This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer File: T01-Grss2D6aLemgazkbOlJERBs.cer (raw, json) Hash identifier: lTLvXEjjvB9a5Phkun6FBr7e6SIbEh/GdBpVHSzOsgU= Subject key identifier: 4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F0078D72B9247349B4D15BF7EA8E8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.34.192.0/25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:00:78:d7:2b:92:47:34:9b:4d:15:bf:7e:a8:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:eb:16:01:ce:b2:cb:9d:fa:e9:6a:67:f0:42: 96:55:5b:3d:f4:0a:6a:d5:ac:26:b8:d9:12:b1:3c: 25:bf:19:65:ae:53:ef:63:b3:ea:01:94:4d:b9:d9: 7b:46:fe:c4:a6:0a:be:69:cb:36:07:17:8e:c0:10: 9c:a5:86:e8:ad:13:9a:06:c7:fe:e5:f1:0e:41:e2: af:ef:3a:d6:5d:a9:b8:f8:99:8a:37:fe:f4:11:05: cf:3d:5a:10:f6:8b:3b:47:8f:c3:29:2f:b1:b4:9d: 20:c0:61:4c:2f:59:2b:02:d8:b2:f8:3f:11:59:08: 7a:19:3d:b9:ce:2b:81:99:23:9d:bc:ca:64:33:66: 77:fe:95:55:ee:ca:c5:26:75:3e:72:72:07:d0:58: 23:9f:26:98:2d:38:f4:51:89:bc:c8:34:d2:2d:ad: 20:06:0d:23:73:00:62:89:b6:e6:fc:88:89:6a:1c: a5:7e:ed:19:3d:c1:f3:6d:4a:6e:bf:fd:5f:2b:d3: ef:b3:87:94:81:a0:95:ce:01:72:ca:f4:03:31:c9: b4:48:36:70:b0:b2:a1:70:d4:c0:75:32:0c:93:97: dc:e2:69:9b:56:42:ee:41:b7:67:bc:8e:e8:43:01: 2b:7a:f2:c4:a2:ef:74:74:ea:33:24:78:d8:c3:e2: 95:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.192.0/25 Signature Algorithm: sha256WithRSAEncryption 85:a9:c9:a4:fe:2d:f3:7e:e9:ef:e2:ed:9e:41:c0:1b:63:cb: c9:58:e4:aa:a0:ff:1e:10:cb:6c:33:e1:90:0e:f2:c6:60:7f: 1a:79:b6:10:a7:ae:db:07:e3:cc:08:e5:64:3d:2d:fd:0a:8c: 0e:5b:4b:f7:3b:a1:bc:8f:2a:9b:1f:8c:6e:b1:38:5a:d7:24: 8f:ec:13:89:7a:44:b2:31:1f:72:e0:3a:26:dc:54:4b:2d:ea: 7f:91:c1:9c:20:90:2f:27:45:fd:1d:a3:45:0f:52:bb:fd:1b: a8:25:33:2e:c2:5c:ff:16:4b:25:57:65:1e:e0:be:c4:22:2b: ee:4c:a7:ab:cb:86:91:ff:ac:cf:3c:5d:48:1e:48:e8:fe:db: 8d:c2:ee:6d:c0:d5:9b:70:de:8a:9c:a6:50:83:70:ed:e5:9a: 11:f4:9b:16:52:96:f2:69:d7:b7:9d:91:02:07:af:82:f1:8f: f5:2c:8d:34:98:ab:99:e2:56:96:42:37:f9:75:9f:05:4b:f7: 5c:a9:a2:d1:7b:0a:9e:4d:0e:0e:01:0d:db:cd:84:56:db:7e: 8c:4a:9a:ab:88:e5:c3:b5:67:8a:f0:b5:e7:e6:63:be:71:bd: cd:08:68:07:28:61:71:95:5d:be:66:15:56:22:c1:4d:47:d6: d6:4e:7a:e7 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt5fwB41yuSRzSbTRW/fqjoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjRkN2UxYWJiMmNkODNlOWEyZGU5YTA2YjM5MWIzYTUyNDQ0NDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOsWAc6yy5366Wpn8EKWVVs99Apq 1awmuNkSsTwlvxllrlPvY7PqAZRNudl7Rv7Epgq+acs2BxeOwBCcpYborROaBsf+ 5fEOQeKv7zrWXam4+JmKN/70EQXPPVoQ9os7R4/DKS+xtJ0gwGFML1krAtiy+D8R WQh6GT25ziuBmSOdvMpkM2Z3/pVV7srFJnU+cnIH0FgjnyaYLTj0UYm8yDTSLa0g Bg0jcwBiibbm/IiJahylfu0ZPcHzbUpuv/1fK9Pvs4eUgaCVzgFyyvQDMcm0SDZw sLKhcNTAdTIMk5fc4mmbVkLuQbdnvI7oQwErevLEou90dOozJHjYw+KVRwIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFE9Nfhq7LNg+mi3poGs5GzpSREQbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4L2MyZjZh MC0xY2FjLTQ2YzMtODc0MC01MWY1YzQ1OGYxMmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvYzJmNmEw LTFjYWMtNDZjMy04NzQwLTUxZjVjNDU4ZjEyYy8xL1QwMS1HcnNzMkQ2YUxlbWdh emtiT2xKRVJCcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAATAHAwUHwSLAADANBgkqhkiG9w0BAQsFAAOCAQEAhanJ pP4t837p7+LtnkHAG2PLyVjkqqD/HhDLbDPhkA7yxmB/Gnm2EKeu2wfjzAjlZD0t /QqMDltL9zuhvI8qmx+MbrE4Wtckj+wTiXpEsjEfcuA6JtxUSy3qf5HBnCCQLydF /R2jRQ9Su/0bqCUzLsJc/xZLJVdlHuC+xCIr7kynq8uGkf+szzxdSB5I6P7bjcLu bcDVm3DeipymUINw7eWaEfSbFlKW8mnXt52RAgevgvGP9SyNNJirmeJWlkI3+XWf BUv3XKmi0XsKnk0ODgEN282EVtt+jEqaq4jlw7VnivC15+ZjvnG9zQhoByhhcZVd vmYVViLBTUfW1k565w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:31 2026 by rpki-client