq0/gTx2zsrGdeAbgRbBzpxb2wuw6vwN24nbvHd/Xj9yWU5cXjypgcawRwDipS 0YalvllJwmj8haQaXQSZZ90mpDSLDjXfdxlRVnuZIZ3z/bnA06SWELjS50RT0PzE WVeEBzuDVmtRHylhqUZgpwMO5m+NuMQgI8RscnjflVsIQajTDYcEX19fdoFDAMpK vO80vTzKajZqd52Dm58vaP5JcZVXdUkB6xNm -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:50 2026 by rpki-client