This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer File: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer (raw, json) Hash identifier: IMUFhkYGYAvnS/oc3EXIX5NZp2/IhvPd2YGIoz3NsUk= Subject key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C9C22ABB125B5A4275F3EE2D9386F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.235.14.0/24 IP: 178.210.180.0/24 IP: 217.70.11.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:9c:22:ab:b1:25:b5:a4:27:5f:3e:e2:d9:38:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3f1b22b2054502bfd3889138291103d83b6a50e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:98:b2:da:ce:44:00:2c:e4:ce:f8:19:b5:64: a4:3b:b6:95:76:a1:e4:58:f1:43:26:39:45:42:02: 8a:b2:0d:f9:5a:13:19:db:83:4c:1e:68:a4:ee:09: 2e:f6:c5:95:a1:10:d4:6f:f4:29:68:6c:1c:a6:d0: 41:13:01:61:73:80:cf:bb:5b:e6:dd:7d:62:66:19: 83:3b:24:a8:a0:71:21:79:e7:2f:5c:6a:e7:71:a5: 37:17:0f:21:df:37:f4:fe:4a:03:6b:dd:39:5b:ee: 24:50:58:6b:63:19:fa:10:42:f9:f4:3f:da:35:0f: de:24:1d:af:5a:40:41:cb:f2:f0:38:f9:99:c1:b5: 4f:0d:f8:3c:c7:fc:dd:11:df:31:a4:7d:58:9d:f6: a0:a6:8c:df:de:52:fc:2c:b8:65:f3:3b:a5:a4:aa: 82:93:09:f9:c1:b3:a5:cb:ec:fc:b9:73:2c:28:d6: ec:84:b5:1b:b5:bf:f6:1b:db:5a:29:45:74:6a:bf: 7d:36:f0:0c:1a:2a:dc:80:98:f8:cd:ad:d6:19:93: b0:f8:db:0c:18:1f:83:5e:c9:5a:2e:90:26:41:fe: 30:8f:43:15:c5:b8:f9:0b:a1:07:98:fc:88:bc:a7: 5a:9d:1a:c4:16:d6:ce:9e:0a:17:24:dd:3d:49:b6: 7e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.14.0/24 178.210.180.0/24 217.70.11.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:b7:6e:72:e0:dd:17:80:69:4f:a3:a2:bb:00:fc:92:e3:5d: 69:07:ec:6b:ba:30:15:2a:d9:65:f1:74:48:42:1a:21:32:30: a4:5d:f6:3e:76:0d:b1:8a:36:64:c4:6c:d0:21:29:4b:94:e4: 11:19:8a:c5:5f:de:a1:40:ca:cf:01:9a:6c:bd:9e:2a:fe:16: ba:69:9e:d5:53:8d:36:be:90:f6:04:76:6d:7e:21:ff:87:96: 55:a5:be:ad:71:f3:0a:a5:8f:23:3d:c0:8c:f1:c4:ec:cf:ac: 26:31:5a:87:42:9a:6b:72:d2:3e:5f:4c:24:2e:4f:a9:84:8a: 07:87:e4:95:f0:da:51:56:c7:86:42:05:ca:6f:e8:f0:be:a9: 17:c9:a6:cd:4e:b3:5d:3e:e4:dd:a6:60:50:77:18:4a:13:12: 1d:6b:6d:18:0b:52:2d:7b:76:ae:7c:ff:aa:83:2e:67:4a:37: bd:d8:cb:e6:d2:1d:e0:ca:9e:e3:54:3d:08:f3:8a:83:32:97: a9:da:45:c3:00:3a:55:6c:cd:0b:8e:3f:26:51:e9:be:3f:e4: f2:0c:a2:a4:93:81:58:a7:58:cc:e7:41:70:25:09:68:d3:da: a5:de:24:43:9a:51:19:ff:7c:cb:fc:92:3d:e0:9f:a6:dc:bd: 13:cf:21:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt9XJwiq7EltaQnXz7i2ThvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2YxYjIyYjIwNTQ1MDJiZmQzODg5MTM4MjkxMTAzZDgzYjZhNTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ziy2s5EACzkzvgZtWSkO7aVdqHk WPFDJjlFQgKKsg35WhMZ24NMHmik7gku9sWVoRDUb/QpaGwcptBBEwFhc4DPu1vm 3X1iZhmDOySooHEheecvXGrncaU3Fw8h3zf0/koDa905W+4kUFhrYxn6EEL59D/a NQ/eJB2vWkBBy/LwOPmZwbVPDfg8x/zdEd8xpH1Ynfagpozf3lL8LLhl8zulpKqC kwn5wbOly+z8uXMsKNbshLUbtb/2G9taKUV0ar99NvAMGircgJj4za3WGZOw+NsM GB+DXslaLpAmQf4wj0MVxbj5C6EHmPyIvKdanRrEFtbOngoXJN09SbZ+swIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFKPxsisgVFAr/TiJE4KRED2DtqUOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhL2E4YWFm Zi0xMmExLTQ2NDEtOGI5ZC0yNGQyNzJjZTExZTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvYThhYWZm LTEyYTEtNDY0MS04YjlkLTI0ZDI3MmNlMTFlMy8xL29fR3lLeUJVVUN2OU9Ja1Rn cEVRUFlPMnBRNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQALusOAwQAstK0AwQA2UYLMA0GCSqGSIb3DQEB CwUAA4IBAQB8t25y4N0XgGlPo6K7APyS411pB+xrujAVKtll8XRIQhohMjCkXfY+ dg2xijZkxGzQISlLlOQRGYrFX96hQMrPAZpsvZ4q/ha6aZ7VU402vpD2BHZtfiH/ h5ZVpb6tcfMKpY8jPcCM8cTsz6wmMVqHQpprctI+X0wkLk+phIoHh+SV8NpRVseG QgXKb+jwvqkXyabNTrNdPuTdpmBQdxhKExIda20YC1Ite3aufP+qgy5nSje92Mvm 0h3gyp7jVD0I84qDMpep2kXDADpVbM0Ljj8mUem+P+TyDKKkk4FYp1jM50FwJQlo 09ql3iRDmlEZ/3zL/JI94J+m3L0TzyFz -----END CERTIFICATE-----Generated at Mon Jan 26 06:21:48 2026 by rpki-client