This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer File: GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer (raw, json) Hash identifier: xuucB9XCi+d6/LzdDYwsZDyLtiXE3pOHVnhfhl3Be44= Subject key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECC0A764101FBDB6B6742499566A49 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.143.192.0/22 IP: 2a07:3840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:c0:a7:64:10:1f:bd:b6:b6:74:24:99:56:6a:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=184c7c0364f1093cfc584c93037024104fb4854a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:f8:08:67:60:a7:94:ad:0e:fe:72:82:e4: 14:b8:f4:18:48:6f:be:c8:9a:f1:cc:9c:7e:b2:45: 44:15:d5:5a:26:db:df:02:ca:bf:02:2b:69:3f:13: 10:52:f8:e4:1a:9e:6f:dd:b2:49:8f:39:8e:58:55: 42:07:b0:ce:fd:e9:a6:d0:2c:60:d3:01:db:6b:32: 12:39:72:06:50:27:c3:87:73:49:ae:e3:eb:70:82: 67:4d:ab:3e:4d:79:83:53:b4:28:fc:9d:88:75:7a: 89:0b:f6:7c:2e:36:11:43:af:71:3b:d6:00:fe:2b: 17:c5:76:50:c4:31:32:ba:09:d1:08:72:b4:39:da: e5:99:a9:67:7b:51:2a:33:9a:10:06:4c:dc:9e:b1: a4:81:58:b6:72:fd:38:c6:a8:55:e6:83:4f:07:91: ac:11:45:7f:3a:84:54:1c:49:74:c5:8d:df:b6:1a: 21:3f:1b:a6:97:8c:e8:64:72:7f:cf:f0:85:5b:d8: 0d:48:97:4c:cc:cb:28:5b:4f:eb:03:05:1a:d8:43: 6a:4f:a5:5f:cc:28:97:1e:ca:96:5f:ad:6a:9b:3b: f7:4d:e6:ca:27:a7:7c:c5:0b:52:18:a5:0e:c3:bd: b5:20:46:f4:26:87:e9:d1:71:f6:63:e1:32:67:4f: 95:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.192.0/22 IPv6: 2a07:3840::/29 Signature Algorithm: sha256WithRSAEncryption 50:1f:4a:a2:eb:ef:79:a5:d5:f5:ea:07:46:2c:f8:96:7d:06: 03:6d:2e:e8:9c:f7:c7:be:15:21:02:07:f8:bc:4c:b0:55:cb: 4d:c3:0d:3d:a8:f4:eb:34:02:57:50:aa:98:cb:df:96:09:b9: f3:db:59:d6:6f:45:fc:04:ce:03:09:d5:53:9b:ec:11:02:4d: 6f:cb:03:59:fb:1a:1d:47:5b:27:cf:67:15:52:da:13:41:46: f5:d3:12:d7:60:3f:8b:42:39:cd:b3:eb:72:c7:09:3a:19:35: 91:c4:8d:fa:d6:b3:bf:17:3a:7e:55:ff:d4:c4:69:80:e8:ce: bb:bb:af:85:c2:2b:fc:93:f4:02:a3:55:ae:8b:11:d6:27:a5: b7:c8:d3:2e:b5:8c:3e:2a:4f:b6:d5:36:c1:8a:97:cf:51:29: a8:0c:e2:8d:d7:2b:f6:93:67:c5:d1:a3:10:d3:a2:43:8b:4f: 9b:9a:06:fa:d8:c2:b9:4b:46:e6:eb:8e:33:20:d8:d9:7c:d0: 29:b8:98:85:fb:83:53:c1:82:c6:df:d2:87:83:aa:7f:f7:b1: 13:a8:49:c8:c4:9f:8a:06:e6:fd:1d:3a:70:d6:3e:21:25:73: 8f:c0:bb:5c:54:81:b4:bf:67:7e:8b:9a:c4:a9:4f:c9:a9:7f: f7:63:45:38 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt87MCnZBAfvba2dCSZVmpJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODRjN2MwMzY0ZjEwOTNjZmM1ODRjOTMwMzcwMjQxMDRmYjQ4NTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFr4CGdgp5StDv5yguQUuPQYSG++ yJrxzJx+skVEFdVaJtvfAsq/AitpPxMQUvjkGp5v3bJJjzmOWFVCB7DO/emm0Cxg 0wHbazISOXIGUCfDh3NJruPrcIJnTas+TXmDU7Qo/J2IdXqJC/Z8LjYRQ69xO9YA /isXxXZQxDEyugnRCHK0Odrlmalne1EqM5oQBkzcnrGkgVi2cv04xqhV5oNPB5Gs EUV/OoRUHEl0xY3fthohPxuml4zoZHJ/z/CFW9gNSJdMzMsoW0/rAwUa2ENqT6Vf zCiXHsqWX61qmzv3TebKJ6d8xQtSGKUOw721IEb0Jofp0XH2Y+EyZ0+VZwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFBhMfANk8Qk8/FhMkwNwJBBPtIVKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzY2NmRk NS1jZmEzLTQwZTctYWEzMC05OGY5NDBlNGQ3YzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvNjY2ZGQ1 LWNmYTMtNDBlNy1hYTMwLTk4Zjk0MGU0ZDdjMS8xL0dFeDhBMlR4Q1R6OFdFeVRB M0FrRUUtMGhVby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuY/AMA0EAgACMAcDBQMqBzhAMA0GCSqGSIb3 DQEBCwUAA4IBAQBQH0qi6+95pdX16gdGLPiWfQYDbS7onPfHvhUhAgf4vEywVctN ww09qPTrNAJXUKqYy9+WCbnz21nWb0X8BM4DCdVTm+wRAk1vywNZ+xodR1snz2cV UtoTQUb10xLXYD+LQjnNs+tyxwk6GTWRxI361rO/Fzp+Vf/UxGmA6M67u6+Fwiv8 k/QCo1WuixHWJ6W3yNMutYw+Kk+21TbBipfPUSmoDOKN1yv2k2fF0aMQ06JDi0+b mgb62MK5S0bm644zINjZfNApuJiF+4NTwYLG39KHg6p/97ETqEnIxJ+KBub9HTpw 1j4hJXOPwLtcVIG0v2d+i5rEqU/JqX/3Y0U4 -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:19 2026 by rpki-client