This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer File: GVD3RTAkOmSxG7IywDjVdOf8TSA.cer (raw, json) Hash identifier: i5yc2PkgejweBzG5xL1rLnW3Xv9r/z3Wnl1UMKDi6As= Subject key identifier: 19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE3C64FD671038F382BCC21A2291AC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208448 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3c:64:fd:67:10:38:f3:82:bc:c2:1a:22:91:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1950f74530243a64b11bb232c038d574e7fc4d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:46:7c:a7:a4:99:9d:7f:2c:cf:00:7a:f5:7b: b1:17:af:d2:f1:2d:d5:fc:86:19:77:66:7b:75:fd: 8f:6d:67:d5:fa:8d:6b:22:d7:3b:74:be:58:df:1a: fb:93:c0:3e:d8:a8:71:fc:c1:e0:a0:11:2e:24:c1: 01:24:01:6e:93:75:da:74:05:05:74:45:20:e3:51: e4:86:d0:e1:0e:81:ff:be:60:b4:bf:88:72:55:1f: 81:d2:fd:5b:fc:b2:53:db:53:1d:85:fa:27:f4:da: a7:68:ae:98:f0:cb:62:79:ce:d8:41:5d:f6:ac:4d: 55:8d:50:1c:2d:fa:04:b7:5e:8f:37:8c:18:f5:39: 85:f7:28:bc:33:72:a9:33:15:e0:b8:c2:d3:75:61: 74:f5:d8:02:b5:35:d0:ac:49:0e:93:7d:1c:b5:b1: eb:39:2a:c1:74:47:72:8b:34:e1:e4:2b:05:46:e6: 14:96:b7:99:f1:2c:a2:fd:e0:f2:2a:f8:8a:5d:6a: a0:c7:cd:8c:59:48:b3:e1:e1:fd:0a:ad:33:34:19: d5:29:96:1e:d6:46:6e:f5:67:d9:82:a4:b8:cd:dd: 1a:07:c5:14:29:1d:5a:d2:36:e1:80:ec:34:84:c8: 40:95:3c:f2:b2:d8:6d:cb:95:67:b0:ed:39:1b:b8: 08:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208448 Signature Algorithm: sha256WithRSAEncryption 3e:37:93:cd:63:d2:c6:e1:34:f3:02:78:f4:3a:75:34:3d:8a: 85:dc:92:3e:e9:c6:52:dc:43:36:4f:81:04:b5:57:41:0f:33: f1:df:b9:ab:d6:92:66:08:bf:57:28:9a:16:45:82:14:f6:bc: 36:d9:49:ee:49:e8:03:4a:fd:69:a7:a8:27:17:7a:e5:26:ad: 37:68:2e:ab:80:a4:df:9a:a3:dc:44:bc:e5:38:ae:43:86:b2: e1:f5:ae:af:2b:64:73:a3:06:f7:5b:12:a6:fa:50:cd:9b:c7: 87:ee:e5:74:3b:5c:c6:42:ce:8a:86:5c:41:14:fa:cc:0c:18: 2c:ee:1f:33:6f:c6:56:ab:8e:56:ed:2f:fa:c8:6a:61:66:8b: 10:6c:30:1e:bf:6e:4b:41:20:36:9e:d1:9d:26:69:ba:84:6b: 3c:70:2a:a9:3f:82:3f:98:be:ee:44:b1:16:08:1f:a7:1a:1d: 32:bb:0e:28:3b:a4:30:64:af:d0:97:00:94:83:bd:4e:10:22: 4e:b9:23:14:da:db:96:d6:9d:4f:30:34:d1:d3:bd:af:84:05: 97:b2:ba:e2:b9:73:68:de:eb:e0:04:e2:af:b4:37:17:c9:3f: 67:46:af:14:9d:3f:a7:66:9b:38:df:a9:6c:ca:9d:69:71:fc: 2d:16:1f:34 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt87jxk/WcQOPOCvMIaIpGsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTUwZjc0NTMwMjQzYTY0YjExYmIyMzJjMDM4ZDU3NGU3ZmM0ZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkZ8p6SZnX8szwB69XuxF6/S8S3V /IYZd2Z7df2PbWfV+o1rItc7dL5Y3xr7k8A+2Khx/MHgoBEuJMEBJAFuk3XadAUF dEUg41HkhtDhDoH/vmC0v4hyVR+B0v1b/LJT21Mdhfon9NqnaK6Y8Mtiec7YQV32 rE1VjVAcLfoEt16PN4wY9TmF9yi8M3KpMxXguMLTdWF09dgCtTXQrEkOk30ctbHr OSrBdEdyizTh5CsFRuYUlreZ8Syi/eDyKviKXWqgx82MWUiz4eH9Cq0zNBnVKZYe 1kZu9WfZgqS4zd0aB8UUKR1a0jbhgOw0hMhAlTzysthty5VnsO05G7gICwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFBlQ90UwJDpksRuyMsA41XTn/E0gMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjL2MyNDYz NS0yMDljLTRlNmUtYjg3Ny1lNjg1YTczYmQ3ZDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvYzI0NjM1 LTIwOWMtNGU2ZS1iODc3LWU2ODVhNzNiZDdkOS8xL0dWRDNSVEFrT21TeEc3SXl3 RGpWZE9mOFRTQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMuQDANBgkqhkiG9w0BAQsFAAOCAQEAPjeTzWPSxuE0 8wJ49Dp1ND2KhdySPunGUtxDNk+BBLVXQQ8z8d+5q9aSZgi/VyiaFkWCFPa8NtlJ 7knoA0r9aaeoJxd65SatN2guq4Ck35qj3ES85TiuQ4ay4fWurytkc6MG91sSpvpQ zZvHh+7ldDtcxkLOioZcQRT6zAwYLO4fM2/GVquOVu0v+shqYWaLEGwwHr9uS0Eg Np7RnSZpuoRrPHAqqT+CP5i+7kSxFggfpxodMrsOKDukMGSv0JcAlIO9ThAiTrkj FNrbltadTzA00dO9r4QFl7K64rlzaN7r4ATir7Q3F8k/Z0avFJ0/p2abON+pbMqd aXH8LRYfNA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:12 2026 by rpki-client