This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer File: GW1YekBaGQSWYyGhDzmJtoZvXmM.cer (raw, json) Hash identifier: nCgcH5MJ6+XYjNdak/FWLbTgG4jFrOwRhxyu1tDlNtA= Subject key identifier: 19:6D:58:7A:40:5A:19:04:96:63:21:A1:0F:39:89:B6:86:6F:5E:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BFA01A43688F2D1EDABF7998DB369E10A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 11:12:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.226.200.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:01:a4:36:88:f2:d1:ed:ab:f7:99:8d:b3:69:e1:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 11:12:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=196d587a405a1904966321a10f3989b6866f5e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:05:fd:3d:a1:66:0d:75:e5:82:87:d8:bd:f0: 17:02:1b:90:a7:a0:b3:7a:e6:86:90:67:26:72:97: 1a:b1:bc:b6:cd:95:65:9c:bc:4a:c1:71:30:cd:83: 3e:3f:2e:c8:22:2e:cf:51:8d:52:af:60:32:29:e8: 8f:ae:fe:d9:9f:44:9b:46:86:f1:1a:69:3d:46:9c: 5a:60:74:ef:cb:98:a1:7d:d3:48:c8:65:f6:21:b5: 28:25:71:be:55:fa:4a:80:bb:5e:21:d0:b1:ab:61: 80:f2:04:e0:72:b4:05:59:36:d7:1f:21:74:fd:81: 21:5e:49:f3:cd:25:f9:0e:b6:a3:c8:2e:7c:55:8f: e1:55:e8:07:24:38:d6:07:d2:22:b4:b8:2b:c2:61: ad:7e:e4:bc:fc:2e:85:cc:04:92:2c:87:d9:80:67: a9:8b:01:0c:90:72:56:36:3d:a8:e6:1f:64:9d:05: 72:7e:6c:ab:c0:32:a0:bb:c5:48:8c:11:90:9d:2f: 49:56:1b:51:d1:73:97:36:ee:7b:5e:80:a4:33:a5: 36:c3:f7:24:40:55:27:e1:9a:de:ba:8b:a3:6f:ea: 72:f1:2a:5d:a1:b5:f5:d0:ca:a4:6e:39:5d:4f:f7: 77:e8:31:2d:00:b7:e6:36:bc:69:9d:5f:31:96:20: b1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:6D:58:7A:40:5A:19:04:96:63:21:A1:0F:39:89:B6:86:6F:5E:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.226.200.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:da:9d:f5:66:53:07:66:8a:b0:65:f2:0e:2d:d4:e2:6c:e1: 0d:8a:bf:20:a5:5c:ce:31:09:3e:4e:4c:94:f4:44:0a:b0:e8: 44:08:b1:98:57:d5:55:e9:a1:70:5e:34:2c:fe:83:11:b5:cc: 3e:8a:27:72:3d:ed:4f:6a:d1:5e:3d:6d:fc:14:73:ee:fa:55: 37:9d:3b:38:32:46:0d:bc:12:32:17:59:4e:86:0d:19:21:86: 8c:c5:83:85:3b:b6:98:12:af:a2:f1:1e:c8:92:48:a5:fc:03: 10:ad:d9:ff:0f:8e:5e:e8:b9:73:2d:da:81:37:2f:62:aa:78: 3d:d4:26:b6:b9:e7:88:15:d5:e0:9c:b8:d7:f8:4e:bc:df:ed: 87:fa:c5:05:a6:8a:e5:11:ca:77:a0:3e:9a:2f:e0:a9:ef:ff: 6f:1f:7f:86:40:ce:1b:41:f0:b9:0f:a9:fd:f0:a4:38:e1:14: 6e:0e:8a:43:c8:23:ef:10:fa:d7:ae:d1:bb:50:15:1a:ab:fe: 9c:a2:b1:72:98:18:a9:c1:ee:f6:62:77:4d:77:f6:18:f1:35: b3:12:1e:e4:cf:75:ba:68:6f:af:de:f4:c5:b2:2c:ca:7e:d0: fa:e1:a1:bc:a5:bf:0a:f6:49:70:d3:12:e3:fe:60:21:d0:63: d0:49:c3:29 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZv6AaQ2iPLR7av3mY2zaeEKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MTExMjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTZkNTg3YTQwNWExOTA0OTY2MzIxYTEwZjM5ODliNjg2NmY1ZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQX9PaFmDXXlgofYvfAXAhuQp6Cz euaGkGcmcpcasby2zZVlnLxKwXEwzYM+Py7IIi7PUY1Sr2AyKeiPrv7Zn0SbRobx Gmk9RpxaYHTvy5ihfdNIyGX2IbUoJXG+VfpKgLteIdCxq2GA8gTgcrQFWTbXHyF0 /YEhXknzzSX5DrajyC58VY/hVegHJDjWB9IitLgrwmGtfuS8/C6FzASSLIfZgGep iwEMkHJWNj2o5h9knQVyfmyrwDKgu8VIjBGQnS9JVhtR0XOXNu57XoCkM6U2w/ck QFUn4Zreuoujb+py8SpdobX10MqkbjldT/d36DEtALfmNrxpnV8xliCx5QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFBltWHpAWhkElmMhoQ85ibaGb15jMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyLzhhOWFh MC01YzU0LTQ0ODQtYTU5NC02NWUyM2UzZmY5YzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvOGE5YWEw LTVjNTQtNDQ4NC1hNTk0LTY1ZTIzZTNmZjljOC8xL0dXMVlla0JhR1FTV1l5R2hE em1KdG9adlhtTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw+LIMA0GCSqGSIb3DQEBCwUAA4IBAQCK2p31 ZlMHZoqwZfIOLdTibOENir8gpVzOMQk+TkyU9EQKsOhECLGYV9VV6aFwXjQs/oMR tcw+iidyPe1PatFePW38FHPu+lU3nTs4MkYNvBIyF1lOhg0ZIYaMxYOFO7aYEq+i 8R7Ikkil/AMQrdn/D45e6LlzLdqBNy9iqng91Ca2ueeIFdXgnLjX+E683+2H+sUF porlEcp3oD6aL+Cp7/9vH3+GQM4bQfC5D6n98KQ44RRuDopDyCPvEPrXrtG7UBUa q/6corFymBipwe72YndNd/YY8TWzEh7kz3W6aG+v3vTFsizKftD64aG8pb8K9klw 0xLj/mAh0GPQScMp -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:27 2026 by rpki-client