This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer File: GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer (raw, json) Hash identifier: 4QkO/Ij7peoNYaiPRwxlE7gmawbAIngPefjKUHnE5Bk= Subject key identifier: 19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA70AC562BA254DAE99D97FCC7EDB35 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31091 IP: 193.17.46.0/24 IP: 193.150.7.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0a:c5:62:ba:25:4d:ae:99:d9:7f:cc:7e:db:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:83:51:06:19:0f:fb:c5:31:7b:ff:c6:17:56: 40:8e:6f:95:b3:d4:86:2f:f1:56:7e:d9:26:ff:6b: 47:0a:60:8e:65:3c:0d:0e:85:89:0f:23:f2:99:9d: 0b:7e:88:bf:26:e4:1d:22:ee:57:75:be:dd:f0:8f: 6b:1b:c4:4a:43:64:23:cc:2c:ff:0a:57:ae:27:a6: 4f:32:78:c3:40:e2:bd:02:61:3d:cc:01:a0:11:9f: 00:5c:62:3f:f8:ca:da:7b:e8:47:ab:6c:0c:be:9c: 2e:7b:28:20:b1:58:df:64:37:6f:d9:03:04:b5:d0: 65:e2:9f:cb:43:54:e5:a4:71:70:43:10:ba:a2:61: f1:18:4b:c1:52:d9:6e:16:8a:25:0e:c0:d0:07:f0: bf:a1:42:01:b5:b1:2a:72:2a:bd:4c:22:12:9a:54: 05:38:fc:22:da:63:43:91:04:06:ce:a2:8c:0a:21: 7c:15:d8:f8:c9:2a:a2:46:a0:b7:08:10:44:8c:a8: d1:75:2a:ad:f8:a0:3b:8e:71:45:8d:0c:70:59:9c: 60:1b:b3:9e:a1:80:be:9f:19:b1:75:91:08:15:28: 28:87:53:d8:eb:57:47:18:61:a8:12:91:10:2b:45: 32:74:90:ee:74:2c:4d:82:ec:8c:81:e6:c3:61:21: ae:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.46.0/24 193.150.7.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31091 Signature Algorithm: sha256WithRSAEncryption 70:2e:6e:92:b9:a5:39:00:1a:b1:6a:60:ff:4b:f0:67:9e:28: ed:8b:9f:28:84:a8:da:e5:16:83:79:40:64:11:1e:7c:be:8e: 7c:10:05:ab:4f:03:5d:63:67:b8:b6:46:2a:89:90:70:d3:5f: 7e:83:9a:41:67:95:00:06:3c:9a:e1:99:67:41:59:aa:0e:ad: f5:19:03:bb:50:fa:4d:44:e1:61:eb:60:5e:24:f6:ff:5a:8f: e6:71:a0:9d:09:54:73:d5:a5:67:35:70:14:ab:39:06:93:35: 94:e9:12:08:9f:55:12:0b:90:4e:b5:be:6a:83:7a:70:e5:20: a5:0c:8c:35:f3:f8:85:6b:b1:98:8a:35:c0:4c:d8:5d:57:11: 67:e8:f3:e3:76:6c:44:a7:0f:54:3d:95:34:e2:0f:06:dc:3d: 87:aa:7c:2a:8b:dc:58:2e:e4:dc:df:37:63:76:ed:b3:cf:f9: 39:a6:fe:e7:b3:a7:64:00:bf:e6:73:e7:0e:f1:a1:ff:bc:7b: 31:77:22:99:f6:0b:b3:52:08:81:3c:b5:8a:ce:9a:5c:5c:a1: 35:dd:75:16:ba:5a:fa:fe:aa:f8:5e:8c:1b:c5:cb:2a:2d:67: d3:5b:fb:8e:88:a8:a2:cc:e0:14:57:f5:56:6a:cd:56:3c:9e: 54:86:51:d0 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt+pwrFYrolTa6Z2X/Mfts1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTVmYTgzMzAyNTJhMDdmMjUwZTUxZDhlNDc0YmIzOGQ3ZGMzYjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4NRBhkP+8Uxe//GF1ZAjm+Vs9SG L/FWftkm/2tHCmCOZTwNDoWJDyPymZ0Lfoi/JuQdIu5Xdb7d8I9rG8RKQ2QjzCz/ CleuJ6ZPMnjDQOK9AmE9zAGgEZ8AXGI/+Mrae+hHq2wMvpwueyggsVjfZDdv2QME tdBl4p/LQ1TlpHFwQxC6omHxGEvBUtluFoolDsDQB/C/oUIBtbEqciq9TCISmlQF OPwi2mNDkQQGzqKMCiF8Fdj4ySqiRqC3CBBEjKjRdSqt+KA7jnFFjQxwWZxgG7Oe oYC+nxmxdZEIFSgoh1PY61dHGGGoEpEQK0UydJDudCxNguyMgebDYSGu9QIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFBlfqDMCUqB/JQ5R2OR0uzjX3DuaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkL2U5YjBl MC1mNGI2LTQ2ZGEtYWZmOC1iZTcwODdkYmY1MzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvZTliMGUw LWY0YjYtNDZkYS1hZmY4LWJlNzA4N2RiZjUzNi8xL0dWLW9Nd0pTb0g4bERsSFk1 SFM3T05mY081by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwREuAwQAwZYHMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAnlzMA0GCSqGSIb3DQEBCwUAA4IBAQBwLm6SuaU5ABqxamD/S/Bnnijt i58ohKja5RaDeUBkER58vo58EAWrTwNdY2e4tkYqiZBw019+g5pBZ5UABjya4Zln QVmqDq31GQO7UPpNROFh62BeJPb/Wo/mcaCdCVRz1aVnNXAUqzkGkzWU6RIIn1US C5BOtb5qg3pw5SClDIw18/iFa7GYijXATNhdVxFn6PPjdmxEpw9UPZU04g8G3D2H qnwqi9xYLuTc3zdjdu2zz/k5pv7ns6dkAL/mc+cO8aH/vHsxdyKZ9guzUgiBPLWK zppcXKE13XUWulr6/qr4XowbxcsqLWfTW/uOiKiizOAUV/VWas1WPJ5UhlHQ -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:27 2026 by rpki-client