This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer File: GF88M_sBE7RdRZKaTAbyjHFNyks.cer (raw, json) Hash identifier: yvj/E9O7aHKLqZvbesDMTSkgWLKoNiyv2ECg64VOD3U= Subject key identifier: 18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B69832800028DD131FFE1F954643C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58183 IP: 195.62.35.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:69:83:28:00:02:8d:d1:31:ff:e1:f9:54:64:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=185f3c33fb0113b45d45929a4c06f28c714dca4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:31:68:26:37:07:f1:52:96:49:da:ea:f4:fa: 98:c3:2c:5d:40:0a:ca:7f:ab:8e:2b:97:ce:fe:98: e8:6d:dc:f8:92:48:58:a1:34:03:9c:56:90:6e:98: 94:51:82:84:55:3f:99:e1:21:d7:a9:d6:71:bb:f3: 20:1d:1e:36:de:05:ad:93:23:be:2a:54:5b:02:0d: cf:11:6f:f0:01:2d:4f:82:23:99:f5:10:6e:fa:4f: ce:28:bd:14:81:e8:95:83:5a:9c:1f:c0:b6:b9:1e: 91:15:dd:af:ae:10:8c:53:37:6e:60:de:77:ec:30: b0:15:99:12:e7:90:97:a7:65:0f:a2:0e:28:d6:48: 8b:c5:d3:8b:47:1c:6d:f2:7a:c4:08:5a:05:6e:ac: a2:ba:f2:d0:86:89:91:ff:52:2f:fb:ad:fd:9e:a9: 22:76:eb:08:6a:29:39:3d:8d:8b:18:b9:9a:bd:e1: 21:a2:48:47:04:55:f3:9d:64:ca:f7:47:52:90:15: 2e:9b:98:99:ce:fc:51:a6:9c:42:9d:36:60:e9:ea: cc:73:04:ff:24:96:ac:5d:64:05:ab:49:65:ac:64: 3c:93:1b:f9:5e:e6:9e:c9:4b:c7:4e:59:4f:66:f3: 62:6b:52:41:d2:b5:6c:42:15:27:d7:53:8f:08:0c: cb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.62.35.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58183 Signature Algorithm: sha256WithRSAEncryption 37:2b:a1:03:79:59:67:11:06:85:8c:c1:86:3d:d8:00:5f:78: bb:72:0f:d5:bc:0e:6e:37:49:72:3b:fb:86:bd:82:90:49:44: dd:dd:ea:94:71:c0:7f:ba:1b:d2:14:f1:25:3d:e7:22:c9:17: 4d:44:26:2a:00:6f:35:cb:7d:32:2a:15:1a:91:3a:1e:b3:5b: ea:79:df:37:40:26:8d:14:88:14:84:46:e0:d7:5d:fa:f9:4f: 54:da:8a:f6:14:ac:81:19:9a:9b:bf:2c:cc:a8:a5:2e:98:62: 24:cb:f9:57:f6:e7:74:42:01:c9:fa:cc:9b:77:96:55:1e:f4: 88:db:69:d4:08:8a:d1:0e:56:26:87:ac:d8:d0:3e:9b:7b:66: 48:86:27:8e:3a:2a:5c:e8:2c:71:18:40:e6:9c:49:e3:11:5a: dc:51:2f:0f:3f:d6:65:4a:f4:25:33:41:39:b0:7e:c3:80:e0: 58:d2:eb:0d:bf:f0:ec:4a:5e:70:22:c6:41:28:23:a6:3a:a7: 5b:cc:3f:44:8b:92:4f:0b:e5:e4:cc:45:76:71:bb:8d:6e:88: 26:6f:f2:e5:0a:a8:8a:25:bd:bc:0c:2a:99:fa:61:af:0d:87: 34:4e:a4:13:7c:58:71:f7:10:93:f1:09:fb:36:9b:66:88:e8: 83:5d:e2:9e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6W2mDKAACjdEx/+H5VGQ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODVmM2MzM2ZiMDExM2I0NWQ0NTkyOWE0YzA2ZjI4YzcxNGRjYTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzFoJjcH8VKWSdrq9PqYwyxdQArK f6uOK5fO/pjobdz4kkhYoTQDnFaQbpiUUYKEVT+Z4SHXqdZxu/MgHR423gWtkyO+ KlRbAg3PEW/wAS1PgiOZ9RBu+k/OKL0UgeiVg1qcH8C2uR6RFd2vrhCMUzduYN53 7DCwFZkS55CXp2UPog4o1kiLxdOLRxxt8nrECFoFbqyiuvLQhomR/1Iv+639nqki dusIaik5PY2LGLmaveEhokhHBFXznWTK90dSkBUum5iZzvxRppxCnTZg6erMcwT/ JJasXWQFq0llrGQ8kxv5XuaeyUvHTllPZvNia1JB0rVsQhUn11OPCAzLSwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFBhfPDP7ARO0XUWSmkwG8oxxTcpLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzFjZmVi Ny1kMGFhLTRjMWQtYmI5Yi03NjNhYmFiOTcxMDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvMWNmZWI3 LWQwYWEtNGMxZC1iYjliLTc2M2FiYWI5NzEwMS8xL0dGODhNX3NCRTdSZFJaS2FU QWJ5akhGTnlrcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwz4jMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDjRzANBgkqhkiG9w0BAQsFAAOCAQEANyuhA3lZZxEGhYzBhj3YAF94u3IP1bwO bjdJcjv7hr2CkElE3d3qlHHAf7ob0hTxJT3nIskXTUQmKgBvNct9MioVGpE6HrNb 6nnfN0AmjRSIFIRG4Ndd+vlPVNqK9hSsgRmam78szKilLphiJMv5V/bndEIByfrM m3eWVR70iNtp1AiK0Q5WJoes2NA+m3tmSIYnjjoqXOgscRhA5pxJ4xFa3FEvDz/W ZUr0JTNBObB+w4DgWNLrDb/w7EpecCLGQSgjpjqnW8w/RIuSTwvl5MxFdnG7jW6I Jm/y5QqoiiW9vAwqmfphrw2HNE6kE3xYcfcQk/EJ+zabZojog13ing== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:01 2026 by rpki-client