This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer File: gyO5cxsZaxrLyCn1sosyX9nT49Q.cer (raw, json) Hash identifier: 67WACzD4KDyZ1Xtc33ZW7LgR5bI3TpXyIcdWMau4NJo= Subject key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B8477EF8CDF10CEB7497471F3A56B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206332 IP: 185.146.44.0/22 IP: 185.171.201.0/24 IP: 2a07:4d80::/29 IP: 2a10:55c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:84:77:ef:8c:df:10:ce:b7:49:74:71:f3:a5:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5b:33:8e:b1:fd:c2:c2:42:0d:f1:e0:ab:2a: 76:b7:c5:11:e5:a2:20:85:72:e4:72:a6:c6:15:89: 1b:80:14:40:5c:8e:5d:09:20:22:d6:34:ac:ca:b1: 68:d8:9f:0b:6f:15:96:f0:6c:46:25:af:45:86:11: aa:ad:70:a1:ef:9f:f7:14:71:6b:56:9e:fb:dc:b0: 3d:8c:9f:54:d7:bf:6d:cb:77:ec:88:4b:d1:c5:11: ee:08:64:67:93:b4:8e:8f:b3:e8:e7:a2:33:fd:22: 05:04:70:e1:67:87:b4:84:67:bc:b3:24:a6:65:08: fb:bf:c1:89:71:c9:ad:7c:c9:9e:a4:df:94:f1:ff: d4:81:3d:7b:8d:c5:dd:6a:60:b7:25:12:e8:2a:40: 8e:86:56:f4:2b:e3:16:39:e7:fe:34:d6:9d:f8:1e: 8d:5e:ff:b0:18:1e:7e:4d:fc:01:e2:94:8e:88:db: 26:22:cf:98:dc:92:80:65:a6:da:d7:1d:82:87:80: 6e:20:be:dd:88:d4:91:58:66:19:40:1b:7d:16:15: 1f:88:1c:48:ef:ac:ed:c7:7f:6f:76:af:da:96:f3: ab:40:5e:40:27:1d:fe:2d:9d:39:d1:7f:7e:10:0a: 56:e3:36:92:c1:1a:fe:7b:e9:ad:f7:7e:a1:3b:45: 98:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.146.44.0/22 185.171.201.0/24 IPv6: 2a07:4d80::/29 2a10:55c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206332 Signature Algorithm: sha256WithRSAEncryption 4e:4f:69:d2:ae:dd:bf:01:70:cf:a8:02:f9:88:e7:f1:d5:32: ab:ba:4e:6e:4f:3d:d6:13:b9:6c:2f:3b:a1:87:58:ae:2c:1c: a4:f9:45:b9:b7:36:3d:99:e9:42:b7:d0:71:09:99:9d:10:69: a1:60:77:22:8b:5e:43:21:88:f4:46:87:85:04:12:95:05:e0: 43:6d:d3:0f:6f:f4:85:de:45:b2:5d:44:fa:82:46:12:83:de: 6f:76:9d:2d:20:75:fd:4a:a9:08:74:f7:a5:40:61:db:cb:ab: f2:f3:0b:15:21:9d:cf:f3:b0:b9:6f:88:a8:6a:73:eb:17:d9: 60:d5:6b:12:37:c3:ce:97:b4:21:fb:5d:3a:28:ca:f1:96:dc: 66:e3:78:37:d9:36:b4:85:0c:3c:db:9f:be:bd:c5:7e:65:0b: b1:32:b7:78:69:c1:86:6b:94:8d:e0:e4:c2:3c:a3:53:4a:76: 6d:f2:ac:53:87:06:07:94:5e:c4:80:0a:cb:e3:d9:3f:9c:a6: 56:ad:9a:c2:99:39:3d:83:21:7a:32:17:c5:63:93:09:f3:f8: 92:e9:55:8e:28:1f:75:cc:00:cd:82:7c:e0:34:b9:2f:d5:63: db:1a:53:44:6f:1f:70:6b:5d:b5:59:e8:1f:d6:ad:fb:2e:31: 6c:48:e7:eb -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt6W4R374zfEM63SXRx86VrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzIzYjk3MzFiMTk2YjFhY2JjODI5ZjViMjhiMzI1ZmQ5ZDNlM2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVszjrH9wsJCDfHgqyp2t8UR5aIg hXLkcqbGFYkbgBRAXI5dCSAi1jSsyrFo2J8LbxWW8GxGJa9FhhGqrXCh75/3FHFr Vp773LA9jJ9U179ty3fsiEvRxRHuCGRnk7SOj7Po56Iz/SIFBHDhZ4e0hGe8sySm ZQj7v8GJccmtfMmepN+U8f/UgT17jcXdamC3JRLoKkCOhlb0K+MWOef+NNad+B6N Xv+wGB5+TfwB4pSOiNsmIs+Y3JKAZaba1x2Ch4BuIL7diNSRWGYZQBt9FhUfiBxI 76ztx39vdq/alvOrQF5AJx3+LZ050X9+EApW4zaSwRr+e+mt936hO0WY5QIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFIMjuXMbGWsay8gp9bKLMl/Z0+PUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhL2RhMWYy My0zNjk0LTRmNTktODVjZi1jYTFlNWYwODE5NTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvZGExZjIz LTM2OTQtNGY1OS04NWNmLWNhMWU1ZjA4MTk1MC8xL2d5TzVjeHNaYXhyTHlDbjFz b3N5WDluVDQ5US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCuZIsAwQAuavJMBQEAgACMA4DBQMqB02AAwUD KhBVwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDJfwwDQYJKoZIhvcNAQELBQAD ggEBAE5PadKu3b8BcM+oAvmI5/HVMqu6Tm5PPdYTuWwvO6GHWK4sHKT5Rbm3Nj2Z 6UK30HEJmZ0QaaFgdyKLXkMhiPRGh4UEEpUF4ENt0w9v9IXeRbJdRPqCRhKD3m92 nS0gdf1KqQh096VAYdvLq/LzCxUhnc/zsLlviKhqc+sX2WDVaxI3w86XtCH7XToo yvGW3GbjeDfZNrSFDDzbn769xX5lC7Eyt3hpwYZrlI3g5MI8o1NKdm3yrFOHBgeU XsSACsvj2T+cplatmsKZOT2DIXoyF8Vjkwnz+JLpVY4oH3XMAM2CfOA0uS/VY9sa U0RvH3BrXbVZ6B/WrfsuMWxI5+s= -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:53 2026 by rpki-client