This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer File: GBcXXqrhCxakFTtwpc_XaMe1GZA.cer (raw, json) Hash identifier: oa8QPUr4srz1j8NUzu67nymOnINw2OKqJeeeuiuJ2Dg= Subject key identifier: 18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CBD6E441E39C60E8DCFE6FFBC886D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212120 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:bd:6e:44:1e:39:c6:0e:8d:cf:e6:ff:bc:88:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1817175eaae10b16a4153b70a5cfd768c7b51990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:86:e8:63:01:4e:4a:dc:1b:29:c9:2d:01:ee: 9c:44:85:9f:a1:fe:19:19:4d:71:77:86:ed:a7:9a: 66:2f:20:a5:e6:9b:02:16:8c:ca:ac:4e:86:72:e5: b8:f8:0b:11:45:51:0d:d3:ac:0c:5f:ad:07:04:ba: 16:e5:77:0f:df:7c:bb:ae:94:12:9e:9d:ba:00:d9: a3:a3:9e:ee:de:1f:8a:d9:c4:0f:f3:d0:16:82:84: 33:cc:c2:f2:c9:70:96:c6:54:d5:cf:a2:b6:a6:74: 54:96:72:07:6e:13:53:49:92:2e:7a:9a:8d:9c:87: 1d:47:b0:1e:22:2d:a2:64:f7:50:f4:6e:29:a3:69: d2:c4:97:c9:a5:e0:8c:c5:c2:46:ea:eb:ae:9f:35: 64:81:cc:1b:10:e7:78:1b:55:f2:62:ad:13:2a:a4: dc:9f:ad:0b:17:00:4a:ee:a1:8a:f7:88:89:1a:76: 8b:7e:f6:a0:1c:5f:ba:99:8d:f6:b6:27:77:9c:8d: 4d:f4:e7:0e:28:4d:2b:8a:35:bf:5a:60:39:73:24: 25:02:9e:ad:8b:ec:63:fc:23:5b:5a:48:82:80:20: cf:fe:2d:6b:d8:76:b5:c0:19:e2:c7:80:d6:f5:f7: e6:85:77:15:89:f1:41:b4:a6:0c:df:a1:b3:d4:7c: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212120 Signature Algorithm: sha256WithRSAEncryption 1b:46:34:a4:d4:70:37:85:d5:db:3a:0a:95:04:d7:4e:be:8e: de:c1:61:f3:f4:e1:27:56:35:70:54:81:a8:78:6b:04:b1:60: 9f:54:88:04:73:8a:c3:82:72:f2:fc:c3:c9:54:5a:6e:87:57: 40:24:e3:27:49:fd:55:2c:02:8f:a3:96:7c:ad:59:cf:5b:07: f6:15:02:11:87:a3:8a:60:82:27:dc:60:d3:4a:de:64:9f:d7: e6:ea:1b:b0:4e:8e:46:48:ee:e1:2c:da:be:e4:8a:44:0f:9a: 58:91:ba:75:6c:97:07:0a:3a:b2:7f:23:ee:90:c7:39:8e:1e: 26:f4:2e:3e:ba:9c:78:b8:e8:32:2d:a5:1b:a9:77:31:1d:2f: fa:97:32:cc:87:bb:dc:79:c6:17:21:33:94:ad:1d:8b:b4:b9: da:cf:51:75:01:27:fb:b9:d5:d1:87:ac:f7:b6:38:8e:b8:54: e3:4d:3e:e6:6e:35:f6:ee:f7:46:82:6a:b6:42:6c:1c:c8:da: 10:46:55:cc:7f:82:aa:9b:8b:6f:3e:69:98:55:68:c6:74:55: d5:9b:63:db:92:40:ae:64:f8:3d:9f:8a:5e:c7:7c:7b:54:22: 26:b6:a1:a9:8b:d2:94:da:9f:33:f7:c7:75:0f:00:62:13:54: 4e:9b:c1:b6 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9XL1uRB45xg6Nz+b/vIhtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODE3MTc1ZWFhZTEwYjE2YTQxNTNiNzBhNWNmZDc2OGM3YjUxOTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oboYwFOStwbKcktAe6cRIWfof4Z GU1xd4btp5pmLyCl5psCFozKrE6GcuW4+AsRRVEN06wMX60HBLoW5XcP33y7rpQS np26ANmjo57u3h+K2cQP89AWgoQzzMLyyXCWxlTVz6K2pnRUlnIHbhNTSZIuepqN nIcdR7AeIi2iZPdQ9G4po2nSxJfJpeCMxcJG6uuunzVkgcwbEOd4G1XyYq0TKqTc n60LFwBK7qGK94iJGnaLfvagHF+6mY32tid3nI1N9OcOKE0rijW/WmA5cyQlAp6t i+xj/CNbWkiCgCDP/i1r2Ha1wBnix4DW9ffmhXcVifFBtKYM36Gz1HyltQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFBgXF16q4QsWpBU7cKXP12jHtRmQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3LzdiMTg0 OC03NGYxLTQ5N2QtOWZmNi01ZDIxMzQ4YTYzYzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvN2IxODQ4 LTc0ZjEtNDk3ZC05ZmY2LTVkMjEzNDhhNjNjOC8xL0dCY1hYcXJoQ3hha0ZUdHdw Y19YYU1lMUdaQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM8mDANBgkqhkiG9w0BAQsFAAOCAQEAG0Y0pNRwN4XV 2zoKlQTXTr6O3sFh8/ThJ1Y1cFSBqHhrBLFgn1SIBHOKw4Jy8vzDyVRabodXQCTj J0n9VSwCj6OWfK1Zz1sH9hUCEYejimCCJ9xg00reZJ/X5uobsE6ORkju4SzavuSK RA+aWJG6dWyXBwo6sn8j7pDHOY4eJvQuPrqceLjoMi2lG6l3MR0v+pcyzIe73HnG FyEzlK0di7S52s9RdQEn+7nV0Yes97Y4jrhU400+5m419u73RoJqtkJsHMjaEEZV zH+CqpuLbz5pmFVoxnRV1Ztj25JArmT4PZ+KXsd8e1QiJrahqYvSlNqfM/fHdQ8A YhNUTpvBtg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:50 2026 by rpki-client