This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GXCiYyB54Yue9nKBkqOTaqvisiQ.cer File: GXCiYyB54Yue9nKBkqOTaqvisiQ.cer (raw, json) Hash identifier: +Wtrh5WufM1tqakFevKNmndoy8kzRi/jHpFUtoBSHfw= Subject key identifier: 19:70:A2:63:20:79:E1:8B:9E:F6:72:81:92:A3:93:6A:AB:E2:B2:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CCF80E010843867F3C659C334E621 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8302 AS: 42389 IP: 91.123.96.0/20 IP: 185.112.8.0/22 IP: 2a06:1b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cf:80:e0:10:84:38:67:f3:c6:59:c3:34:e6:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1970a2632079e18b9ef6728192a3936aabe2b224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c7:38:89:40:90:2d:62:0d:68:e4:9d:ee:85: f1:7c:b9:46:28:95:46:03:b4:ce:db:2f:46:f0:48: 8c:9a:db:1a:5d:58:64:49:8d:a0:0d:87:63:75:40: ef:59:2c:40:6f:e1:10:35:0f:2f:2d:77:9e:8b:19: f8:c2:09:5d:8a:e0:0d:48:0d:38:dd:21:1c:d4:93: a5:66:90:58:4c:86:2a:09:c7:c4:5d:6b:f0:d5:cd: bd:25:46:3d:cf:27:de:a8:a1:4a:2d:c0:10:f0:ed: d8:10:53:5c:bb:c3:2d:3a:31:16:c4:a7:32:f2:e5: d2:25:21:9a:80:71:69:e4:7c:b9:d9:ba:e3:d8:3f: fa:1f:33:38:65:22:f4:f4:f7:c2:97:97:30:b4:b1: b2:26:4b:8f:42:56:cf:53:e2:32:de:89:3a:80:eb: b9:4c:f3:c0:12:43:31:e5:9f:cf:d1:77:24:44:3a: 2e:eb:66:f8:4d:fe:8f:83:93:5e:4f:cd:09:c2:61: 2b:58:39:b9:c7:37:07:25:62:22:12:3e:12:f4:4b: b5:17:f5:5e:5e:5c:63:4d:17:f2:8e:d1:5d:bb:e2: 75:65:e2:1b:09:54:ae:dc:2e:4c:3c:9d:0e:d7:3b: bd:36:04:0f:7b:64:04:58:9c:e5:04:2d:35:19:20: 69:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:70:A2:63:20:79:E1:8B:9E:F6:72:81:92:A3:93:6A:AB:E2:B2:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.123.96.0/20 185.112.8.0/22 IPv6: 2a06:1b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8302 42389 Signature Algorithm: sha256WithRSAEncryption 06:6e:53:3d:4a:0f:dc:7f:db:f6:e1:f9:af:9c:36:f4:d7:0d: 73:b9:04:29:48:17:e6:21:89:ac:e6:33:20:38:00:88:bb:11: 09:28:27:c1:98:b2:63:e7:66:6e:af:37:be:a6:01:aa:57:d9: 47:56:88:c8:c8:8b:d0:25:14:8b:24:0d:33:f6:7e:e2:47:7f: a5:07:18:99:97:47:cb:74:41:24:64:2d:6d:1a:53:48:ee:9a: ac:64:05:ba:f0:de:e4:3b:4b:b5:3e:87:da:23:cc:a3:38:da: 33:a9:2e:11:f2:a6:6c:0d:7d:a4:cf:ef:3c:65:2f:1b:03:9b: 6e:b2:65:c7:ee:91:04:8b:53:12:59:e6:60:ef:02:5a:51:c3: 3d:52:e2:73:9c:12:2a:42:ab:f6:ae:e3:bc:ab:ca:c0:55:b2: ce:76:17:e5:bc:0d:b5:dd:45:2e:26:d6:87:d2:32:36:e0:ec: c5:03:1c:c3:2a:d9:fd:8d:9a:8a:ee:96:a6:cc:1d:52:0d:ee: 65:1e:34:1b:90:6d:63:e1:55:8a:65:35:c8:e3:d7:b4:69:08: 8f:80:b9:a3:7c:cf:62:4f:5b:af:b1:d5:4d:9d:b9:0a:48:7f: 81:ad:24:90:f5:4c:44:cb:a0:ba:9b:d6:bf:0b:d9:e4:36:b4: fa:99:56:95 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt9XM+A4BCEOGfzxlnDNOYhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTcwYTI2MzIwNzllMThiOWVmNjcyODE5MmEzOTM2YWFiZTJiMjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMc4iUCQLWINaOSd7oXxfLlGKJVG A7TO2y9G8EiMmtsaXVhkSY2gDYdjdUDvWSxAb+EQNQ8vLXeeixn4wgldiuANSA04 3SEc1JOlZpBYTIYqCcfEXWvw1c29JUY9zyfeqKFKLcAQ8O3YEFNcu8MtOjEWxKcy 8uXSJSGagHFp5Hy52brj2D/6HzM4ZSL09PfCl5cwtLGyJkuPQlbPU+Iy3ok6gOu5 TPPAEkMx5Z/P0XckRDou62b4Tf6Pg5NeT80JwmErWDm5xzcHJWIiEj4S9Eu1F/Ve XlxjTRfyjtFdu+J1ZeIbCVSu3C5MPJ0O1zu9NgQPe2QEWJzlBC01GSBpgQIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFBlwomMgeeGLnvZygZKjk2qr4rIkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczLzE2Yzgy Zi05ZDIyLTQxY2ItYmJiNi1lNzhlYWYxNTg0YmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvMTZjODJm LTlkMjItNDFjYi1iYmI2LWU3OGVhZjE1ODRiZi8xL0dYQ2lZeUI1NFl1ZTluS0Jr cU9UYXF2aXNpUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEW3tgAwQCuXAIMA0EAgACMAcDBQMqBhsAMB4G CCsGAQUFBwEIAQH/BA8wDaALMAkCAiBuAgMApZUwDQYJKoZIhvcNAQELBQADggEB AAZuUz1KD9x/2/bh+a+cNvTXDXO5BClIF+YhiazmMyA4AIi7EQkoJ8GYsmPnZm6v N76mAapX2UdWiMjIi9AlFIskDTP2fuJHf6UHGJmXR8t0QSRkLW0aU0jumqxkBbrw 3uQ7S7U+h9ojzKM42jOpLhHypmwNfaTP7zxlLxsDm26yZcfukQSLUxJZ5mDvAlpR wz1S4nOcEipCq/au47yrysBVss52F+W8DbXdRS4m1ofSMjbg7MUDHMMq2f2Nmoru lqbMHVIN7mUeNBuQbWPhVYplNcjj17RpCI+AuaN8z2JPW6+x1U2duQpIf4GtJJD1 TETLoLqb1r8L2eQ2tPqZVpU= -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:13 2026 by rpki-client