This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer File: GqGckulmd_X5b2jxygqtn6MR60U.cer (raw, json) Hash identifier: f9FEB1GEs71Avp41Jn6RkIuiUkRzmoPxybaf1gnro9U= Subject key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB08117DAD722248E1A0A6294CA63F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8788 AS: 49859 IP: 178.211.96.0/19 IP: 193.138.87.0/24 IP: 194.32.108.0/22 IP: 212.26.128.0/19 IP: 212.80.32.0/19 IP: 2a00:e780::/31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:08:11:7d:ad:72:22:48:e1:a0:a6:29:4c:a6:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cf:a3:0d:7a:75:be:6e:fe:f6:49:af:a0:00: 2a:ca:3b:7b:1e:db:80:0a:32:38:b2:7b:13:07:75: ff:af:73:50:da:90:4e:46:78:5a:d5:75:80:75:23: ce:d1:e9:26:0c:aa:f2:e4:db:ed:ae:ca:d0:e0:00: b6:31:2e:08:00:b2:72:41:e0:5e:5a:0b:65:d3:21: b2:19:ba:56:2c:cf:11:a8:13:7a:e6:f3:29:69:f7: ad:f5:fa:21:d9:29:42:c8:57:4c:43:1b:66:e0:a2: b5:41:a2:5e:98:4a:b1:50:19:f4:25:aa:12:ab:5a: 7d:b2:56:4b:72:60:5e:d2:1d:01:20:40:cf:73:3c: 84:52:8d:e3:c7:ce:a6:58:1a:19:49:b5:06:05:dd: 5f:37:2a:56:45:18:cb:3c:9e:1d:0b:c0:7d:61:c2: 53:ae:cf:d0:49:72:f7:98:e5:2a:55:1f:15:d9:18: 71:63:77:fd:39:34:a5:55:9a:56:0a:38:cd:82:2c: ac:df:58:01:c9:48:54:d3:bc:cb:d0:ef:61:e0:96: 22:6f:3d:27:fa:55:49:e8:3a:3f:5e:87:fe:e9:1b: 9b:be:19:c4:0e:cf:dc:7a:e3:37:fb:de:07:31:ac: 93:1f:84:dd:fa:5e:fc:2e:e1:3c:88:52:9f:25:e1: ee:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.211.96.0/19 193.138.87.0/24 194.32.108.0/22 212.26.128.0/19 212.80.32.0/19 IPv6: 2a00:e780::/31 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8788 49859 Signature Algorithm: sha256WithRSAEncryption 0a:d8:6b:37:ff:b4:cb:8e:64:06:86:d5:a1:a8:ea:48:28:7c: 79:2f:b6:68:73:9a:91:b5:a4:4b:ec:4b:3e:d9:77:9c:57:17: b3:f1:1a:01:e6:0b:b4:26:5e:92:36:50:f0:3b:f3:c4:59:3d: 12:15:3e:c2:ff:8f:76:ec:ec:d0:11:a8:9f:a6:26:ad:71:c5: 18:ed:8d:32:36:35:02:8a:f8:8d:99:6c:58:f9:d7:4c:da:6e: 0d:1e:b1:03:a8:34:85:f8:b1:cb:a5:a4:c3:87:31:83:8e:be: bd:6f:0b:4a:14:b3:c3:47:46:97:e8:93:05:dd:d8:c3:dc:21: 93:2d:c5:54:9a:0b:7b:a9:99:13:20:8a:2b:ff:5c:a7:94:b6: 92:34:14:b4:36:68:b8:52:f8:3e:a5:7f:df:10:9f:79:5b:0e: 95:55:07:0b:6a:ec:66:17:ca:4e:ae:12:22:36:10:ab:78:36: 12:44:d5:31:ed:b5:e4:6c:75:7d:89:5f:b5:bf:9b:17:37:86: 76:56:43:75:54:69:34:13:e0:0c:84:33:34:dc:92:78:e4:5c: 8b:b1:05:8d:e7:ae:e8:2b:ab:3d:e2:42:2c:a9:f2:d5:b1:8a: 63:25:ea:56:62:e0:cf:51:59:59:4a:64:11:51:16:f5:c6:22: 5a:2d:4c:e2 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgISAZt9ywgRfa1yIkjhoKYpTKY/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWExOWM5MmU5NjY3N2Y1Zjk2ZjY4ZjFjYTBhYWQ5ZmEzMTFlYjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c+jDXp1vm7+9kmvoAAqyjt7HtuA CjI4snsTB3X/r3NQ2pBORnha1XWAdSPO0ekmDKry5NvtrsrQ4AC2MS4IALJyQeBe Wgtl0yGyGbpWLM8RqBN65vMpafet9foh2SlCyFdMQxtm4KK1QaJemEqxUBn0JaoS q1p9slZLcmBe0h0BIEDPczyEUo3jx86mWBoZSbUGBd1fNypWRRjLPJ4dC8B9YcJT rs/QSXL3mOUqVR8V2RhxY3f9OTSlVZpWCjjNgiys31gByUhU07zL0O9h4JYibz0n +lVJ6Do/Xof+6RubvhnEDs/ceuM3+94HMayTH4Td+l78LuE8iFKfJeHudwIDAQAB o4ICyzCCAscwHQYDVR0OBBYEFBqhnJLpZnf1+W9o8coKrZ+jEetFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzAwYWRi MC04OTBkLTQ3YWQtYTE4Yy00YWQwYWJlYzI3NWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvMDBhZGIw LTg5MGQtNDdhZC1hMThjLTRhZDBhYmVjMjc1ZS8xL0dxR2NrdWxtZF9YNWIyanh5 Z3F0bjZNUjYwVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQFstNgAwQAwYpXAwQCwiBsAwQF1BqAAwQF1FAg MA0EAgACMAcDBQEqAOeAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAiJUAgMAwsMw DQYJKoZIhvcNAQELBQADggEBAArYazf/tMuOZAaG1aGo6kgofHkvtmhzmpG1pEvs Sz7Zd5xXF7PxGgHmC7QmXpI2UPA788RZPRIVPsL/j3bs7NARqJ+mJq1xxRjtjTI2 NQKK+I2ZbFj510zabg0esQOoNIX4sculpMOHMYOOvr1vC0oUs8NHRpfokwXd2MPc IZMtxVSaC3upmRMgiiv/XKeUtpI0FLQ2aLhS+D6lf98Qn3lbDpVVBwtq7GYXyk6u EiI2EKt4NhJE1THtteRsdX2JX7W/mxc3hnZWQ3VUaTQT4AyEMzTcknjkXIuxBY3n rugrqz3iQiyp8tWximMl6lZi4M9RWVlKZBFRFvXGIlotTOI= -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:12 2026 by rpki-client