This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer File: gz4_XvglVWsBSghdMlZbsMvFrI0.cer (raw, json) Hash identifier: MQsk4dKzhvVyO9tB+bsPvbRe8j9INh6SXTO4dmmLKbE= Subject key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E5F4D919DA88599CDF28124D67E1F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34346 IP: 37.140.250.0/24 IP: 45.149.24.0/22 IP: 62.106.84.0/24 IP: 87.237.167.0/24 IP: 89.21.84.0/22 IP: 89.251.16.0/20 IP: 91.200.220.0/22 IP: 91.210.144.0/22 IP: 91.226.56.0/22 IP: 109.122.40.0/21 IP: 146.19.56.0/24 IP: 176.97.205.0/24 IP: 193.93.52.0/22 IP: 194.61.72.0/22 IP: 212.23.206.0/24 IP: 2a0b:ad00::/29 IP: 2a0d:6540::/29 IP: 2a0d:a1c0::/29 IP: 2a11:54c0::/29 IP: 2a11:8e40::/29 IP: 2a11:d640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:5f:4d:91:9d:a8:85:99:cd:f2:81:24:d6:7e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f7:2f:62:e5:01:2a:33:b9:df:69:a5:a3:6c: eb:43:3d:64:d3:ee:e2:30:5c:5e:37:78:73:76:8c: 2a:f5:37:4a:d7:54:21:71:d1:69:79:cf:01:eb:d3: fa:ac:47:da:05:e2:fe:bd:3a:35:1c:42:ea:90:ec: 37:2d:e7:a2:a7:d8:8c:ad:85:16:f2:90:63:48:59: 7e:b1:19:18:2c:94:80:e7:2f:ee:15:a4:a8:a1:af: fd:2f:48:70:6e:d6:fd:b2:46:29:66:96:59:9c:a7: 54:e2:96:be:1b:31:ff:3d:34:72:c1:ce:81:cd:6d: 6e:9b:ef:63:45:97:76:36:d1:09:90:d7:db:15:22: 86:84:0c:79:b4:bc:b6:0d:92:e0:d8:54:27:2e:6c: 6e:46:21:47:16:9c:c5:57:47:09:92:6d:d9:07:ec: a4:f6:de:0e:79:6a:a4:c3:34:79:b1:eb:87:56:52: d0:d8:e9:ad:27:3a:f7:14:37:3a:16:a2:01:bb:85: bd:d3:6f:dc:bc:15:ab:b8:34:fe:1f:a0:d7:61:fd: 55:0e:c8:84:01:15:79:c1:90:86:35:96:ee:71:58: eb:0a:64:8d:5b:e5:23:69:ff:de:4d:c3:e7:7b:2a: 54:e7:53:84:ae:97:9c:72:97:89:f8:89:d3:d0:c5: 6d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.140.250.0/24 45.149.24.0/22 62.106.84.0/24 87.237.167.0/24 89.21.84.0/22 89.251.16.0/20 91.200.220.0/22 91.210.144.0/22 91.226.56.0/22 109.122.40.0/21 146.19.56.0/24 176.97.205.0/24 193.93.52.0/22 194.61.72.0/22 212.23.206.0/24 IPv6: 2a0b:ad00::/29 2a0d:6540::/29 2a0d:a1c0::/29 2a11:54c0::/29 2a11:8e40::/29 2a11:d640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34346 Signature Algorithm: sha256WithRSAEncryption 0e:01:7b:3a:87:6b:42:52:fb:f3:5c:7a:29:aa:cf:74:63:ec: 1e:76:09:b4:33:f3:88:6d:2a:3b:0a:6b:79:b6:d7:c5:98:f6: 30:20:31:74:4f:a7:44:f1:c8:61:8b:f7:bf:62:8e:c6:48:86: b7:2e:68:20:f9:de:fc:72:b5:9d:4a:5c:49:cc:84:79:14:08: 73:1e:23:18:2f:7b:ce:b5:cc:0a:9b:a3:8c:64:9c:79:2d:9e: 81:24:82:bc:8a:03:ef:ea:f1:96:45:cd:69:5d:5d:76:f3:6e: 58:ac:f1:e5:c6:52:fd:30:ee:50:65:ca:c1:4c:34:56:07:ed: e4:f0:62:49:c7:25:af:44:21:1b:a7:97:d1:66:ad:5e:15:21: 84:f5:01:f3:8a:ad:61:8b:da:93:bd:e6:bc:f5:53:e1:a9:e2: fe:f7:26:76:54:85:dc:59:c7:14:f8:d5:69:f9:87:19:4e:e9: 6a:c8:c5:ad:00:fa:68:2e:36:8e:c5:5b:be:3b:d5:a6:b8:92: 88:ea:ef:03:40:fd:39:2f:a2:c6:ba:d8:65:a4:1c:dc:8e:f1: 0d:20:2b:98:79:59:8b:b6:3b:d8:7c:a7:31:d5:48:27:6f:9c: b3:2e:bb:5a:60:1e:9b:16:5c:32:49:ee:40:4f:bc:3e:73:c3: a3:ec:2d:23 -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgISAZt5fl9NkZ2ohZnN8oEk1n4fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzNlM2Y1ZWY4MjU1NTZiMDE0YTA4NWQzMjU2NWJiMGNiYzVhYzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfcvYuUBKjO532mlo2zrQz1k0+7i MFxeN3hzdowq9TdK11QhcdFpec8B69P6rEfaBeL+vTo1HELqkOw3Leeip9iMrYUW 8pBjSFl+sRkYLJSA5y/uFaSooa/9L0hwbtb9skYpZpZZnKdU4pa+GzH/PTRywc6B zW1um+9jRZd2NtEJkNfbFSKGhAx5tLy2DZLg2FQnLmxuRiFHFpzFV0cJkm3ZB+yk 9t4OeWqkwzR5seuHVlLQ2OmtJzr3FDc6FqIBu4W902/cvBWruDT+H6DXYf1VDsiE ARV5wZCGNZbucVjrCmSNW+Ujaf/eTcPneypU51OErpeccpeJ+InT0MVthwIDAQAB o4IDKTCCAyUwHQYDVR0OBBYEFIM+P174JVVrAUoIXTJWW7DLxayNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjL2QyNjYx OC1iMzQwLTRmNTAtYjMzMC0zMThhMjZkNGE4YzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvZDI2NjE4 LWIzNDAtNGY1MC1iMzMwLTMxOGEyNmQ0YThjOS8xL2d6NF9YdmdsVldzQlNnaGRN bFpic012RnJJMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGnBggrBgEF BQcBBwEB/wSBlzCBlDBgBAIAATBaAwQAJYz6AwQCLZUYAwQAPmpUAwQAV+2nAwQC WRVUAwQEWfsQAwQCW8jcAwQCW9KQAwQCW+I4AwQDbXooAwQAkhM4AwQAsGHNAwQC wV00AwQCwj1IAwQA1BfOMDAEAgACMCoDBQMqC60AAwUDKg1lQAMFAyoNocADBQMq EVTAAwUDKhGOQAMFAyoR1kAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAIYqMA0G CSqGSIb3DQEBCwUAA4IBAQAOAXs6h2tCUvvzXHopqs90Y+wedgm0M/OIbSo7Cmt5 ttfFmPYwIDF0T6dE8chhi/e/Yo7GSIa3Lmgg+d78crWdSlxJzIR5FAhzHiMYL3vO tcwKm6OMZJx5LZ6BJIK8igPv6vGWRc1pXV12825YrPHlxlL9MO5QZcrBTDRWB+3k 8GJJxyWvRCEbp5fRZq1eFSGE9QHziq1hi9qTvea89VPhqeL+9yZ2VIXcWccU+NVp +YcZTulqyMWtAPpoLjaOxVu+O9WmuJKI6u8DQP05L6LGuthlpBzcjvENICuYeVmL tjvYfKcx1Ugnb5yzLrtaYB6bFlwySe5AT7w+c8Oj7C0j -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:26 2026 by rpki-client