This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer File: GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer (raw, json) Hash identifier: FXXg7xlfPxflgyYDJSrXruLppC3xG0vZsslz9WgT90w= Subject key identifier: 19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79113957CA9DE9C9FC0E548A35E7FDDD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.223.164.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:39:57:ca:9d:e9:c9:fc:0e:54:8a:35:e7:fd:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19337ca56de7c3b977875369ecde53852515746f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ba:d1:c0:d5:75:16:eb:ab:7b:4a:98:10:5f: d1:de:ff:49:2f:11:96:7a:b9:0a:46:3a:43:4f:f9: 60:a5:22:ff:40:5d:b1:13:6a:04:ed:16:c4:27:54: f2:d6:90:dc:5f:4a:66:44:1d:2e:38:77:4e:91:06: f8:9e:62:a2:92:b3:cd:f1:a4:b3:0d:87:92:7b:69: 9d:55:f3:9a:f0:31:f0:55:85:db:d1:00:50:6b:24: 24:7e:01:1d:be:fd:dd:06:bc:ed:d8:fb:07:e2:57: a1:ef:06:0c:fe:21:a0:e3:78:2e:bc:fc:2d:7e:7f: 39:75:48:e3:b5:b2:1d:28:b8:c9:d2:b0:d1:35:c9: c3:99:3f:4a:fc:e3:dd:4c:5c:0e:16:90:ec:49:da: d1:ad:d2:c5:2c:14:c0:50:82:75:8e:34:72:11:17: bb:c5:e4:22:d4:83:c1:e6:e8:77:6e:df:66:ec:e8: 81:f9:c4:96:0f:7e:7c:c0:e7:cc:10:a5:0a:4e:b8: da:a1:39:3e:58:85:e0:47:c8:95:96:18:4a:03:a4: 0b:95:88:b0:12:34:9f:cc:e7:c9:0c:76:8a:51:22: 5f:44:6e:3a:7e:3e:59:01:62:be:77:7b:d5:df:11: a4:4b:14:dd:3a:8a:53:61:be:f6:b7:03:86:6b:b2: fd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.164.0/24 Signature Algorithm: sha256WithRSAEncryption 86:c6:1c:89:47:fa:f8:ea:41:ce:a5:0a:29:53:aa:9b:40:9e: 6f:5e:62:89:07:09:6d:c1:d0:0e:df:39:db:85:68:37:af:ef: 08:0a:82:c5:c1:1b:4a:5f:9d:61:1f:62:1b:af:38:5b:db:a2: 32:a2:e1:f7:0a:90:94:82:60:f2:44:01:96:d3:00:81:c9:92: 27:2a:ee:6b:f7:2a:dd:13:45:25:a2:33:32:d3:c1:95:40:cb: 89:ee:75:ac:87:79:84:f7:9d:af:82:30:6d:01:2d:c2:92:5e: 72:41:83:d7:8f:eb:b8:52:e4:45:6f:2d:9d:09:d3:e2:f6:b8: 4e:8f:e4:0f:c5:27:23:16:b1:8f:15:7e:9f:cb:f7:67:cd:7c: 77:e7:f8:8e:3f:c1:b4:71:a6:c6:1b:20:a9:69:b0:d5:0d:6f: 58:52:65:b8:f5:eb:d6:5a:77:8a:48:b6:6c:a0:84:f1:b0:32: 74:e3:47:0b:51:50:f0:42:5a:a3:98:a6:24:e8:d7:02:f9:2b: 14:76:84:1c:f0:84:b9:68:18:81:f2:0b:38:c1:9a:27:17:39: 69:60:ac:b3:87:6b:c4:e4:e5:18:cb:76:11:10:78:da:c5:df: 64:07:fa:9c:ca:62:48:c9:ec:1b:8b:c6:ec:fe:93:8f:24:eb: 9a:44:7f:49 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5ETlXyp3pyfwOVIo15/3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTMzN2NhNTZkZTdjM2I5Nzc4NzUzNjllY2RlNTM4NTI1MTU3NDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLrRwNV1Fuure0qYEF/R3v9JLxGW erkKRjpDT/lgpSL/QF2xE2oE7RbEJ1Ty1pDcX0pmRB0uOHdOkQb4nmKikrPN8aSz DYeSe2mdVfOa8DHwVYXb0QBQayQkfgEdvv3dBrzt2PsH4leh7wYM/iGg43guvPwt fn85dUjjtbIdKLjJ0rDRNcnDmT9K/OPdTFwOFpDsSdrRrdLFLBTAUIJ1jjRyERe7 xeQi1IPB5uh3bt9m7OiB+cSWD358wOfMEKUKTrjaoTk+WIXgR8iVlhhKA6QLlYiw EjSfzOfJDHaKUSJfRG46fj5ZAWK+d3vV3xGkSxTdOopTYb72twOGa7L9RwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFBkzfKVt58O5d4dTaezeU4UlFXRvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiL2I4ZDgz My1mMzk2LTRiMWYtYTBlMy01NmI4ODExZTQ5MjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvYjhkODMz LWYzOTYtNGIxZi1hMGUzLTU2Yjg4MTFlNDkyNi8xL0dUTjhwVzNudzdsM2gxTnA3 TjVUaFNVVmRHOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9+kMA0GCSqGSIb3DQEBCwUAA4IBAQCGxhyJ R/r46kHOpQopU6qbQJ5vXmKJBwltwdAO3znbhWg3r+8ICoLFwRtKX51hH2Ibrzhb 26IyouH3CpCUgmDyRAGW0wCByZInKu5r9yrdE0UlojMy08GVQMuJ7nWsh3mE952v gjBtAS3Ckl5yQYPXj+u4UuRFby2dCdPi9rhOj+QPxScjFrGPFX6fy/dnzXx35/iO P8G0cabGGyCpabDVDW9YUmW49evWWneKSLZsoITxsDJ040cLUVDwQlqjmKYk6NcC +SsUdoQc8IS5aBiB8gs4wZonFzlpYKyzh2vE5OUYy3YREHjaxd9kB/qcymJIyewb i8bs/pOPJOuaRH9J -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:02 2026 by rpki-client