This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer File: GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer (raw, json) Hash identifier: CraOeqFYQP8IrUEqidXaNx1Rr3sbHSg91BoSygbjRfI= Subject key identifier: 1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834C34BFADB3091CF0F546ECD4890B3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203871 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c3:4b:fa:db:30:91:cf:0f:54:6e:cd:48:90:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:da:7d:58:38:5e:9b:5c:03:57:e0:03:19:d4: 43:ef:13:4d:8e:ed:8d:94:7b:51:19:6c:1e:40:b4: 0b:3f:08:c3:cb:ab:89:e8:c4:4d:d4:72:96:be:8c: 22:ee:ad:9f:b8:16:95:1e:d7:ce:90:07:12:95:59: 71:73:95:42:88:9d:f8:51:50:a0:a6:9a:c8:bd:b9: 05:1c:db:6f:35:26:03:66:fc:57:bf:08:16:fe:69: 85:d2:92:02:80:40:84:d5:2f:8c:7f:e6:4f:42:ae: 53:75:04:27:18:00:86:cb:7f:cc:c3:30:90:16:28: 88:67:1e:62:88:74:df:cd:f9:37:66:0e:4b:b4:18: 56:05:e8:b3:2e:1f:f0:58:34:75:b9:b8:7a:37:d2: 2e:f6:d0:0c:52:bc:16:da:26:26:d9:df:f5:51:1f: 68:67:01:44:ea:97:8e:8d:83:0e:d3:68:c0:30:e0: 97:7b:56:2d:e5:ef:7c:10:45:08:85:2e:24:14:9b: 8c:67:d5:23:90:03:b7:c3:8d:80:01:e5:55:67:ea: 61:b4:47:1f:a3:b7:7d:ce:e9:54:c9:10:b5:3c:3e: 59:5c:cf:98:d5:34:a7:05:a0:56:d5:68:0a:90:c7: 52:37:00:ac:bd:8f:01:e4:87:64:90:d7:a7:57:22: 62:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 203871 Signature Algorithm: sha256WithRSAEncryption b0:36:8e:44:d4:1a:ec:64:5a:14:19:12:3b:b8:26:03:05:f6: 27:14:93:53:38:e8:b0:57:b7:a6:a3:ea:f7:08:e9:73:8a:74: 42:74:2b:3a:eb:6a:58:bd:3d:ce:d0:bb:e1:6f:9b:f3:37:68: 49:04:76:7f:5b:18:a8:fc:2a:dc:27:ae:bf:a7:6b:d8:e9:10: 64:bf:8f:db:b6:6f:81:18:b7:19:92:5b:ff:cb:31:97:60:ee: ad:be:ec:ed:71:a8:15:f8:bd:e3:c5:51:82:16:0a:2b:52:b1: fb:ff:d0:a2:7c:de:af:01:7c:4a:92:02:0d:6f:92:9b:be:f3: 4f:55:a7:e7:e7:68:ea:df:1e:86:9f:bf:66:55:e6:52:0d:2b: b5:ef:af:89:14:6a:c0:67:37:b1:50:53:66:5b:0f:33:e2:f4: 1a:e8:91:ac:07:bb:b2:d5:71:f5:0f:97:9f:9a:f0:aa:06:b3: 8c:67:57:a1:de:1f:8a:ec:d1:84:25:7a:84:b9:31:7c:7e:47: 95:29:1b:68:84:50:1c:6a:06:25:8f:65:e7:3c:2e:37:82:d6: 73:40:d0:89:22:4a:54:b3:ee:91:f3:e9:e0:b0:1f:89:4a:e8: b2:72:ed:37:82:0a:75:69:80:dd:53:2a:30:ce:0e:70:4d:c2: 8d:11:40:ef -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4NMNL+tswkc8PVG7NSJCzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTA5Y2JhYzU3ZmNjNmMwY2FiNzNhMjRkMjBmMDE2ZjY4NmI3NjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9p9WDhem1wDV+ADGdRD7xNNju2N lHtRGWweQLQLPwjDy6uJ6MRN1HKWvowi7q2fuBaVHtfOkAcSlVlxc5VCiJ34UVCg pprIvbkFHNtvNSYDZvxXvwgW/mmF0pICgECE1S+Mf+ZPQq5TdQQnGACGy3/MwzCQ FiiIZx5iiHTfzfk3Zg5LtBhWBeizLh/wWDR1ubh6N9Iu9tAMUrwW2iYm2d/1UR9o ZwFE6peOjYMO02jAMOCXe1Yt5e98EEUIhS4kFJuMZ9UjkAO3w42AAeVVZ+phtEcf o7d9zulUyRC1PD5ZXM+Y1TSnBaBW1WgKkMdSNwCsvY8B5IdkkNenVyJibQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFBoJy6xX/MbAyrc6JNIPAW9oa3YmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzkwNjJh Zi02NzZmLTQ1ZDktODBmNC1hNTc2ZjBhMTQ1YmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvOTA2MmFm LTY3NmYtNDVkOS04MGY0LWE1NzZmMGExNDViYS8xL0dnbkxyRmY4eHNES3R6b2sw ZzhCYjJocmRpWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMcXzANBgkqhkiG9w0BAQsFAAOCAQEAsDaORNQa7GRa FBkSO7gmAwX2JxSTUzjosFe3pqPq9wjpc4p0QnQrOutqWL09ztC74W+b8zdoSQR2 f1sYqPwq3Ceuv6dr2OkQZL+P27ZvgRi3GZJb/8sxl2Durb7s7XGoFfi948VRghYK K1Kx+//QonzerwF8SpICDW+Sm77zT1Wn5+do6t8ehp+/ZlXmUg0rte+viRRqwGc3 sVBTZlsPM+L0GuiRrAe7stVx9Q+Xn5rwqgazjGdXod4fiuzRhCV6hLkxfH5HlSkb aIRQHGoGJY9l5zwuN4LWc0DQiSJKVLPukfPp4LAfiUrosnLtN4IKdWmA3VMqMM4O cE3CjRFA7w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:24 2026 by rpki-client