This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer File: Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer (raw, json) Hash identifier: 41IH2IQnP5bz98Bslvz7eKQdyLhlpPuTLhau8KT9wfA= Subject key identifier: 1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11010F36E206823A0CA8740E7A7157 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50989 IP: 193.104.214.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:01:0f:36:e2:06:82:3a:0c:a8:74:0e:7a:71:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1abe5eecb23af569aa701a7ab16cf7ac1f90f960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c0:76:da:03:d0:63:14:79:56:e8:53:82:b8: 42:1d:a2:30:77:04:11:5c:2b:35:af:c6:e7:93:90: 52:ec:79:82:82:5f:ec:bb:7a:0c:95:ad:62:5b:aa: 81:9d:8f:2c:19:ee:f4:af:59:0e:d6:5f:93:1f:67: d4:e4:34:01:2b:19:aa:1e:45:21:06:ec:6a:b7:ea: b7:bd:70:31:40:42:ba:93:15:75:22:b9:e6:32:13: 35:57:e4:27:d0:32:c9:11:18:28:04:b7:e1:6a:e8: 80:43:84:33:e7:0d:64:2d:e0:f1:a9:88:fd:68:b5: 01:22:8e:7f:11:76:06:79:34:d5:b9:95:c8:ee:0c: 0e:90:6f:10:ba:de:5e:11:74:78:14:37:42:a2:a0: b4:e0:90:50:de:30:3f:51:db:42:b0:c8:38:6b:7f: 16:c1:ce:f8:fa:e5:d8:83:ea:14:bd:78:93:2b:b6: d5:8d:4d:7b:03:6f:18:99:6e:cc:97:90:e6:20:f0: 41:5f:c6:e7:78:19:61:89:9e:d6:27:fd:dd:48:d0: 3c:e1:93:46:54:88:5b:eb:d4:d3:49:74:6b:17:a3: 81:8a:82:54:ed:ba:36:50:47:8d:10:56:0c:2e:c1: bd:21:97:5a:2c:96:33:f6:49:48:6c:aa:77:84:76: a4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.214.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50989 Signature Algorithm: sha256WithRSAEncryption 15:41:d3:38:38:98:8e:1f:3f:b5:b2:aa:a9:77:33:44:a7:a2: 68:f2:c3:ad:88:76:84:dd:11:32:7c:4a:8a:cd:cb:12:27:2e: c2:e3:df:46:c3:fc:5f:66:1a:fd:c7:0c:d9:d1:bb:d9:64:23: 12:16:1d:9c:a1:9c:74:1d:87:a0:b4:30:d3:6f:a0:63:7f:df: 33:c0:65:8e:e6:6c:2b:ed:42:26:50:8d:ee:0e:e0:82:1f:f5: e9:a7:42:6c:e4:52:67:f4:c1:54:82:cf:bb:6b:76:99:f4:d2: 28:91:a2:40:9f:7c:b4:30:84:e9:4d:73:8a:13:b7:1f:7d:f7: 97:fa:77:2a:ae:49:b2:75:c4:ad:ec:d6:12:f5:45:ab:40:e6: 88:f0:06:ef:45:46:13:3e:40:90:ce:3b:14:37:7c:1c:eb:dc: 51:50:bc:1b:78:ce:1b:44:28:27:41:7d:1e:80:bb:7d:74:f3: d2:2c:75:8f:c7:06:30:72:a7:5e:b6:40:ba:2a:63:f9:97:c0: 03:26:ab:7f:bc:7a:26:ee:d1:9b:73:85:9c:2a:db:03:7e:14: ee:3e:69:56:d9:4f:10:f3:13:47:2d:21:09:a7:da:63:11:7e: 18:32:fb:6e:c9:10:41:46:88:13:9d:2a:58:38:c4:a6:93:68: fc:0a:d5:fc -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8EQEPNuIGgjoMqHQOenFXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWJlNWVlY2IyM2FmNTY5YWE3MDFhN2FiMTZjZjdhYzFmOTBmOTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MB22gPQYxR5VuhTgrhCHaIwdwQR XCs1r8bnk5BS7HmCgl/su3oMla1iW6qBnY8sGe70r1kO1l+TH2fU5DQBKxmqHkUh Buxqt+q3vXAxQEK6kxV1IrnmMhM1V+Qn0DLJERgoBLfhauiAQ4Qz5w1kLeDxqYj9 aLUBIo5/EXYGeTTVuZXI7gwOkG8Qut5eEXR4FDdCoqC04JBQ3jA/UdtCsMg4a38W wc74+uXYg+oUvXiTK7bVjU17A28YmW7Ml5DmIPBBX8bneBlhiZ7WJ/3dSNA84ZNG VIhb69TTSXRrF6OBioJU7bo2UEeNEFYMLsG9IZdaLJYz9klIbKp3hHak+wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFBq+XuyyOvVpqnAaerFs96wfkPlgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxL2JlYzMz NS01ZWUwLTRjNGQtYmRhNy03ZTZkMTJjMzczNmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvYmVjMzM1 LTVlZTAtNGM0ZC1iZGE3LTdlNmQxMmMzNzM2Zi8xL0dyNWU3TEk2OVdtcWNCcDZz V3ozckItUS1XQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwWjWMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDHLTANBgkqhkiG9w0BAQsFAAOCAQEAFUHTODiYjh8/tbKqqXczRKeiaPLDrYh2 hN0RMnxKis3LEicuwuPfRsP8X2Ya/ccM2dG72WQjEhYdnKGcdB2HoLQw02+gY3/f M8BljuZsK+1CJlCN7g7ggh/16adCbORSZ/TBVILPu2t2mfTSKJGiQJ98tDCE6U1z ihO3H333l/p3Kq5JsnXErezWEvVFq0DmiPAG70VGEz5AkM47FDd8HOvcUVC8G3jO G0QoJ0F9HoC7fXTz0ix1j8cGMHKnXrZAuipj+ZfAAyarf7x6Ju7Rm3OFnCrbA34U 7j5pVtlPEPMTRy0hCafaYxF+GDL7bskQQUaIE50qWDjEppNo/ArV/A== -----END CERTIFICATE-----Generated at Mon Feb 2 08:13:32 2026 by rpki-client