This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer File: GYOwLhDKghv-G-bnUdks9z1tTAs.cer (raw, json) Hash identifier: kHLL+TrjahnpGVsGOUqCkXa08For1rCExsWfUjHn+ZY= Subject key identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B26C3D781322FAF7A6DD5A4E3FEADB04D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 16 Dec 2025 10:45:27 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 208472 IP: 37.186.31.0/24 IP: 194.11.247.0/24 IP: 2a12:7dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:c3:d7:81:32:2f:af:7a:6d:d5:a4:e3:fe:ad:b0:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 16 10:45:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:86:cd:e4:9f:7c:e5:66:ae:32:d0:61:f7:c8: a6:3c:29:b1:bb:e1:bd:f7:ed:92:e9:cc:c6:28:85: 4b:4b:f5:af:7b:3f:ee:dc:6f:fd:75:d8:5f:6a:30: 9d:aa:e3:f3:b5:e9:3a:95:c0:6e:22:c6:c2:73:d3: c5:d7:55:11:8a:ae:a7:93:c6:dd:eb:85:5c:4e:f9: be:9e:b9:1b:b9:dc:61:ac:7c:f0:40:72:99:dc:77: 16:76:c5:b8:f3:ef:e6:70:31:d9:0c:ed:b5:3f:57: 10:4c:f9:57:6e:ad:cf:f7:86:0f:70:1b:89:06:52: 37:22:86:e0:e5:e5:5b:ec:38:d0:79:c6:b2:af:ed: 18:af:91:2d:a2:5d:1f:26:43:e7:05:92:4d:bf:44: c6:15:32:d0:76:e7:04:b7:4c:0c:63:97:d8:5a:10: 1b:2f:e0:8a:72:e8:4e:f4:95:6d:c6:9d:51:0f:fe: eb:17:81:a9:d9:c7:3b:bf:6c:46:dd:4f:cf:13:3b: f4:c3:dd:46:99:f0:a0:ef:b7:82:64:e2:1b:8a:43: 3a:9a:ad:cc:d1:7c:af:2a:66:57:c2:5c:a0:56:53: d1:cf:de:31:fe:f2:7e:82:a2:24:3f:8f:c0:9a:5b: 8e:14:69:e0:6b:80:f7:65:13:f2:15:75:de:fa:10: 0c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.186.31.0/24 194.11.247.0/24 IPv6: 2a12:7dc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208472 Signature Algorithm: sha256WithRSAEncryption 92:1a:75:db:b6:f4:d2:a4:37:a8:07:b2:55:7f:65:3b:9e:d1: e1:fc:0a:0a:97:b0:5f:d2:b4:82:8a:13:67:2a:af:98:4f:90: ed:52:12:9e:e7:04:c2:76:67:30:06:36:b2:79:ac:c4:40:42: 58:bb:b8:fd:df:f1:08:25:53:40:b9:25:6c:e5:76:e8:0f:41: aa:4f:bf:eb:c6:c6:a5:dd:d4:fb:b7:1b:c5:2c:99:af:86:f5: c6:ab:e9:09:9b:3d:ea:0f:e5:13:e2:cb:2a:78:3f:ff:67:a2: 97:dc:06:9f:cd:fd:08:cf:e1:77:ac:66:65:ba:d1:cf:34:49: 33:d8:34:34:c9:3b:e9:99:dc:2d:e5:fb:fe:94:0f:08:44:cd: ef:45:5d:67:9a:1a:72:8d:a7:03:fe:79:30:f8:ff:5d:ad:54: ba:5e:bc:65:45:fa:47:21:f9:28:49:5a:bf:1b:6e:75:bd:ad: 6b:38:23:2a:71:1e:de:ba:6d:8b:98:09:9f:5d:af:b1:c8:2a: 1d:b6:5b:3c:77:ce:32:e4:6c:dd:de:5f:8d:5a:e5:ce:6e:b9: ea:c6:ab:3e:34:9f:27:23:4b:49:d5:5f:70:8b:11:b3:c8:d0: 2c:04:96:66:c3:5c:d0:ac:3f:bf:db:ef:ae:fd:1d:9c:3a:74: 41:8c:84:a7 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZsmw9eBMi+vem3VpOP+rbBNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE2MTA0NTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTgzYjAyZTEwY2E4MjFiZmUxYmU2ZTc1MWQ5MmNmNzNkNmQ0YzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIbN5J985WauMtBh98imPCmxu+G9 9+2S6czGKIVLS/Wvez/u3G/9ddhfajCdquPztek6lcBuIsbCc9PF11URiq6nk8bd 64VcTvm+nrkbudxhrHzwQHKZ3HcWdsW48+/mcDHZDO21P1cQTPlXbq3P94YPcBuJ BlI3Iobg5eVb7DjQecayr+0Yr5Etol0fJkPnBZJNv0TGFTLQducEt0wMY5fYWhAb L+CKcuhO9JVtxp1RD/7rF4Gp2cc7v2xG3U/PEzv0w91GmfCg77eCZOIbikM6mq3M 0XyvKmZXwlygVlPRz94x/vJ+gqIkP4/AmluOFGnga4D3ZRPyFXXe+hAMswIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFBmDsC4QyoIb/hvm51HZLPc9bUwLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3LzA5NmMx Ny1kZDgzLTQwNTgtODJlMS1jZGEzNjI1NjI5NmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMDk2YzE3 LWRkODMtNDA1OC04MmUxLWNkYTM2MjU2Mjk2Yy8xL0dZT3dMaERLZ2h2LUctYm5V ZGtzOXoxdFRBcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAJbofAwQAwgv3MA0EAgACMAcDBQMqEn3AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMuWDANBgkqhkiG9w0BAQsFAAOCAQEAkhp1 27b00qQ3qAeyVX9lO57R4fwKCpewX9K0gooTZyqvmE+Q7VISnucEwnZnMAY2snms xEBCWLu4/d/xCCVTQLklbOV26A9Bqk+/68bGpd3U+7cbxSyZr4b1xqvpCZs96g/l E+LLKng//2eil9wGn839CM/hd6xmZbrRzzRJM9g0NMk76ZncLeX7/pQPCETN70Vd Z5oaco2nA/55MPj/Xa1Uul68ZUX6RyH5KElavxtudb2tazgjKnEe3rpti5gJn12v scgqHbZbPHfOMuRs3d5fjVrlzm656sarPjSfJyNLSdVfcIsRs8jQLASWZsNc0Kw/ v9vvrv0dnDp0QYyEpw== -----END CERTIFICATE-----Generated at Wed Dec 24 16:57:57 2025 by rpki-client