This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer File: GPkZTU3X1Le3d8kgB55AHTolM7Y.cer (raw, json) Hash identifier: LibTAFYer9oBJbmynJHDQ0oQCg3od//xOpvxl49N2Ss= Subject key identifier: 18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BFF66116BE6CA95D012D71D3CA1769AB4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 27 Jan 2026 12:20:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213826 IP: 85.159.117.0/24 IP: 185.133.34.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:66:11:6b:e6:ca:95:d0:12:d7:1d:3c:a1:76:9a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 27 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b2:02:f9:72:c1:75:98:bc:47:69:73:24:03: 30:db:62:1b:22:06:26:5b:f5:fc:5e:97:6d:c3:23: b2:3a:b9:5d:05:0b:c2:7a:a5:e1:fb:9a:47:b7:f9: 22:ec:d2:e7:1c:59:05:09:7f:07:bb:0e:0d:e2:35: c2:c9:d8:aa:95:5d:cf:ab:77:8c:4f:43:7a:16:e5: 92:6e:e8:46:6e:44:3d:e2:2f:15:e9:bf:d2:41:fb: cc:3e:7f:9c:6f:51:9f:57:9a:14:51:15:ae:f8:b8: 3b:50:e4:f9:28:69:86:0f:5a:02:8a:8d:03:5d:08: ca:1e:06:9e:2f:9b:68:18:f1:6b:85:8e:3d:26:9b: 79:c5:ba:1a:15:b3:6e:e6:f4:41:36:da:57:75:05: 41:65:87:21:f1:84:38:e9:f3:c0:eb:b7:d5:c4:a3: 20:fb:95:bf:5f:ae:5b:97:0a:94:3a:71:c3:f5:48: 63:85:e9:fc:b0:8d:eb:64:30:c1:dd:3b:60:e0:03: 36:f1:93:96:74:8b:32:d0:55:48:0d:ac:9b:8e:fd: fa:d7:6c:e6:d1:7b:2b:0e:d4:df:99:af:70:37:0e: 72:5e:e1:43:d2:3d:1f:38:fd:fb:38:bb:b5:1f:e4: 0a:ea:51:89:1d:27:82:44:e0:e8:85:39:11:85:e5: e0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.159.117.0/24 185.133.34.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213826 Signature Algorithm: sha256WithRSAEncryption 51:96:41:f1:03:ad:50:de:42:53:04:4e:0e:28:08:27:bf:28: ea:6a:ce:2d:14:59:9d:c6:fb:dd:53:2b:2c:1f:56:f6:c1:ed: 7c:f3:e4:85:03:3f:53:c1:e6:e5:a3:a5:f6:e0:d4:7b:7b:cd: 05:73:08:db:64:c8:f2:9e:cf:94:75:66:e5:d0:78:ab:43:42: 2e:0c:5e:02:0c:aa:60:7f:f8:ef:7a:54:e2:e4:ed:bf:47:c9: 43:c2:b8:56:4e:fc:cc:15:6d:f7:4d:76:f7:17:9a:1d:6c:be: fe:7c:90:72:af:d4:a1:48:61:41:40:61:9f:96:b9:d5:db:e8: 03:83:32:36:0c:17:4e:1a:49:ee:b5:55:67:2d:55:ad:d1:e7: 1c:52:30:04:1e:79:48:0b:13:3c:f5:8b:8d:de:d6:19:ea:ed: 4d:39:79:94:1e:b0:7b:12:d9:d6:11:10:27:8f:dd:0f:d3:9f: 54:3b:f3:5e:33:a7:eb:7d:6c:5c:aa:9a:62:2a:d0:ea:24:ad: cd:79:6b:4f:da:a5:83:64:bc:54:30:95:4e:e2:4c:37:14:95: 28:2f:49:33:59:c6:22:63:4a:92:b7:98:b4:a3:5a:31:b0:c8: 08:73:58:9e:2d:e4:ad:3a:a6:e5:f0:57:95:7f:2f:f3:dc:73: a0:ea:8b:f5 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZv/ZhFr5sqV0BLXHTyhdpq0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI3MTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGY5MTk0ZDRkZDdkNGI3Yjc3N2M5MjAwNzllNDAxZDNhMjUzM2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrIC+XLBdZi8R2lzJAMw22IbIgYm W/X8XpdtwyOyOrldBQvCeqXh+5pHt/ki7NLnHFkFCX8Huw4N4jXCydiqlV3Pq3eM T0N6FuWSbuhGbkQ94i8V6b/SQfvMPn+cb1GfV5oUURWu+Lg7UOT5KGmGD1oCio0D XQjKHgaeL5toGPFrhY49Jpt5xboaFbNu5vRBNtpXdQVBZYch8YQ46fPA67fVxKMg +5W/X65blwqUOnHD9Uhjhen8sI3rZDDB3Ttg4AM28ZOWdIsy0FVIDaybjv3612zm 0XsrDtTfma9wNw5yXuFD0j0fOP37OLu1H+QK6lGJHSeCRODohTkRheXgfQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFBj5GU1N19S3t3fJIAeeQB06JTO2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0L2QyYzY4 OS1lYzM2LTRlZGYtOTZmNC0zODk5NWYyNGIxZWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvZDJjNjg5 LWVjMzYtNGVkZi05NmY0LTM4OTk1ZjI0YjFlZi8xL0dQa1pUVTNYMUxlM2Q4a2dC NTVBSFRvbE03WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAVZ91AwQAuYUiMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwNDQjANBgkqhkiG9w0BAQsFAAOCAQEAUZZB8QOtUN5CUwRODigIJ78o 6mrOLRRZncb73VMrLB9W9sHtfPPkhQM/U8Hm5aOl9uDUe3vNBXMI22TI8p7PlHVm 5dB4q0NCLgxeAgyqYH/473pU4uTtv0fJQ8K4Vk78zBVt90129xeaHWy+/nyQcq/U oUhhQUBhn5a51dvoA4MyNgwXThpJ7rVVZy1VrdHnHFIwBB55SAsTPPWLjd7WGert TTl5lB6wexLZ1hEQJ4/dD9OfVDvzXjOn631sXKqaYirQ6iStzXlrT9qlg2S8VDCV TuJMNxSVKC9JM1nGImNKkreYtKNaMbDICHNYni3krTqm5fBXlX8v89xzoOqL9Q== -----END CERTIFICATE-----Generated at Tue Feb 10 04:19:11 2026 by rpki-client