This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer File: g8gpOpkAnTr5kBAwsYTa2gGwsps.cer (raw, json) Hash identifier: x52kjH+GFrvFkOBfXbltdkELdjbYj4yCuqWbgj5bhug= Subject key identifier: 83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C1E47F79BA46DAFE7C4DC0B31650D0221 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 02 Feb 2026 12:15:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212022 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:47:f7:9b:a4:6d:af:e7:c4:dc:0b:31:65:0d:02:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 2 12:15:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83c8293a99009d3af9901030b184dada01b0b29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:00:8e:cb:a2:7c:ac:6b:5e:3c:66:8d:0e:0c: 39:32:bb:83:30:2b:57:12:c0:61:9a:cd:00:ad:f6: d1:dd:ea:41:cc:0b:2a:6c:4a:fb:b2:df:a4:a2:15: b7:d3:fd:47:d2:a2:ef:31:4c:8e:85:80:c7:5d:9e: 7f:92:8a:c0:e9:04:3e:f3:03:27:12:cc:d3:e8:2a: ba:16:c0:36:10:d2:44:cc:8e:f7:96:3a:c8:59:7f: f9:5f:01:b9:e7:70:6e:8d:19:33:04:ce:38:f2:88: e4:83:81:61:24:61:01:a1:b2:ee:9a:61:fc:91:a8: 07:cc:e2:55:81:c8:49:7a:67:16:8b:b0:01:11:10: 11:86:1f:49:a0:0c:79:de:9d:f2:6a:63:b9:e6:de: 98:98:7d:66:7e:60:38:fc:a6:23:ab:4c:d8:0d:f7: 02:94:d9:4f:dd:00:a1:d5:c4:d4:6d:a2:ad:bd:ed: 90:d2:2f:4b:f6:ad:4c:18:2e:40:17:b1:1a:8e:d5: 50:18:17:fe:18:ca:bb:b0:62:9f:cf:37:df:75:24: b2:09:bd:d8:96:44:8d:cf:a8:44:51:ca:31:8e:16: 21:5d:8a:39:ce:cd:d1:a5:4f:1c:c7:3d:99:7c:ec: 19:a4:51:00:39:f0:2a:4d:20:58:4b:54:2e:7d:7f: 4f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212022 Signature Algorithm: sha256WithRSAEncryption a4:b6:66:5b:40:55:7e:71:75:22:2c:70:7a:4d:0f:33:5f:20: 0a:9b:43:75:6f:a5:af:8b:e8:9b:8a:17:f2:b2:4d:11:f4:e6: fe:61:9d:f0:f5:88:97:65:90:e1:fa:b5:14:22:73:05:f9:ae: a9:7c:58:8a:2e:7c:31:57:98:ec:bf:0f:51:13:40:07:2e:01: 37:f1:80:71:cd:d7:4a:a0:5d:a3:f7:b2:7e:d2:5d:e9:5e:ff: 06:86:17:06:20:f7:3f:c3:fc:7f:6d:ce:25:2b:ec:cc:dd:b7: 93:f4:90:95:46:6f:ac:72:71:07:83:5c:fb:9a:d9:c0:c3:65: 35:f8:63:9f:b1:6c:62:15:83:a5:5c:b9:a5:e0:6c:f8:4f:d4: 25:0f:27:72:6f:c9:d7:6d:72:4a:bb:ea:cd:ae:51:21:0c:0c: 2a:33:53:2f:bd:55:54:69:38:66:f8:5e:2c:a9:c3:c4:75:32: 26:16:50:41:81:65:ba:9b:f2:e0:50:3e:49:8d:67:13:f6:58: 15:89:1c:ef:02:ae:fd:54:a7:e9:1e:5a:41:cf:e1:d5:57:dc: 33:d1:21:eb:f9:53:66:d9:9d:d5:8c:0b:05:46:62:54:f4:01: f8:39:3d:1a:47:13:9c:78:6c:54:be:01:2f:dd:f0:a3:fc:b3: c5:f2:49:00 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZweR/ebpG2v58TcCzFlDQIhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjAyMTIxNTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2M4MjkzYTk5MDA5ZDNhZjk5MDEwMzBiMTg0ZGFkYTAxYjBiMjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQCOy6J8rGtePGaNDgw5MruDMCtX EsBhms0ArfbR3epBzAsqbEr7st+kohW30/1H0qLvMUyOhYDHXZ5/korA6QQ+8wMn EszT6Cq6FsA2ENJEzI73ljrIWX/5XwG553BujRkzBM448ojkg4FhJGEBobLummH8 kagHzOJVgchJemcWi7ABERARhh9JoAx53p3yamO55t6YmH1mfmA4/KYjq0zYDfcC lNlP3QCh1cTUbaKtve2Q0i9L9q1MGC5AF7EajtVQGBf+GMq7sGKfzzffdSSyCb3Y lkSNz6hEUcoxjhYhXYo5zs3RpU8cxz2ZfOwZpFEAOfAqTSBYS1QufX9P8wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFIPIKTqZAJ06+ZAQMLGE2toBsLKbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhL2Y5NzU0 NC0xMTdlLTRhZTktYWU1Ni1lYjExN2FlZTJjYzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvZjk3NTQ0 LTExN2UtNGFlOS1hZTU2LWViMTE3YWVlMmNjMS8xL2c4Z3BPcGtBblRyNWtCQXdz WVRhMmdHd3Nwcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM8NjANBgkqhkiG9w0BAQsFAAOCAQEApLZmW0BVfnF1 Iixwek0PM18gCptDdW+lr4vom4oX8rJNEfTm/mGd8PWIl2WQ4fq1FCJzBfmuqXxY ii58MVeY7L8PURNABy4BN/GAcc3XSqBdo/eyftJd6V7/BoYXBiD3P8P8f23OJSvs zN23k/SQlUZvrHJxB4Nc+5rZwMNlNfhjn7FsYhWDpVy5peBs+E/UJQ8ncm/J121y Srvqza5RIQwMKjNTL71VVGk4ZvheLKnDxHUyJhZQQYFlupvy4FA+SY1nE/ZYFYkc 7wKu/VSn6R5aQc/h1VfcM9Eh6/lTZtmd1YwLBUZiVPQB+Dk9GkcTnHhsVL4BL93w o/yzxfJJAA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:44 2026 by rpki-client