This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GnFdTPofFQdfxhDtuwkFIg1mkp0.cer File: GnFdTPofFQdfxhDtuwkFIg1mkp0.cer (raw, json) Hash identifier: YyuoI/Rgoqmbla+LTWJOyDVpQxTY/Y5xsN3K1HTjcuY= Subject key identifier: 1A:71:5D:4C:FA:1F:15:07:5F:C6:10:ED:BB:09:05:22:0D:66:92:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A34C2FB528AAC745F923283C07CA6B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205008 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4c:2f:b5:28:aa:c7:45:f9:23:28:3c:07:ca:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a715d4cfa1f15075fc610edbb0905220d66929d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9d:1e:71:6d:16:81:97:62:75:a6:f5:1d:f9: 41:ec:ae:a6:40:e2:d7:28:5a:b7:74:d7:e0:77:d3: a7:0f:2f:de:c6:ea:a7:b5:d7:9d:d8:f4:8a:5a:c8: 35:22:24:5b:75:66:65:a4:03:25:8d:8a:af:f9:6d: 56:30:be:7b:98:ef:04:45:5c:10:a0:1a:56:69:a2: 32:e6:d7:eb:ca:19:87:d6:d5:2a:be:87:9c:0f:eb: 96:3f:76:aa:0a:75:82:56:92:ef:3d:94:ad:76:37: 52:ec:13:40:97:34:b1:0b:f0:bf:47:f1:fc:b1:4f: c1:00:1a:0c:88:80:48:96:fc:0a:28:7d:ee:1a:29: 68:2d:9e:fc:48:0f:23:26:6e:10:d5:fb:b2:eb:c5: 6a:85:9a:60:85:5a:74:2f:a4:d3:a2:17:1b:1d:18: 22:dc:28:79:61:59:83:a5:ad:98:96:1a:e8:89:10: 42:d8:07:c0:17:bd:ba:f9:7e:33:fc:cb:9a:c8:4a: d8:d9:7a:66:98:f5:86:90:76:64:12:3e:d6:d8:e0: ca:53:e4:c1:bc:52:b5:53:65:b3:81:2c:f3:49:70: 2a:70:cd:df:82:ae:11:c8:d2:00:3f:ff:b8:00:fc: 8f:b5:52:97:f7:5b:a2:b7:21:d3:6e:7a:8e:c9:55: 90:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:71:5D:4C:FA:1F:15:07:5F:C6:10:ED:BB:09:05:22:0D:66:92:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205008 Signature Algorithm: sha256WithRSAEncryption 4e:a5:b5:09:0c:24:d9:6d:0f:16:27:3c:60:d9:73:39:70:be: 33:a2:c3:d3:e5:78:f1:cf:b0:5a:44:dc:3f:25:30:4f:e0:e3: 1d:6f:40:23:f7:57:c2:cd:93:f3:e8:92:70:ad:b3:99:77:41: d0:9a:3b:c3:f5:aa:9c:e7:12:4e:6b:14:5a:38:37:a2:26:10: 14:c2:eb:6d:47:8e:37:3b:db:e3:1e:3b:d7:d7:f5:81:4a:f5: be:22:22:61:fd:32:9e:75:41:76:dc:ab:07:cb:89:84:ea:7b: 1f:1a:33:9b:33:d7:64:aa:9b:be:2f:89:d4:28:e7:f3:16:f2: f9:69:7d:34:09:fa:1d:78:5c:96:68:db:18:67:8d:f3:bd:4e: 2c:9e:6e:cd:94:40:e3:77:e2:9c:18:4f:15:11:0c:6f:d7:a4: a7:97:76:90:ef:5d:55:4d:fa:b6:60:0e:08:79:0d:3f:08:9a: 26:98:e4:93:d3:dc:c9:73:bc:25:f0:17:84:d1:90:8c:b0:96: 01:45:85:69:09:a5:4a:19:01:99:fd:d5:e3:eb:d5:0d:ef:89: 27:cd:15:19:30:eb:f9:4d:0d:fe:b3:a9:24:29:0a:78:fd:e3: 89:4f:bc:6d:0f:f1:cc:5a:fb:fe:b0:1c:32:b7:a1:26:66:13: c1:20:5e:dd -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt4o0wvtSiqx0X5Iyg8B8prMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTcxNWQ0Y2ZhMWYxNTA3NWZjNjEwZWRiYjA5MDUyMjBkNjY5MjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ0ecW0WgZdidab1HflB7K6mQOLX KFq3dNfgd9OnDy/exuqntded2PSKWsg1IiRbdWZlpAMljYqv+W1WML57mO8ERVwQ oBpWaaIy5tfryhmH1tUqvoecD+uWP3aqCnWCVpLvPZStdjdS7BNAlzSxC/C/R/H8 sU/BABoMiIBIlvwKKH3uGiloLZ78SA8jJm4Q1fuy68VqhZpghVp0L6TTohcbHRgi 3Ch5YVmDpa2YlhroiRBC2AfAF726+X4z/MuayErY2XpmmPWGkHZkEj7W2ODKU+TB vFK1U2WzgSzzSXAqcM3fgq4RyNIAP/+4APyPtVKX91uityHTbnqOyVWQxQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFBpxXUz6HxUHX8YQ7bsJBSINZpKdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyODVi ZTZmLTUxMTEtNGMzYy04MjU0LWQyZTQxNTUxMDI4NC8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjI4 NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEwMjg0LzAvMUE3MTVENENGQTFG MTUwNzVGQzYxMEVEQkIwOTA1MjIwRDY2OTI5RC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDINAw DQYJKoZIhvcNAQELBQADggEBAE6ltQkMJNltDxYnPGDZczlwvjOiw9PlePHPsFpE 3D8lME/g4x1vQCP3V8LNk/PoknCts5l3QdCaO8P1qpznEk5rFFo4N6ImEBTC621H jjc72+MeO9fX9YFK9b4iImH9Mp51QXbcqwfLiYTqex8aM5sz12Sqm74vidQo5/MW 8vlpfTQJ+h14XJZo2xhnjfO9Tiyebs2UQON34pwYTxURDG/XpKeXdpDvXVVN+rZg Dgh5DT8ImiaY5JPT3MlzvCXwF4TRkIywlgFFhWkJpUoZAZn91ePr1Q3viSfNFRkw 6/lNDf6zqSQpCnj944lPvG0P8cxa+/6wHDK3oSZmE8EgXt0= -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:21 2026 by rpki-client