This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer File: g0hoQbT0rcViZMWWMIUYKiIORtQ.cer (raw, json) Hash identifier: 5cVMQY6kR1hzs6PPjGRnEJp4ioRc11UOOwYmdj4AiEk= Subject key identifier: 83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78353A033AE01053899F5B1712FCFCD3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206035 IP: 185.148.188.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:3a:03:3a:e0:10:53:89:9f:5b:17:12:fc:fc:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83486841b4f4adc56264c5963085182a220e46d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:79:c0:f6:50:56:8a:30:10:e8:d2:75:d8:a5: 6a:28:87:a8:a9:0c:d4:36:3c:ea:5a:60:91:81:3f: 7b:dc:e6:7e:28:54:53:fb:d8:85:da:17:7c:9c:fd: 1c:78:38:ca:3c:8e:27:91:12:26:29:11:6a:d6:43: 86:8f:a4:94:56:c8:56:72:3b:8d:27:4d:bf:5d:90: 53:69:46:4d:55:df:12:20:fa:89:e0:f4:d6:80:99: ca:7f:4a:03:1a:4a:8d:cd:de:c4:a6:2b:05:67:9b: e2:fb:a8:29:4d:20:99:39:56:43:2b:f0:86:fb:76: 99:84:57:f4:af:67:e3:a2:f1:14:09:94:a7:03:d8: 77:3a:be:57:55:60:c6:47:b0:1e:72:9b:01:f9:dc: 6e:44:94:d6:f1:49:f4:8d:37:84:46:2d:bf:ce:8d: 09:e8:49:41:ef:ee:ed:c1:e2:22:00:04:e3:bc:e6: 42:38:61:a2:93:59:f0:05:fb:c0:cf:51:f9:ea:b9: bd:1a:ad:2f:96:48:1e:0f:c1:86:11:79:fd:84:3f: 73:20:1c:6b:ff:9d:da:6e:74:62:95:c0:86:ed:cc: 54:37:c9:76:1a:46:54:ab:26:73:48:8e:8b:65:c5: a7:23:28:46:4c:ca:22:f2:24:99:b8:d7:3c:08:6c: a2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.148.188.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206035 Signature Algorithm: sha256WithRSAEncryption 34:a0:e6:5d:bd:e9:a5:69:a2:e2:d1:e6:c1:8e:d4:a5:b0:19: 66:27:45:bc:6d:27:ee:4e:f7:da:4f:f2:5d:39:e0:d2:09:be: 05:61:a1:41:d2:42:f0:d0:c4:52:48:00:3f:d8:50:cf:b7:b4: 5d:65:e8:4d:00:f1:30:22:a0:5c:06:14:65:10:c1:cc:d5:20: 0b:84:88:57:36:0c:d7:f6:50:55:dc:35:b5:f0:3e:ed:10:61: 0a:24:b1:67:6c:58:81:dd:47:8f:a4:a6:5c:ac:2e:22:b2:43: f6:19:19:9b:3e:2f:f6:51:dd:87:35:93:b3:7a:58:9b:62:09: e9:91:76:b1:0c:25:48:71:29:fa:80:a8:f9:ac:c9:3b:0b:2b: ef:4e:33:4d:1b:47:d3:7f:44:3c:18:e8:0a:d5:87:bb:73:42: 0b:75:80:8b:71:89:0a:6a:c2:f9:3e:1f:24:bd:31:06:3c:32: 40:35:d5:12:a4:eb:ef:35:ff:cf:91:0c:15:a4:cf:1c:83:d4: 25:61:ff:79:2d:ed:c5:51:c4:b2:d8:37:a4:d9:0f:66:ad:90: a9:81:e0:aa:6d:5c:e9:12:2b:5a:99:dd:46:b8:c6:43:8b:b5: cb:13:8f:6d:0c:7c:43:fa:37:41:94:ec:27:f4:53:96:fb:e3: a5:06:bf:bf -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NToDOuAQU4mfWxcS/PzTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzQ4Njg0MWI0ZjRhZGM1NjI2NGM1OTYzMDg1MTgyYTIyMGU0NmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnnA9lBWijAQ6NJ12KVqKIeoqQzU NjzqWmCRgT973OZ+KFRT+9iF2hd8nP0ceDjKPI4nkRImKRFq1kOGj6SUVshWcjuN J02/XZBTaUZNVd8SIPqJ4PTWgJnKf0oDGkqNzd7EpisFZ5vi+6gpTSCZOVZDK/CG +3aZhFf0r2fjovEUCZSnA9h3Or5XVWDGR7AecpsB+dxuRJTW8Un0jTeERi2/zo0J 6ElB7+7tweIiAATjvOZCOGGik1nwBfvAz1H56rm9Gq0vlkgeD8GGEXn9hD9zIBxr /53abnRilcCG7cxUN8l2GkZUqyZzSI6LZcWnIyhGTMoi8iSZuNc8CGyidwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFINIaEG09K3FYmTFljCFGCoiDkbUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyLzU3Y2Iw NC01OGNlLTQzM2ItOTNhYi0xMGJjNTlkOGZmOGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvNTdjYjA0 LTU4Y2UtNDMzYi05M2FiLTEwYmM1OWQ4ZmY4ZC8xL2cwaG9RYlQwcmNWaVpNV1dN SVVZS2lJT1J0US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuZS8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMk0zANBgkqhkiG9w0BAQsFAAOCAQEANKDmXb3ppWmi4tHmwY7UpbAZZidFvG0n 7k732k/yXTng0gm+BWGhQdJC8NDEUkgAP9hQz7e0XWXoTQDxMCKgXAYUZRDBzNUg C4SIVzYM1/ZQVdw1tfA+7RBhCiSxZ2xYgd1Hj6SmXKwuIrJD9hkZmz4v9lHdhzWT s3pYm2IJ6ZF2sQwlSHEp+oCo+azJOwsr704zTRtH039EPBjoCtWHu3NCC3WAi3GJ CmrC+T4fJL0xBjwyQDXVEqTr7zX/z5EMFaTPHIPUJWH/eS3txVHEstg3pNkPZq2Q qYHgqm1c6RIrWpndRrjGQ4u1yxOPbQx8Q/o3QZTsJ/RTlvvjpQa/vw== -----END CERTIFICATE-----Generated at Fri Jan 9 01:10:33 2026 by rpki-client