This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer File: GYIE0cJaARI2vqB0HkxgE500mxA.cer (raw, json) Hash identifier: 3ZbKSY4cgQkHfJZR08PUxOMRK1+pGaHFHHu4TNPXcbk= Subject key identifier: 19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F855D3870BB8970D7FA8C5E84676AF0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34790 AS: 48493 IP: 185.188.172.0/22 IP: 195.162.20.0/23 IP: 217.72.112.0/20 IP: 2a00:d000::/29 IP: 2a00:df00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:5d:38:70:bb:89:70:d7:fa:8c:5e:84:67:6a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=198204d1c25a011236bea0741e4c60139d349b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e3:c9:02:18:b3:31:d1:95:ba:9c:6d:60:d2: df:45:93:88:fb:aa:54:8f:53:06:e7:5a:95:27:00: 6b:b7:8e:bb:73:b3:38:5c:8a:48:1f:c1:22:7b:b2: 1c:8b:ea:46:59:c1:a0:25:2c:80:fb:aa:65:f5:a9: b0:dc:a8:9a:dc:ee:56:bb:dd:ca:85:7e:4e:6f:94: 60:2e:59:41:70:4a:8c:cd:10:05:53:1d:25:96:d6: 9c:f0:e1:72:f4:8f:cc:8d:4e:3c:f1:da:22:7d:ce: ef:55:59:1f:a7:f1:74:d4:e6:a7:fb:0b:ef:5f:a4: 65:01:4b:9a:ab:b9:73:d9:e4:4d:da:92:fc:47:57: 4d:65:65:e5:5d:dd:d5:f9:75:d5:c8:82:c2:c8:91: 3e:5d:a0:e4:09:14:41:d2:bc:c7:19:97:92:b6:44: 28:75:42:5a:5e:78:29:89:8e:8a:84:66:1d:b2:f8: 43:62:0f:4b:ff:6b:c8:99:4f:9c:56:07:6f:bc:bf: cf:ba:d8:52:39:fe:36:a4:ac:af:24:6d:e2:f2:b2: 31:5f:70:be:d6:84:f3:78:a7:c7:15:e6:91:b5:95: 39:fe:d3:3d:c2:b4:37:99:0d:4a:2c:5d:33:fa:99: 72:c0:b8:10:5c:ad:b3:c7:da:dc:e3:fa:fd:b8:3d: 6b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.172.0/22 195.162.20.0/23 217.72.112.0/20 IPv6: 2a00:d000::/29 2a00:df00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34790 48493 Signature Algorithm: sha256WithRSAEncryption 31:1b:eb:39:da:a4:34:07:0d:0a:f0:af:bc:79:95:51:7f:8e: 05:8b:e2:a5:1f:17:fc:2f:3a:cf:83:b7:e5:07:a4:d4:c4:b1: 4f:df:21:3d:c9:1b:59:a9:9d:3a:c8:fa:81:a5:81:a9:80:08: 11:18:3a:c9:fc:f4:ab:5b:3d:b1:da:69:c6:43:4f:d1:ba:3e: 74:0d:d0:36:b5:3f:a5:c0:b1:c6:e2:8c:ba:20:c8:59:80:93: 7d:5f:40:2f:28:06:ff:0f:6a:84:c0:fb:48:d6:2f:5a:64:21: 56:86:c8:6d:11:1c:bb:41:44:b1:d6:44:e2:f9:a0:da:c3:1f: b0:38:11:1a:16:2d:81:88:d8:47:e4:7c:70:58:a2:26:7b:a5: 6f:7f:38:18:79:e7:27:0d:55:8d:68:26:68:d9:71:0e:2c:41: 9a:d5:51:7d:ec:74:94:87:18:5e:df:b1:33:f5:41:e5:f9:18: 03:da:54:c4:ea:cf:7c:8f:60:5d:29:b5:4c:dd:3b:43:e5:fd: 7f:cb:01:7f:ca:d5:56:62:d7:44:5f:f4:77:98:3a:52:18:0f: 44:30:03:b2:92:aa:a1:bb:6e:4a:a3:6c:77:7e:77:45:fa:ac: 10:81:96:bb:85:bb:a2:f5:30:9b:4d:f1:bf:de:cf:74:71:8a: 9f:cd:bc:3a -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt/hV04cLuJcNf6jF6EZ2rwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTgyMDRkMWMyNWEwMTEyMzZiZWEwNzQxZTRjNjAxMzlkMzQ5YjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuPJAhizMdGVupxtYNLfRZOI+6pU j1MG51qVJwBrt467c7M4XIpIH8Eie7Ici+pGWcGgJSyA+6pl9amw3Kia3O5Wu93K hX5Ob5RgLllBcEqMzRAFUx0lltac8OFy9I/MjU488doifc7vVVkfp/F01Oan+wvv X6RlAUuaq7lz2eRN2pL8R1dNZWXlXd3V+XXVyILCyJE+XaDkCRRB0rzHGZeStkQo dUJaXngpiY6KhGYdsvhDYg9L/2vImU+cVgdvvL/PuthSOf42pKyvJG3i8rIxX3C+ 1oTzeKfHFeaRtZU5/tM9wrQ3mQ1KLF0z+plywLgQXK2zx9rc4/r9uD1rnwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFBmCBNHCWgESNr6gdB5MYBOdNJsQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlL2M2ZjBh OC05OGYyLTQ5ZmItODUwNi00MmFkM2I0YzhkMGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvYzZmMGE4 LTk4ZjItNDlmYi04NTA2LTQyYWQzYjRjOGQwYy8xL0dZSUUwY0phQVJJMnZxQjBI a3hnRTUwMG14QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQCubysAwQBw6IUAwQE2UhwMBQEAgACMA4DBQMq ANAAAwUDKgDfADAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAh+YCAwC9bTANBgkq hkiG9w0BAQsFAAOCAQEAMRvrOdqkNAcNCvCvvHmVUX+OBYvipR8X/C86z4O35Qek 1MSxT98hPckbWamdOsj6gaWBqYAIERg6yfz0q1s9sdppxkNP0bo+dA3QNrU/pcCx xuKMuiDIWYCTfV9ALygG/w9qhMD7SNYvWmQhVobIbREcu0FEsdZE4vmg2sMfsDgR GhYtgYjYR+R8cFiiJnulb384GHnnJw1VjWgmaNlxDixBmtVRfex0lIcYXt+xM/VB 5fkYA9pUxOrPfI9gXSm1TN07Q+X9f8sBf8rVVmLXRF/0d5g6UhgPRDADspKqobtu SqNsd353RfqsEIGWu4W7ovUwm03xv97PdHGKn828Og== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:33 2026 by rpki-client