This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer File: GTdDRntNpBxilek1EVMwlYa6I5k.cer (raw, json) Hash identifier: PzKoOIFedcYk+D0LsNhLnOrZ+fmDlyOyEURjFcHpiGc= Subject key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78347150042A95C234B6671E4EDE2D22 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39184 IP: 5.133.92.0/22 IP: 5.181.28.0/22 IP: 5.183.228.0/22 IP: 45.65.68.0/22 IP: 45.67.88.0/22 IP: 77.76.32.0/19 IP: 77.77.0.0/18 IP: 80.72.65.0/24 IP: 80.72.67.0/24 IP: 80.72.70.0/23 IP: 80.72.73.0 -- 80.72.74.255 IP: 80.72.76.0/24 IP: 80.72.79.0/24 IP: 80.72.83.0/24 IP: 80.72.94.0/24 IP: 80.78.224.0/20 IP: 88.80.96.0/19 IP: 185.116.92.0/22 IP: 185.247.56.0/22 IP: 185.253.156.0/22 IP: 193.161.132.0/22 IP: 213.149.128.0/19 IP: 2a06:7b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:71:50:04:2a:95:c2:34:b6:67:1e:4e:de:2d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=193743467b4da41c6295e9351153309586ba2399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ee:cb:c0:d7:a1:c1:ba:96:f9:fd:df:6e:b3: 1b:d5:84:d5:71:50:54:db:c5:a7:c2:77:62:0d:42: a8:8a:9a:e0:54:8a:29:1c:c8:ec:17:52:3c:98:28: bb:31:f3:f1:83:dc:e6:3e:a1:ec:5f:d0:a3:85:7e: ea:10:49:9f:7b:01:b8:8d:12:78:88:33:37:51:c3: a7:fe:a4:c4:84:86:8b:54:6c:ad:c8:b9:5e:c5:ae: 37:47:a0:b6:02:ed:22:d4:47:e3:13:42:36:c0:a8: cb:66:7b:9d:3e:ed:5f:27:04:f6:71:dd:91:69:14: 71:95:80:c2:0c:26:ef:33:dd:95:98:fb:fe:fe:41: 70:4b:5d:7f:99:dc:a8:f3:4a:37:1d:b2:ea:95:7b: fd:2f:dc:81:4c:0c:8f:20:34:d8:3f:d7:e1:46:b5: 59:80:6d:71:49:85:4a:49:a3:2a:c5:d7:53:b8:54: 82:79:f1:cb:c5:37:da:8c:e2:72:d0:44:ae:d2:30: 0d:dd:0f:00:ec:fd:23:d6:e2:1f:08:01:60:a5:0c: a6:30:78:85:5e:d1:46:55:f1:30:d3:a2:b1:a7:ca: 07:43:94:77:0a:ad:a4:e1:7a:62:36:7f:c0:fb:0e: c8:88:66:e9:ba:4d:d4:1b:8f:49:aa:39:ca:a8:1e: dd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.92.0/22 5.181.28.0/22 5.183.228.0/22 45.65.68.0/22 45.67.88.0/22 77.76.32.0/19 77.77.0.0/18 80.72.65.0/24 80.72.67.0/24 80.72.70.0/23 80.72.73.0-80.72.74.255 80.72.76.0/24 80.72.79.0/24 80.72.83.0/24 80.72.94.0/24 80.78.224.0/20 88.80.96.0/19 185.116.92.0/22 185.247.56.0/22 185.253.156.0/22 193.161.132.0/22 213.149.128.0/19 IPv6: 2a06:7b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39184 Signature Algorithm: sha256WithRSAEncryption 05:35:43:8e:66:fa:ff:b3:46:38:f4:b1:f5:c9:16:17:4d:81: 42:6e:3e:ad:f1:05:4b:40:96:20:e1:27:32:99:aa:41:8f:29: