This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer File: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer (raw, json) Hash identifier: nk2JGX0I+AQKsvbqejkb0tqeMtmOKNSUZ7C5D6ryg7E= Subject key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A350F42834BE93EF54F4EAE93A8C11 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.115.161.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:50:f4:28:34:be:93:ef:54:f4:ea:e9:3a:8c:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7f:35:2a:43:17:13:1e:66:5b:d2:78:30:aa: 3c:8c:54:5c:63:45:68:eb:cb:98:e2:84:43:fe:c8: 26:06:1d:17:5c:46:35:8c:61:f2:a5:6b:16:19:f6: 3b:61:91:59:0e:32:b8:f5:5c:59:90:61:14:6c:5f: b1:16:23:88:8d:f1:72:e8:02:5a:e4:05:cc:7a:c9: d2:1d:29:1a:36:56:0e:15:30:fe:af:3a:15:ab:7a: 70:95:41:47:31:a6:5f:02:92:04:91:34:92:61:88: 28:d9:3c:39:27:e5:b9:39:4f:2f:f8:79:c3:85:1e: 5c:11:2b:a2:69:65:9c:ba:9c:ee:0c:25:43:b5:37: d7:0f:85:4f:b5:bf:29:ee:5b:fa:ef:02:d4:79:71: 6f:46:5a:9b:f7:2d:9f:6a:74:d1:64:f1:b7:69:01: e1:6d:a8:96:2f:10:ec:2b:c9:30:be:e4:12:42:2c: 0a:8b:43:2d:d9:0e:c8:c8:12:b1:fc:33:6c:53:a1: 0a:74:da:63:95:f5:6f:22:21:20:e7:81:52:4b:d4: d7:de:87:3f:7d:85:7d:ee:c7:37:08:86:82:fc:5e: 0b:a7:a0:9e:91:7b:fc:2c:8c:63:0a:dd:69:b5:a1: ea:1b:26:ee:25:b6:83:81:0e:b0:88:c6:72:3c:39: 3c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.115.161.0/24 Signature Algorithm: sha256WithRSAEncryption 56:c1:b2:a9:06:fb:ae:be:35:38:64:23:c2:69:0c:4b:b2:a3: 52:f6:ee:46:80:6d:cf:2c:8e:47:22:7e:7e:0a:8f:df:ea:c6: fe:36:58:b2:56:fb:39:e5:5d:2b:1b:80:57:66:39:ff:80:b3: ef:05:50:4f:06:97:ae:22:44:45:7e:47:1c:c0:f5:f2:ea:92: 21:9c:5c:a8:df:3b:69:eb:20:69:f8:3a:ed:48:f2:15:79:da: 29:dd:4e:df:5c:6f:ce:80:d1:e1:83:51:3a:72:db:3c:f8:e9: 3f:df:73:5a:5c:1f:b4:96:67:bb:d7:00:f5:11:4f:7a:98:73: 6f:7d:ae:7a:c1:66:dd:42:0d:6e:4d:80:d9:db:dc:40:51:68: 04:98:ba:4e:0a:01:e5:4d:ae:7d:a5:7a:2f:0e:d8:53:82:d0: 0a:8d:95:0b:1e:c2:42:56:f6:29:49:a6:aa:0e:53:e0:90:b7: df:9e:12:6c:84:33:3c:2e:69:7a:a9:4e:69:b3:09:e0:70:1c: fe:52:dd:46:cc:6e:42:fe:01:d4:c5:3f:56:2f:eb:f2:2e:a0: 56:71:4b:4d:4a:b5:8d:1d:c5:90:9e:e3:c6:3d:e7:dd:f5:9e: 46:e2:f5:8d:30:b8:42:02:f7:a6:d0:68:fb:9d:07:b9:11:f5: 6b:81:9e:2d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4o1D0KDS+k+9U9OrpOowRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2I1YjQ5MTNjYzc4ZTQwODAzYzAwYmVjNmIxYTlkYzQ4ZmYzNjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH81KkMXEx5mW9J4MKo8jFRcY0Vo 68uY4oRD/sgmBh0XXEY1jGHypWsWGfY7YZFZDjK49VxZkGEUbF+xFiOIjfFy6AJa 5AXMesnSHSkaNlYOFTD+rzoVq3pwlUFHMaZfApIEkTSSYYgo2Tw5J+W5OU8v+HnD hR5cESuiaWWcupzuDCVDtTfXD4VPtb8p7lv67wLUeXFvRlqb9y2fanTRZPG3aQHh baiWLxDsK8kwvuQSQiwKi0Mt2Q7IyBKx/DNsU6EKdNpjlfVvIiEg54FSS9TX3oc/ fYV97sc3CIaC/F4Lp6CekXv8LIxjCt1ptaHqGybuJbaDgQ6wiMZyPDk8QwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIO1tJE8x45AgDwAvsaxqdxI/zaEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhL2RjNTcz ZC1hM2RiLTQxZjktOGMzZi04Njc5NjVlYjUwY2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvZGM1NzNk LWEzZGItNDFmOS04YzNmLTg2Nzk2NWViNTBjYS8xL2c3VzBrVHpIamtDQVBBQy14 ckdwM0VqX05vUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuXOhMA0GCSqGSIb3DQEBCwUAA4IBAQBWwbKp BvuuvjU4ZCPCaQxLsqNS9u5GgG3PLI5HIn5+Co/f6sb+NliyVvs55V0rG4BXZjn/ gLPvBVBPBpeuIkRFfkccwPXy6pIhnFyo3ztp6yBp+DrtSPIVedop3U7fXG/OgNHh g1E6cts8+Ok/33NaXB+0lme71wD1EU96mHNvfa56wWbdQg1uTYDZ29xAUWgEmLpO CgHlTa59pXovDthTgtAKjZULHsJCVvYpSaaqDlPgkLffnhJshDM8Lml6qU5pswng cBz+Ut1GzG5C/gHUxT9WL+vyLqBWcUtNSrWNHcWQnuPGPefd9Z5G4vWNMLhCAvem 0Gj7nQe5EfVrgZ4t -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:02 2026 by rpki-client