This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer File: GhGmY2-M4s71g2xENWXF_jri8gg.cer (raw, json) Hash identifier: PVvOxZdZJbgAPdkZC8myDehw/KOtujdonVhVV5N5g1k= Subject key identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC80DD4A2F29EB6937B980CBD52A722 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206671 IP: 2001:678:91c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0d:d4:a2:f2:9e:b6:93:7b:98:0c:bd:52:a7:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dc:5e:8b:63:35:95:2b:31:36:f5:3c:57:51: 09:d2:37:b1:b8:2c:29:90:00:78:ff:d7:10:0d:a0: f3:59:b5:b6:48:3f:03:7c:5d:ae:53:f1:a3:ca:6a: db:71:bb:d7:f9:80:dc:8c:f9:3d:19:df:c4:a9:be: 87:f0:66:cc:74:68:54:c4:7a:60:f0:1a:18:f7:40: b0:cd:30:54:c8:7f:52:c2:73:d1:81:8c:98:43:f7: 16:26:0a:01:8c:48:66:77:48:6c:8b:ab:28:c4:51: 5b:8b:76:a1:ae:12:f1:a1:db:13:8a:61:90:ad:b2: bf:fe:eb:31:67:d5:49:33:1c:31:05:ed:9a:d1:84: c4:5c:4d:e4:f2:6d:2a:ce:35:e2:9b:99:54:f2:cb: 47:b5:39:ed:af:2f:30:54:79:7f:d7:ab:b0:7b:d1: ed:35:34:5a:68:3f:e4:0c:b2:46:b1:b8:a2:8c:51: de:2f:f2:56:4d:8f:8e:95:fd:df:fd:fa:5b:a3:19: 4b:e9:b2:24:e8:6e:e7:07:23:e4:d6:02:a2:74:5b: 26:ef:b6:38:58:3f:92:b9:c9:8b:60:f9:7b:20:41: c0:1b:b8:38:c2:6c:17:df:9a:48:08:ab:85:63:98: d1:a4:62:1d:a4:7d:b8:f7:d5:78:d0:99:a2:99:9b: b4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:91c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206671 Signature Algorithm: sha256WithRSAEncryption 3f:1d:d8:51:fc:83:05:cc:14:ee:63:2a:75:37:da:5b:c3:56: 86:a1:90:72:d6:e1:6b:42:f2:55:11:b4:2e:48:ff:c6:9c:8e: 7b:95:08:65:8d:c0:dd:c4:02:26:3b:dd:b2:00:c9:a3:6e:02: a5:cb:1d:ca:53:c4:b7:bd:1b:9f:da:db:d6:22:e3:a6:b5:58: 24:fd:fc:52:b9:e0:66:fe:ca:7e:bc:7f:cb:50:7a:5f:c9:b6: 65:12:7c:ae:97:da:42:ca:25:bc:d8:e3:a7:0a:56:1e:b9:6b: 75:ce:26:ff:4e:9a:9d:51:66:e3:5b:40:d5:3c:e7:6f:06:9f: b5:16:07:9e:be:25:01:95:75:cb:7b:ec:8c:49:ff:bb:42:ca: 75:c8:ee:cd:b5:46:24:f1:bc:ee:18:5d:ab:4a:8b:8c:85:1c: 6a:f8:0e:04:89:dd:97:be:5d:75:a4:ac:4f:b5:92:5f:fa:5f: 23:ed:4e:f5:b8:ce:fa:8b:43:24:2b:82:8b:9f:7b:ac:59:0c: a6:1c:b9:ff:ce:13:ce:d8:e0:f7:5a:f2:a3:e5:23:6c:e1:f9: 68:b7:7c:51:bc:9e:75:1f:98:61:49:f2:5c:71:8c:ca:4a:88: c2:c9:80:87:04:77:cf:19:ed:29:4a:28:82:f3:72:79:a9:26: 4c:ce:eb:b3 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt6yA3UovKetpN7mAy9UqciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTExYTY2MzZmOGNlMmNlZjU4MzZjNDQzNTY1YzVmZTNhZTJmMjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9xei2M1lSsxNvU8V1EJ0jexuCwp kAB4/9cQDaDzWbW2SD8DfF2uU/GjymrbcbvX+YDcjPk9Gd/Eqb6H8GbMdGhUxHpg 8BoY90CwzTBUyH9SwnPRgYyYQ/cWJgoBjEhmd0hsi6soxFFbi3ahrhLxodsTimGQ rbK//usxZ9VJMxwxBe2a0YTEXE3k8m0qzjXim5lU8stHtTntry8wVHl/16uwe9Ht NTRaaD/kDLJGsbiijFHeL/JWTY+Olf3f/fpboxlL6bIk6G7nByPk1gKidFsm77Y4 WD+SucmLYPl7IEHAG7g4wmwX35pICKuFY5jRpGIdpH2499V40JmimZu0FwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFBoRpmNvjOLO9YNsRDVlxf464vIIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1L2Y4Zjlj OC0wZGViLTQwZGUtODk0Ni0yOTFlNGJkNzAzMDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvZjhmOWM4 LTBkZWItNDBkZS04OTQ2LTI5MWU0YmQ3MDMwOS8xL0doR21ZMi1NNHM3MWcyeEVO V1hGX2pyaThnZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAkcMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMnTzANBgkqhkiG9w0BAQsFAAOCAQEAPx3YUfyDBcwU7mMqdTfaW8NWhqGQ ctbha0LyVRG0Lkj/xpyOe5UIZY3A3cQCJjvdsgDJo24CpcsdylPEt70bn9rb1iLj prVYJP38UrngZv7Kfrx/y1B6X8m2ZRJ8rpfaQsolvNjjpwpWHrlrdc4m/06anVFm 41tA1TznbwaftRYHnr4lAZV1y3vsjEn/u0LKdcjuzbVGJPG87hhdq0qLjIUcavgO BIndl75ddaSsT7WSX/pfI+1O9bjO+otDJCuCi597rFkMphy5/84Tztjg91ryo+Uj bOH5aLd8UbyedR+YYUnyXHGMykqIwsmAhwR3zxntKUoogvNyeakmTM7rsw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:05 2026 by rpki-client