This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer File: G_x3OM0P0OBEf510nOajkEf9y6w.cer (raw, json) Hash identifier: BALj2EMVHhTjHegPD8yk2sEbSzb5Up5ZTFUunbBU1tc= Subject key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79104119F10DEFBBB6B58AE1BF013F71 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204694 IP: 185.243.72.0/22 IP: 2a0d:980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:41:19:f1:0d:ef:bb:b6:b5:8a:e1:bf:01:3f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:db:6f:7c:7b:eb:31:ef:70:1c:8b:f4:62:46: 89:e7:26:9d:13:09:3b:6a:d9:ff:86:0c:cf:a3:12: 8c:16:5e:1f:f4:b3:22:f3:cb:35:fe:42:4c:7f:7f: e0:0a:40:b0:8e:e4:4c:9c:45:80:a6:8e:af:ea:23: 59:b5:1f:60:46:df:39:e0:74:c2:df:1e:8b:e0:9b: d8:34:ce:19:f5:f0:c2:33:95:e8:21:ad:a3:ac:71: bb:b7:20:7d:dc:a1:60:af:68:a6:6e:d0:23:2e:53: 4e:70:a4:ef:ba:4d:84:5a:06:3c:93:e3:c5:03:50: b1:66:61:e5:1f:15:74:01:2a:ea:66:26:5c:42:5b: 45:ae:12:6a:85:5e:ff:20:c3:cb:42:41:e8:21:5b: 28:0e:17:f8:0b:6f:e0:d8:62:29:40:be:66:d3:fa: 30:01:05:e4:ad:b3:70:ce:d0:d1:ff:2c:cf:80:11: e4:d0:4c:92:81:f2:03:d7:8d:21:b0:31:65:f6:27: 14:3d:23:2e:e6:3f:53:aa:0e:1e:c7:ac:5c:fd:da: 58:f3:54:4b:a1:74:44:bc:c5:61:fb:47:9a:e3:ea: 92:ad:a5:a8:19:2f:01:c9:17:cd:51:ef:99:2b:d7: 47:51:3b:4c:02:ef:21:09:41:22:de:06:38:fd:bf: c4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.72.0/22 IPv6: 2a0d:980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204694 Signature Algorithm: sha256WithRSAEncryption 65:a0:81:b1:a4:64:90:96:1f:94:e3:bb:14:1f:3b:3a:94:50: f9:8a:b5:77:d8:61:b8:d4:4d:1f:44:67:07:b7:2a:6a:12:6d: d4:9f:1b:f8:ab:56:ec:56:87:39:a7:b1:c4:3f:56:dc:1f:4b: 59:a4:3d:8d:a0:c5:38:3e:8f:04:b5:a7:d5:28:e4:7e:54:e0: c0:92:ef:93:7e:1e:4a:c9:ac:89:49:00:bb:16:bc:8b:a8:4d: 8e:be:51:53:eb:f5:16:fc:72:0a:96:d5:b0:c2:c7:49:f9:df: ac:64:bb:47:73:62:77:02:99:a2:83:2d:55:01:4e:01:c6:32: 40:30:71:3b:ba:9c:2c:7f:5a:aa:7a:30:65:d1:51:e4:a2:7b: 94:dc:73:b6:a6:e7:d3:f9:fc:10:7a:2d:72:e9:e0:2f:31:5c: 95:6a:39:c7:9d:48:53:27:e8:8e:0d:c9:26:bd:84:ab:15:45: 3a:70:f0:5a:d7:2c:67:aa:10:7c:e5:97:64:ce:dc:3d:84:68: 50:6d:2c:79:b3:c9:35:8d:79:b6:9b:a6:5d:ec:c6:fc:d1:f3: d5:ab:15:5e:06:81:0f:b6:42:16:a1:39:67:0b:1b:fc:90:43: cd:b1:a6:97:a9:b0:d9:17:70:f0:e8:a2:4e:a1:1e:dd:ee:b9: a7:5c:9b:80 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EEEZ8Q3vu7a1iuG/AT9xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmZjNzczOGNkMGZkMGUwNDQ3ZjlkNzQ5Y2U2YTM5MDQ3ZmRjYmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdtvfHvrMe9wHIv0YkaJ5yadEwk7 atn/hgzPoxKMFl4f9LMi88s1/kJMf3/gCkCwjuRMnEWApo6v6iNZtR9gRt854HTC 3x6L4JvYNM4Z9fDCM5XoIa2jrHG7tyB93KFgr2imbtAjLlNOcKTvuk2EWgY8k+PF A1CxZmHlHxV0ASrqZiZcQltFrhJqhV7/IMPLQkHoIVsoDhf4C2/g2GIpQL5m0/ow AQXkrbNwztDR/yzPgBHk0EySgfID140hsDFl9icUPSMu5j9Tqg4ex6xc/dpY81RL oXREvMVh+0ea4+qSraWoGS8ByRfNUe+ZK9dHUTtMAu8hCUEi3gY4/b/EIQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBv8dzjND9DgRH+ddJzmo5BH/cusMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1LzcwOGI0 ZC1hNjNmLTQzOWQtOWNjZS0xNDhhYmZmOTE5YWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvNzA4YjRk LWE2M2YtNDM5ZC05Y2NlLTE0OGFiZmY5MTlhZC8xL0dfeDNPTTBQME9CRWY1MTBu T2Fqa0VmOXk2dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufNIMA0EAgACMAcDBQMqDQmAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMfljANBgkqhkiG9w0BAQsFAAOCAQEAZaCBsaRkkJYf lOO7FB87OpRQ+Yq1d9hhuNRNH0RnB7cqahJt1J8b+KtW7FaHOaexxD9W3B9LWaQ9 jaDFOD6PBLWn1SjkflTgwJLvk34eSsmsiUkAuxa8i6hNjr5RU+v1FvxyCpbVsMLH SfnfrGS7R3NidwKZooMtVQFOAcYyQDBxO7qcLH9aqnowZdFR5KJ7lNxztqbn0/n8 EHotcungLzFclWo5x51IUyfojg3JJr2EqxVFOnDwWtcsZ6oQfOWXZM7cPYRoUG0s ebPJNY15tpumXezG/NHz1asVXgaBD7ZCFqE5Zwsb/JBDzbGml6mw2Rdw8OiiTqEe 3e65p1ybgA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:06 2026 by rpki-client