This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer File: gAFl6Volo3uHPPup9TJKfiU7vdg.cer (raw, json) Hash identifier: Y8rcx0NTe/uj3XEZNJCeM1m5x7eYbRNuARoHkIftSCM= Subject key identifier: 80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910BC0280295F0B4B3984C919061E74 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28935 AS: 48202 IP: 94.127.192.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:bc:02:80:29:5f:0b:4b:39:84:c9:19:06:1e:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=800165e95a25a37b873cfba9f5324a7e253bbdd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:97:64:99:9c:4b:e6:23:5a:47:bb:7f:d3:6a: 68:89:b7:5b:58:3a:b8:86:d0:08:87:c4:7c:63:42: 9c:6f:ee:2b:8e:0b:4c:64:74:6f:58:65:95:61:67: 0f:99:c0:8b:c3:b8:2d:ef:3d:2a:4f:11:a3:08:e1: 4a:5b:18:69:a2:e7:57:45:02:4a:69:6d:26:f5:f4: 9e:62:00:8a:d6:41:a3:56:f8:d1:14:e1:88:68:76: dd:51:56:79:af:ba:41:6b:43:d6:75:d2:9b:51:fe: 9f:cc:b9:37:2e:a1:6f:e1:cf:09:cf:1a:a3:b1:97: b9:7f:82:29:fc:b6:80:d5:d2:03:73:e2:c6:ad:17: 67:cc:56:27:04:4c:f6:c7:de:b8:30:f3:34:bb:63: 49:04:9f:e9:4e:5d:a7:ae:42:30:82:d8:bc:89:21: db:9f:8a:9e:f9:25:9d:1a:cf:85:23:97:c7:62:de: 7f:99:be:10:88:63:bb:0a:93:00:23:d4:2a:7d:cd: 48:5f:44:e6:69:79:e7:76:b6:cf:df:1d:4e:32:14: a9:bc:6a:ec:9d:13:7f:03:6a:25:f1:8a:7f:cc:15: 70:6e:5e:15:15:47:76:6b:4b:87:c5:64:2d:8b:fb: 16:10:9e:c1:e8:dd:b4:9f:63:c1:43:a8:e7:d7:04: 26:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.127.192.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28935 48202 Signature Algorithm: sha256WithRSAEncryption a8:df:cb:23:19:62:39:ad:b8:cb:e0:94:8e:9c:b5:95:a0:1f: 1a:20:b3:42:65:ee:b5:81:08:b2:1a:3b:39:b4:97:97:9d:92: 83:ac:d8:86:30:54:41:4e:13:ce:61:ad:c4:1f:85:b8:7c:57: 62:22:21:11:01:45:5c:88:0c:d7:37:40:13:87:28:3f:0c:e4: d2:e1:91:07:a2:51:29:69:db:8c:f3:fb:0c:9f:bd:4d:ee:9f: b5:11:52:6b:f0:8a:c0:5f:d2:e1:7e:e8:cd:95:66:3b:69:55: 40:73:06:3c:b0:8c:0e:6e:4d:7a:68:ab:7b:b9:73:78:78:8d: 21:88:63:bf:b1:41:6b:8b:d2:4b:7f:8e:9c:c9:a4:0c:53:e8: 98:f9:be:a4:c8:23:74:9b:d9:c6:32:7b:d1:d2:ac:09:2d:0b: 04:b7:bc:13:9a:65:1c:4c:d5:03:75:3e:01:de:a9:b4:f1:44: c9:9f:ca:a1:9b:f2:cb:1f:df:44:9b:8f:dd:40:04:81:40:76: 37:85:5e:c6:c6:f4:9b:d2:4e:71:ea:15:7a:ce:13:d1:1e:1a: 99:39:bb:e6:8d:af:e2:04:77:64:45:9c:f8:ff:a2:13:13:49: 39:b1:b2:50:67:a8:95:ce:b0:c8:57:fc:8a:9d:ee:41:6c:4e: 7d:8c:cb:1b -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZt5ELwCgClfC0s5hMkZBh50MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDAxNjVlOTVhMjVhMzdiODczY2ZiYTlmNTMyNGE3ZTI1M2JiZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJdkmZxL5iNaR7t/02poibdbWDq4 htAIh8R8Y0Kcb+4rjgtMZHRvWGWVYWcPmcCLw7gt7z0qTxGjCOFKWxhpoudXRQJK aW0m9fSeYgCK1kGjVvjRFOGIaHbdUVZ5r7pBa0PWddKbUf6fzLk3LqFv4c8Jzxqj sZe5f4Ip/LaA1dIDc+LGrRdnzFYnBEz2x964MPM0u2NJBJ/pTl2nrkIwgti8iSHb n4qe+SWdGs+FI5fHYt5/mb4QiGO7CpMAI9Qqfc1IX0TmaXnndrbP3x1OMhSpvGrs nRN/A2ol8Yp/zBVwbl4VFUd2a0uHxWQti/sWEJ7B6N20n2PBQ6jn1wQmzQIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFIABZelaJaN7hzz7qfUySn4lO73YMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyLzRiZDQ2 OS00OTI1LTRlZWUtYjZhMi1kOWFlYjkzMDUxYWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvNGJkNDY5 LTQ5MjUtNGVlZS1iNmEyLWQ5YWViOTMwNTFhYi8xL2dBRmw2Vm9sbzN1SFBQdXA5 VEpLZmlVN3ZkZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDXn/AMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkC AnEHAgMAvEowDQYJKoZIhvcNAQELBQADggEBAKjfyyMZYjmtuMvglI6ctZWgHxog s0Jl7rWBCLIaOzm0l5edkoOs2IYwVEFOE85hrcQfhbh8V2IiIREBRVyIDNc3QBOH KD8M5NLhkQeiUSlp24zz+wyfvU3un7URUmvwisBf0uF+6M2VZjtpVUBzBjywjA5u TXpoq3u5c3h4jSGIY7+xQWuL0kt/jpzJpAxT6Jj5vqTII3Sb2cYye9HSrAktCwS3 vBOaZRxM1QN1PgHeqbTxRMmfyqGb8ssf30Sbj91ABIFAdjeFXsbG9JvSTnHqFXrO E9EeGpk5u+aNr+IEd2RFnPj/ohMTSTmxslBnqJXOsMhX/Iqd7kFsTn2Myxs= -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:08 2026 by rpki-client