This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GUKkFVlCay9ah3wDnu2he2ueHYk.cer File: GUKkFVlCay9ah3wDnu2he2ueHYk.cer (raw, json) Hash identifier: g0cfArxWkxVmj7loWUcwifTwSHs1DP+lBBVSo9aI2zo= Subject key identifier: 19:42:A4:15:59:42:6B:2F:5A:87:7C:03:9E:ED:A1:7B:6B:9E:1D:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B5317E2E1C33DD75C44C6667C23CD9A1E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/GUKkFVlCay9ah3wDnu2he2ueHYk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 25 Dec 2025 01:20:32 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 41109 IP: 81.200.80.0/20 IP: 2a01:7100::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:17:e2:e1:c3:3d:d7:5c:44:c6:66:7c:23:cd:9a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 25 01:20:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1942a41559426b2f5a877c039eeda17b6b9e1d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e4:7b:01:48:14:91:dc:8b:17:27:dd:fe:67: 8e:50:c3:fd:9c:e4:00:3c:67:ca:cc:4a:7c:55:f3: f7:1a:4a:aa:3d:06:f0:42:da:ea:5b:e4:12:a1:32: e9:51:87:83:4e:56:71:03:99:cb:51:69:5d:6c:e8: 8d:e1:af:af:89:78:93:23:0d:b2:e8:67:68:f2:a5: 20:ad:12:c3:a7:2b:5a:d3:2e:cb:e6:9b:e9:9d:cc: af:3e:c9:63:73:ef:14:64:30:cf:d3:66:55:80:92: dc:ae:7f:0a:a7:ac:80:81:6a:58:dc:e2:43:61:8f: 30:a6:2f:48:34:11:1a:1e:13:4e:d1:ef:63:8e:14: f0:d7:a8:81:9b:1e:6e:4e:32:8c:a9:8d:f3:df:c5: 8e:76:1e:e5:fa:12:e2:49:1a:86:2b:68:33:55:71: 91:d6:ba:00:e0:6d:c7:6f:95:f8:c1:79:d2:e6:4c: a5:3a:a1:b0:01:27:e2:03:26:fa:ef:39:7f:92:2d: b0:fd:2a:c7:e5:91:79:84:92:d7:2b:ad:db:ea:6d: 96:f7:d6:a0:50:49:8e:7f:64:72:e1:eb:4e:2c:d6: 37:14:03:6a:99:29:da:4e:b3:36:16:61:66:88:63: 73:78:15:b9:54:6e:8e:b7:25:03:6c:c3:69:91:63: 68:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:42:A4:15:59:42:6B:2F:5A:87:7C:03:9E:ED:A1:7B:6B:9E:1D:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/GUKkFVlCay9ah3wDnu2he2ueHYk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.200.80.0/20 IPv6: 2a01:7100::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41109 Signature Algorithm: sha256WithRSAEncryption 3a:b0:2c:21:20:5a:b5:a9:a7:ba:2b:a7:cf:2c:98:89:b0:33: 32:6f:8e:b7:9c:5b:ce:0b:c6:e2:30:2f:42:2b:2e:ea:97:d4: 01:e8:22:9d:0d:59:64:4f:25:37:20:2e:22:70:d0:cc:a6:75: b8:65:0d:37:04:a8:dc:7d:6a:31:9c:46:38:d5:bb:4d:c6:93: ac:c0:ae:ed:62:86:4a:42:45:6e:45:45:bf:f6:d3:eb:7e:f2: 7a:06:d6:03:3f:35:81:fd:38:36:42:7a:51:9a:60:43:e0:03: 8c:62:58:04:86:9e:32:6b:e5:88:1b:fb:32:0d:36:27:20:c5: 10:0c:f2:3e:79:dd:b2:eb:d0:55:14:f5:83:00:a6:ac:df:79: 0a:1c:83:78:ef:90:07:48:ea:42:dd:5c:a4:55:3c:d3:05:f4: fd:5e:57:42:1e:d6:99:55:86:64:b0:5a:99:fb:be:63:ce:be: 7a:7c:87:30:22:b0:d0:04:be:b2:c5:c7:f1:49:15:70:b2:51: 2f:6f:d7:9b:dd:4b:96:0c:d2:2a:48:bb:32:a7:dc:41:5c:3e: 7e:71:81:bc:1d:79:06:ce:bb:4a:40:97:ac:e4:fb:e1:f5:33: 55:b7:76:1a:bc:d8:43:c7:0a:e5:ee:83:c3:c7:fa:63:ca:83: 56:4a:b7:99 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZtTF+Lhwz3XXETGZnwjzZoeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjI1MDEyMDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTQyYTQxNTU5NDI2YjJmNWE4NzdjMDM5ZWVkYTE3YjZiOWUxZDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuR7AUgUkdyLFyfd/meOUMP9nOQA PGfKzEp8VfP3GkqqPQbwQtrqW+QSoTLpUYeDTlZxA5nLUWldbOiN4a+viXiTIw2y 6Gdo8qUgrRLDpyta0y7L5pvpncyvPsljc+8UZDDP02ZVgJLcrn8Kp6yAgWpY3OJD YY8wpi9INBEaHhNO0e9jjhTw16iBmx5uTjKMqY3z38WOdh7l+hLiSRqGK2gzVXGR 1roA4G3Hb5X4wXnS5kylOqGwASfiAyb67zl/ki2w/SrH5ZF5hJLXK63b6m2W99ag UEmOf2Ry4etOLNY3FANqmSnaTrM2FmFmiGNzeBW5VG6OtyUDbMNpkWNoFQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBlCpBVZQmsvWod8A57toXtrnh2JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkL2M5MTNk Yy03NzBmLTRiZDAtOTc4Zi00NjE2Mjc4NmY4ZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYzkxM2Rj LTc3MGYtNGJkMC05NzhmLTQ2MTYyNzg2ZjhlMS8xL0dVS2tGVmxDYXk5YWgzd0Ru dTJoZTJ1ZUhZay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQEUchQMA0EAgACMAcDBQAqAXEAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCglTANBgkqhkiG9w0BAQsFAAOCAQEAOrAsISBatamn uiunzyyYibAzMm+Ot5xbzgvG4jAvQisu6pfUAeginQ1ZZE8lNyAuInDQzKZ1uGUN NwSo3H1qMZxGONW7TcaTrMCu7WKGSkJFbkVFv/bT637yegbWAz81gf04NkJ6UZpg Q+ADjGJYBIaeMmvliBv7Mg02JyDFEAzyPnndsuvQVRT1gwCmrN95ChyDeO+QB0jq Qt1cpFU80wX0/V5XQh7WmVWGZLBamfu+Y86+enyHMCKw0AS+ssXH8UkVcLJRL2/X m91LlgzSKki7MqfcQVw+fnGBvB15Bs67SkCXrOT74fUzVbd2GrzYQ8cK5e6Dw8f6 Y8qDVkq3mQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:46 2025 by rpki-client