This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer File: GRGmWD3HmkFVGxeutDFNspMRy-s.cer (raw, json) Hash identifier: 7mH3u3ZsMP73nCBZ2XQs3oXqQGvjCluP6ZAnXJTpvAc= Subject key identifier: 19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C132ABB7DDEB637022F5832951DFC3F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208060 IP: 193.43.30.0 -- 193.43.33.255 IP: 2a0f:b880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:2a:bb:7d:de:b6:37:02:2f:58:32:95:1d:fc:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1911a6583dc79a41551b17aeb4314db29311cbeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ee:0f:a4:86:c8:ec:19:1c:2d:b0:53:ed:a8: 9b:35:6d:44:24:30:cb:94:43:0e:35:6e:84:e6:84: 4d:91:d7:15:65:2b:02:dd:ad:15:91:97:64:d3:53: fc:79:f6:a6:59:83:ea:ba:d4:a4:20:4f:0a:bd:21: 83:e6:f3:e6:67:50:44:a3:5d:cc:81:41:fb:4b:17: 9b:2e:8d:fe:4b:db:c0:d4:d3:65:83:9a:dc:24:9e: 14:4e:ea:28:5e:3f:45:73:2e:ec:19:cc:45:5a:9f: 8d:35:1c:d7:79:3c:2b:d6:be:fa:d9:ab:27:63:29: e0:18:4c:77:00:9f:f1:87:32:c7:5c:61:6b:ac:f2: 90:a7:2f:28:44:8f:6b:b5:4c:66:3d:b0:cd:00:a3: 70:be:01:89:7d:4a:2e:3b:f1:73:2b:ad:50:4f:b9: f7:2b:c9:02:4f:50:4d:1b:c7:22:a1:77:7c:79:8c: c5:bf:d3:54:36:05:9c:24:d5:08:81:7f:be:f6:de: 61:2c:6d:ba:f7:1e:5a:86:50:e2:03:0e:29:39:4e: db:82:76:26:b5:0f:4c:1c:4d:44:9f:a7:4d:0e:21: b3:33:7d:f6:12:29:95:69:34:5e:e7:0b:e8:a5:eb: 13:31:9d:54:04:b0:6c:28:ff:4f:68:f3:03:c1:af: bf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.30.0-193.43.33.255 IPv6: 2a0f:b880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208060 Signature Algorithm: sha256WithRSAEncryption 72:af:61:eb:a6:cc:f0:d5:2d:7d:07:93:90:75:5a:93:98:5a: fa:cf:13:13:b2:20:98:55:97:8b:91:a5:47:e0:87:48:26:b4: 3a:e3:95:87:9b:51:0c:d8:ed:67:9b:13:36:88:4e:d6:9b:8f: a0:ab:42:78:57:68:b4:03:b3:47:09:fc:5f:02:8c:4d:55:bd: cc:71:0f:09:39:70:35:26:16:4a:87:46:ce:2a:37:5a:88:e1: a5:4a:13:e3:d4:a3:07:8f:55:a1:b3:76:ce:d3:a6:68:72:fe: 5e:d1:13:94:e3:8c:f2:2c:10:19:bd:9d:3c:b2:e8:8a:58:25: f1:9a:10:05:79:0b:59:ac:3f:c9:07:22:78:0e:4f:5a:45:ff: ab:19:c8:be:a9:ac:a6:66:f0:8a:e7:c3:96:fb:36:e4:6f:d0: b0:d9:68:ef:1f:bd:76:52:f6:3f:34:11:d8:a0:d1:8e:6f:61: 8f:d2:e3:21:c6:7d:31:bc:d4:fe:03:ac:e5:0a:56:6e:cb:a2: fa:8b:9d:ef:3a:36:c3:4c:6c:ed:40:27:6f:78:34:0b:1d:ac: 56:5b:66:84:a9:f7:75:3f:97:79:79:f4:71:c9:47:5d:90:33: 03:6d:d4:8f:bb:2c:41:95:51:d9:53:19:85:f9:47:0c:ca:48: 76:53:e1:af -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt8Eyq7fd62NwIvWDKVHfw/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTExYTY1ODNkYzc5YTQxNTUxYjE3YWViNDMxNGRiMjkzMTFjYmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre4PpIbI7BkcLbBT7aibNW1EJDDL lEMONW6E5oRNkdcVZSsC3a0VkZdk01P8efamWYPqutSkIE8KvSGD5vPmZ1BEo13M gUH7SxebLo3+S9vA1NNlg5rcJJ4UTuooXj9Fcy7sGcxFWp+NNRzXeTwr1r762asn YyngGEx3AJ/xhzLHXGFrrPKQpy8oRI9rtUxmPbDNAKNwvgGJfUouO/FzK61QT7n3 K8kCT1BNG8cioXd8eYzFv9NUNgWcJNUIgX++9t5hLG269x5ahlDiAw4pOU7bgnYm tQ9MHE1En6dNDiGzM332EimVaTRe5wvopesTMZ1UBLBsKP9PaPMDwa+/kwIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFBkRplg9x5pBVRsXrrQxTbKTEcvrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjL2ViMTZl Yi03N2Y1LTQwMDMtYjkwMy0xYzM0YWZkOWQ1MGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvZWIxNmVi LTc3ZjUtNDAwMy1iOTAzLTFjMzRhZmQ5ZDUwZC8xL0dSR21XRDNIbWtGVkd4ZXV0 REZOc3BNUnktcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTAUBAIAATAOMAwDBAHBKx4DBAHBKyAwDQQCAAIwBwMFAyoPuIAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAyy8MA0GCSqGSIb3DQEBCwUAA4IBAQBy r2Hrpszw1S19B5OQdVqTmFr6zxMTsiCYVZeLkaVH4IdIJrQ645WHm1EM2O1nmxM2 iE7Wm4+gq0J4V2i0A7NHCfxfAoxNVb3McQ8JOXA1JhZKh0bOKjdaiOGlShPj1KMH j1Whs3bO06Zocv5e0ROU44zyLBAZvZ08suiKWCXxmhAFeQtZrD/JByJ4Dk9aRf+r Gci+qaymZvCK58OW+zbkb9Cw2WjvH712UvY/NBHYoNGOb2GP0uMhxn0xvNT+A6zl ClZuy6L6i53vOjbDTGztQCdveDQLHaxWW2aEqfd1P5d5efRxyUddkDMDbdSPuyxB lVHZUxmF+UcMykh2U+Gv -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:49 2026 by rpki-client