This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer File: GbLh_EALv53LIGat49v-XJ6rLn0.cer (raw, json) Hash identifier: VefbhLjNgB08zhqgi6D8irs77DjKyQPg3A1TvUdy4pc= Subject key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910CEA814E369228CD9F5C01DFBE642 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.253.133.0/24 IP: 2a11:36c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ce:a8:14:e3:69:22:8c:d9:f5:c0:1d:fb:e6:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:18:94:f7:53:19:58:da:41:ff:66:2d:60: e7:c6:28:0a:1a:5b:7b:60:cd:2e:0a:ba:e9:01:6a: 31:63:e1:c7:19:74:c1:a0:10:24:a1:5e:2c:a9:da: b4:1d:97:91:90:8f:a8:db:68:4a:34:cb:31:ec:12: da:61:b2:76:2e:27:80:50:97:95:9c:65:97:38:29: f8:1d:03:b2:a5:23:1b:4d:61:6a:76:e8:fc:c0:50: 0f:dc:ab:cb:b2:7a:e2:61:e7:d6:17:0b:1a:7a:19: 77:b5:f1:c4:f4:57:b6:b9:2e:ea:73:42:67:59:c7: 8b:59:81:68:46:6c:3b:f3:8f:cd:67:82:e5:68:7d: 8f:d2:e4:46:a7:2c:a2:65:bb:f0:69:da:f5:8b:99: 7e:7c:99:f3:66:cb:77:9c:d2:59:09:1d:ab:05:89: a1:17:89:ec:d9:81:12:df:c7:b8:de:d2:90:4c:e2: e5:96:ff:8d:6e:23:67:b0:fb:58:6c:9d:9c:7f:1e: f8:9d:99:3e:75:22:cb:f1:26:a8:39:52:5e:ba:48: fc:c4:ea:53:73:ea:f9:18:6e:23:1d:d6:a9:6e:a9: 55:69:f7:9f:b6:6b:9e:ba:9b:18:55:bd:6d:9c:17: 52:fe:ef:53:6c:35:41:ad:11:9a:7f:3f:7f:58:ae: 58:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.253.133.0/24 IPv6: 2a11:36c0::/29 Signature Algorithm: sha256WithRSAEncryption a3:72:ed:53:55:5d:f7:6d:1b:c5:bd:27:cb:6d:02:61:8d:a8: c3:8c:f3:43:50:8e:4c:b3:ea:77:a6:f4:f3:a8:d7:98:31:14: 4d:42:22:25:3b:cf:77:fb:7b:cc:7f:80:ab:2f:66:e9:27:21: 81:24:1a:90:2b:c9:92:03:c4:78:de:e3:44:4c:79:d9:30:7b: 74:2c:f9:f9:f7:7b:b1:d9:ba:6c:8e:94:3d:58:09:08:cb:27: 3d:d3:68:2c:2d:a9:16:12:c2:1f:49:44:1e:b2:14:04:e0:cb: af:4f:c5:91:bd:80:a6:26:c7:7e:5e:ff:46:7b:1e:11:2d:69: a3:45:34:a3:ef:74:51:d5:8e:69:4f:3a:38:5d:4e:db:40:e1: 9b:69:55:70:50:f2:2b:fd:59:70:6f:22:11:39:c7:ba:9c:f3: ff:51:14:c9:71:3d:48:85:d6:73:00:3d:15:30:d4:92:9d:ef: 94:af:0a:8e:50:a4:b4:1d:80:73:ea:11:ec:fa:5e:74:d9:38: 72:a2:54:42:31:62:eb:14:97:b4:18:09:07:0d:a9:f6:a2:28: e7:fb:b1:4b:a1:6d:17:16:8d:55:48:bc:33:22:2f:ab:e1:27: f3:6e:60:b8:21:12:cc:45:b6:73:c4:ad:db:d5:19:c4:30:a1: 7a:3a:5e:a4 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5EM6oFONpIozZ9cAd++ZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWIyZTFmYzQwMGJiZjlkY2IyMDY2YWRlM2RiZmU1YzllYWIyZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eIYlPdTGVjaQf9mLWDnxigKGlt7 YM0uCrrpAWoxY+HHGXTBoBAkoV4sqdq0HZeRkI+o22hKNMsx7BLaYbJ2LieAUJeV nGWXOCn4HQOypSMbTWFqduj8wFAP3KvLsnriYefWFwsaehl3tfHE9Fe2uS7qc0Jn WceLWYFoRmw784/NZ4LlaH2P0uRGpyyiZbvwadr1i5l+fJnzZst3nNJZCR2rBYmh F4ns2YES38e43tKQTOLllv+NbiNnsPtYbJ2cfx74nZk+dSLL8SaoOVJeukj8xOpT c+r5GG4jHdapbqlVafeftmueupsYVb1tnBdS/u9TbDVBrRGafz9/WK5YOQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFBmy4fxAC7+dyyBmrePb/lyeqy59MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkL2IyZTU4 NS1mNThkLTQyMjAtOGJlZi0wZGE5YWU4NDU4ZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvYjJlNTg1 LWY1OGQtNDIyMC04YmVmLTBkYTlhZTg0NThkYi8xL0diTGhfRUFMdjUzTElHYXQ0 OXYtWEo2ckxuMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQALv2FMA0EAgACMAcDBQMqETbAMA0GCSqGSIb3 DQEBCwUAA4IBAQCjcu1TVV33bRvFvSfLbQJhjajDjPNDUI5Ms+p3pvTzqNeYMRRN QiIlO893+3vMf4CrL2bpJyGBJBqQK8mSA8R43uNETHnZMHt0LPn593ux2bpsjpQ9 WAkIyyc902gsLakWEsIfSUQeshQE4MuvT8WRvYCmJsd+Xv9Gex4RLWmjRTSj73RR 1Y5pTzo4XU7bQOGbaVVwUPIr/VlwbyIROce6nPP/URTJcT1IhdZzAD0VMNSSne+U rwqOUKS0HYBz6hHs+l502ThyolRCMWLrFJe0GAkHDan2oijn+7FLoW0XFo1VSLwz Ii+r4SfzbmC4IRLMRbZzxK3b1RnEMKF6Ol6k -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:38 2026 by rpki-client