This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer File: GPJ8DAs13dQruJLBaEWmOwAnocc.cer (raw, json) Hash identifier: yVkja+guxf0c2p0wgM7bZZPmmT12qqHbaKTnE579iVE= Subject key identifier: 18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B364E74F6824D87DAF64C70E51251C5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60247 AS: 205235 IP: 2001:7f8:149::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4e:74:f6:82:4d:87:da:f6:4c:70:e5:12:51:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18f27c0c0b35ddd42bb892c16845a63b0027a1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:be:53:45:c3:62:87:28:fb:5a:a2:3d:06:f9: e2:b3:0b:e4:be:72:98:cf:01:6e:b0:78:99:2c:b5: 06:25:e6:b9:b6:d8:84:98:70:1c:fa:ab:01:6f:d7: 4d:4d:39:16:96:3b:88:97:8e:6e:06:d1:b1:0a:a2: e8:c5:65:43:a3:d7:d1:3f:ec:bc:5f:92:92:9c:1e: 80:29:1d:7b:8d:4b:35:7a:1d:30:75:1a:22:f2:c9: f2:fb:0f:2d:d3:29:92:7d:37:2b:a2:75:f1:b3:cf: 26:7b:e2:55:6d:41:55:23:05:9d:63:8f:1e:8c:4c: d1:3b:22:ab:f8:d8:8e:06:35:2f:8e:33:d0:a6:13: 8b:fd:bd:1c:03:37:df:7e:ef:48:5f:8a:6a:35:17: ba:3b:e0:ba:ec:c8:1f:27:cc:e6:24:88:b8:e0:34: 59:99:a5:d3:50:63:bf:93:cd:20:22:80:c1:b1:ed: d6:99:88:8d:3b:e9:5d:e9:6b:d3:75:bc:18:e7:5e: 17:21:e1:5b:68:f0:bc:81:7e:18:64:d0:f2:ce:5a: 85:3c:ff:68:4d:e1:0d:90:a2:90:02:6a:54:e2:ff: f6:de:87:c7:ed:7f:8b:b7:33:9f:4c:22:f7:59:ec: 5b:c8:78:e9:b0:c9:5a:f5:02:73:89:56:3d:9b:52: 2b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:7f8:149::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60247 205235 Signature Algorithm: sha256WithRSAEncryption 11:62:a8:31:ae:ee:d2:be:c0:4f:aa:1d:f4:a0:a3:86:93:b3: 98:c9:13:c3:93:86:30:d6:ab:03:16:b6:aa:76:03:d1:f9:5b: 3b:e1:09:e8:02:3a:b8:43:9e:c6:a6:99:9c:b6:27:95:cb:78: 1e:52:23:d0:63:94:ed:ab:06:f1:ea:87:1a:7c:0c:12:b2:d2: 00:54:dd:48:b9:1a:97:03:41:c1:d9:c4:61:a3:88:5d:79:6c: f0:5b:f0:2f:4b:16:c7:00:0c:49:f8:33:04:65:02:82:0f:cc: cf:9a:2d:6a:ed:60:dc:0d:60:08:0c:fa:3e:78:01:59:3e:f3: 46:be:ce:89:25:b8:00:d4:d9:98:b4:a7:4e:3d:1d:c3:fa:fb: a5:eb:aa:05:6a:07:13:61:87:9a:2e:e8:74:7c:8d:ca:9f:89: 6f:ea:75:fe:f6:4a:d8:f3:20:7d:fa:a8:0f:4f:a0:3f:69:85: 3d:e1:ce:51:a3:d6:32:24:2f:a9:28:9b:63:8f:24:80:d5:3c: 6a:07:ac:7f:e0:3b:fb:72:45:c0:e6:9f:08:dc:c9:37:b7:20: 75:65:43:5f:bc:e4:94:39:87:8e:c5:31:65:78:6f:6f:1d:33: cd:66:24:87:22:5e:18:e1:54:52:3e:d5:a3:9c:01:9c:02:e5: e1:2b:81:7b -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgISAZt7Nk509oJNh9r2THDlElHFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGYyN2MwYzBiMzVkZGQ0MmJiODkyYzE2ODQ1YTYzYjAwMjdhMWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu75TRcNihyj7WqI9BvniswvkvnKY zwFusHiZLLUGJea5ttiEmHAc+qsBb9dNTTkWljuIl45uBtGxCqLoxWVDo9fRP+y8 X5KSnB6AKR17jUs1eh0wdRoi8sny+w8t0ymSfTcronXxs88me+JVbUFVIwWdY48e jEzROyKr+NiOBjUvjjPQphOL/b0cAzfffu9IX4pqNRe6O+C67MgfJ8zmJIi44DRZ maXTUGO/k80gIoDBse3WmYiNO+ld6WvTdbwY514XIeFbaPC8gX4YZNDyzlqFPP9o TeENkKKQAmpU4v/23ofH7X+LtzOfTCL3WexbyHjpsMla9QJziVY9m1IrXQIDAQAB o4ICqDCCAqQwHQYDVR0OBBYEFBjyfAwLNd3UK7iSwWhFpjsAJ6HHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzMyYmZl My05MDFjLTQ2ODUtYmUwYS1hZmFjMjA0ZDk5MGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMzJiZmUz LTkwMWMtNDY4NS1iZTBhLWFmYWMyMDRkOTkwZi8xL0dQSjhEQXMxM2RRcnVKTEJh RVdtT3dBbm9jYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEH+AFJMB8GCCsGAQUFBwEIAQH/BBAwDqAM MAoCAwDrVwIDAyGzMA0GCSqGSIb3DQEBCwUAA4IBAQARYqgxru7SvsBPqh30oKOG k7OYyRPDk4Yw1qsDFraqdgPR+Vs74QnoAjq4Q57GppmctieVy3geUiPQY5Ttqwbx 6ocafAwSstIAVN1IuRqXA0HB2cRho4hdeWzwW/AvSxbHAAxJ+DMEZQKCD8zPmi1q 7WDcDWAIDPo+eAFZPvNGvs6JJbgA1NmYtKdOPR3D+vul66oFagcTYYeaLuh0fI3K n4lv6nX+9krY8yB9+qgPT6A/aYU94c5Ro9YyJC+pKJtjjySA1TxqB6x/4Dv7ckXA 5p8I3Mk3tyB1ZUNfvOSUOYeOxTFleG9vHTPNZiSHIl4Y4VRSPtWjnAGcAuXhK4F7 -----END CERTIFICATE-----Generated at Fri Jan 9 17:09:03 2026 by rpki-client