This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer File: GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer (raw, json) Hash identifier: dTEpT1BQKwx3WJclK+tcyGg15VTd1YIQ6bh327ZB7Kg= Subject key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759219AA8F2FE03773DDD6D899A8744 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199939 AS: 202706 AS: 210091 IP: 45.133.248.0/23 IP: 45.139.120.0/23 IP: 89.19.60.0/22 IP: 141.98.2.0/23 IP: 185.42.8.0/22 IP: 185.156.160.0/22 IP: 212.237.253.0/24 IP: 2a01:5860::/32 IP: 2a07:9fc0::/29 IP: 2a0d:bb40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:21:9a:a8:f2:fe:03:77:3d:dd:6d:89:9a:87:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ae9db29aa9308e1751b03d0d6999bb868805886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d6:ee:bf:93:e3:27:ff:15:1e:e4:1b:97:4b: 8d:96:de:43:11:1e:73:2e:3e:6d:ff:1e:54:d7:2b: 82:fd:c0:a2:28:e2:0c:3d:34:f4:ec:4e:5d:24:98: f1:f6:69:3b:c8:7d:66:54:cb:b1:b1:65:bf:9c:30: 92:c8:09:6e:f0:4f:94:0c:79:b8:fd:1c:58:85:06: a9:07:97:61:3f:3e:7e:5e:b4:eb:e2:9b:02:5a:ea: b9:e7:b5:d1:4e:f1:08:f2:82:65:ef:a4:8c:89:78: 74:8b:de:21:6b:a9:f8:1e:aa:c2:6e:a3:c5:8d:e8: 46:d8:1e:68:c8:73:d8:aa:97:67:ef:52:7b:0c:48: 55:cb:89:bc:9a:db:e4:cb:36:1b:d1:dd:3b:3a:f3: d3:a7:2a:ee:af:7a:8c:06:f3:6f:40:14:f9:30:c7: 22:67:2c:40:4c:74:eb:a3:8c:88:fd:9f:86:e7:5f: c2:e8:d5:39:5b:e5:43:80:c6:b4:cb:f4:a1:73:4d: cf:32:2b:dc:aa:ce:76:c7:3f:b1:a2:26:eb:b6:9a: cf:0c:bb:07:96:b1:b3:f9:70:1a:60:87:d8:1f:2a: 4b:77:d2:5a:5e:ca:5c:38:43:d0:98:07:19:f7:31: a5:cc:cc:94:1d:21:dc:10:8d:c4:ee:83:5f:07:4e: 47:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.248.0/23 45.139.120.0/23 89.19.60.0/22 141.98.2.0/23 185.42.8.0/22 185.156.160.0/22 212.237.253.0/24 IPv6: 2a01:5860::/32 2a07:9fc0::/29 2a0d:bb40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199939 202706 210091 Signature Algorithm: sha256WithRSAEncryption b0:80:9f:43:22:bc:cb:ed:4e:0d:f8:dc:7e:a6:a3:34:ad:8b: 78:05:d7:58:85:ad:e3:15:2a:27:78:7d:f4:cb:cf:be:9a:4a: 00:21:22:42:01:27:50:3e:c0:c7:1c:96:18:3f:08:99:14:3f: 68:ed:d7:15:60:a5:65:49:4a:3b:47:8f:93:f4:e0:b5:b6:4f: 01:4b:33:ed:be:2b:91:d5:40:aa:88:d0:4d:0a:f2:5b:56:c4: 8e:f2:ce:8a:31:f8:92:19:69:f1:6c:64:d8:bd:45:2c:b3:39: 58:96:5a:42:52:47:85:7b:c2:c7:5e:17:67:41:92:71:b4:28: d9:56:eb:2a:51:a6:6a:0c:31:99:2a:50:8f:4f:f8:e4:50:a5: 10:67:77:e8:a2:cc:18:73:e8:32:95:97:97:30:a0:ca:92:42: 5d:ed:04:52:b9:02:c2:90:e0:db:29:b0:7d:95:4b:d1:63:e0: 5c:c0:d6:9d:29:df:7f:63:c2:d6:e5:c9:35:28:11:c4:9c:f0: c3:06:ab:fa:c1:81:8d:35:97:e3:c5:a5:7f:c1:27:85:e4:e1: 85:48:21:c4:b4:69:67:4c:2d:0f:52:5c:17:6e:83:4c:c6:63: a7:90:89:65:24:9a:d7:70:3c:e4:30:a8:ff:27:1a:e5:5c:7d: 10:fa:7c:d9 -----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgISAZt3WSGaqPL+A3c93W2JmodEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWU5ZGIyOWFhOTMwOGUxNzUxYjAzZDBkNjk5OWJiODY4ODA1ODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9tbuv5PjJ/8VHuQbl0uNlt5DER5z Lj5t/x5U1yuC/cCiKOIMPTT07E5dJJjx9mk7yH1mVMuxsWW/nDCSyAlu8E+UDHm4 /RxYhQapB5dhPz5+XrTr4psCWuq557XRTvEI8oJl76SMiXh0i94ha6n4HqrCbqPF jehG2B5oyHPYqpdn71J7DEhVy4m8mtvkyzYb0d07OvPTpyrur3qMBvNvQBT5MMci ZyxATHTro4yI/Z+G51/C6NU5W+VDgMa0y/Shc03PMivcqs52xz+xoibrtprPDLsH lrGz+XAaYIfYHypLd9JaXspcOEPQmAcZ9zGlzMyUHSHcEI3E7oNfB05HawIDAQAB o4IC6zCCAucwHQYDVR0OBBYEFBrp2ymqkwjhdRsD0NaZm7hogFiGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlL2ViNzgz NS1kMzY0LTRlMjgtOWE4Mi1lZDkyMzFmYmFlZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvZWI3ODM1 LWQzNjQtNGUyOC05YTgyLWVkOTIzMWZiYWVkMS8xL0d1bmJLYXFUQ09GMUd3UFEx cG1idUdpQVdJWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGCCsGAQUF BwEHAQH/BFEwTzAwBAIAATAqAwQBLYX4AwQBLYt4AwQCWRM8AwQBjWICAwQCuSoI AwQCuZygAwQA1O39MBsEAgACMBUDBQAqAVhgAwUDKgefwAMFACoNu0AwJAYIKwYB BQUHAQgBAf8EFTAToBEwDwIDAw0DAgMDF9ICAwM0qzANBgkqhkiG9w0BAQsFAAOC AQEAsICfQyK8y+1ODfjcfqajNK2LeAXXWIWt4xUqJ3h99MvPvppKACEiQgEnUD7A xxyWGD8ImRQ/aO3XFWClZUlKO0ePk/TgtbZPAUsz7b4rkdVAqojQTQryW1bEjvLO ijH4khlp8Wxk2L1FLLM5WJZaQlJHhXvCx14XZ0GScbQo2VbrKlGmagwxmSpQj0/4 5FClEGd36KLMGHPoMpWXlzCgypJCXe0EUrkCwpDg2ymwfZVL0WPgXMDWnSnff2PC 1uXJNSgRxJzwwwar+sGBjTWX48Wlf8EnheThhUghxLRpZ0wtD1JcF26DTMZjp5CJ ZSSa13A85DCo/yca5Vx9EPp82Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:54 2026 by rpki-client