This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer File: gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer (raw, json) Hash identifier: Mf26SHl5A+/ZLZTDhwp4B1dQAgZYCyMaJwFT9tTbNTQ= Subject key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F816B63B9CB8EF2017CDFE8CF0A5C5C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5060 -- 5061 AS: 6152 AS: 9504 AS: 16087 AS: 52132 AS: 52138 AS: 58089 AS: 61161 IP: 92.50.0.0/18 IP: 107.150.170.0/24 IP: 147.136.64.0/19 IP: 168.199.0.0/16 IP: 170.246.64.0/22 IP: 185.17.72.0/22 IP: 185.100.56.0/22 IP: 185.101.244.0/22 IP: 185.101.252.0/22 IP: 185.102.4.0/22 IP: 185.170.68.0/22 IP: 185.171.252.0/22 IP: 185.226.204.0/22 IP: 192.95.80.0/20 IP: 2001:678:8b4::/48 IP: 2001:678:8b8::/48 IP: 2001:678:8bc::/48 IP: 2001:678:8c0::/48 IP: 2001:678:8c4::/48 IP: 2001:678:8c8::/48 IP: 2001:67c:12d8::/48 IP: 2a04:600::/29 IP: 2a0d:3200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:6b:63:b9:cb:8e:f2:01:7c:df:e8:cf:0a:5c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=826605b4d27f13968e8794e6ef091223748817d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3a:1e:90:c7:2c:01:13:a4:cd:27:42:b2:40: fe:94:e0:84:66:21:de:c6:3a:90:e3:2d:3f:a5:54: e3:4c:db:d3:0d:0e:91:7b:8e:48:78:45:b0:60:07: 41:3c:2a:14:8b:18:16:ab:9c:92:07:8c:ae:46:f0: da:82:12:fb:c6:87:a9:8a:61:7c:48:90:92:24:fc: f2:c5:5c:72:5c:7c:54:5a:3f:62:7e:2f:45:e5:38: 78:0d:44:2b:c3:8d:de:63:43:9e:0c:b4:ef:b0:bf: 03:e4:3e:3e:14:31:37:30:b3:70:a9:7f:b5:fd:33: 13:d9:53:8d:f3:91:12:e4:00:f0:0c:62:c6:fa:83: ec:f6:6c:ed:f0:61:3b:75:c5:b6:27:ec:f8:dd:ad: 43:d0:15:74:54:94:ee:d3:db:48:be:26:68:6a:fa: 5e:e6:a4:69:49:74:a3:0c:37:38:50:4f:6c:24:b1: a9:a7:41:bf:5f:5a:e7:7a:9e:f0:9e:4e:3c:6a:3b: 35:2e:6f:ad:75:a3:cd:f8:58:56:9a:fe:a5:23:5d: b4:db:fb:a9:cd:5a:90:75:52:dc:a1:8d:f3:f1:5b: 67:70:c1:ef:7f:97:17:8f:ea:31:60:40:e6:6e:02: 10:c3:23:bf:50:b1:25:55:b6:92:c6:a4:5a:7b:4a: c8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.50.0.0/18 107.150.170.0/24 147.136.64.0/19 168.199.0.0/16 170.246.64.0/22 185.17.72.0/22 185.100.56.0/22 185.101.244.0/22 185.101.252.0/22 185.102.4.0/22 185.170.68.0/22 185.171.252.0/22 185.226.204.0/22 192.95.80.0/20 IPv6: 2001:678:8b4::/48 2001:678:8b8::/48 2001:678:8bc::/48 2001:678:8c0::/48 2001:678:8c4::/48 2001:678:8c8::/48 2001:67c:12d8::/48 2a04:600::/29 2a0d:3200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5060-5061 6152 9504 16087 52132 52138 58089 61161 Signature Algorithm: sha256WithRSAEncryption 