This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer File: xVfBW97s57ChtHfh4O6L_1P6_gw.cer (raw, json) Hash identifier: /jKJblkFHmprCKbigV9T53Z4o6iIeNGpMezbcFrQVKU= Subject key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C769F107E7F356647407329DF1CAE7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213576 IP: 91.213.28.0/24 IP: 2001:678:104c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:69:f1:07:e7:f3:56:64:74:07:32:9d:f1:ca:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:db:66:d5:de:59:22:fd:50:23:86:52:36:8d: 89:3a:14:e9:50:ed:f2:26:21:16:00:73:4d:9f:b9: 1c:66:3c:42:0d:73:c6:56:ea:f2:b8:5c:20:61:86: 3e:ae:40:92:5d:b2:2e:a2:5d:36:08:05:b4:5e:72: f7:0a:14:4e:23:46:dc:0c:44:57:df:a0:b1:1c:30: 2a:2d:8c:64:dd:3e:c7:26:fb:5e:64:b1:22:ba:5e: 02:11:cb:23:6f:3f:42:f2:49:4b:d8:3f:85:b2:5d: 2e:5e:be:25:1a:de:7e:93:20:6c:6a:a7:c5:c5:95: 6d:78:30:2a:3b:0d:cc:2c:17:f1:a2:9f:49:90:4f: c7:00:ad:6c:a3:5b:22:64:e8:e2:21:cf:03:82:a0: 65:09:21:28:2e:f5:33:a2:50:cc:6d:e9:81:dc:41: 2c:3e:d5:0c:4e:9a:0f:ef:f6:6f:94:69:fb:c4:99: cd:6c:d6:28:51:60:05:53:53:68:a5:a4:72:d9:1b: 37:18:7e:6b:e8:a9:b0:4f:d6:3d:58:02:e6:82:f0: 26:ac:8d:0c:22:07:4f:2a:bd:8b:49:f8:64:17:90: 0e:f8:78:0e:8e:f3:1a:fb:06:7b:c6:7b:17:1f:7d: 83:42:0d:09:35:00:03:c6:47:85:0f:dd:81:ba:83: c4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.28.0/24 IPv6: 2001:678:104c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213576 Signature Algorithm: sha256WithRSAEncryption 63:2f:aa:3b:76:28:a7:3e:07:65:8d:d5:13:9b:f8:cd:29:f5: d4:14:00:d6:bf:99:f7:18:57:3b:14:30:58:3b:c2:25:12:a6: 02:6a:6d:38:b5:03:30:e8:b3:e2:69:d2:18:cf:5a:0e:5d:ba: 8c:5f:d6:38:54:c0:8f:d6:ff:c0:9f:c8:c2:3f:ec:ec:22:fe: 06:b9:d4:43:e1:b1:e2:0b:a5:67:3d:ec:ec:f1:a5:42:37:a4: 50:91:23:63:2b:0d:78:f0:53:15:f2:ff:a9:43:99:52:e8:bb: 01:2a:4f:3b:87:cd:f3:b3:4a:98:20:8f:54:e2:23:d3:01:0f: 62:d1:e8:c9:e5:ab:fd:6a:da:41:3a:27:5f:68:cf:0e:95:0c: bc:8e:7d:58:23:67:19:7b:d1:ef:7b:21:b1:a3:dc:98:9d:27: 72:0a:96:4f:51:0e:f3:54:0f:fb:3d:dc:9a:e1:5b:d7:b5:c3: 7c:b0:03:a8:2c:ed:1e:99:0b:36:bf:ef:d5:30:7e:35:2a:6a: 44:87:d2:57:59:25:0a:2e:28:0d:22:0f:4e:95:45:80:07:6a: 55:46:c6:d9:25:a9:ff:82:e5:14:a7:31:a0:68:0c:fc:32:17: 1a:23:fd:be:86:2f:8e:2d:ef:89:3b:6c:a3:16:c3:3c:05:f3: 77:b0:5c:79 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt3x2nxB+fzVmR0BzKd8crnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTU3YzE1YmRlZWNlN2IwYTFiNDc3ZTFlMGVlOGJmZjUzZmFmZTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39tm1d5ZIv1QI4ZSNo2JOhTpUO3y JiEWAHNNn7kcZjxCDXPGVuryuFwgYYY+rkCSXbIuol02CAW0XnL3ChROI0bcDERX 36CxHDAqLYxk3T7HJvteZLEiul4CEcsjbz9C8klL2D+Fsl0uXr4lGt5+kyBsaqfF xZVteDAqOw3MLBfxop9JkE/HAK1so1siZOjiIc8DgqBlCSEoLvUzolDMbemB3EEs PtUMTpoP7/ZvlGn7xJnNbNYoUWAFU1NopaRy2Rs3GH5r6KmwT9Y9WALmgvAmrI0M IgdPKr2LSfhkF5AO+HgOjvMa+wZ7xnsXH32DQg0JNQADxkeFD92BuoPEZQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFMVXwVve7OewobR34eDui/9T+v4MMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlLzMyYThk ZC0zOWIzLTQ3OTEtYTVlNC1kYmRiZTE5M2M5NzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvMzJhOGRk LTM5YjMtNDc5MS1hNWU0LWRiZGJlMTkzYzk3NC8xL3hWZkJXOTdzNTdDaHRIZmg0 TzZMXzFQNl9ndy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW9UcMA8EAgACMAkDBwAgAQZ4EEwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDA0JIMA0GCSqGSIb3DQEBCwUAA4IBAQBjL6o7diin PgdljdUTm/jNKfXUFADWv5n3GFc7FDBYO8IlEqYCam04tQMw6LPiadIYz1oOXbqM X9Y4VMCP1v/An8jCP+zsIv4GudRD4bHiC6VnPezs8aVCN6RQkSNjKw148FMV8v+p Q5lS6LsBKk87h83zs0qYII9U4iPTAQ9i0ejJ5av9atpBOidfaM8OlQy8jn1YI2cZ e9HveyGxo9yYnSdyCpZPUQ7zVA/7Pdya4VvXtcN8sAOoLO0emQs2v+/VMH41KmpE h9JXWSUKLigNIg9OlUWAB2pVRsbZJan/guUUpzGgaAz8MhcaI/2+hi+OLe+JO2yj FsM8BfN3sFx5 -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:42 2026 by rpki-client