This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer File: GnGBD-yOewtewmKemciWNZJsYlE.cer (raw, json) Hash identifier: M3jo+uXm+mQbLq2cF74Fe86YJk8yr5zuITidzhdZVRs= Subject key identifier: 1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EFE85CB31E53D3932B04739565AA9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60791 IP: 185.25.248.0/22 IP: 2a00:7f20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fe:85:cb:31:e5:3d:39:32:b0:47:39:56:5a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a71810fec8e7b0b5ec2629e99c89635926c6251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d9:87:da:89:ee:40:90:24:51:c4:37:7f:7b: a9:07:96:69:74:f9:c3:91:a1:c0:64:14:90:0d:e7: 4e:de:88:5a:ec:57:5f:9d:07:ab:39:88:d8:51:34: 03:39:a1:da:ed:8f:bd:89:db:e3:6c:34:3d:84:cf: 6a:03:dd:ba:f4:46:cc:f7:bc:4e:7d:f4:c8:93:b8: 0e:dc:be:2b:1b:73:5e:a2:39:13:c5:fd:c6:41:46: 11:00:0d:ce:0d:15:7d:40:0b:ce:27:cd:a9:83:f5: b0:d4:94:ff:c7:f0:9d:a1:c1:42:3b:61:ba:9f:d7: 92:30:0e:79:82:89:bc:ab:35:89:b9:b8:23:3e:88: 6c:33:4e:e5:63:ab:e5:2c:ea:9a:6b:3c:56:61:9e: 1b:86:79:e6:6e:14:b4:0d:23:d0:db:a1:18:04:7c: 5d:8c:d5:d6:a3:57:98:ff:eb:db:71:9d:a8:fe:91: 48:14:ee:0c:bd:d9:2e:8c:d1:bf:e5:78:83:e1:44: 1a:e6:4e:66:00:f6:f4:69:54:72:cc:55:fc:a4:f7: 69:cd:6e:59:32:9b:70:0b:f6:73:a5:61:b2:99:8a: 3f:d0:87:2a:e6:6e:fc:fe:12:ce:43:d9:f4:50:b5: c4:21:51:cd:18:89:f0:e2:40:7d:82:15:97:1a:f6: 5a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.25.248.0/22 IPv6: 2a00:7f20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60791 Signature Algorithm: sha256WithRSAEncryption 64:97:86:b0:c7:8c:5f:34:fd:34:b8:c0:57:8c:fe:6b:64:25: fb:42:6b:bd:af:21:bf:37:be:6f:5a:d4:dc:dd:f8:89:54:1e: 0d:96:e1:55:45:df:a8:21:4a:f5:f5:d7:4a:06:ef:fe:b7:ff: a4:52:87:18:cc:b3:13:c7:49:0f:19:80:d6:29:d5:65:ee:96: 68:d6:e0:cc:9d:df:6d:68:1d:5a:02:fb:45:d1:43:ad:05:64: 07:cb:19:8e:0e:6a:4f:12:48:34:a4:32:d8:f2:36:ca:94:44: a5:52:bf:dd:aa:04:c4:3a:5e:b8:82:8d:3d:af:0b:06:dc:47: f9:20:7d:3a:0e:86:d9:7f:51:12:a7:cd:3d:af:f6:af:6a:04: 19:89:6f:f7:a9:97:fd:d3:f8:ec:26:04:08:1f:00:22:b0:c2: 22:28:ab:af:0c:5f:6b:cd:6d:43:91:f2:3b:06:dc:10:b2:58: 7c:2c:50:33:fe:54:16:ad:cd:ca:93:de:9c:8e:84:d6:49:f4: 75:2c:c1:47:ad:5d:8c:1f:a7:da:9c:84:99:29:13:8d:7c:68: f8:fb:7f:db:b7:ce:6e:fc:3b:8c:79:6e:a7:e5:21:a6:8f:8f: 01:34:4f:b1:9e:bb:5c:d1:ab:3f:59:5c:48:86:04:33:ef:dd: 6a:aa:fa:c2 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fv6FyzHlPTkysEc5VlqpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTcxODEwZmVjOGU3YjBiNWVjMjYyOWU5OWM4OTYzNTkyNmM2MjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNmH2onuQJAkUcQ3f3upB5ZpdPnD kaHAZBSQDedO3oha7FdfnQerOYjYUTQDOaHa7Y+9idvjbDQ9hM9qA9269EbM97xO ffTIk7gO3L4rG3NeojkTxf3GQUYRAA3ODRV9QAvOJ82pg/Ww1JT/x/CdocFCO2G6 n9eSMA55gom8qzWJubgjPohsM07lY6vlLOqaazxWYZ4bhnnmbhS0DSPQ26EYBHxd jNXWo1eY/+vbcZ2o/pFIFO4MvdkujNG/5XiD4UQa5k5mAPb0aVRyzFX8pPdpzW5Z MptwC/ZzpWGymYo/0Icq5m78/hLOQ9n0ULXEIVHNGInw4kB9ghWXGvZaCwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBpxgQ/sjnsLXsJinpnIljWSbGJRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2L2NjMjRi OS01OTE4LTQ1NTctYTgzMi00MDE3Y2VmNWJjYTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvY2MyNGI5 LTU5MTgtNDU1Ny1hODMyLTQwMTdjZWY1YmNhOS8xL0duR0JELXlPZXd0ZXdtS2Vt Y2lXTlpKc1lsRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuRn4MA0EAgACMAcDBQAqAH8gMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDtdzANBgkqhkiG9w0BAQsFAAOCAQEAZJeGsMeMXzT9 NLjAV4z+a2Ql+0Jrva8hvze+b1rU3N34iVQeDZbhVUXfqCFK9fXXSgbv/rf/pFKH GMyzE8dJDxmA1inVZe6WaNbgzJ3fbWgdWgL7RdFDrQVkB8sZjg5qTxJINKQy2PI2 ypREpVK/3aoExDpeuIKNPa8LBtxH+SB9Og6G2X9REqfNPa/2r2oEGYlv96mX/dP4 7CYECB8AIrDCIiirrwxfa81tQ5HyOwbcELJYfCxQM/5UFq3NypPenI6E1kn0dSzB R61djB+n2pyEmSkTjXxo+Pt/27fObvw7jHlup+Uhpo+PATRPsZ67XNGrP1lcSIYE M+/daqr6wg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:27 2026 by rpki-client