This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer File: gCNZN6302riSXVgEWjNxgWyYBTE.cer (raw, json) Hash identifier: pIwaBLbd5p7Q3ZVmUZldzSK+OBFn6DqdbMRXk9zy6p4= Subject key identifier: 80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C129A290F8A7B94A113744DF81E5CC2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39875 IP: 80.247.16.0/20 IP: 185.147.108.0/22 IP: 2a02:308::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9a:29:0f:8a:7b:94:a1:13:74:4d:f8:1e:5c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80235937adf4dab8925d58045a3371816c980531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:92:fc:39:7d:40:e7:f5:38:03:db:8b:8f:89: fd:47:a6:cf:47:4c:a1:60:16:78:ab:0d:d8:cc:88: d7:52:08:94:01:ff:f0:05:92:8f:9d:7e:bb:b0:12: 51:3a:fc:a0:b8:2f:58:50:03:fc:a3:9a:68:43:18: e5:6f:1c:f0:e9:71:7c:8a:24:61:b0:01:22:04:2e: ef:0b:4f:e0:2b:1d:e2:cd:47:41:05:60:6a:0f:44: 74:83:e7:c1:c0:5b:7b:7a:56:6b:6a:bb:ad:57:8f: f4:50:4e:8a:74:78:0e:82:ef:57:4e:fc:94:d8:af: 34:bf:88:f5:a0:a9:29:78:47:6c:ce:51:b8:ee:a2: c7:a3:64:36:04:22:ff:ca:22:0d:8a:27:28:94:c1: af:2b:b7:4e:79:fb:c6:b9:88:3d:b5:f7:17:58:86: 04:b5:f7:b5:ba:c4:da:c5:e7:1a:ff:3d:ef:c9:a0: e7:41:97:27:13:e4:fb:24:31:45:02:40:6d:af:f0: ff:3f:21:ce:eb:26:55:6e:1e:96:2c:f3:91:bd:20: 09:5b:2b:6f:3d:6a:21:47:d8:c7:58:22:46:98:9a: 12:63:35:f1:eb:2c:92:2e:a7:e4:dc:df:a1:be:0b: 2d:da:54:75:4f:94:b8:a9:6b:24:33:71:3d:2e:e0: 10:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.247.16.0/20 185.147.108.0/22 IPv6: 2a02:308::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39875 Signature Algorithm: sha256WithRSAEncryption 71:d7:99:99:2c:b6:f2:07:88:78:f0:d5:a6:b4:8f:e3:d5:fe: af:8d:cc:49:4e:57:16:e8:2f:be:8d:39:91:0e:86:9a:43:34: 49:71:e9:a8:4c:6c:56:c2:33:fb:2e:ed:32:e5:30:a4:86:dd: 41:98:2f:d4:5f:79:98:7f:9c:5e:f8:7b:60:7b:d3:24:ea:33: c8:1d:b8:ad:ec:76:72:ce:a7:8b:85:fe:6a:0f:f0:d5:22:6f: 24:20:36:5d:ce:2a:c3:47:a9:ef:2e:a5:11:de:3c:1a:26:52: 83:96:ff:cc:ae:1b:72:1e:09:86:56:c2:12:0f:66:3e:72:6f: 40:02:82:38:f8:f1:87:7d:65:c8:51:7c:e1:6a:a1:ac:7b:da: fe:b0:4f:3e:5e:93:3e:df:90:72:78:b8:88:75:56:a8:58:f0: 9f:df:2d:c3:2b:f1:a7:42:31:88:30:50:25:a8:f0:7f:ad:d8: 67:cd:91:1a:47:fe:d0:2f:fa:31:52:0c:f4:50:27:ee:d5:03: 47:8e:ab:7e:4d:8a:4f:ab:79:a2:28:0c:26:c1:7a:4b:a7:4d: f3:15:0a:5c:e3:be:2b:d4:c8:d2:46:7f:1c:4f:69:dc:02:fc: d2:8b:39:7f:1d:bf:7e:9b:d0:02:03:4a:69:08:27:7d:e5:c6: 7f:39:c6:0d -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8EpopD4p7lKETdE34HlzCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDIzNTkzN2FkZjRkYWI4OTI1ZDU4MDQ1YTMzNzE4MTZjOTgwNTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5L8OX1A5/U4A9uLj4n9R6bPR0yh YBZ4qw3YzIjXUgiUAf/wBZKPnX67sBJROvyguC9YUAP8o5poQxjlbxzw6XF8iiRh sAEiBC7vC0/gKx3izUdBBWBqD0R0g+fBwFt7elZrarutV4/0UE6KdHgOgu9XTvyU 2K80v4j1oKkpeEdszlG47qLHo2Q2BCL/yiINiicolMGvK7dOefvGuYg9tfcXWIYE tfe1usTaxeca/z3vyaDnQZcnE+T7JDFFAkBtr/D/PyHO6yZVbh6WLPORvSAJWytv PWohR9jHWCJGmJoSYzXx6yySLqfk3N+hvgst2lR1T5S4qWskM3E9LuAQ2wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIAjWTet9Nq4kl1YBFozcYFsmAUxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5L2Y2MjM4 Mi05OWRkLTQ3ZDQtOGRlNC0xZmU2OTEyZjhlN2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvZjYyMzgy LTk5ZGQtNDdkNC04ZGU0LTFmZTY5MTJmOGU3ZS8xL2dDTlpONjMwMnJpU1hWZ0VX ak54Z1d5WUJURS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEUPcQAwQCuZNsMA0EAgACMAcDBQMqAgMIMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCbwzANBgkqhkiG9w0BAQsFAAOCAQEAcdeZ mSy28geIePDVprSP49X+r43MSU5XFugvvo05kQ6GmkM0SXHpqExsVsIz+y7tMuUw pIbdQZgv1F95mH+cXvh7YHvTJOozyB24rex2cs6ni4X+ag/w1SJvJCA2Xc4qw0ep 7y6lEd48GiZSg5b/zK4bch4JhlbCEg9mPnJvQAKCOPjxh31lyFF84WqhrHva/rBP Pl6TPt+Qcni4iHVWqFjwn98twyvxp0IxiDBQJajwf63YZ82RGkf+0C/6MVIM9FAn 7tUDR46rfk2KT6t5oigMJsF6S6dN8xUKXOO+K9TI0kZ/HE9p3AL80os5fx2/fpvQ AgNKaQgnfeXGfznGDQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:46 2026 by rpki-client