This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer File: GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer (raw, json) Hash identifier: m7tKh8+69YXE3ZPrh4n+sXaiDY3GMN/Gz+d4811W4oM= Subject key identifier: 1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783541377E0EAE55B3AB4A631D67380C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.49.76.0/22 IP: 2a01:9fa0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:41:37:7e:0e:ae:55:b3:ab:4a:63:1d:67:38:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:04:48:52:08:ba:e0:04:8d:d5:0b:34:d0:af: 07:f3:86:cc:01:1d:a0:5a:fc:17:ac:ce:ff:bf:02: 1c:cd:fc:cd:e7:db:30:21:4c:fa:e2:94:76:67:de: 58:be:fd:60:54:43:32:17:c6:d2:cd:b9:a3:69:49: 5f:7b:12:a7:7c:f8:61:60:71:46:f7:62:4e:95:71: ca:01:af:fb:e4:a5:a8:aa:62:3a:34:53:a9:60:82: d8:0f:1f:a8:ab:5b:2c:ac:0d:a4:a1:60:1e:50:79: 42:fd:c2:6a:dc:b5:83:14:f5:05:36:bc:38:64:60: 9d:c0:4c:f5:d2:12:76:3b:ce:ae:34:8b:35:e4:d0: 63:93:49:55:f6:4d:2f:0d:e7:2d:90:10:15:59:0e: 2b:ad:ca:56:ce:20:f9:b3:85:ea:01:99:13:7d:1f: c6:ca:ca:b6:a7:ab:0b:a6:c5:ea:91:6e:f8:db:99: 56:d2:b5:fe:65:02:87:1b:29:6b:a4:b6:47:e6:e1: b7:c0:7b:42:3e:2c:17:82:9c:fd:05:46:0e:09:98: 9f:3d:6c:7f:ed:16:71:bb:67:b1:57:d8:13:05:bc: 0d:08:b0:ec:71:6c:85:90:ef:f9:af:6f:8d:c2:11: c8:67:36:46:d1:53:71:2c:b9:7a:36:d5:54:33:90: 4a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.76.0/22 IPv6: 2a01:9fa0::/32 Signature Algorithm: sha256WithRSAEncryption 3b:d3:38:cb:ca:72:b9:03:08:e2:a6:9c:29:53:00:41:32:c7: 01:5c:ee:89:88:f1:fa:52:f5:90:f1:24:d3:3a:61:de:73:36: ae:82:a6:8c:66:c5:39:7f:7f:41:ad:1a:d4:0a:93:72:ed:5c: 1b:c7:d8:e5:38:bd:10:cb:2b:5a:38:8b:41:8e:b5:fd:76:80: d1:66:bd:5f:f6:d4:7c:83:b0:08:65:d5:20:c0:b4:e8:5d:6c: 4e:33:f9:6d:67:07:3b:a6:de:a2:2c:3b:f8:25:7f:83:f4:fb: f7:38:e0:3c:f9:ca:be:45:7f:85:03:1e:37:e5:0b:be:e1:90: d6:75:05:32:a4:e7:ef:9c:b9:14:78:c8:2a:ff:6f:2f:54:4f: 22:87:98:ae:dc:1b:c0:1c:d8:c7:1c:f0:2e:74:a1:d9:b7:84: a0:15:96:e0:b1:40:2b:0d:4c:0d:14:3d:0d:ec:63:7b:16:eb: d1:c8:be:bd:9f:41:26:6e:2c:93:25:1d:22:72:76:94:79:93: b6:d6:00:a8:18:74:d0:b3:02:3f:a5:49:e5:8b:f2:08:12:ae: 34:ba:08:7c:da:f4:87:8e:0f:22:41:5f:e5:da:68:f2:5a:ed: 67:bc:5d:c9:08:4e:c1:8e:e9:9d:90:e6:38:4f:60:aa:40:b0: 1c:7b:df:a0 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt4NUE3fg6uVbOrSmMdZzgMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWMyNDU2YzcwZjhhYWE1M2JkODk0MGZlMjNmMTNjZmEyNzBlNzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgRIUgi64ASN1Qs00K8H84bMAR2g WvwXrM7/vwIczfzN59swIUz64pR2Z95Yvv1gVEMyF8bSzbmjaUlfexKnfPhhYHFG 92JOlXHKAa/75KWoqmI6NFOpYILYDx+oq1ssrA2koWAeUHlC/cJq3LWDFPUFNrw4 ZGCdwEz10hJ2O86uNIs15NBjk0lV9k0vDectkBAVWQ4rrcpWziD5s4XqAZkTfR/G ysq2p6sLpsXqkW7425lW0rX+ZQKHGylrpLZH5uG3wHtCPiwXgpz9BUYOCZifPWx/ 7RZxu2exV9gTBbwNCLDscWyFkO/5r2+NwhHIZzZG0VNxLLl6NtVUM5BKtQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFBrCRWxw+KqlO9iUD+I/E8+icOdIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjL2ZmNWI4 My05YzIwLTRkOTctOTdjNy01YTFkNTU4NDM3OGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvZmY1Yjgz LTljMjAtNGQ5Ny05N2M3LTVhMWQ1NTg0Mzc4ZC8xL0dzSkZiSEQ0cXFVNzJKUVA0 ajhUejZKdzUwZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTFMMA0EAgACMAcDBQAqAZ+gMA0GCSqGSIb3 DQEBCwUAA4IBAQA70zjLynK5AwjippwpUwBBMscBXO6JiPH6UvWQ8STTOmHeczau gqaMZsU5f39BrRrUCpNy7Vwbx9jlOL0QyytaOItBjrX9doDRZr1f9tR8g7AIZdUg wLToXWxOM/ltZwc7pt6iLDv4JX+D9Pv3OOA8+cq+RX+FAx435Qu+4ZDWdQUypOfv nLkUeMgq/28vVE8ih5iu3BvAHNjHHPAudKHZt4SgFZbgsUArDUwNFD0N7GN7FuvR yL69n0EmbiyTJR0icnaUeZO21gCoGHTQswI/pUnli/IIEq40ugh82vSHjg8iQV/l 2mjyWu1nvF3JCE7BjumdkOY4T2CqQLAce9+g -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:02 2026 by rpki-client