This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer File: GmoUZyI70xUQwU8hvTPX12mCnSg.cer (raw, json) Hash identifier: K7Izt5q/TlT+mKddbOpGJ4cbog1eKmJwTU7WXBRfQVU= Subject key identifier: 1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834490A710A2AE5C65E0328A63B2A84 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:678:42c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:49:0a:71:0a:2a:e5:c6:5e:03:28:a6:3b:2a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a6a1467223bd31510c14f21bd33d7d769829d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9f:41:3d:a9:b3:ec:c0:df:87:94:16:78:52: 43:6a:60:ac:64:5c:82:eb:6c:5d:4a:58:d7:db:d9: c3:af:1c:78:b0:13:5e:c0:70:4a:69:4b:14:3f:f7: a8:65:d2:c9:cb:87:e8:ea:b3:4b:7d:99:5b:55:ba: 4b:02:87:2f:84:b7:81:7a:d1:2c:64:1a:42:35:44: da:42:13:7f:e7:ee:79:ce:fe:1a:47:4d:01:4e:97: 8f:32:f3:98:63:a1:73:7d:9f:a9:ab:97:a0:82:6d: 7d:e9:87:83:e1:04:5f:f1:b0:07:1b:fd:88:e4:ec: d6:a2:fd:06:82:ed:b9:7f:1b:d8:61:55:00:b6:37: 67:4a:74:8e:c7:a6:67:9a:05:8f:2b:0b:13:4b:06: f0:1e:f1:67:96:aa:ee:cb:f5:e3:3a:77:27:c2:b3: af:ba:9e:00:17:db:ff:38:2c:a9:6e:72:7b:8d:5d: bf:08:bd:85:03:70:1d:96:f2:00:d5:66:3f:24:d4: 5c:cd:6b:f5:58:98:2d:96:e7:88:86:d8:56:3b:d0: 3d:d7:d8:3e:f6:3c:08:6b:59:b2:d3:53:2a:0b:ef: ab:22:f4:ba:1b:3a:dc:87:c2:61:81:a4:d9:4f:a7: 66:96:3d:5f:e0:5a:eb:15:05:06:e5:74:e4:1c:5c: 04:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:42c::/48 Signature Algorithm: sha256WithRSAEncryption 30:54:4b:5d:bc:fa:7b:76:f8:87:3d:b0:2e:60:d3:ce:d4:c1: c5:ce:98:d1:20:51:c9:b7:93:8e:43:a9:1f:ed:f1:61:ef:ba: 87:01:48:5f:df:3d:d2:f0:a7:4a:ef:bc:3f:8a:8b:2e:5a:ee: c6:a8:c1:57:74:ca:31:7a:72:2d:10:14:f9:9b:6e:d8:bf:54: 07:8b:db:4b:9b:3f:9d:e8:3c:24:ed:a6:5e:ce:f7:58:8a:54: 77:1c:e6:2a:0a:15:7e:1b:cd:c9:90:7f:16:bc:ba:7c:c2:00: 88:d0:d8:31:cf:24:6b:49:fb:7e:6a:6d:69:21:d8:b5:88:c5: 44:09:cc:a8:16:41:e1:91:3c:88:6a:21:4c:0a:85:78:57:cf: c0:2e:29:ee:74:ac:8d:e7:47:f3:6f:e2:33:c9:28:ea:10:41: 16:8e:f0:ca:a3:1a:f7:bc:65:d7:26:9f:72:11:fb:aa:7c:98: 9f:d6:32:4d:15:a2:42:75:f6:0e:f3:8f:75:13:22:7f:85:9d: b7:74:13:7e:06:32:ff:ec:75:43:29:bd:a8:0d:06:b1:95:b9: e2:1f:a1:59:d6:40:26:b2:92:29:63:1e:1d:41:32:32:50:d4: 61:00:ae:c9:e2:74:10:71:49:d0:29:4d:9c:bd:c7:f6:cf:fd: c4:bd:53:9c -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt4NEkKcQoq5cZeAyimOyqEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTZhMTQ2NzIyM2JkMzE1MTBjMTRmMjFiZDMzZDdkNzY5ODI5ZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp9BPamz7MDfh5QWeFJDamCsZFyC 62xdSljX29nDrxx4sBNewHBKaUsUP/eoZdLJy4fo6rNLfZlbVbpLAocvhLeBetEs ZBpCNUTaQhN/5+55zv4aR00BTpePMvOYY6FzfZ+pq5eggm196YeD4QRf8bAHG/2I 5OzWov0Ggu25fxvYYVUAtjdnSnSOx6ZnmgWPKwsTSwbwHvFnlqruy/XjOncnwrOv up4AF9v/OCypbnJ7jV2/CL2FA3AdlvIA1WY/JNRczWv1WJgtlueIhthWO9A919g+ 9jwIa1my01MqC++rIvS6Gzrch8JhgaTZT6dmlj1f4FrrFQUG5XTkHFwE3QIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFBpqFGciO9MVEMFPIb0z19dpgp0oMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1Lzg3ZWFm Yy0xN2E2LTQ5MDMtYjk1MS00ZDIwZGEwYzUzMGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvODdlYWZj LTE3YTYtNDkwMy1iOTUxLTRkMjBkYTBjNTMwZS8xL0dtb1VaeUk3MHhVUXdVOGh2 VFBYMTJtQ25TZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAQsMA0GCSqGSIb3DQEBCwUAA4IBAQAw VEtdvPp7dviHPbAuYNPO1MHFzpjRIFHJt5OOQ6kf7fFh77qHAUhf3z3S8KdK77w/ iosuWu7GqMFXdMoxenItEBT5m27Yv1QHi9tLmz+d6Dwk7aZezvdYilR3HOYqChV+ G83JkH8WvLp8wgCI0NgxzyRrSft+am1pIdi1iMVECcyoFkHhkTyIaiFMCoV4V8/A LinudKyN50fzb+IzySjqEEEWjvDKoxr3vGXXJp9yEfuqfJif1jJNFaJCdfYO8491 EyJ/hZ23dBN+BjL/7HVDKb2oDQaxlbniH6FZ1kAmspIpYx4dQTIyUNRhAK7J4nQQ cUnQKU2cvcf2z/3EvVOc -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:28 2026 by rpki-client