This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer File: gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer (raw, json) Hash identifier: GjX7kT82e8xyTF26tStY65dg9X3NcQmjhutg3XVOIqI= Subject key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB763658B24D877DA105AC9C731C67 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201963 IP: 45.89.148.0/22 IP: 45.93.184.0/22 IP: 45.128.12.0/22 IP: 45.132.216.0/22 IP: 45.140.36.0/22 IP: 45.145.240.0/22 IP: 185.250.40.0/22 IP: 2a02:d800::/29 IP: 2a04:de00::/29 IP: 2a0b:fb80::/29 IP: 2a0e:2f40::/29 IP: 2a0e:3cc0::/29 IP: 2a0e:7140::/29 IP: 2a0e:b180::/29 IP: 2a0e:e480::/29 IP: 2a0e:fcc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:76:36:58:b2:4d:87:7d:a1:05:ac:9c:73:1c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:24:74:93:15:5d:38:a5:d8:8b:4a:d4:a1:b2: 19:df:fe:a4:41:53:8b:f0:9b:8b:fe:df:34:61:2a: 84:ed:19:14:53:30:28:ec:9c:56:f1:9a:0e:88:7b: 78:6d:c3:02:ca:ce:1e:fb:e5:45:f1:27:3c:4c:65: 93:09:18:85:8a:f9:c5:54:15:88:2e:e2:a2:bd:71: 69:67:5f:9f:22:6d:c5:84:1f:23:1b:81:85:58:27: 06:37:63:2c:e8:1e:7d:44:ca:02:48:c4:58:99:f9: 46:31:a7:e7:dc:37:28:25:ba:9f:41:03:d7:87:e9: 94:0d:10:2a:c2:7a:e7:e0:8c:71:76:e0:b8:49:00: e5:12:39:02:24:39:2a:f0:73:4f:9b:f8:90:25:98: 39:d2:b8:a0:a4:6c:67:bd:f0:69:01:d4:16:4c:ff: 35:4f:87:3e:3e:42:86:ed:81:d3:e2:1f:04:a5:36: c8:da:31:00:77:a9:9d:10:6f:e7:c3:58:65:0b:73: 97:b4:dd:82:9c:44:51:6a:a1:da:50:e0:f3:0f:4a: d2:f5:28:ef:81:71:b0:a2:40:73:a5:5c:32:9d:b4: 6f:a8:02:25:f0:b1:e4:a3:ce:e9:d7:f2:ba:22:d1: 35:bb:04:67:42:20:75:50:2d:3d:9f:f2:7e:f0:ec: fa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.148.0/22 45.93.184.0/22 45.128.12.0/22 45.132.216.0/22 45.140.36.0/22 45.145.240.0/22 185.250.40.0/22 IPv6: 2a02:d800::/29 2a04:de00::/29 2a0b:fb80::/29 2a0e:2f40::/29 2a0e:3cc0::/29 2a0e:7140::/29 2a0e:b180::/29 2a0e:e480::/29 2a0e:fcc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201963 Signature Algorithm: sha256WithRSAEncryption ab:02:8a:6d:c0:f0:9a:e5:0f:a3:d8:fe:dd:df:5c:ea:73:44: 9c:ff:98:c1:16:91:ac:0e:57:29:7b:f6:88:7b:2a:60:4c:b8: 6d:3d:f2:4c:5b:2b:21:a1:73:fa:36:63:45:18:bb:ea:32:05: 89:a1:93:b6:60:37:fc:92:3e:43:46:d4:74:2b:e8:bf:be:e8: 04:cd:43:9e:62:f5:24:42:8b:c2:aa:75:b6:31:33:08:7b:80: 6c:d3:87:57:93:05:d3:3e:da:1c:d1:60:78:21:59:97:25:88: 32:e3:ad:04:66:e0:7e:41:40:a9:d3:c6:3d:1f:8c:26:a5:d4: 01:a5:b0:c8:9b:f2:34:87:61:ea:eb:43:d2:2d:73:8e:72:4a: 39:71:f8:5e:d5:0b:d4:5e:27:67:4f:6f:e9:28:56:2e:19:1c: f9:27:58:b5:8f:ea:43:87:df:dc:4c:7c:64:ab:04:b7:18:6b: 94:d6:4d:c3:34:cc:4e:dd:4f:a1:b6:49:87:c4:11:0c:d2:78: f1:95:46:58:d1:ab:fa:e1:4a:bf:00:a1:0e:bb:00:66:3f:f0: 29:2a:85:ed:c7:b5:6b:5d:b4:c5:04:9e:df:dd:3b:14:30:cb: 96:0c:7f:5a:b5:7e:17:e0:fd:b4:be:46:2c:ca:87:82:87:5a: 17:6f:00:83 -----BEGIN CERTIFICATE----- MIIGHDCCBQSgAwIBAgISAZt263Y2WLJNh32hBayccxxnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzBlMDY0MTlmYzQ2YTI4MDJmNmYwM2I3MTM2OGFjN2JhYWY2NGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyR0kxVdOKXYi0rUobIZ3/6kQVOL 8JuL/t80YSqE7RkUUzAo7JxW8ZoOiHt4bcMCys4e++VF8Sc8TGWTCRiFivnFVBWI LuKivXFpZ1+fIm3FhB8jG4GFWCcGN2Ms6B59RMoCSMRYmflGMafn3DcoJbqfQQPX h+mUDRAqwnrn4IxxduC4SQDlEjkCJDkq8HNPm/iQJZg50rigpGxnvfBpAdQWTP81 T4c+PkKG7YHT4h8EpTbI2jEAd6mdEG/nw1hlC3OXtN2CnERRaqHaUODzD0rS9Sjv gXGwokBzpVwynbRvqAIl8LHko87p1/K6ItE1uwRnQiB1UC09n/J+8Oz63QIDAQAB o4IDKDCCAyQwHQYDVR0OBBYEFIMOBkGfxGooAvbwO3E2ise6r2TOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhlMGQ2 YTRkLWJhNjctNDk3OS04ZDEyLTBlZDQ3NDhmYzg2ZS8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUw ZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvODMwRTA2NDE5RkM0 NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjCBigYIKwYBBQUHAQcBAf8EezB5MDAEAgABMCoD BAItWZQDBAItXbgDBAItgAwDBAIthNgDBAItjCQDBAItkfADBAK5+igwRQQCAAIw PwMFAyoC2AADBQMqBN4AAwUDKgv7gAMFAyoOL0ADBQMqDjzAAwUDKg5xQAMFAyoO sYADBQMqDuSAAwUDKg78wDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDFOswDQYJ KoZIhvcNAQELBQADggEBAKsCim3A8JrlD6PY/t3fXOpzRJz/mMEWkawOVyl79oh7 KmBMuG098kxbKyGhc/o2Y0UYu+oyBYmhk7ZgN/ySPkNG1HQr6L++6ATNQ55i9SRC i8KqdbYxMwh7gGzTh1eTBdM+2hzRYHghWZcliDLjrQRm4H5BQKnTxj0fjCal1AGl sMib8jSHYerrQ9Itc45ySjlx+F7VC9ReJ2dPb+koVi4ZHPknWLWP6kOH39xMfGSr BLcYa5TWTcM0zE7dT6G2SYfEEQzSePGVRljRq/rhSr8AoQ67AGY/8Ckqhe3HtWtd tMUEnt/dOxQwy5YMf1q1fhfg/bS+RizKh4KHWhdvAIM= -----END CERTIFICATE-----Generated at Sun Jan 25 09:31:15 2026 by rpki-client