This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer File: GQAdVXoGmNrXfEs-3fKn02tyqwA.cer (raw, json) Hash identifier: opU67cOtmt4XY3PJW3qjy/hduII7E3igvCtrkB3E+fI= Subject key identifier: 19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6D0813606411BD1A67DCF28405565 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44672 AS: 47110 AS: 197376 AS: 201730 IP: 37.221.88.0/22 IP: 77.223.216.0/21 IP: 91.199.207.0/24 IP: 92.62.124.0/22 IP: 185.10.84.0/22 IP: 185.65.92.0/22 IP: 185.78.100.0/22 IP: 185.138.244.0/22 IP: 185.146.148.0/22 IP: 193.168.244.0/22 IP: 194.169.252.0/24 IP: 212.6.38.0/24 IP: 2a03:1aa0::/32 IP: 2a03:5e40::/32 IP: 2a05:5fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d0:81:36:06:41:1b:d1:a6:7d:cf:28:40:55:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:01:a3:45:ce:a1:93:e0:61:3a:4f:6d:de:35: 63:25:75:ce:dc:79:e9:ab:60:04:44:a0:fb:64:5b: 53:21:cc:51:49:2d:0e:b6:b4:56:8c:a0:d1:46:f1: fb:01:13:20:ed:90:c4:8b:35:3e:40:c9:76:67:43: 36:eb:c5:bc:a1:9d:5d:07:38:b0:94:0b:63:1a:ec: cc:b4:cf:4b:b5:6e:6f:69:56:ad:4b:9d:af:09:26: a1:23:13:82:96:b8:43:00:41:53:10:a9:90:af:37: 8a:3e:4c:e7:bd:52:0f:1d:3f:d4:29:f0:11:04:a2: 0b:01:b5:86:2c:d2:b6:27:64:fe:29:99:25:62:17: 49:6e:3d:1e:40:4a:49:f8:bc:6d:e3:09:ab:7c:e4: ef:ae:87:06:6d:5c:3d:5a:41:1f:7b:60:16:b5:48: e1:5a:51:3e:a5:32:b9:4d:27:0b:3c:4a:51:89:a1: 0d:90:3b:27:50:e3:2b:da:37:82:37:96:7d:0c:34: 0d:be:6b:1e:38:f0:98:68:bc:e2:71:6d:e5:f5:e7: d3:68:2e:24:c2:ef:80:71:78:4a:26:a7:78:ef:7a: 91:3b:06:e7:6a:47:33:a9:db:2e:6b:40:0b:b6:83: 66:f2:0b:dc:c4:a2:57:02:06:b1:4f:27:ae:5c:6c: b3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.88.0/22 77.223.216.0/21 91.199.207.0/24 92.62.124.0/22 185.10.84.0/22 185.65.92.0/22 185.78.100.0/22 185.138.244.0/22 185.146.148.0/22 193.168.244.0/22 194.169.252.0/24 212.6.38.0/24 IPv6: 2a03:1aa0::/32 2a03:5e40::/32 2a05:5fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44672 47110 197376 201730 Signature Algorithm: sha256WithRSAEncryption 04:b2:89:20:a5:59:1e:ea:b5:c7:f9:2d:96:2c:13:ac:6f:e8: 40:fc:cd:27:c4:7b:19:59:23:f1:c8:24:4f:82:2c:97:53:fb: 5d:13:b0:89:6c:fa:41:b8:17:80:55:7c:57:da:5b:56:eb:1b: 38:4a:78:f5:15:04:fc:16:ab:96:5b:4f:57:05:b0:b4:3d:45: