This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer File: GiR0zlteIgufQxr8hq9OwUD18Ww.cer (raw, json) Hash identifier: 7ziSKLLThsAQ1cGSG5KKjOj/bzYOu2Raf0/OqRGKe9M= Subject key identifier: 1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834D27864C38AD80A6177C8B8BECBA9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214421 IP: 85.202.88.0/22 IP: 2001:3100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d2:78:64:c3:8a:d8:0a:61:77:c8:b8:be:cb:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f8:0b:a9:72:62:14:06:11:a2:11:66:dd:0d: bb:8d:5b:da:f6:8f:df:53:0a:b0:5f:95:8d:e2:50: 7d:4f:d1:d9:cf:de:12:b8:e3:9d:64:e9:0c:33:ca: 57:ac:b3:e3:73:4a:67:a2:3a:41:0a:a2:2e:d6:40: d9:49:50:79:85:d2:00:c6:d9:e6:a4:bd:ab:68:b3: ef:6f:dc:5f:16:62:ba:1f:99:f1:73:7e:cd:7a:7a: 49:25:01:0b:d8:88:64:4a:2d:60:d3:0d:08:9f:ae: c0:6e:e4:e5:18:01:ca:b5:57:98:c0:a8:6a:ac:e6: ae:08:8d:46:e9:d9:88:3e:0f:c9:91:d0:2c:b3:10: f1:81:b8:3f:5f:0e:3c:f3:2f:58:25:b4:6f:27:23: a0:81:f7:b0:76:b9:60:1d:b8:44:b8:20:80:cf:75: 7a:00:84:9d:a7:0b:28:59:ba:65:23:25:9d:2f:35: 45:74:10:d4:a7:91:ff:c6:da:a6:7d:9a:71:fb:d0: e4:98:af:05:c4:14:53:79:fc:90:70:04:f8:a7:3c: ad:61:6e:74:f3:c1:df:0b:03:5d:61:fd:8f:88:0b: af:bd:63:d9:c0:18:b3:a8:72:41:6b:b2:a3:65:33: cb:d7:e6:55:f9:0b:7e:0d:24:2b:d3:5e:52:17:5b: 07:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.202.88.0/22 IPv6: 2001:3100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214421 Signature Algorithm: sha256WithRSAEncryption 26:16:09:f5:67:06:f7:02:6a:7d:ee:05:73:11:e0:2c:5d:f2: 67:5a:dd:32:42:55:3c:66:9d:ab:67:c1:e7:05:c2:26:cc:9f: a1:aa:17:f6:7e:73:d9:1b:f1:a3:3e:2d:41:b5:b4:9f:8e:f3: 76:13:fe:17:6a:88:0a:07:f0:5e:b6:99:11:63:12:cf:33:fa: 63:10:d0:9a:36:61:e4:f9:02:84:b9:3a:a5:92:50:23:d0:85: 8d:b3:ee:12:52:de:9c:d7:f2:f2:d9:c0:24:a1:a6:a8:6f:b1: 46:25:77:96:2f:33:0f:75:fa:5f:0b:eb:c6:ac:36:c1:98:63: 30:b3:f5:f0:bb:ae:0c:a1:1d:7d:ef:0e:8f:9d:ee:29:ed:e2: f4:04:cd:83:d2:16:04:8d:54:2b:2c:68:e8:ac:10:cf:14:aa: 7a:22:f7:7c:c3:0e:98:d1:06:26:ff:3e:00:c0:db:0f:60:27: 00:e6:f2:78:44:98:19:e7:9d:a0:bd:5a:a2:2f:e5:b1:3a:6a: 6c:72:55:95:51:0d:6c:3d:0f:e2:74:a2:4e:b1:ed:ae:67:91: f8:7f:f4:1a:63:61:5a:ba:dd:a1:c3:35:d3:b2:76:d7:e8:69: 29:5a:5d:81:fc:a3:2b:60:92:75:41:4b:b4:bc:81:52:a7:f6: 41:fd:8b:f8 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NNJ4ZMOK2Aphd8i4vsupMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTI0NzRjZTViNWUyMjBiOWY0MzFhZmM4NmFmNGVjMTQwZjVmMTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvgLqXJiFAYRohFm3Q27jVva9o/f UwqwX5WN4lB9T9HZz94SuOOdZOkMM8pXrLPjc0pnojpBCqIu1kDZSVB5hdIAxtnm pL2raLPvb9xfFmK6H5nxc37NenpJJQEL2IhkSi1g0w0In67AbuTlGAHKtVeYwKhq rOauCI1G6dmIPg/JkdAssxDxgbg/Xw488y9YJbRvJyOggfewdrlgHbhEuCCAz3V6 AISdpwsoWbplIyWdLzVFdBDUp5H/xtqmfZpx+9DkmK8FxBRTefyQcAT4pzytYW50 88HfCwNdYf2PiAuvvWPZwBizqHJBa7KjZTPL1+ZV+Qt+DSQr015SF1sHcQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBokdM5bXiILn0Ma/IavTsFA9fFsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkL2MwNDM1 OS00YWU0LTRlNDctOTFjYi1kN2QwMmU5N2UyNWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvYzA0MzU5 LTRhZTQtNGU0Ny05MWNiLWQ3ZDAyZTk3ZTI1ZC8xL0dpUjB6bHRlSWd1ZlF4cjho cTlPd1VEMThXdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCVcpYMA0EAgACMAcDBQMgATEAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNFlTANBgkqhkiG9w0BAQsFAAOCAQEAJhYJ9WcG9wJq fe4FcxHgLF3yZ1rdMkJVPGadq2fB5wXCJsyfoaoX9n5z2Rvxoz4tQbW0n47zdhP+ F2qICgfwXraZEWMSzzP6YxDQmjZh5PkChLk6pZJQI9CFjbPuElLenNfy8tnAJKGm qG+xRiV3li8zD3X6Xwvrxqw2wZhjMLP18LuuDKEdfe8Oj53uKe3i9ATNg9IWBI1U Kyxo6KwQzxSqeiL3fMMOmNEGJv8+AMDbD2AnAObyeESYGeedoL1aoi/lsTpqbHJV lVENbD0P4nSiTrHtrmeR+H/0GmNhWrrdocM107J21+hpKVpdgfyjK2CSdUFLtLyB Uqf2Qf2L+A== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:40 2026 by rpki-client