This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer File: cGmgJahPQu8-8LYFLeP9ZejAhpI.cer (raw, json) Hash identifier: EclQpYN0uuhWt8fO1ghqX2mmgS2KKE+hNAe4D6NKJqA= Subject key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4C4A457A5DEAEEB6FF76D79F15BCE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209911 IP: 188.0.40.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:c4:a4:57:a5:de:ae:eb:6f:f7:6d:79:f1:5b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:46:e9:52:93:c7:e0:8a:09:1f:bf:9d:73: 23:f1:0e:21:6f:af:de:59:94:cd:77:f7:7c:a6:b8: 44:1a:d6:74:77:cd:04:bb:ac:ac:9d:38:70:e6:1d: f4:66:99:23:30:50:42:41:9b:c1:d2:2c:c0:c7:ea: bd:a7:f2:0c:15:49:7d:0e:6f:3d:13:42:56:53:af: df:61:76:ab:ce:c1:c1:2b:18:6a:b6:47:8d:99:5a: f3:01:7f:91:ab:64:76:5b:d2:6e:f3:95:d4:14:59: 52:d5:98:a6:8a:d3:fc:71:48:c0:18:d1:81:17:e3: 72:cb:e1:16:ac:a9:ae:c6:16:19:79:ea:05:52:df: 62:9f:65:00:45:11:1c:dc:72:c1:d4:b1:3f:da:55: ec:24:93:d6:99:d4:95:23:29:84:3a:54:d8:36:03: 11:6b:c7:c6:1e:c8:c7:68:9f:52:4e:1a:c7:6a:22: 8c:f6:95:6a:ab:cd:eb:d0:36:95:7c:8c:7e:2c:a3: 53:7a:c7:b1:1c:93:13:82:00:1f:ab:a2:85:bc:58: 27:90:42:6f:ac:98:b2:d8:32:7f:45:0f:ac:95:ee: 34:e1:ff:eb:0c:ff:ed:fb:fc:7a:34:04:40:d7:15: f0:ad:46:c8:fa:50:ce:6a:f1:c8:02:71:35:f3:9a: 82:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.0.40.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209911 Signature Algorithm: sha256WithRSAEncryption 24:1e:9b:7d:a6:de:72:69:24:38:3f:27:35:6c:f7:aa:ef:7d: 26:03:6c:a6:e9:2e:a2:d4:6c:05:cf:8d:38:95:47:22:70:39: 0b:47:be:9b:71:c7:06:df:9f:0b:83:86:82:b6:6d:50:fd:03: 35:75:c5:22:41:11:e3:45:18:e6:8c:26:f9:40:64:fc:0d:41: 82:0d:2f:3f:48:94:d8:3d:69:a2:60:23:3a:cc:37:30:be:c2: 30:33:cc:6d:0c:c9:25:a8:fe:ce:3d:f9:17:e2:97:b3:79:67: 1d:8a:e5:ea:1e:53:95:5f:1e:6b:a5:52:c2:03:e7:a5:fc:c3: f3:45:eb:53:e2:3f:d7:57:69:6d:3d:7f:ef:8c:29:6c:c0:6e: 42:2d:ca:77:8e:a0:12:99:ba:b1:da:f4:a8:4b:20:95:6d:2a: 2c:0f:9c:23:fd:ae:85:cc:ab:80:eb:ef:8f:0e:d7:d2:04:56: 94:fe:b4:0a:9b:50:70:8c:35:ce:94:e1:d8:b4:ca:80:6f:3d: 3e:1a:d5:ec:4c:a7:d3:e9:7f:b2:ae:5a:7f:04:08:8a:46:81: fe:f9:a9:96:21:80:53:c6:1d:04:0e:7a:30:1d:91:41:11:03: a3:b1:8c:39:c6:77:77:68:cf:a4:00:d9:b6:b1:f5:08:03:39: 66:bd:86:92 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pMSkV6Xerutv92158VvOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDY5YTAyNWE4NGY0MmVmM2VmMGI2MDUyZGUzZmQ2NWU4YzA4NjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzNG6VKTx+CKCR+/nXMj8Q4hb6/e WZTNd/d8prhEGtZ0d80Eu6ysnThw5h30ZpkjMFBCQZvB0izAx+q9p/IMFUl9Dm89 E0JWU6/fYXarzsHBKxhqtkeNmVrzAX+Rq2R2W9Ju85XUFFlS1ZimitP8cUjAGNGB F+Nyy+EWrKmuxhYZeeoFUt9in2UARREc3HLB1LE/2lXsJJPWmdSVIymEOlTYNgMR a8fGHsjHaJ9SThrHaiKM9pVqq83r0DaVfIx+LKNTesexHJMTggAfq6KFvFgnkEJv rJiy2DJ/RQ+sle404f/rDP/t+/x6NARA1xXwrUbI+lDOavHIAnE185qCJQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHBpoCWoT0LvPvC2BS3j/WXowIaSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlL2FkMDEx Ni03NTU4LTQ2NTYtOWZiMy01MTk5YTcxMTY4NGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvYWQwMTE2 LTc1NTgtNDY1Ni05ZmIzLTUxOTlhNzExNjg0ZC8xL2NHbWdKYWhQUXU4LThMWUZM ZVA5WmVqQWhwSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDvAAoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMz9zANBgkqhkiG9w0BAQsFAAOCAQEAJB6bfabecmkkOD8nNWz3qu99JgNspuku otRsBc+NOJVHInA5C0e+m3HHBt+fC4OGgrZtUP0DNXXFIkER40UY5owm+UBk/A1B gg0vP0iU2D1pomAjOsw3ML7CMDPMbQzJJaj+zj35F+KXs3lnHYrl6h5TlV8ea6VS wgPnpfzD80XrU+I/11dpbT1/74wpbMBuQi3Kd46gEpm6sdr0qEsglW0qLA+cI/2u hcyrgOvvjw7X0gRWlP60CptQcIw1zpTh2LTKgG89PhrV7Eyn0+l/sq5afwQIikaB /vmpliGAU8YdBA56MB2RQREDo7GMOcZ3d2jPpADZtrH1CAM5Zr2Gkg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:21 2026 by rpki-client