This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer File: GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer (raw, json) Hash identifier: 4cIR2YywALLbXu+NylhUiGDobpN3/6j0KAJw8pudEmE= Subject key identifier: 18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E373D39E8EAE81B8F453E833B7B3C4E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199638 IP: 91.245.193.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:3d:39:e8:ea:e8:1b:8f:45:3e:83:3b:7b:3c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9d:0d:3f:b1:e3:19:b1:82:9b:7b:31:08:81: ea:fd:65:ea:c0:26:fb:ba:53:89:53:52:c2:46:31: b0:ba:36:d6:4c:9c:8d:7c:eb:9f:6e:70:98:4f:10: 84:a9:f4:9d:bf:d7:1f:44:0a:90:8b:85:61:ab:d3: fb:52:8b:4f:64:6d:72:21:b0:73:34:95:0b:a4:79: d9:50:60:6c:74:66:8a:2b:2f:b2:bf:e3:ca:ca:d8: 6a:54:fc:be:10:ae:ba:3a:db:0c:4b:ba:dc:a5:e0: 9d:51:db:c4:0f:66:42:50:bb:48:15:00:a5:ed:e0: f7:06:ee:be:65:9c:d3:f7:ce:2a:c5:6f:a6:62:35: f4:eb:26:70:27:d0:a0:20:0d:c1:13:5b:35:a2:d1: 6a:6b:ca:1e:c7:e4:51:d7:86:16:ba:54:e8:ac:69: 89:ad:d3:48:90:d7:c7:2d:54:a6:69:52:8c:61:7d: f0:9d:68:eb:b4:e9:60:de:91:07:f6:13:4a:58:70: 4f:b0:5a:be:7f:f9:e6:48:be:43:e7:ab:b4:18:0a: e4:df:63:dd:72:20:fc:bb:ff:c9:9a:35:22:1f:d1: b6:4f:26:e7:fb:a2:51:d7:79:1d:ff:8a:3d:a1:c7: 4d:33:6d:47:1b:f3:b7:a5:d1:2c:08:56:fc:92:39: 05:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.245.193.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199638 Signature Algorithm: sha256WithRSAEncryption 90:b7:15:65:b6:bc:14:38:5a:0e:bd:a0:7b:d8:22:4f:7a:66: 07:68:7f:84:4e:9b:fc:a4:77:e2:db:62:ce:5c:c1:02:38:a1: bb:c1:6d:eb:70:3c:30:9b:12:3a:0d:5b:75:61:b9:3d:aa:84: 3b:34:6d:5a:b7:02:61:f4:d7:70:dc:1c:02:ff:03:e7:95:2e: 14:dd:e2:e2:9c:92:62:e3:82:d1:c2:83:d4:12:93:af:1f:df: 6e:fe:96:e9:80:c6:91:bc:3b:64:3d:f0:63:94:03:7b:ce:01: 78:86:ac:fc:68:10:6b:02:c6:ce:74:1b:6f:34:4f:f1:83:95: ac:5c:64:ee:be:62:54:7c:1d:d1:50:8b:df:df:51:ff:04:95: 44:10:c7:f0:be:d5:bb:4e:fe:e0:b1:4d:3f:8b:9d:14:90:88: d4:7e:23:c8:b9:14:c5:4e:2d:8a:da:97:f5:ed:b4:40:aa:1b: cd:7f:25:db:6c:1d:47:db:78:46:c6:15:e3:eb:3a:cf:0d:6f: d9:f1:e2:80:a1:d4:1a:02:28:a7:06:49:2b:85:22:4d:4b:8b: 1f:a9:cd:c2:9f:78:2b:fb:ac:84:d1:dd:a1:13:84:ff:71:90: 9e:2b:09:60:dd:df:fd:f8:0d:e9:f7:2c:39:b0:4e:05:f1:f0: 56:19:90:fd -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+Nz056OroG49FPoM7ezxOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGI3Mzc3Y2U1ZWZhM2NhMDMwZWJiNGRkNzc1NjdmYzAzMmZjZDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z0NP7HjGbGCm3sxCIHq/WXqwCb7 ulOJU1LCRjGwujbWTJyNfOufbnCYTxCEqfSdv9cfRAqQi4Vhq9P7UotPZG1yIbBz NJULpHnZUGBsdGaKKy+yv+PKythqVPy+EK66OtsMS7rcpeCdUdvED2ZCULtIFQCl 7eD3Bu6+ZZzT984qxW+mYjX06yZwJ9CgIA3BE1s1otFqa8oex+RR14YWulTorGmJ rdNIkNfHLVSmaVKMYX3wnWjrtOlg3pEH9hNKWHBPsFq+f/nmSL5D56u0GArk32Pd ciD8u//JmjUiH9G2Tybn+6JR13kd/4o9ocdNM21HG/O3pdEsCFb8kjkFywIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFBi3N3zl76PKAw67Tdd1Z/wDL80BMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiL2EwYmE4 OC00ZDg4LTQ2OTEtYWE2Yy1iNWI4ZjU3ODRkZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvYTBiYTg4 LTRkODgtNDY5MS1hYTZjLWI1YjhmNTc4NGRmZS8xL0dMYzNmT1h2bzhvRERydE4x M1ZuX0FNdnpRRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW/XBMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwML1jANBgkqhkiG9w0BAQsFAAOCAQEAkLcVZba8FDhaDr2ge9giT3pmB2h/hE6b /KR34ttizlzBAjihu8Ft63A8MJsSOg1bdWG5PaqEOzRtWrcCYfTXcNwcAv8D55Uu FN3i4pySYuOC0cKD1BKTrx/fbv6W6YDGkbw7ZD3wY5QDe84BeIas/GgQawLGznQb bzRP8YOVrFxk7r5iVHwd0VCL399R/wSVRBDH8L7Vu07+4LFNP4udFJCI1H4jyLkU xU4titqX9e20QKobzX8l22wdR9t4RsYV4+s6zw1v2fHigKHUGgIopwZJK4UiTUuL H6nNwp94K/ushNHdoROE/3GQnisJYN3f/fgN6fcsObBOBfHwVhmQ/Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:03 2026 by rpki-client