ab:58:fc:b2:dd:8f:63:33:99:a6:5d:81:96:8f:b6:44:de:45: b3:ac:e5:20:b4:b8:c4:4c:58:ec:6e:d2:46:67:de:b6:ba:6e: 2d:f5:79:7f:d4:10:9e:a4:af:a0:58:3c:73:bc:ff:6d:90:2b: b7:2a:cb:b3:6d:37:2d:cf:e4:34:7e:e5:0b:3a:5f:31:42:e0: f9:26:5e:f6:87:2e:18:7d:95:43:92:a3:68:19:b5:f9:4e:31: e5:db:01:23:35:e4:ac:27:f9:f5:5a:72:4d:55:ff:9b:f7:82: 69:aa:cb:f4:7f:6f:d7:35:cc:0d:19:e8:68:5d:f4:88:32:a8: 25:74:bb:34:c9:37:3c:c4:10:02:3d:8f:ab:7b:57:f7:17:93: 15:0b:9a:7b:1d:d4:31:bb:84:81:97:73:4b:86:f4:6a:32:04: e2:73:8d:4c:d6:ae:dc:59:21:5d:94:90:5a:6c:bb:42:b0:ac: 13:80:48:1f -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgISAZt3xtCBNgZBG9Gmfc8oQFVlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTAwMWQ1NTdhMDY5OGRhZDc3YzRiM2VkZGYyYTdkMzZiNzJhYjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AGjRc6hk+BhOk9t3jVjJXXO3Hnp q2AERKD7ZFtTIcxRSS0OtrRWjKDRRvH7ARMg7ZDEizU+QMl2Z0M268W8oZ1dBziw lAtjGuzMtM9LtW5vaVatS52vCSahIxOClrhDAEFTEKmQrzeKPkznvVIPHT/UKfAR BKILAbWGLNK2J2T+KZklYhdJbj0eQEpJ+Lxt4wmrfOTvrocGbVw9WkEfe2AWtUjh WlE+pTK5TScLPEpRiaENkDsnUOMr2jeCN5Z9DDQNvmseOPCYaLzicW3l9efTaC4k wu+AcXhKJqd473qROwbnakczqdsua0ALtoNm8gvcxKJXAgaxTyeuXGyz3QIDAQAB o4IDDjCCAwowHQYDVR0OBBYEFBkAHVV6Bpja13xLPt3yp9NrcqsAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3L2JjZGVj ZC02Njg5LTRjZDgtYTEwOS0yMGRlNjk3MjYwOWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvYmNkZWNk LTY2ODktNGNkOC1hMTA5LTIwZGU2OTcyNjA5Yi8xL0dRQWRWWG9HbU5yWGZFcy0z ZktuMDJ0eXF3QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH4GCCsGAQUF BwEHAQH/BG8wbTBOBAIAATBIAwQCJd1YAwQDTd/YAwQAW8fPAwQCXD58AwQCuQpU AwQCuUFcAwQCuU5kAwQCuYr0AwQCuZKUAwQCwaj0AwQAwqn8AwQA1AYmMBsEAgAC MBUDBQAqAxqgAwUAKgNeQAMFAyoFX8AwKQYIKwYBBQUHAQgBAf8EGjAYoBYwFAID AK6AAgMAuAYCAwMDAAIDAxQCMA0GCSqGSIb3DQEBCwUAA4IBAQAEsokgpVke6rXH +S2WLBOsb+hA/M0nxHsZWSPxyCRPgiyXU/tdE7CJbPpBuBeAVXxX2ltW6xs4Snj1 FQT8FquWW09XBbC0PUWrWPyy3Y9jM5mmXYGWj7ZE3kWzrOUgtLjETFjsbtJGZ962 um4t9Xl/1BCepK+gWDxzvP9tkCu3KsuzbTctz+Q0fuULOl8xQuD5Jl72hy4YfZVD kqNoGbX5TjHl2wEjNeSsJ/n1WnJNVf+b94Jpqsv0f2/XNcwNGehoXfSIMqgldLs0 yTc8xBACPY+re1f3F5MVC5p7HdQxu4SBl3NLhvRqMgTic41M1q7cWSFdlJBabLtC sKwTgEgf -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:56 2026 by rpki-client