This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer File: Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer (raw, json) Hash identifier: ju4bF9p/6Z2YH9GKDxL8JZlkOGW6MqYK2WqIv0FZO0w= Subject key identifier: 1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AE0F3180FE597A8A374F400CDD72F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.144.148.0/22 IP: 2a01:5b00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:e0:f3:18:0f:e5:97:a8:a3:74:f4:00:cd:d7:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:81:aa:19:85:70:98:80:17:56:87:ca:2b:7d: 0f:83:a0:7b:89:bf:4c:06:64:10:01:82:52:d9:89: 06:f1:c3:0e:95:3f:87:8a:f6:a0:a8:4a:a2:bd:75: 7f:bd:21:cc:8b:2a:58:30:f1:d5:f2:e2:d8:f5:84: 99:15:3f:13:34:6e:28:35:f2:45:e8:73:df:4b:11: 85:c5:02:b5:32:6b:af:44:e2:ed:56:3e:62:08:7e: 06:1a:6e:8a:26:cd:9d:7b:5d:0e:63:11:a4:3d:c9: 49:c5:0a:5f:7a:c9:c9:89:15:4b:06:36:f9:c3:77: 15:c2:27:5a:7a:cb:8f:6b:99:bb:1c:f9:a5:2e:67: 33:1a:34:90:f6:0f:87:ad:1e:2d:c4:dc:2e:50:52: 70:04:71:7a:a9:05:b7:c7:ea:08:da:b6:c1:5e:39: e7:78:79:b0:f5:f2:3b:9c:55:aa:63:c4:0f:88:d6: ec:60:e7:cd:9f:12:b8:9d:9a:dd:b8:c2:fd:f0:da: b9:37:30:35:c8:a4:71:df:25:0c:72:33:e3:dd:f5: f2:79:51:21:e5:50:36:9b:0f:78:c3:56:44:bf:30: c9:8c:a8:3d:ef:bc:54:b4:61:6e:c3:f0:08:60:4f: 01:ce:cd:b3:a7:f1:d9:19:5c:50:a5:f5:e7:b1:81: c6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.148.0/22 IPv6: 2a01:5b00::/32 Signature Algorithm: sha256WithRSAEncryption 13:42:a3:6a:08:b1:b2:ef:89:3e:36:19:b9:9e:20:c4:9d:42: ec:b3:3a:51:39:21:c2:b1:a1:8f:54:7d:27:d3:dd:07:06:79: b1:cf:cc:35:a1:fe:17:e0:46:ed:81:55:37:42:55:e5:a1:0d: 33:f1:bf:f3:e9:14:7c:21:44:dd:fe:15:1b:79:de:84:7d:7f: 27:05:a6:d1:5b:8f:e2:10:43:f0:5a:e2:42:29:7d:8d:ec:22: a1:75:ba:eb:c4:94:ad:1b:46:8b:2f:fc:3d:75:c3:a5:8c:2d: c6:c2:64:61:4c:b2:e1:6d:86:dc:5c:6f:9b:b8:54:a7:d2:02: 53:c5:aa:33:65:b0:5f:6f:50:c9:5e:fb:34:6a:00:91:fa:3e: d3:bc:45:94:3c:b6:b2:ad:b5:e9:9d:fe:8a:61:10:3a:b8:ba: eb:49:ef:9d:dc:03:89:05:54:72:e1:1f:a9:00:38:8f:bb:7d: 46:a6:df:37:7c:3e:87:e7:ba:b5:28:44:b5:54:25:95:43:84: ac:31:20:cf:3b:65:db:e5:5b:c6:71:95:45:e7:ef:dd:8d:4c: 23:34:12:86:09:bb:cd:c4:c2:74:ff:a3:bf:83:fe:7f:06:b7: eb:b8:ef:a3:1f:bc:29:7e:82:0c:58:e0:be:67:65:94:a6:47: 55:45:f2:13 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9WuDzGA/ll6ijdPQAzdcvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTBmODRkNjk3M2FhZjJhYzQ0OGQwZDMyYWM3ZjM0ZDc0MDg1YTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoGqGYVwmIAXVofKK30Pg6B7ib9M BmQQAYJS2YkG8cMOlT+HivagqEqivXV/vSHMiypYMPHV8uLY9YSZFT8TNG4oNfJF 6HPfSxGFxQK1MmuvROLtVj5iCH4GGm6KJs2de10OYxGkPclJxQpfesnJiRVLBjb5 w3cVwidaesuPa5m7HPmlLmczGjSQ9g+HrR4txNwuUFJwBHF6qQW3x+oI2rbBXjnn eHmw9fI7nFWqY8QPiNbsYOfNnxK4nZrduML98Nq5NzA1yKRx3yUMcjPj3fXyeVEh 5VA2mw94w1ZEvzDJjKg977xUtGFuw/AIYE8Bzs2zp/HZGVxQpfXnsYHG8QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFBoPhNaXOq8qxEjQ0yrH8010CFpDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3L2YwZTFl Zi0yMWExLTQ5ZmQtYmE2OS01NGE2YWRhY2NiN2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvZjBlMWVm LTIxYTEtNDlmZC1iYTY5LTU0YTZhZGFjY2I3ZC8xL0dnLUUxcGM2cnlyRVNORFRL c2Z6VFhRSVdrTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZCUMA0EAgACMAcDBQAqAVsAMA0GCSqGSIb3 DQEBCwUAA4IBAQATQqNqCLGy74k+Nhm5niDEnULsszpROSHCsaGPVH0n090HBnmx z8w1of4X4EbtgVU3QlXloQ0z8b/z6RR8IUTd/hUbed6EfX8nBabRW4/iEEPwWuJC KX2N7CKhdbrrxJStG0aLL/w9dcOljC3GwmRhTLLhbYbcXG+buFSn0gJTxaozZbBf b1DJXvs0agCR+j7TvEWUPLayrbXpnf6KYRA6uLrrSe+d3AOJBVRy4R+pADiPu31G pt83fD6H57q1KES1VCWVQ4SsMSDPO2Xb5VvGcZVF5+/djUwjNBKGCbvNxMJ0/6O/ g/5/BrfruO+jH7wpfoIMWOC+Z2WUpkdVRfIT -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:51 2026 by rpki-client