This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GWa02kiR-4CQGCvDO0m1liT8nZs.cer File: GWa02kiR-4CQGCvDO0m1liT8nZs.cer (raw, json) Hash identifier: s4pxFa4oHawtEpN7zxkqvK17PBrdjlVQBJ1ebkHeM4U= Subject key identifier: 19:66:B4:DA:48:91:FB:80:90:18:2B:C3:3B:49:B5:96:24:FC:9D:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6E0DD7DB43334CA2B3BEFE074E3D7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47187 IP: 2a02:838::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e0:dd:7d:b4:33:34:ca:2b:3b:ef:e0:74:e3:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1966b4da4891fb8090182bc33b49b59624fc9d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:10:58:9b:8a:51:c1:ea:d9:e8:44:e7:8b:a3: 97:4b:72:be:e7:ab:69:57:32:7f:71:f4:ed:82:b2: 8e:89:58:51:49:95:9e:b6:48:ab:5a:06:76:67:8c: 00:a0:a2:17:10:b5:2e:1e:89:4c:14:c6:15:40:27: 00:8c:7c:75:9e:50:3b:a3:54:ec:b7:c5:1c:9b:e2: a3:e3:8f:ff:21:c0:3d:36:a3:ef:2e:e6:9b:00:49: 9a:67:4b:96:b8:e8:25:1b:18:a1:89:33:eb:6a:aa: 91:b1:9b:25:c7:ee:2b:8e:fb:ea:f6:96:a3:e4:55: b1:e3:e0:13:fd:43:93:01:b0:84:a0:5c:a3:84:9b: c4:df:ea:c4:cf:1a:78:1a:fa:32:80:ee:0f:96:a1: 9d:54:25:60:7e:5d:62:d9:46:9a:35:64:97:0f:91: e6:b9:e1:3a:de:51:6a:51:09:27:58:7b:c2:e9:81: 13:16:60:b6:1f:ca:a4:f8:4b:04:3a:19:aa:65:57: fd:03:9e:f5:cd:bb:1d:74:6d:ce:f5:53:7c:4d:3f: 75:8e:d8:6f:c6:5d:90:da:22:e1:f0:a2:13:06:2e: b4:51:b4:91:42:2a:ab:19:46:3b:7b:54:8e:d4:cb: 5c:60:6a:96:06:26:06:44:e3:15:47:d5:44:7a:d5: ef:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:66:B4:DA:48:91:FB:80:90:18:2B:C3:3B:49:B5:96:24:FC:9D:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:838::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47187 Signature Algorithm: sha256WithRSAEncryption 6c:dd:f5:6a:f4:ed:ea:e9:46:70:2f:90:c9:13:19:98:4c:1d: c2:ee:5f:78:45:3e:54:21:c3:49:5b:1e:02:67:9d:33:2f:37: c6:66:9f:67:f1:31:1a:a8:62:8e:7f:d6:1d:bb:78:90:49:90: 1b:04:6f:af:e4:6c:55:5d:eb:af:ff:7d:e5:07:39:94:9f:3d: 93:88:6f:32:bc:3f:8f:97:da:c4:c6:53:04:9c:c0:a8:5e:46: 3a:78:d4:42:af:29:02:aa:6c:de:44:48:2c:db:54:7e:e2:f4: 11:d1:64:d6:c6:1e:06:e3:39:4e:6b:d8:e0:a7:87:52:dd:6c: d8:94:97:a5:41:8f:ce:15:a2:1f:39:c1:61:1b:c6:1a:fd:f8: 17:1b:63:19:c7:01:12:d6:e9:10:22:b5:88:e9:c9:d3:ca:b7: cd:96:ed:d2:14:a7:35:19:54:eb:b1:13:90:af:24:5e:ca:09: 62:c0:49:27:b6:36:8b:10:ef:d2:a1:01:fd:88:59:12:21:83: e0:76:a9:10:17:9c:ce:92:51:d0:7e:10:63:6e:d5:c4:23:0e: 64:e2:1d:3c:65:56:b1:1f:c6:60:68:73:b2:a0:0d:33:53:e6: 16:17:fc:25:c0:d0:33:18:77:b2:48:3e:27:eb:62:28:9f:9f: 20:03:a6:0c -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt3xuDdfbQzNMorO+/gdOPXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTY2YjRkYTQ4OTFmYjgwOTAxODJiYzMzYjQ5YjU5NjI0ZmM5ZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRBYm4pRwerZ6ETni6OXS3K+56tp VzJ/cfTtgrKOiVhRSZWetkirWgZ2Z4wAoKIXELUuHolMFMYVQCcAjHx1nlA7o1Ts t8Ucm+Kj44//IcA9NqPvLuabAEmaZ0uWuOglGxihiTPraqqRsZslx+4rjvvq9paj 5FWx4+AT/UOTAbCEoFyjhJvE3+rEzxp4GvoygO4PlqGdVCVgfl1i2UaaNWSXD5Hm ueE63lFqUQknWHvC6YETFmC2H8qk+EsEOhmqZVf9A571zbsddG3O9VN8TT91jthv xl2Q2iLh8KITBi60UbSRQiqrGUY7e1SO1MtcYGqWBiYGROMVR9VEetXvHwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFBlmtNpIkfuAkBgrwztJtZYk/J2bMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5LzQxM2U5 MS1hY2ZlLTQ3ZTEtYWRkMi03OWQ1YjQ2ZDljMGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvNDEzZTkx LWFjZmUtNDdlMS1hZGQyLTc5ZDViNDZkOWMwZS8xL0dXYTAya2lSLTRDUUdDdkRP MG0xbGlUOG5acy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUAKgIIODAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAuFMwDQYJKoZIhvcNAQELBQADggEBAGzd9Wr07erpRnAvkMkTGZhMHcLuX3hF PlQhw0lbHgJnnTMvN8Zmn2fxMRqoYo5/1h27eJBJkBsEb6/kbFVd66//feUHOZSf PZOIbzK8P4+X2sTGUwScwKheRjp41EKvKQKqbN5ESCzbVH7i9BHRZNbGHgbjOU5r 2OCnh1LdbNiUl6VBj84Voh85wWEbxhr9+BcbYxnHARLW6RAitYjpydPKt82W7dIU pzUZVOuxE5CvJF7KCWLASSe2NosQ79KhAf2IWRIhg+B2qRAXnM6SUdB+EGNu1cQj DmTiHTxlVrEfxmBoc7KgDTNT5hYX/CXA0DMYd7JIPifrYiifnyADpgw= -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:35 2026 by rpki-client