This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer File: GR7jr4IFY0lGR1UaUgbvDEXPlck.cer (raw, json) Hash identifier: ZhZN+sNXj+shJP53qEzoPG2E6oajKGwRXiwYNRlq6jI= Subject key identifier: 19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC9182889BFE8733B88E7F2322ACA4A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197081 IP: 95.131.16.0/21 IP: 2a11:3100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:18:28:89:bf:e8:73:3b:88:e7:f2:32:2a:ca:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=191ee3af820563494647551a5206ef0c45cf95c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:51:72:35:e9:09:ab:6b:e2:26:96:ee:cb:dd: e2:5b:a5:86:5e:67:ca:1d:af:bf:39:23:b0:e4:ce: c1:4c:5b:99:32:76:a1:88:06:09:45:b8:7b:f0:8b: 4a:df:28:d7:47:91:e8:71:b7:a9:c0:6b:4b:77:ff: 74:bf:4d:c5:b9:e0:05:c8:a6:81:d7:d3:4b:ee:42: 04:3a:40:e2:e6:b7:0f:76:3a:09:ed:fe:b6:08:13: e6:e3:3a:cd:68:60:23:4a:21:d3:46:77:78:4a:d8: 7e:80:de:f0:35:72:e4:e3:74:0f:9b:e0:74:05:26: fc:c6:75:2c:9d:ce:88:0c:26:80:1c:40:e3:c5:af: 5f:a5:77:b0:46:1a:71:b6:68:05:eb:ab:aa:48:fa: a5:08:a4:61:ec:cb:24:d6:4f:42:e0:c8:01:79:72: 68:01:74:79:17:95:2b:ad:a8:6b:8a:15:e3:11:41: 35:67:e5:32:51:bd:bf:03:f6:9c:cf:af:32:7e:50: 98:55:9e:30:72:a4:1d:d5:8a:9b:49:ab:45:5e:1c: c1:0c:74:57:71:dc:f1:46:5b:6f:8f:b7:9b:01:e1: 63:46:6e:0d:6c:b2:23:a0:74:e3:93:4a:cd:d1:13: 7e:73:74:f5:59:10:b9:63:db:59:29:84:e4:b9:d5: 7b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.131.16.0/21 IPv6: 2a11:3100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197081 Signature Algorithm: sha256WithRSAEncryption ab:fa:6f:65:e1:50:52:bf:85:7d:57:95:52:df:10:83:87:e4: d0:d3:ac:c5:3b:54:3d:64:a1:83:5d:13:d6:5c:b8:e1:0e:7f: 18:11:18:12:92:f4:5b:50:a1:14:18:ad:48:10:34:30:77:b2: 72:02:8b:8f:1b:c4:0b:2f:93:67:03:c4:1f:0c:e1:75:b2:74: 2f:8d:19:97:de:96:3b:7e:bb:8a:2c:c3:4b:17:52:9c:38:81: 3e:a6:25:d8:7c:41:48:4c:ad:f1:eb:4f:79:d6:e9:b7:99:ee: 95:01:b3:dc:2a:08:6a:6d:fc:49:a7:a2:4d:17:b9:ab:18:9f: 16:03:64:8a:99:b6:99:ab:63:22:fa:2b:fe:d2:e9:7f:91:ac: 37:ab:2c:fa:e2:e5:03:19:5e:ce:97:0f:60:cb:34:3b:2f:4f: 7d:43:d0:a0:fb:cb:32:a2:9f:de:81:04:1f:08:22:19:5d:b9: 78:ea:d7:ec:bd:0e:72:03:2b:03:e5:f1:cf:6a:93:46:22:0a: 96:d1:b5:1a:33:d0:72:9f:c2:7f:bb:66:24:2b:8e:b1:05:2d: 6e:ed:42:16:6e:b9:6a:0c:59:d9:0c:2b:a3:e0:14:67:f3:0a: 82:2e:91:1b:8f:32:3f:3c:ce:f1:16:c9:1e:bc:4a:70:72:ad: 7f:8f:ca:9f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yRgoib/oczuI5/IyKspKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTFlZTNhZjgyMDU2MzQ5NDY0NzU1MWE1MjA2ZWYwYzQ1Y2Y5NWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFFyNekJq2viJpbuy93iW6WGXmfK Ha+/OSOw5M7BTFuZMnahiAYJRbh78ItK3yjXR5HocbepwGtLd/90v03FueAFyKaB 19NL7kIEOkDi5rcPdjoJ7f62CBPm4zrNaGAjSiHTRnd4Sth+gN7wNXLk43QPm+B0 BSb8xnUsnc6IDCaAHEDjxa9fpXewRhpxtmgF66uqSPqlCKRh7Msk1k9C4MgBeXJo AXR5F5UrrahrihXjEUE1Z+UyUb2/A/acz68yflCYVZ4wcqQd1YqbSatFXhzBDHRX cdzxRltvj7ebAeFjRm4NbLIjoHTjk0rN0RN+c3T1WRC5Y9tZKYTkudV7+wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBke46+CBWNJRkdVGlIG7wxFz5XJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkL2EzZGY4 MS0yMDk2LTQ5M2QtYjEwNi00NmQ2Y2VhMjAzNDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvYTNkZjgx LTIwOTYtNDkzZC1iMTA2LTQ2ZDZjZWEyMDM0Mi8xL0dSN2pyNElGWTBsR1IxVWFV Z2J2REVYUGxjay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDX4MQMA0EAgACMAcDBQMqETEAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMB2TANBgkqhkiG9w0BAQsFAAOCAQEAq/pvZeFQUr+F fVeVUt8Qg4fk0NOsxTtUPWShg10T1ly44Q5/GBEYEpL0W1ChFBitSBA0MHeycgKL jxvECy+TZwPEHwzhdbJ0L40Zl96WO367iizDSxdSnDiBPqYl2HxBSEyt8etPedbp t5nulQGz3CoIam38SaeiTRe5qxifFgNkipm2matjIvor/tLpf5GsN6ss+uLlAxle zpcPYMs0Oy9PfUPQoPvLMqKf3oEEHwgiGV25eOrX7L0OcgMrA+Xxz2qTRiIKltG1 GjPQcp/Cf7tmJCuOsQUtbu1CFm65agxZ2Qwro+AUZ/MKgi6RG48yPzzO8RbJHrxK cHKtf4/Knw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:23 2026 by rpki-client