This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer File: GTWdi0RPJzSynpueCQG-CLAPQOM.cer (raw, json) Hash identifier: pCyTcqTkuupzBg79wwrI4fjG2DH+1Gj80ju8WsWH0ZM= Subject key identifier: 19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6F800CC61BE9230F323A11ED6BEA0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199007 IP: 91.241.43.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f8:00:cc:61:be:92:30:f3:23:a1:1e:d6:be:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19359d8b444f2734b29e9b9e0901be08b00f40e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:49:c2:1a:d9:82:24:b0:44:27:2a:e0:cc:ce: e3:b2:2a:cd:0d:20:7c:27:02:a7:a2:19:56:02:42: 25:b3:d9:5a:04:14:5b:e0:62:ee:2e:1e:23:33:81: 29:bc:11:fa:4f:3f:56:c5:1e:c5:04:49:87:9b:b4: e2:17:bd:d9:e6:38:f7:81:1a:3f:81:f2:d6:91:81: a9:a1:c6:be:96:f4:91:01:0e:45:d1:f4:65:58:23: e1:35:81:8a:1a:7a:13:e6:d5:5e:07:f3:fa:a8:40: 61:c6:a1:9a:db:9a:44:98:a8:52:f7:fc:b0:ae:95: 92:03:bb:78:b6:0c:5a:ec:d3:7e:cb:e6:e1:db:76: 68:94:3b:20:4a:67:f0:69:80:58:3b:a1:03:32:39: 7d:7b:b7:ee:54:4b:2f:1e:5e:f5:6a:0c:7a:37:fc: 4e:6e:8d:db:80:3d:5e:f9:40:5e:23:dd:76:b2:68: 18:e3:6b:96:89:4d:57:e7:39:3d:8d:3b:0e:82:4b: ad:0f:dc:6d:15:c0:ef:c0:78:61:d6:55:07:d8:d3: 0e:68:fd:a4:6c:95:45:ea:28:bf:3b:9a:40:78:fa: 75:ee:8e:d4:f0:a6:b1:8e:7f:1a:e9:dd:31:82:df: 12:94:cb:a7:a9:88:48:0b:42:0b:2c:88:12:19:da: b5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.241.43.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199007 Signature Algorithm: sha256WithRSAEncryption 90:b8:30:4e:fd:27:cc:f2:d2:88:e0:1f:bd:1f:0c:95:c4:dc: ba:be:01:7c:ed:97:ff:63:3e:bc:d6:dd:c5:21:59:01:31:bd: 1a:a9:80:bc:fb:37:20:7c:69:ec:56:e4:7e:35:e1:c0:05:84: f7:c2:5f:2b:55:a0:4a:4a:41:61:cd:37:b5:47:ad:64:40:dd: 2e:46:cc:f2:31:21:0d:d5:49:2b:48:06:4d:22:cd:db:96:e3: 58:1b:0c:a0:d3:ec:d1:7d:b1:59:f5:64:e1:2f:71:01:34:38: 74:47:f2:d0:94:3e:a2:a3:d9:26:cf:c4:cb:6b:9c:b6:dd:2f: fd:34:37:2d:e0:e8:0f:54:39:e2:ab:1b:b4:76:12:3b:c0:30: 63:47:34:5f:6a:02:12:43:52:3f:08:97:de:41:90:e3:cb:1f: 19:05:f8:63:66:80:b8:15:88:f1:13:b1:c9:e5:8f:81:69:9a: 89:d7:ef:28:23:65:b1:ea:ea:da:a5:44:a3:65:62:21:7d:45: 25:a6:35:f1:2e:dc:0b:7d:80:59:03:46:3b:1a:fd:ad:87:ef: 1d:6e:53:16:2b:d0:2c:5b:41:89:44:98:e6:6b:9e:32:33:0c: 2a:b3:ee:58:10:52:57:27:f6:53:e3:04:52:46:16:7c:31:23: 94:48:75:27 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pvgAzGG+kjDzI6Ee1r6gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTM1OWQ4YjQ0NGYyNzM0YjI5ZTliOWUwOTAxYmUwOGIwMGY0MGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EnCGtmCJLBEJyrgzM7jsirNDSB8 JwKnohlWAkIls9laBBRb4GLuLh4jM4EpvBH6Tz9WxR7FBEmHm7TiF73Z5jj3gRo/ gfLWkYGpoca+lvSRAQ5F0fRlWCPhNYGKGnoT5tVeB/P6qEBhxqGa25pEmKhS9/yw rpWSA7t4tgxa7NN+y+bh23ZolDsgSmfwaYBYO6EDMjl9e7fuVEsvHl71agx6N/xO bo3bgD1e+UBeI912smgY42uWiU1X5zk9jTsOgkutD9xtFcDvwHhh1lUH2NMOaP2k bJVF6ii/O5pAePp17o7U8Kaxjn8a6d0xgt8SlMunqYhIC0ILLIgSGdq1MQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFBk1nYtETyc0sp6bngkBvgiwD0DjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzNhOTQ0 Yi1iNDI4LTQ1NDctYjdmYi0zOGY3YzZhYzliNjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvM2E5NDRi LWI0MjgtNDU0Ny1iN2ZiLTM4ZjdjNmFjOWI2Ni8xL0dUV2RpMFJQSnpTeW5wdWVD UUctQ0xBUFFPTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW/ErMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMJXzANBgkqhkiG9w0BAQsFAAOCAQEAkLgwTv0nzPLSiOAfvR8MlcTcur4BfO2X /2M+vNbdxSFZATG9GqmAvPs3IHxp7FbkfjXhwAWE98JfK1WgSkpBYc03tUetZEDd LkbM8jEhDdVJK0gGTSLN25bjWBsMoNPs0X2xWfVk4S9xATQ4dEfy0JQ+oqPZJs/E y2uctt0v/TQ3LeDoD1Q54qsbtHYSO8AwY0c0X2oCEkNSPwiX3kGQ48sfGQX4Y2aA uBWI8ROxyeWPgWmaidfvKCNlserq2qVEo2ViIX1FJaY18S7cC32AWQNGOxr9rYfv HW5TFivQLFtBiUSY5mueMjMMKrPuWBBSVyf2U+MEUkYWfDEjlEh1Jw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:14 2026 by rpki-client