This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer File: GnTydwKmLGtifF6nC5b9KYI2RSI.cer (raw, json) Hash identifier: 1SjT10e7D7cerU6brLQ94DjE+/ofh+cKm/pdh/DQ1T0= Subject key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B422F2A7CB5846CE8623072A71ABD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.227.244.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:42:2f:2a:7c:b5:84:6c:e8:62:30:72:a7:1a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a74f27702a62c6b627c5ea70b96fd2982364522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:6b:69:96:27:de:75:fc:a5:50:28:a4:97: 29:2d:bc:9d:29:c4:e2:1a:cc:3a:72:3a:bb:00:d0: 2b:fc:39:82:28:34:2d:a3:eb:84:c8:a2:5c:6c:e7: b1:79:d8:53:1a:70:f8:ac:a5:b3:33:e6:19:e4:2c: a3:a2:c4:a4:62:8e:e4:0a:c7:2f:f1:1f:49:95:b4: 56:03:df:d0:3d:a9:c8:50:6e:de:5b:ee:ba:50:ff: 25:6f:bd:34:03:6f:00:1b:e1:7a:94:70:9c:b1:30: e4:02:bb:5a:e9:3d:4b:74:dd:e1:cd:a4:7d:83:25: 84:94:3a:30:aa:00:ec:23:a7:0d:06:18:08:6a:67: db:86:47:e1:27:8d:89:cf:27:aa:a5:60:3f:df:96: 83:07:81:a2:cc:cb:29:d6:f1:fd:0e:53:69:58:b6: 7f:56:5b:39:fa:cf:09:1a:cd:e7:58:ab:ac:f5:48: 1c:1c:83:93:10:1c:cd:c0:f9:54:b7:77:c7:b5:d8: c2:84:d0:38:22:b2:49:22:59:74:e1:90:33:d5:a1: 18:1b:35:19:49:72:a1:ac:bf:1e:62:95:08:bc:e5: 15:83:3c:13:2b:c0:70:93:e3:f2:8f:2a:1b:81:a6: ce:23:9c:b1:e7:1b:3d:81:60:7b:b1:a8:a9:aa:14: ac:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.227.244.0/23 Signature Algorithm: sha256WithRSAEncryption 10:bd:77:f3:bf:7d:46:e6:2e:c3:0c:48:25:47:41:8a:c0:e1: 81:ca:8b:d6:ef:88:2b:0f:26:22:8e:5f:2a:e2:99:9b:3f:12: 98:83:93:3a:15:34:82:95:79:a9:18:2a:79:57:96:53:38:34: 25:cf:86:d5:65:e3:0e:20:e1:d2:06:0b:07:4e:94:c1:ed:1a: 81:59:af:32:ef:19:e1:cd:a7:26:9b:e7:e8:2b:8c:c6:0f:38: a5:4d:ae:d9:49:4e:e8:5e:3b:3f:a2:f4:20:ed:da:cd:ef:4f: 49:f8:c6:98:51:d4:c9:ef:0c:d0:6d:1e:6a:76:c5:5d:da:db: 30:e2:66:4e:c5:50:1c:30:15:89:d4:6a:4d:a3:67:c7:37:12: b3:f0:a7:fb:a1:12:c7:aa:54:1a:08:de:c5:00:54:ba:15:e4: ef:75:05:81:b2:b5:17:eb:62:c9:a3:eb:0a:8a:d3:a4:f0:f4: e6:67:12:d4:0c:f1:e6:3f:46:16:a1:cf:b1:b0:43:6c:cd:b1: 78:9c:cb:39:63:1a:69:65:0e:06:6e:2f:b1:0c:3a:4a:65:82: fa:b1:96:a5:73:79:cd:b7:d6:bd:49:ba:8f:80:37:e5:cf:6b: 0b:92:73:65:44:08:9c:48:8a:d4:6c:87:5d:af:79:64:61:e1: 72:48:39:4d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6W0IvKny1hGzoYjBypxq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTc0ZjI3NzAyYTYyYzZiNjI3YzVlYTcwYjk2ZmQyOTgyMzY0NTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr39raZYn3nX8pVAopJcpLbydKcTi Gsw6cjq7ANAr/DmCKDQto+uEyKJcbOexedhTGnD4rKWzM+YZ5CyjosSkYo7kCscv 8R9JlbRWA9/QPanIUG7eW+66UP8lb700A28AG+F6lHCcsTDkArta6T1LdN3hzaR9 gyWElDowqgDsI6cNBhgIamfbhkfhJ42JzyeqpWA/35aDB4GizMsp1vH9DlNpWLZ/ Vls5+s8JGs3nWKus9UgcHIOTEBzNwPlUt3fHtdjChNA4IrJJIll04ZAz1aEYGzUZ SXKhrL8eYpUIvOUVgzwTK8Bwk+PyjyobgabOI5yx5xs9gWB7saipqhSsxQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFBp08ncCpixrYnxepwuW/SmCNkUiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiL2I3MWFm Mi02Njk3LTRkMDctYWRjNS0xNDUwZWZiZDllMzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvYjcxYWYy LTY2OTctNGQwNy1hZGM1LTE0NTBlZmJkOWUzNS8xL0duVHlkd0ttTEd0aWZGNm5D NWI5S1lJMlJTSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBweP0MA0GCSqGSIb3DQEBCwUAA4IBAQAQvXfz v31G5i7DDEglR0GKwOGByovW74grDyYijl8q4pmbPxKYg5M6FTSClXmpGCp5V5ZT ODQlz4bVZeMOIOHSBgsHTpTB7RqBWa8y7xnhzacmm+foK4zGDzilTa7ZSU7oXjs/ ovQg7drN709J+MaYUdTJ7wzQbR5qdsVd2tsw4mZOxVAcMBWJ1GpNo2fHNxKz8Kf7 oRLHqlQaCN7FAFS6FeTvdQWBsrUX62LJo+sKitOk8PTmZxLUDPHmP0YWoc+xsENs zbF4nMs5YxppZQ4Gbi+xDDpKZYL6sZalc3nNt9a9SbqPgDflz2sLknNlRAicSIrU bIddr3lkYeFySDlN -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:37 2026 by rpki-client