This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer File: G7gLSjMnxYOuzbA87z9k8zvVmwg.cer (raw, json) Hash identifier: N/KeMVm2urh8rYhxnlY1VvpJ/9w0vbvVzoh/Z7+UlAY= Subject key identifier: 1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38E72B67CD93587E38343891B2CEE1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56967 IP: 91.212.111.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e7:2b:67:cd:93:58:7e:38:34:38:91:b2:ce:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:25:40:69:b8:16:cd:85:6e:9b:48:07:d9: cb:4e:c2:e3:9e:ab:1b:46:d3:ef:a1:50:7c:82:e1: 38:af:4e:c8:c5:50:ba:9f:7d:23:98:03:03:95:55: 18:05:6c:07:8d:16:62:45:e9:f2:24:0d:21:e4:91: 8c:ff:fa:e5:8f:36:00:b9:25:7b:34:a8:17:ce:b5: 9c:e4:02:81:0d:bf:26:48:a8:74:d0:1c:7e:2e:3f: 79:8a:eb:9c:cb:b6:c8:60:d4:60:c1:f2:8f:f8:8a: 09:d6:58:1a:30:be:e2:59:18:86:a3:8d:a1:80:36: e9:8a:92:77:92:61:11:ee:ec:21:f0:47:8c:8c:9d: 66:4f:35:fa:2a:90:3c:55:7c:c5:c7:2b:3e:5a:44: a6:67:66:5b:0a:8b:c9:f6:a9:21:7a:af:ad:be:1c: 24:ab:b1:76:dd:78:27:40:05:7d:92:10:88:b0:d8: 95:77:38:e8:94:73:e1:67:60:7d:92:7e:f2:9e:fe: 19:f4:ed:96:e9:32:14:84:f5:ce:61:f7:e5:39:7c: f2:6a:61:56:0f:28:61:21:58:00:72:98:3c:2a:72: d6:b2:cc:00:31:3f:4c:bb:87:36:c4:86:05:d6:fe: ed:59:39:a1:d3:a5:ec:ae:47:26:31:ef:8c:54:a2: b7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.111.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56967 Signature Algorithm: sha256WithRSAEncryption 67:f2:dc:01:df:5d:e5:84:4d:ae:41:10:07:24:d9:d5:e8:0d: 91:05:4c:fb:7b:53:bd:5a:e8:ab:0e:64:77:79:9b:13:3b:33: c4:78:a9:b8:64:c2:5b:39:65:16:b0:52:02:5f:e7:03:46:de: 17:0e:ec:02:25:9d:b5:00:19:38:eb:7f:d6:c9:20:03:37:9b: 89:d6:a4:fa:2f:8d:32:30:6c:f6:d0:ed:21:52:b4:24:7f:07: 9f:19:f2:9f:11:d0:13:1c:bd:c7:81:5e:48:76:1a:02:1e:3e: 3b:0e:c6:a5:98:92:f7:de:33:17:10:49:a9:bf:26:2c:66:e8: 58:0d:73:32:69:be:61:41:d4:fa:00:82:cf:71:f9:cf:a3:42: e3:39:2a:31:fe:57:a4:3f:ba:d7:e0:e9:1b:09:c1:a9:85:90: 9a:b1:64:d5:db:f7:6f:94:f6:20:71:ea:3a:ae:ac:78:02:22: 0a:e1:4c:d7:f4:ec:dc:a2:eb:46:32:44:28:6e:74:05:ee:c8: 33:c5:5a:28:e8:8f:5b:75:5c:a2:fc:0c:de:73:3f:a6:fd:c9: d6:9b:1e:15:68:31:99:27:ae:c0:9f:c1:58:db:b2:27:f3:52: f6:8a:24:3d:04:ec:84:1a:91:cb:b3:0e:34:44:ca:29:d1:12: dd:74:46:41 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+OOcrZ82TWH44NDiRss7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmI4MGI0YTMzMjdjNTgzYWVjZGIwM2NlZjNmNjRmMzNiZDU5YjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbclQGm4Fs2FbptIB9nLTsLjnqsb RtPvoVB8guE4r07IxVC6n30jmAMDlVUYBWwHjRZiRenyJA0h5JGM//rljzYAuSV7 NKgXzrWc5AKBDb8mSKh00Bx+Lj95iuucy7bIYNRgwfKP+IoJ1lgaML7iWRiGo42h gDbpipJ3kmER7uwh8EeMjJ1mTzX6KpA8VXzFxys+WkSmZ2ZbCovJ9qkheq+tvhwk q7F23XgnQAV9khCIsNiVdzjolHPhZ2B9kn7ynv4Z9O2W6TIUhPXOYfflOXzyamFW DyhhIVgAcpg8KnLWsswAMT9Mu4c2xIYF1v7tWTmh06XsrkcmMe+MVKK3TQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFBu4C0ozJ8WDrs2wPO8/ZPM71ZsIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzVmZjg5 YS0yZjE1LTQwOTAtYmNjMi04MDdiN2MyZDYzODkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvNWZmODlh LTJmMTUtNDA5MC1iY2MyLTgwN2I3YzJkNjM4OS8xL0c3Z0xTak1ueFlPdXpiQTg3 ejlrOHp2Vm13Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9RvMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDehzANBgkqhkiG9w0BAQsFAAOCAQEAZ/LcAd9d5YRNrkEQByTZ1egNkQVM+3tT vVroqw5kd3mbEzszxHipuGTCWzllFrBSAl/nA0beFw7sAiWdtQAZOOt/1skgAzeb idak+i+NMjBs9tDtIVK0JH8HnxnynxHQExy9x4FeSHYaAh4+Ow7GpZiS994zFxBJ qb8mLGboWA1zMmm+YUHU+gCCz3H5z6NC4zkqMf5XpD+61+DpGwnBqYWQmrFk1dv3 b5T2IHHqOq6seAIiCuFM1/Ts3KLrRjJEKG50Be7IM8VaKOiPW3VcovwM3nM/pv3J 1pseFWgxmSeuwJ/BWNuyJ/NS9ookPQTshBqRy7MONETKKdES3XRGQQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:31 2026 by rpki-client