This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.cer File: gvCPJjw3RZtf1vwG_Z8OX21iJ1k.cer (raw, json) Hash identifier: KFjLFIePc+7GazB9/ePz3CIJ0vUyTy5/F0ZMlX2bHJE= Subject key identifier: 82:F0:8F:26:3C:37:45:9B:5F:D6:FC:06:FD:9F:0E:5F:6D:62:27:59 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A360625E74712DF08CA56A6BB72D44 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204896 IP: 2001:67c:4e4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:60:62:5e:74:71:2d:f0:8c:a5:6a:6b:b7:2d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82f08f263c37459b5fd6fc06fd9f0e5f6d622759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:81:ce:cf:4c:57:ed:24:02:28:c7:97:96:af: 2e:2d:da:62:cf:a9:07:24:31:32:98:82:9d:03:0f: 68:26:e6:94:b6:58:4b:6a:3a:fc:07:70:fd:f5:fe: 04:02:46:e7:ca:43:30:f0:2e:74:2c:16:95:37:ef: 18:03:b7:dc:d9:08:d5:f2:c5:54:79:0f:fb:bd:66: 4b:05:27:90:04:38:c2:c3:cf:5c:9c:3e:9d:e5:5f: e8:ef:b6:fa:f1:0a:1a:ff:52:15:de:79:b9:b1:7f: e7:e2:68:44:e6:cd:e5:57:f9:cc:e1:da:a6:a9:d4: 74:e9:3c:ba:34:68:d7:f1:84:6d:c4:0a:fe:d9:9e: 9a:93:f1:b3:d2:1c:a8:25:f3:8a:32:7c:51:e6:63: bf:a0:00:68:c6:74:83:48:f9:b2:ef:91:13:a4:c9: dd:2f:6e:0c:e6:65:bb:f2:86:46:83:25:37:6f:61: e1:8b:2b:7b:a1:17:39:eb:7f:6e:49:3e:09:88:c3: 7b:bc:aa:74:9f:78:92:96:25:a9:71:89:ea:63:84: a8:c5:8f:0d:1d:43:a1:3d:31:85:d3:40:ce:06:60: 98:04:63:fc:79:1d:26:8a:02:89:92:d4:66:cc:ae: 89:28:64:2d:7e:64:69:66:9d:f6:16:31:05:e1:85: a0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F0:8F:26:3C:37:45:9B:5F:D6:FC:06:FD:9F:0E:5F:6D:62:27:59 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:4e4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204896 Signature Algorithm: sha256WithRSAEncryption 76:26:56:91:c6:1f:76:46:01:a1:cb:8b:d0:54:38:5e:c7:e3: 91:24:d6:9c:df:57:93:21:31:01:65:d8:8d:44:2b:94:be:55: 2b:68:2f:bc:4b:d0:fe:30:09:66:ea:c7:dd:81:6e:fa:9a:1a: d6:ef:fa:d4:9b:db:fe:de:55:55:61:6b:56:0d:ee:52:8b:a6: 22:63:71:5f:8b:6b:07:b7:87:9d:8a:8f:1c:c3:c5:d7:c3:e9: f5:87:34:66:e5:20:71:c3:ed:15:08:b6:2c:ff:08:72:b6:92: b2:0b:ee:7a:e7:b5:73:9c:1e:24:cc:87:ba:f4:9b:d2:83:36: c2:16:06:f3:e8:b2:72:22:cb:ef:0a:bb:ac:63:71:76:0f:7e: e7:75:92:4b:8c:66:c6:05:da:3e:81:44:30:e4:2d:d2:7a:9b: 8a:87:79:79:20:57:dd:27:a4:e9:29:e3:f7:28:55:45:6f:bd: d8:89:e8:d7:70:60:4f:50:f7:53:68:d4:ae:35:e6:1d:df:f7: 2c:ba:d4:0f:85:dc:0e:89:3d:8d:85:69:a6:52:5f:c2:f3:9c: 6d:a2:37:cd:2f:cd:98:24:2e:ad:13:7a:59:66:04:ef:47:13: d7:f0:5a:0c:d3:b5:6f:d3:cd:7e:2c:c1:e7:58:5e:e2:65:1c: 44:48:ee:8e -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt4o2BiXnRxLfCMpWprty1EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmYwOGYyNjNjMzc0NTliNWZkNmZjMDZmZDlmMGU1ZjZkNjIyNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYHOz0xX7SQCKMeXlq8uLdpiz6kH JDEymIKdAw9oJuaUtlhLajr8B3D99f4EAkbnykMw8C50LBaVN+8YA7fc2QjV8sVU eQ/7vWZLBSeQBDjCw89cnD6d5V/o77b68Qoa/1IV3nm5sX/n4mhE5s3lV/nM4dqm qdR06Ty6NGjX8YRtxAr+2Z6ak/Gz0hyoJfOKMnxR5mO/oABoxnSDSPmy75ETpMnd L24M5mW78oZGgyU3b2Hhiyt7oRc5639uST4JiMN7vKp0n3iSliWpcYnqY4SoxY8N HUOhPTGF00DOBmCYBGP8eR0migKJktRmzK6JKGQtfmRpZp32FjEF4YWgsQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFILwjyY8N0WbX9b8Bv2fDl9tYidZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0L2NjZjkz Yi04ZmY5LTRlYjYtOGMzNC00YWEzYzNkZDRkNmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvY2NmOTNi LThmZjktNGViNi04YzM0LTRhYTNjM2RkNGQ2Yi8xL2d2Q1BKanczUlp0ZjF2d0df WjhPWDIxaUoxay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfATkMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMgYDANBgkqhkiG9w0BAQsFAAOCAQEAdiZWkcYfdkYBocuL0FQ4XsfjkSTW nN9XkyExAWXYjUQrlL5VK2gvvEvQ/jAJZurH3YFu+poa1u/61Jvb/t5VVWFrVg3u UoumImNxX4trB7eHnYqPHMPF18Pp9Yc0ZuUgccPtFQi2LP8IcraSsgvueue1c5we JMyHuvSb0oM2whYG8+iyciLL7wq7rGNxdg9+53WSS4xmxgXaPoFEMOQt0nqbiod5 eSBX3Sek6Snj9yhVRW+92Ino13BgT1D3U2jUrjXmHd/3LLrUD4XcDok9jYVpplJf wvOcbaI3zS/NmCQurRN6WWYE70cT1/BaDNO1b9PNfizB51he4mUcREjujg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:24 2026 by rpki-client