This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer File: GdZfozzls_e9tJfl_KUJ1_wDxpM.cer (raw, json) Hash identifier: cLAtBTpe7CCOIpv3a8JL4dRUT14bA7nEOOsdBVX0YjA= Subject key identifier: 19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3634463560FCE6F11B297D0BF6AEB1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.103.232.0/22 IP: 2a06:3300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:34:46:35:60:fc:e6:f1:1b:29:7d:0b:f6:ae:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:47:d9:48:6b:5a:27:06:6e:b4:78:7d:70:76: a7:1a:a3:56:67:3a:d6:b0:f6:0f:92:af:2d:8a:b5: e3:8a:ba:98:07:00:f1:c7:38:d1:ac:82:96:a2:2a: f6:1d:bb:70:34:f7:fe:cc:d5:77:67:9e:f5:38:66: f8:fd:38:e2:de:8c:74:c4:1b:4b:68:a3:fc:0b:72: 57:2f:6f:49:f3:48:d1:29:09:c5:8b:79:c9:72:f8: e7:36:a5:ad:a4:da:a6:0d:e7:66:2e:af:ca:62:ba: 85:49:9f:31:aa:1f:c6:80:33:de:51:7d:17:2d:9c: 0d:20:b0:c3:a2:38:30:51:08:b0:78:03:0b:f4:fa: 4f:cc:4b:db:c7:06:76:3f:08:18:5c:d4:b9:e5:91: 06:3e:fb:47:30:b1:25:53:26:f3:3c:e6:03:47:b1: d7:31:56:8d:be:bb:7f:e1:f2:e0:46:0b:31:2a:c0: f0:f0:1e:27:5d:c5:9c:f3:f6:c0:29:7f:96:c8:37: 04:be:b7:0a:02:b8:f3:27:82:8b:b2:f9:b0:25:d6: 01:0b:d7:7a:4a:6e:65:e9:c4:50:57:92:c5:9d:aa: a8:74:78:e9:01:7c:15:8d:c3:38:aa:f5:57:40:41: 9c:84:47:ec:f4:78:21:3a:31:91:e1:d8:f8:5f:36: 5e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.103.232.0/22 IPv6: 2a06:3300::/29 Signature Algorithm: sha256WithRSAEncryption 11:7e:4d:51:9f:e4:10:66:7d:ff:6a:78:ab:4e:c3:a9:72:a8: 2e:00:73:76:3e:c9:5d:ed:89:c6:34:8e:08:b2:d0:b3:66:37: 32:2f:0a:0d:41:6f:c8:a4:2b:29:96:df:c6:85:03:84:2c:a5: 41:f3:d2:5f:87:a0:66:52:ee:b1:fb:05:ca:06:4e:45:73:78: 12:da:36:c8:b3:04:88:84:ac:41:23:dd:92:c7:f5:13:a0:8b: a8:e3:ca:d0:d1:32:56:84:e0:ef:d3:c9:ca:97:50:51:c4:7f: e9:ef:24:59:3a:9e:40:b5:91:a0:68:47:aa:b8:56:9d:ed:95: 17:b6:87:53:b5:28:9c:c6:93:a6:3c:dc:a3:be:be:af:10:8f: b5:ff:4d:8d:35:f0:54:46:68:3b:6a:c2:de:44:7d:66:fd:27: ff:bd:34:54:47:50:0e:91:79:a5:f3:76:4c:ea:b9:c1:63:da: 43:2e:03:34:8d:6b:ef:3c:c1:44:05:14:49:c3:73:02:68:81: 06:19:c8:01:ef:fa:44:c8:ce:cd:63:21:85:4f:f7:05:2b:ab: c5:34:de:10:f7:c6:29:71:d0:06:31:d2:32:e4:f4:c3:fc:2c: 41:ea:ea:d1:61:af:01:01:12:b3:78:51:fa:58:12:86:33:14: a8:06:29:ed -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7NjRGNWD85vEbKX0L9q6xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWQ2NWZhMzNjZTViM2Y3YmRiNDk3ZTVmY2E1MDlkN2ZjMDNjNjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0fZSGtaJwZutHh9cHanGqNWZzrW sPYPkq8tirXjirqYBwDxxzjRrIKWoir2HbtwNPf+zNV3Z571OGb4/Tji3ox0xBtL aKP8C3JXL29J80jRKQnFi3nJcvjnNqWtpNqmDedmLq/KYrqFSZ8xqh/GgDPeUX0X LZwNILDDojgwUQiweAML9PpPzEvbxwZ2PwgYXNS55ZEGPvtHMLElUybzPOYDR7HX MVaNvrt/4fLgRgsxKsDw8B4nXcWc8/bAKX+WyDcEvrcKArjzJ4KLsvmwJdYBC9d6 Sm5l6cRQV5LFnaqodHjpAXwVjcM4qvVXQEGchEfs9HghOjGR4dj4XzZe1QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFBnWX6M85bP3vbSX5fylCdf8A8aTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5LzcyNWMy Mi03ZWVjLTQwMzMtYTc2My1jODdjZTc2MzgzYmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvNzI1YzIy LTdlZWMtNDAzMy1hNzYzLWM4N2NlNzYzODNiYy8xL0dkWmZvenpsc19lOXRKZmxf S1VKMV93RHhwTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuWfoMA0EAgACMAcDBQMqBjMAMA0GCSqGSIb3 DQEBCwUAA4IBAQARfk1Rn+QQZn3/anirTsOpcqguAHN2Psld7YnGNI4IstCzZjcy LwoNQW/IpCsplt/GhQOELKVB89Jfh6BmUu6x+wXKBk5Fc3gS2jbIswSIhKxBI92S x/UToIuo48rQ0TJWhODv08nKl1BRxH/p7yRZOp5AtZGgaEequFad7ZUXtodTtSic xpOmPNyjvr6vEI+1/02NNfBURmg7asLeRH1m/Sf/vTRUR1AOkXml83ZM6rnBY9pD LgM0jWvvPMFEBRRJw3MCaIEGGcgB7/pEyM7NYyGFT/cFK6vFNN4Q98YpcdAGMdIy 5PTD/CxB6urRYa8BARKzeFH6WBKGMxSoBint -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:32 2026 by rpki-client