This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer File: gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer (raw, json) Hash identifier: MEFGBJmCBMmfvgWiIdQCvyWiTFDkVyuCrrAd202PUuM= Subject key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED53ECAFD84ABDD6665BA47B958867 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44465 IP: 92.43.168.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:53:ec:af:d8:4a:bd:d6:66:5b:a4:7b:95:88:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1e:76:64:a5:be:7a:2e:2d:99:f4:6f:b6:9e: d1:c5:b6:a8:f0:a5:9d:37:7a:91:28:83:20:0a:81: fd:f2:39:08:70:bb:0a:c3:ca:18:0e:85:00:0c:e3: 3d:a5:2f:12:62:00:02:f2:26:bd:86:cf:5c:e2:9f: 84:14:f0:78:b7:2e:dc:9f:7e:f1:57:99:00:09:08: 5a:33:66:39:3c:2a:69:33:5e:93:0e:96:4c:62:65: 1c:fe:86:17:ab:c2:bf:35:84:e6:19:e4:5e:8f:0f: 7b:53:de:41:a5:53:00:35:f0:2f:34:56:0d:ce:be: a9:5c:c2:fd:fe:5c:53:92:3a:6e:21:ee:54:ba:ca: 86:d0:42:eb:9c:da:5d:8f:fe:53:3c:54:a2:18:8c: f0:fc:3b:4d:07:12:c9:b6:fb:89:d4:24:24:01:ed: 76:22:a4:af:06:89:87:e6:6d:83:bc:8a:7a:c6:30: 55:86:cb:c8:8b:bb:bf:a5:83:5c:be:0d:ce:0f:c8: 69:e2:68:30:d2:5c:7d:a8:64:3c:ad:81:30:73:f3: 2f:a1:58:a1:c4:e2:50:f6:c2:2d:29:27:ef:db:cc: 6f:93:f5:1a:09:f3:30:72:7a:28:6e:1b:c3:d4:16: 21:15:70:d7:2a:ea:e7:35:6a:cb:16:4d:7c:3c:8c: c9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.43.168.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44465 Signature Algorithm: sha256WithRSAEncryption 2d:fd:4f:16:5a:47:2f:ce:09:8d:9b:d3:c3:a7:20:e2:09:24: 69:90:a9:7d:de:28:e4:41:67:38:db:6e:75:49:43:f8:0b:8f: f1:78:d9:31:e1:b1:ab:b6:f6:ce:b5:8c:bc:4a:70:eb:8b:9e: 40:ef:7f:9a:6a:c5:49:77:5b:55:a8:b6:79:52:29:d6:64:90: be:f9:ae:ed:9a:50:c0:22:f4:09:d9:24:ba:d4:39:3c:1d:39: 64:c7:3d:55:93:63:43:a3:17:b7:25:98:9e:a8:60:7d:49:ce: 53:44:e9:29:27:c1:fc:9b:0f:3e:34:1c:22:31:a5:19:fe:b8: 42:e4:65:7f:15:80:72:4d:6d:57:79:b6:94:9a:b0:b2:78:26: 6d:0e:8a:44:37:32:75:fb:21:ea:d6:fb:24:8a:3b:91:b1:21: 93:74:fd:81:7a:15:72:96:bd:7b:b1:fc:52:7d:9c:26:0a:24: a0:b8:63:9d:b8:ea:d0:c2:3d:67:e6:49:fc:d9:76:cc:57:95: a2:a9:d6:27:69:f8:36:e9:09:13:eb:cb:4c:19:cd:f2:55:fb: c5:0c:c0:d2:a9:0f:e2:77:50:4d:31:40:4f:7e:c8:0c:f9:45: 21:f4:c9:c9:11:33:47:eb:ab:9a:e4:78:a1:85:52:91:92:d2: 92:e2:26:53 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt57VPsr9hKvdZmW6R7lYhnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmQ3ZmU3MzEyZWZiNDJiZDhkMWVjZDgyYWM3NjE5MWVhMjZjMzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR52ZKW+ei4tmfRvtp7Rxbao8KWd N3qRKIMgCoH98jkIcLsKw8oYDoUADOM9pS8SYgAC8ia9hs9c4p+EFPB4ty7cn37x V5kACQhaM2Y5PCppM16TDpZMYmUc/oYXq8K/NYTmGeRejw97U95BpVMANfAvNFYN zr6pXML9/lxTkjpuIe5UusqG0ELrnNpdj/5TPFSiGIzw/DtNBxLJtvuJ1CQkAe12 IqSvBomH5m2DvIp6xjBVhsvIi7u/pYNcvg3OD8hp4mgw0lx9qGQ8rYEwc/MvoVih xOJQ9sItKSfv28xvk/UaCfMwcnoobhvD1BYhFXDXKurnNWrLFk18PIzJAQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFILX/nMS77Qr2NHs2CrHYZHqJsNWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiLzA1ZDhi YS05NDMzLTRhMmUtYmZlNi0zN2IyMWJhYjNiMDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvMDVkOGJh LTk0MzMtNGEyZS1iZmU2LTM3YjIxYmFiM2IwMC8xL2d0Zi1jeEx2dEN2WTBlellL c2Roa2VvbXcxWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDXCuoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCtsTANBgkqhkiG9w0BAQsFAAOCAQEALf1PFlpHL84JjZvTw6cg4gkkaZCpfd4o 5EFnONtudUlD+AuP8XjZMeGxq7b2zrWMvEpw64ueQO9/mmrFSXdbVai2eVIp1mSQ vvmu7ZpQwCL0CdkkutQ5PB05ZMc9VZNjQ6MXtyWYnqhgfUnOU0TpKSfB/JsPPjQc IjGlGf64QuRlfxWAck1tV3m2lJqwsngmbQ6KRDcydfsh6tb7JIo7kbEhk3T9gXoV cpa9e7H8Un2cJgokoLhjnbjq0MI9Z+ZJ/Nl2zFeVoqnWJ2n4NukJE+vLTBnN8lX7 xQzA0qkP4ndQTTFAT37IDPlFIfTJyREzR+urmuR4oYVSkZLSkuImUw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:09:02 2026 by rpki-client