This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer File: GpnHX-V3fhNlc-HlHvumeB86WxY.cer (raw, json) Hash identifier: MFupYruJGvsHbNnS3xlUbsPvkekazpif178zG4Nj9JI= Subject key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79100A80648E4F79471E35BDADD92403 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42306 AS: 203450 IP: 37.44.208.0/22 IP: 46.253.96.0/20 IP: 77.236.192.0/19 IP: 185.134.160.0/22 IP: 2a03:f280::/29 IP: 2a06:ed40::/29 IP: 2a0e:5340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0a:80:64:8e:4f:79:47:1e:35:bd:ad:d9:24:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:17:c9:da:af:f8:f3:35:8d:bb:d9:b4:57:a4: ce:6b:ed:e8:37:95:57:40:40:fb:36:e3:8a:78:1b: 19:11:11:11:1a:da:9d:54:ed:14:90:07:5c:3c:f7: aa:cd:02:5e:10:b7:e7:44:7e:db:6c:78:ff:ff:ad: 8f:3d:05:14:fb:8d:d2:16:92:25:61:9f:a7:1c:79: c0:09:82:7c:ce:d5:c8:ab:5c:7f:66:51:a3:cb:57: 71:45:91:17:7d:23:95:7f:bd:c4:eb:63:13:d7:22: 6f:67:c3:03:b3:63:70:c0:d0:f7:b2:d8:20:7f:8f: 71:aa:67:a0:fb:d4:67:4a:c3:7e:36:6c:ee:1b:b4: 4b:be:5c:82:f4:29:9a:21:b2:2f:59:ef:58:99:b0: 56:89:a0:22:30:2e:24:64:0e:d9:f2:2a:09:50:91: 25:a7:75:6c:3b:e6:51:96:c2:b2:8f:23:da:bb:c4: 16:a0:29:17:8e:be:35:94:1b:b8:f7:40:b5:6a:d2: 9a:19:94:ba:26:1a:b5:d3:e7:53:ca:bf:42:b4:49: 43:69:ed:1c:f0:94:39:80:f1:c1:ed:5e:c6:57:e4: 17:ff:ae:3e:5f:71:5f:ee:b9:c5:ec:72:58:30:b3: 16:34:25:d5:d0:85:23:ba:0b:52:30:cc:99:bb:5b: 13:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.208.0/22 46.253.96.0/20 77.236.192.0/19 185.134.160.0/22 IPv6: 2a03:f280::/29 2a06:ed40::/29 2a0e:5340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42306 203450 Signature Algorithm: sha256WithRSAEncryption 28:7a:7a:98:e5:ce:4b:19:43:dc:5d:78:da:ef:35:e3:a5:a2: e6:32:94:f9:f6:15:11:87:38:3b:db:a0:0c:a4:52:53:8b:f3: c1:ea:0e:fb:1c:20:33:50:2a:6c:42:26:54:83:4e:31:5d:81: 8a:1c:89:89:32:e7:d7:55:9e:c2:48:a6:85:f5:fe:c9:50:3e: 4a:02:3a:fe:0f:3a:df:66:41:82:59:b8:00:11:b6:3d:f9:31: b1:ec:28:c6:c6:c6:0d:eb:e8:69:94:31:ac:d7:e5:75:e6:9d: 64:f9:43:84:d0:2f:15:44:ff:99:88:7e:6a:87:cb:82:e6:22: 91:d8:96:90:08:a7:a8:e2:9b:87:61:80:d0:96:c0:de:1c:96: 76:1f:75:5d:fd:fc:e9:86:3b:4b:be:64:67:53:21:9a:a8:89: 3d:5b:f8:dd:9f:d1:f9:d6:28:e3:33:6b:1d:47:00:fa:c7:25: d8:e4:57:8e:fd:43:03:e1:22:f3:71:0e:05:25:93:69:c6:da: 2b:6c:43:1d:fd:7c:9b:4e:b3:3c:7a:ba:bb:39:76:5d:ca:dd: 2e:3a:5a:5a:64:74:93:a2:f3:05:31:27:2c:ed:c4:b5:a8:25: bb:ec:83:ec:ba:1f:46:1f:f8:cc:99:22:08:ac:6e:d8:17:e9: cb:ed:3d:fa -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgISAZt5EAqAZI5PeUceNb2t2SQDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTk5Yzc1ZmU1Nzc3ZTEzNjU3M2UxZTUxZWZiYTY3ODFmM2E1YjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRfJ2q/48zWNu9m0V6TOa+3oN5VX QED7NuOKeBsZERERGtqdVO0UkAdcPPeqzQJeELfnRH7bbHj//62PPQUU+43SFpIl YZ+nHHnACYJ8ztXIq1x/ZlGjy1dxRZEXfSOVf73E62MT1yJvZ8MDs2NwwND3stgg f49xqmeg+9RnSsN+NmzuG7RLvlyC9CmaIbIvWe9YmbBWiaAiMC4kZA7Z8ioJUJEl p3VsO+ZRlsKyjyPau8QWoCkXjr41lBu490C1atKaGZS6Jhq10+dTyr9CtElDae0c 8JQ5gPHB7V7GV+QX/64+X3Ff7rnF7HJYMLMWNCXV0IUjugtSMMyZu1sT7wIDAQAB o4IC1DCCAtAwHQYDVR0OBBYEFBqZx1/ld34TZXPh5R77pngfOlsWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzcxMTcz Yi0xOTM4LTQ4MzUtYWYwMC1hNjk5YmNiMDhhZTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvNzExNzNi LTE5MzgtNDgzNS1hZjAwLWE2OTliY2IwOGFlMy8xL0dwbkhYLVYzZmhObGMtSGxI dnVtZUI4Nld4WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAeBAIAATAYAwQCJSzQAwQELv1gAwQFTezAAwQCuYagMBsEAgAC MBUDBQMqA/KAAwUDKgbtQAMFAyoOU0AwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgID AKVCAgMDGrowDQYJKoZIhvcNAQELBQADggEBACh6epjlzksZQ9xdeNrvNeOlouYy lPn2FRGHODvboAykUlOL88HqDvscIDNQKmxCJlSDTjFdgYociYky59dVnsJIpoX1 /slQPkoCOv4POt9mQYJZuAARtj35MbHsKMbGxg3r6GmUMazX5XXmnWT5Q4TQLxVE /5mIfmqHy4LmIpHYlpAIp6jim4dhgNCWwN4clnYfdV39/OmGO0u+ZGdTIZqoiT1b +N2f0fnWKOMzax1HAPrHJdjkV479QwPhIvNxDgUlk2nG2itsQx39fJtOszx6urs5 dl3K3S46WlpkdJOi8wUxJyztxLWoJbvsg+y6H0Yf+MyZIgisbtgX6cvtPfo= -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:18 2026 by rpki-client