This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer File: GryfszEqSr8d3ChRjnYI4Owydd8.cer (raw, json) Hash identifier: QWFD+8c2eamS2L/A02SrN1gBGd1mPbZv41nBItvJ5Ck= Subject key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AD98A199DB4DBEB36D3B23F4F114D8078 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 01 Dec 2025 10:51:37 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 209604 IP: 89.35.52.0/24 IP: 93.115.10.0/24 IP: 93.177.100.0/22 IP: 185.93.68.0/22 IP: 185.132.126.0/24 IP: 185.255.92.0/22 IP: 193.164.4.0/22 IP: 2a05:f7c0::/29 IP: 2a0c:5f40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:8a:19:9d:b4:db:eb:36:d3:b2:3f:4f:11:4d:80:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 1 10:51:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:83:ab:57:e9:5f:2a:b8:25:32:03:e4:20:79: 1a:2d:38:30:6f:d4:b4:fb:48:60:c4:13:a6:ae:5f: 18:8b:ea:d2:10:30:fb:62:28:af:b8:84:a8:84:e7: 80:eb:57:ce:79:9b:ce:f0:9d:ec:dd:81:ef:30:21: 1d:e5:2d:74:29:4b:a6:8c:92:0e:ea:bd:a6:1e:b0: 46:03:da:2c:1d:76:21:a6:b6:b3:57:d5:a0:12:fe: c6:54:c4:76:a9:02:85:5e:4f:42:ee:b3:9b:9c:63: cc:ec:e9:fd:40:ac:ad:c2:59:82:f9:06:ce:65:69: 7d:15:a1:2b:4f:04:57:24:e9:1a:e6:9a:17:8b:ea: 8f:a1:bf:e9:34:3a:7c:b2:07:e2:6a:53:3e:b1:f2: 04:fc:e7:99:cf:b8:cf:63:ff:72:20:62:26:4c:c3: a2:2f:2a:00:d9:3c:ee:c9:cd:e5:9c:66:cf:45:2f: aa:49:72:79:de:95:03:3a:65:91:26:fd:63:70:4a: b1:40:d3:91:37:ba:d8:8f:e4:4c:3e:a2:82:f4:da: 6d:26:05:ac:ee:13:59:2f:3b:fb:a2:e2:24:43:bf: a1:03:03:25:87:19:e8:9d:29:d1:3f:e8:87:c2:75: 52:0b:02:23:08:6e:e4:51:92:98:84:88:61:8b:77: 05:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.52.0/24 93.115.10.0/24 93.177.100.0/22 185.93.68.0/22 185.132.126.0/24 185.255.92.0/22 193.164.4.0/22 IPv6: 2a05:f7c0::/29 2a0c:5f40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209604 Signature Algorithm: sha256WithRSAEncryption 65:a3:76:a4:94:71:32:ce:15:c6:74:32:d6:79:b8:4d:8d:b3: 88:d9:cd:94:2a:5d:5b:72:22:5e:91:b4:82:81:be:00:11:19: e5:23:cc:91:ef:b4:8a:07:eb:a7:dd:c7:93:de:7b:bd:de:b2: ff:09:5b:f8:fe:76:92:f6:7a:e6:e2:e7:a7:f8:c6:d3:b8:1e: 69:77:c5:c6:96:fc:17:97:f2:f9:6d:3f:a5:bb:da:3c:41:d8: 28:38:ae:71:60:b4:e7:84:dd:7b:9e:d4:48:b7:a8:aa:c3:ef: 08:11:5d:09:d2:36:32:a1:65:05:63:34:01:c0:0d:6a:5a:42: b8:04:e8:41:13:66:5c:12:ae:5e:6f:0c:f6:31:fa:f9:d5:53: 53:04:36:c9:7a:56:2b:46:0e:64:ba:15:d5:fc:68:65:cd:a0: df:90:8e:68:6c:16:49:d0:d6:9a:cd:4c:3c:12:05:d0:87:de: d2:63:b4:34:04:9e:f2:50:4b:73:fb:73:53:08:43:5e:c4:7f: 67:51:90:6e:d7:e2:6c:50:e1:44:61:11:f7:f0:5b:0f:86:f1: 31:50:b7:b1:48:08:97:cd:28:45:2c:4e:9e:51:29:6c:c9:a0: bc:9e:e4:b3:6e:d1:ae:f3:eb:44:e1:8d:21:68:c3:b8:af:c5: 3d:0b:5d:90 -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgISAZrZihmdtNvrNtOyP08RTYB4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAxMTA1MTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWJjOWZiMzMxMmE0YWJmMWRkYzI4NTE4ZTc2MDhlMGVjMzI3NWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24OrV+lfKrglMgPkIHkaLTgwb9S0 +0hgxBOmrl8Yi+rSEDD7YiivuISohOeA61fOeZvO8J3s3YHvMCEd5S10KUumjJIO 6r2mHrBGA9osHXYhprazV9WgEv7GVMR2qQKFXk9C7rObnGPM7On9QKytwlmC+QbO ZWl9FaErTwRXJOka5poXi+qPob/pNDp8sgfialM+sfIE/OeZz7jPY/9yIGImTMOi LyoA2Tzuyc3lnGbPRS+qSXJ53pUDOmWRJv1jcEqxQNORN7rYj+RMPqKC9NptJgWs 7hNZLzv7ouIkQ7+hAwMlhxnonSnRP+iHwnVSCwIjCG7kUZKYhIhhi3cF7wIDAQAB o4IC2jCCAtYwHQYDVR0OBBYEFBq8n7MxKkq/HdwoUY52CODsMnXfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3LzI2ZTc3 Zi1mYTM3LTQ5MDAtYTMzZC1kMWQ2ZGVhOTg3OTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvMjZlNzdm LWZhMzctNDkwMC1hMzNkLWQxZDZkZWE5ODc5MC8xL0dyeWZzekVxU3I4ZDNDaFJq bllJNE93eWRkOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGCCsGAQUF BwEHAQH/BEowSDAwBAIAATAqAwQAWSM0AwQAXXMKAwQCXbFkAwQCuV1EAwQAuYR+ AwQCuf9cAwQCwaQEMBQEAgACMA4DBQMqBffAAwUDKgxfQDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMDMsQwDQYJKoZIhvcNAQELBQADggEBAGWjdqSUcTLOFcZ0MtZ5 uE2Ns4jZzZQqXVtyIl6RtIKBvgARGeUjzJHvtIoH66fdx5Pee73esv8JW/j+dpL2 eubi56f4xtO4Hml3xcaW/BeX8vltP6W72jxB2Cg4rnFgtOeE3Xue1Ei3qKrD7wgR XQnSNjKhZQVjNAHADWpaQrgE6EETZlwSrl5vDPYx+vnVU1MENsl6VitGDmS6FdX8 aGXNoN+QjmhsFknQ1prNTDwSBdCH3tJjtDQEnvJQS3P7c1MIQ17Ef2dRkG7X4mxQ 4URhEffwWw+G8TFQt7FICJfNKEUsTp5RKWzJoLye5LNu0a7z60ThjSFow7ivxT0L XZA= -----END CERTIFICATE-----Generated at Fri Dec 5 16:52:46 2025 by rpki-client