This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gnpb34rKoeYW9iE9HNy-GHv-BgU.cer File: gnpb34rKoeYW9iE9HNy-GHv-BgU.cer (raw, json) Hash identifier: 9j49KAp637rTrYeYNx3VTGXQIgJRu22wcH/JA41hQUY= Subject key identifier: 82:7A:5B:DF:8A:CA:A1:E6:16:F6:21:3D:1C:DC:BE:18:7B:FE:06:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BB976EC19BCE1AB52EEA72209812ADD9D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 13 Jan 2026 22:25:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215760 IP: 2001:67c:5c0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b9:76:ec:19:bc:e1:ab:52:ee:a7:22:09:81:2a:dd:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 13 22:25:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=827a5bdf8acaa1e616f6213d1cdcbe187bfe0605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0f:f7:85:67:46:ea:1d:a8:10:14:8d:94:cf: cf:e1:df:c4:a7:17:c4:4b:b1:54:5f:74:75:8a:79: 21:ce:b7:b3:61:6d:01:5a:bd:ff:7b:40:43:5f:69: ca:a2:fb:e5:52:bf:7e:4f:13:01:8c:37:57:64:e4: 91:bf:8f:98:71:8f:ab:31:f0:8e:c7:20:58:fb:65: 99:d0:85:75:33:6f:3c:c2:2b:28:be:bd:3b:de:09: 25:12:7c:33:0a:e4:60:d0:3f:45:e1:11:81:e4:7f: bd:0f:86:b5:64:ae:6c:0e:fe:2f:af:0f:7c:4e:a5: 9f:db:9b:26:f8:f7:29:70:b8:eb:6c:c6:6b:c4:86: ea:da:44:ec:36:21:18:32:20:bd:be:9f:d6:ab:d8: f4:5c:66:ef:35:fb:60:5a:ac:a6:51:22:e5:d4:e7: e8:e3:03:28:0e:52:ca:ec:ab:04:1d:92:ed:67:37: 66:55:3f:cc:7d:ea:d7:cf:15:15:ba:a6:93:27:10: e3:55:ed:da:03:da:62:90:87:18:da:af:c7:7c:29: a8:35:c6:75:fc:74:9c:eb:7c:ca:6f:4c:c4:fa:62: 3e:25:5c:e4:0f:e8:3c:6a:b0:29:4b:58:eb:2c:65: 81:48:11:d4:d1:7d:a2:64:59:ee:21:2d:ac:45:15: 46:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7A:5B:DF:8A:CA:A1:E6:16:F6:21:3D:1C:DC:BE:18:7B:FE:06:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:5c0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215760 Signature Algorithm: sha256WithRSAEncryption 26:69:17:0e:d3:11:90:f3:06:25:44:5c:5b:82:9e:2b:b3:0a: 89:80:be:66:5a:cc:5b:54:95:96:43:9f:8f:e6:60:67:9a:29: 2c:41:57:41:4d:c5:12:40:d8:6f:eb:98:8b:02:bb:3e:ad:69: 70:f5:75:71:e8:7a:fd:81:cc:91:dc:8f:37:33:76:03:f0:7e: 41:c0:83:5f:ed:d3:5d:bd:42:c3:e8:84:51:23:36:a1:d8:d8: f9:f0:e8:95:c7:b7:43:5d:df:e3:72:8f:a0:16:2f:09:ab:50: 42:d0:4a:f5:c8:65:ca:4e:4d:9f:75:0c:12:1c:ee:f6:5e:2c: 67:c4:be:18:1d:85:6b:9b:5f:49:28:37:9d:06:5a:2c:74:cd: dc:5c:7f:1d:34:9d:df:a9:c5:b6:ac:cb:8e:19:e8:77:36:2a: 8c:4c:91:b7:7d:93:4d:80:51:b8:e5:aa:31:0b:91:eb:27:5b: a2:4d:0c:aa:ae:94:13:63:29:ad:f9:84:ce:16:fa:f5:49:50: a3:79:b2:eb:c6:d6:5d:72:62:95:bd:85:42:bb:68:ef:ad:35: 1d:fb:0e:65:8a:ec:fe:ec:e0:32:11:de:f1:d1:3d:c4:c9:38: 94:eb:3c:97:78:19:58:ff:44:de:86:d1:22:11:cc:cc:56:0e: 00:be:6b:49 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZu5duwZvOGrUu6nIgmBKt2dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTEzMjIyNTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjdhNWJkZjhhY2FhMWU2MTZmNjIxM2QxY2RjYmUxODdiZmUwNjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA/3hWdG6h2oEBSNlM/P4d/EpxfE S7FUX3R1inkhzrezYW0BWr3/e0BDX2nKovvlUr9+TxMBjDdXZOSRv4+YcY+rMfCO xyBY+2WZ0IV1M288wisovr073gklEnwzCuRg0D9F4RGB5H+9D4a1ZK5sDv4vrw98 TqWf25sm+PcpcLjrbMZrxIbq2kTsNiEYMiC9vp/Wq9j0XGbvNftgWqymUSLl1Ofo 4wMoDlLK7KsEHZLtZzdmVT/MferXzxUVuqaTJxDjVe3aA9pikIcY2q/HfCmoNcZ1 /HSc63zKb0zE+mI+JVzkD+g8arApS1jrLGWBSBHU0X2iZFnuIS2sRRVG5wIDAQAB o4ICvzCCArswHQYDVR0OBBYEFIJ6W9+KyqHmFvYhPRzcvhh7/gYFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3ZDky NTU4LTI1OGUtNGI0NC1hZDE2LThjMTAyMmM0NmQwMy8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjdk OTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2ZDAzLzAvODI3QTVCREY4QUNB QTFFNjE2RjYyMTNEMUNEQ0JFMTg3QkZFMDYwNS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH ACABBnwFwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDStAwDQYJKoZIhvcNAQEL BQADggEBACZpFw7TEZDzBiVEXFuCniuzComAvmZazFtUlZZDn4/mYGeaKSxBV0FN xRJA2G/rmIsCuz6taXD1dXHoev2BzJHcjzczdgPwfkHAg1/t0129QsPohFEjNqHY 2Pnw6JXHt0Nd3+Nyj6AWLwmrUELQSvXIZcpOTZ91DBIc7vZeLGfEvhgdhWubX0ko N50GWix0zdxcfx00nd+pxbasy44Z6Hc2KoxMkbd9k02AUbjlqjELkesnW6JNDKqu lBNjKa35hM4W+vVJUKN5suvG1l1yYpW9hUK7aO+tNR37DmWK7P7s4DIR3vHRPcTJ OJTrPJd4GVj/RN6G0SIRzMxWDgC+a0k= -----END CERTIFICATE-----Generated at Sun Jan 25 14:35:28 2026 by rpki-client