e7:fe:94:19:61:9c:f7:82:b4:25:94:af:35:ff:6b:22:cd:a6: 6e:db:f5:ae:f6:34:f4:43:bb:cb:70:fd:55:33:6c:fc:5d:1e: b4:96:67:46:99:41:c0:cc:0a:3d:3d:ca:f0:d3:43:67:a8:76: 7e:a1:7b:fa:32:b4:85:70:fa:a3:b5:3c:6f:00:b7:f3:7b:c3: 04:16:bf:4d:d1:37:6d:00:d0:59:36:c9:eb:69:de:55:e1:35: 0f:b0:79:fd:44:e7:84:0e:4e:85:95:e6:1e:80:6b:8a:2e:42: 59:10:80:db:fa:d7:6c:22:03:78:d6:f5:7d:4a:5f:69:ba:e7: a9:e1:a9:85:3b:0b:db:2b:49:01:d4:4b:8a:05:91:47:a2:ae: 4b:1f:6f:80:ab:2c:22:3a:d6:f2:a5:06:d9:b1:1d:51:9f:54: 00:37:b0:ef:a4:3a:2d:b1:0b:bd:00:09:d9:5c:72:d5:f4:99: e4:b7:38:30:92:96:0e:b9:85:ef:0e:d6:d5:6d:ce:8c:04:c5: 5b:82:a0:d4:fd:42:22:b5:0e:fb:f5:2e:68:40:aa:47:18:64: f0:c2:b5:b9 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgISAZt4NHFQBCqVwjS2Zx5O3i0iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTM3NDM0NjdiNGRhNDFjNjI5NWU5MzUxMTUzMzA5NTg2YmEyMzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+7LwNehwbqW+f3fbrMb1YTVcVBU 28WnwndiDUKoiprgVIopHMjsF1I8mCi7MfPxg9zmPqHsX9CjhX7qEEmfewG4jRJ4 iDM3UcOn/qTEhIaLVGytyLlexa43R6C2Au0i1EfjE0I2wKjLZnudPu1fJwT2cd2R aRRxlYDCDCbvM92VmPv+/kFwS11/mdyo80o3HbLqlXv9L9yBTAyPIDTYP9fhRrVZ gG1xSYVKSaMqxddTuFSCefHLxTfajOJy0ESu0jAN3Q8A7P0j1uIfCAFgpQymMHiF XtFGVfEw06Kxp8oHQ5R3Cq2k4XpiNn/A+w7IiGbpuk3UG49JqjnKqB7doQIDAQAB o4IDOjCCAzYwHQYDVR0OBBYEFBk3Q0Z7TaQcYpXpNRFTMJWGuiOZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5LzM2NzAz YS0xMjJiLTQxMTYtYjMxNy1jYTVmY2NiZjdhOGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvMzY3MDNh LTEyMmItNDExNi1iMzE3LWNhNWZjY2JmN2E4Yy8xL0dUZERSbnROcEJ4aWxlazFF Vk13bFlhNkk1ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIG4BggrBgEF BQcBBwEB/wSBqDCBpTCBkwQCAAEwgYwDBAIFhVwDBAIFtRwDBAIFt+QDBAItQUQD BAItQ1gDBAVNTCADBAZNTQADBABQSEEDBABQSEMDBAFQSEYwDAMEAFBISQMEAFBI SgMEAFBITAMEAFBITwMEAFBIUwMEAFBIXgMEBFBO4AMEBVhQYAMEArl0XAMEArn3 OAMEArn9nAMEAsGhhAMEBdWVgDANBAIAAjAHAwUDKgZ7ADAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMAmRAwDQYJKoZIhvcNAQELBQADggEBAAU1Q45m+v+zRjj0sfXJ FhdNgUJuPq3xBUtAliDhJzKZqkGPKef+lBlhnPeCtCWUrzX/ayLNpm7b9a72NPRD u8tw/VUzbPxdHrSWZ0aZQcDMCj09yvDTQ2eodn6he/oytIVw+qO1PG8At/N7wwQW v03RN20A0Fk2yetp3lXhNQ+wef1E54QOToWV5h6Aa4ouQlkQgNv612wiA3jW9X1K X2m656nhqYU7C9srSQHUS4oFkUeirksfb4CrLCI61vKlBtmxHVGfVAA3sO+kOi2x C70ACdlcctX0meS3ODCSlg65he8O1tVtzowExVuCoNT9QiK1Dvv1LmhAqkcYZPDC tbk= -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:44 2026 by rpki-client