1d:21:a6:b5:32:ac:19:fb:cc:b2:b1:96:83:d2:0b:7a:c2:a8: a5:e0:f2:24:ea:0d:c1:cf:d5:c5:2a:46:c5:1b:21:d9:8e:8b: ec:d3:83:c8:c4:1d:da:27:1d:2b:7d:ed:d1:48:fa:0a:3a:00: af:93:a6:64:6b:09:05:56:f1:7e:ca:40:b9:2c:96:38:56:72: 26:25:e6:9f:02:5d:7e:b9:39:df:18:14:ba:67:c9:a3:f9:38: bb:56:f1:23:4a:55:6b:1c:b1:e8:53:25:75:00:75:6f:79:3a: 65:62:19:90:63:64:26:5c:fd:83:ce:0f:10:b2:e7:5a:f5:ad: 25:cf:c1:33:35:1e:67:4b:dd:a2:ee:83:35:c4:d8:1c:f4:5d: ff:e6:d7:28:a0:11:4b:3c:d5:cd:6b:6d:86:b8:05:d7:27:43: 8a:e8:d8:9e:f3:04:9a:04:c2:8b:14:45:03:37:e8:10:34:40: 3a:74:6d:ea:32:cc:ab:98:29:64:7d:42:3b:3b:e3:99:73:3f: 7e:ab:11:a7:9c:26:2d:6f:6e:93:00:42:5a:41:42:2f:11:9f: 00:b3:94:e1:d0:26:66:98:4c:5f:b5:a0:ce:95:f0:e8:a2:f6: c7:04:14:a3:09:1a:7a:a2:3e:e0:e0:80:a8:cf:2a:8c:a8:52: cc:55:0a:65 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgISAZt/gWtjucuO8gF83+jPClxcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjY2MDViNGQyN2YxMzk2OGU4Nzk0ZTZlZjA5MTIyMzc0ODgxN2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDoekMcsAROkzSdCskD+lOCEZiHe xjqQ4y0/pVTjTNvTDQ6Re45IeEWwYAdBPCoUixgWq5ySB4yuRvDaghL7xoepimF8 SJCSJPzyxVxyXHxUWj9ifi9F5Th4DUQrw43eY0OeDLTvsL8D5D4+FDE3MLNwqX+1 /TMT2VON85ES5ADwDGLG+oPs9mzt8GE7dcW2J+z43a1D0BV0VJTu09tIviZoavpe 5qRpSXSjDDc4UE9sJLGpp0G/X1rnep7wnk48ajs1Lm+tdaPN+FhWmv6lI1202/up zVqQdVLcoY3z8VtncMHvf5cXj+oxYEDmbgIQwyO/ULElVbaSxqRae0rI4QIDAQAB o4IDajCCA2YwHQYDVR0OBBYEFIJmBbTSfxOWjoeU5u8JEiN0iBfYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3L2ZiY2Mz Mi0zM2M4LTQxZmYtODlmYS0yZDE5MThiYTFjMGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvZmJjYzMy LTMzYzgtNDFmZi04OWZhLTJkMTkxOGJhMWMwZS8xL2dtWUZ0TkpfRTVhT2g1VG03 d2tTSTNTSUY5Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHDBggrBgEF BQcBBwEB/wSBszCBsDBZBAIAATBTAwQGXDIAAwQAa5aqAwQFk4hAAwMAqMcDBAKq 9kADBAK5EUgDBAK5ZDgDBAK5ZfQDBAK5ZfwDBAK5ZgQDBAK5qkQDBAK5q/wDBAK5 4swDBATAX1AwUwQCAAIwTQMHACABBngItAMHACABBngIuAMHACABBngIvAMHACAB BngIwAMHACABBngIxAMHACABBngIyAMHACABBnwS2AMFAyoEBgADBQMqDTIAMD8G CCsGAQUFBwEIAQH/BDAwLqAsMCowCAICE8QCAhPFAgIYCAICJSACAj7XAgMAy6QC AwDLqgIDAOLpAgMA7ukwDQYJKoZIhvcNAQELBQADggEBAB0hprUyrBn7zLKxloPS C3rCqKXg8iTqDcHP1cUqRsUbIdmOi+zTg8jEHdonHSt97dFI+go6AK+TpmRrCQVW 8X7KQLksljhWciYl5p8CXX65Od8YFLpnyaP5OLtW8SNKVWscsehTJXUAdW95OmVi GZBjZCZc/YPODxCy51r1rSXPwTM1HmdL3aLugzXE2Bz0Xf/m1yigEUs81c1rbYa4 BdcnQ4ro2J7zBJoEwosURQM36BA0QDp0beoyzKuYKWR9Qjs745lzP36rEaecJi1v bpMAQlpBQi8RnwCzlOHQJmaYTF+1oM6V8Oii9scEFKMJGnqiPuDggKjPKoyoUsxV CmU= -----END CERTIFICATE-----Generated at Sun Jan 25 05:39:27 2026 by rpki-client