This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GmaBntYqcQkM9DfkJjAS1MA1Bn0.cer File: GmaBntYqcQkM9DfkJjAS1MA1Bn0.cer (raw, json) Hash identifier: iyAk+RMg2XbujWekn5zI9OiDXpkO8yEiJHoGIUJPjLo= Subject key identifier: 1A:66:81:9E:D6:2A:71:09:0C:F4:37:E4:26:30:12:D4:C0:35:06:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36562B09C04E2CCF318A5168AFA3E6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44297 IP: 46.31.192.0/21 IP: 185.176.168.0/22 IP: 2a0b:f8c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:56:2b:09:c0:4e:2c:cf:31:8a:51:68:af:a3:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a66819ed62a71090cf437e4263012d4c035067d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ed:7a:81:d9:30:c8:60:b7:4e:bb:9d:5b:6d: e0:0a:d0:68:9d:dd:07:f7:52:bf:96:96:8f:1a:c4: b1:b3:f9:fd:a8:4a:82:05:b4:30:54:6b:99:45:38: 91:bf:28:6d:67:57:9a:b4:8f:38:98:e3:f2:d2:dc: 5b:b5:e5:09:40:e4:d0:fc:d4:be:0c:bf:3e:88:91: fe:c8:49:a6:39:82:3a:1b:cd:97:3b:07:63:12:7a: ec:4c:be:df:db:3c:b4:50:ce:c0:ff:d8:ed:07:ff: 5a:d4:58:f0:0d:a1:1d:5f:2d:58:b2:a6:ba:78:a4: 2e:9e:89:25:ac:a1:38:75:69:88:6f:27:d8:5a:96: 27:5a:16:c0:4f:e5:09:8b:99:d5:20:3d:48:06:7c: 9c:d9:f1:ea:f3:3b:d8:cf:2a:08:14:f9:45:2a:4b: cb:f4:6f:9d:4f:70:29:5b:b0:84:25:03:42:0e:c5: cc:fa:43:59:0d:b0:ae:6b:88:92:be:41:45:df:66: 60:6e:60:85:c3:22:b7:17:65:2b:f5:36:58:02:a5: 18:0b:ed:6c:98:30:cd:79:ac:fd:fa:92:39:4a:80: ea:8f:54:9e:de:59:d8:6e:43:8f:e4:a5:41:ec:93: 91:62:e6:92:d9:a3:d7:bc:46:4c:17:c8:15:9c:d7: d8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:66:81:9E:D6:2A:71:09:0C:F4:37:E4:26:30:12:D4:C0:35:06:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.192.0/21 185.176.168.0/22 IPv6: 2a0b:f8c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44297 Signature Algorithm: sha256WithRSAEncryption 93:97:68:01:f6:b1:9f:85:cc:40:76:10:ff:e8:39:20:6a:d6: a9:14:95:dc:51:8b:ba:70:36:c0:49:23:9e:9a:e1:75:12:78: c7:b4:c3:2b:b6:0c:68:d5:dd:50:01:a5:ca:2a:2f:41:37:ad: 2c:59:a3:fb:59:05:a6:1c:51:85:cd:c3:00:5e:dd:a4:89:a0: 47:36:2a:ed:92:0a:fa:c5:38:e4:a3:27:dd:17:e4:86:ca:33: 8b:af:d8:93:29:47:6b:00:70:e5:d1:09:2a:ec:85:67:03:bd: 3f:b9:86:6f:33:8c:bd:3c:2e:21:24:69:4f:a9:d5:c6:f8:36: 17:f5:68:69:dc:22:e6:05:dc:08:f8:c3:19:fd:7a:9e:be:2d: 05:19:3d:0b:3d:6d:59:be:12:ff:c1:9d:6c:8d:6f:ee:49:e6: 0e:71:9a:21:c6:34:f1:7d:6c:a6:c6:8c:84:45:a3:4d:f4:63: 7a:66:a4:26:cb:b6:6d:60:b2:b9:dc:7f:40:06:28:0e:2d:bc: fd:b0:2f:31:24:2d:a3:c3:df:0a:16:d9:73:fc:0c:54:a7:47: db:da:e9:d7:ca:2b:a4:dd:65:0c:86:63:75:67:cb:5a:52:d2: e9:c1:f2:a3:2c:48:48:61:9c:ce:db:18:66:d4:2e:a6:6d:a8: 58:8c:ac:be -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7NlYrCcBOLM8xilFor6PmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTY2ODE5ZWQ2MmE3MTA5MGNmNDM3ZTQyNjMwMTJkNGMwMzUwNjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu16gdkwyGC3TrudW23gCtBond0H 91K/lpaPGsSxs/n9qEqCBbQwVGuZRTiRvyhtZ1eatI84mOPy0txbteUJQOTQ/NS+ DL8+iJH+yEmmOYI6G82XOwdjEnrsTL7f2zy0UM7A/9jtB/9a1FjwDaEdXy1Ysqa6 eKQunoklrKE4dWmIbyfYWpYnWhbAT+UJi5nVID1IBnyc2fHq8zvYzyoIFPlFKkvL 9G+dT3ApW7CEJQNCDsXM+kNZDbCua4iSvkFF32ZgbmCFwyK3F2Ur9TZYAqUYC+1s mDDNeaz9+pI5SoDqj1Se3lnYbkOP5KVB7JORYuaS2aPXvEZMF8gVnNfYLwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFBpmgZ7WKnEJDPQ35CYwEtTANQZ9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzY5M2Uz OC0xYzdkLTRjODQtYTA2NC03NjRmODIyZGRjNTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNjkzZTM4 LTFjN2QtNGM4NC1hMDY0LTc2NGY4MjJkZGM1Ny8xL0dtYUJudFlxY1FrTTlEZmtK akFTMU1BMUJuMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDLh/AAwQCubCoMA0EAgACMAcDBQMqC/jAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCtCTANBgkqhkiG9w0BAQsFAAOCAQEAk5do Afaxn4XMQHYQ/+g5IGrWqRSV3FGLunA2wEkjnprhdRJ4x7TDK7YMaNXdUAGlyiov QTetLFmj+1kFphxRhc3DAF7dpImgRzYq7ZIK+sU45KMn3Rfkhsozi6/YkylHawBw 5dEJKuyFZwO9P7mGbzOMvTwuISRpT6nVxvg2F/Voadwi5gXcCPjDGf16nr4tBRk9 Cz1tWb4S/8GdbI1v7knmDnGaIcY08X1spsaMhEWjTfRjemakJsu2bWCyudx/QAYo Di28/bAvMSQto8PfChbZc/wMVKdH29rp18orpN1lDIZjdWfLWlLS6cHyoyxISGGc ztsYZtQupm2oWIysvg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:11:43 2026 by rpki-client