This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer File: gEH-6hI_ywfocqjLS92at7jaL88.cer (raw, json) Hash identifier: wFSk4bmRE1U4bOwzJEIaJ+H4AWuo22g1IF8C9AwNQZE= Subject key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A247EB211D019292DFB5CDBB6D1D59 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200258 IP: 2001:67c:b50::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:47:eb:21:1d:01:92:92:df:b5:cd:bb:6d:1d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:27:5c:a5:b5:6a:fd:a5:10:5b:86:2c:94: 33:3e:53:7d:5b:0e:38:3c:ef:3e:15:07:ee:6f:29: 01:7b:04:fd:86:82:e0:d6:5a:04:b7:5a:52:8d:18: 9e:48:c8:80:d8:49:96:80:a7:f7:7a:86:97:41:be: 0f:35:44:26:84:a8:3f:6e:03:6f:3e:e3:b4:05:e7: 80:fe:0b:91:29:b4:dd:62:3e:15:58:e3:c9:c5:b3: 95:9a:70:11:25:23:ef:23:c3:38:e8:3c:4a:25:4f: dd:53:da:2a:d6:a2:f6:e6:84:6c:44:9c:fc:fe:99: 98:0e:7f:85:5a:08:5a:38:a4:91:7a:75:13:d8:5b: aa:10:65:be:99:6b:19:2d:32:f1:64:47:94:7e:6e: d7:e9:c3:85:d6:19:72:eb:c9:3d:3a:cd:a7:0d:e1: 95:07:a9:9c:b7:30:9d:f0:52:57:4b:cc:7f:f0:6e: 2a:4b:5b:a8:79:22:a8:e7:87:24:b6:cd:54:8f:70: be:ef:95:51:5a:44:d9:a2:7b:45:7d:c8:61:8d:31: 39:b2:67:7a:b1:f6:c5:f2:c8:d4:69:61:41:a7:e8: d5:3a:66:73:f8:b8:a7:ed:65:4d:a5:50:40:41:bb: 38:ad:a1:e8:c6:5b:a5:42:c0:eb:2f:02:04:61:fe: 7c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:b50::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200258 Signature Algorithm: sha256WithRSAEncryption 32:bd:b0:38:a7:01:24:f1:ea:fb:79:89:32:aa:67:79:3d:52: 37:dd:a7:2d:0a:2f:5b:2a:0d:a7:9d:f4:a3:fc:a5:3a:36:2f: 36:b9:33:83:58:14:93:1a:f4:81:be:5d:f3:cb:6c:6e:0c:7b: 43:cc:65:63:7a:06:6b:e9:9f:fc:f4:af:a2:13:38:ae:40:5e: 59:fd:2e:e1:f0:df:3a:1b:df:2f:af:94:9d:7f:2d:16:8b:9b: 94:18:cb:24:63:09:27:da:3e:28:e4:4e:fc:93:5e:2a:76:65: 9e:4c:90:47:17:c0:35:fb:46:d3:88:f5:9a:52:3a:fe:70:de: b1:73:4d:25:a7:8a:70:80:77:7e:df:e0:b5:31:a4:dc:b7:2b: db:c8:7d:ca:53:3c:2c:48:c3:78:89:3a:ed:b8:bb:ef:cc:e4: 53:1a:7e:1d:f1:59:f1:bd:55:54:cc:91:3f:0e:c2:98:5b:17: b2:42:38:cf:17:c5:85:a1:b9:0c:bd:0b:11:51:d1:fa:0b:29: 42:af:e4:a4:7b:ac:4c:2b:35:b6:bd:12:f7:c4:19:e3:db:81: 01:f8:6e:82:60:74:16:86:2c:8e:39:a0:e4:e6:d2:89:c5:bc: 52:bc:7e:5f:58:b4:ae:23:3f:e8:e4:aa:cf:99:6e:12:21:7d: e5:05:21:12 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt4okfrIR0BkpLftc27bR1ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDQxZmVlYTEyM2ZjYjA3ZTg3MmE4Y2I0YmRkOWFiN2I4ZGEyZmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfYnXKW1av2lEFuGLJQzPlN9Ww44 PO8+FQfubykBewT9hoLg1loEt1pSjRieSMiA2EmWgKf3eoaXQb4PNUQmhKg/bgNv PuO0BeeA/guRKbTdYj4VWOPJxbOVmnARJSPvI8M46DxKJU/dU9oq1qL25oRsRJz8 /pmYDn+FWghaOKSRenUT2FuqEGW+mWsZLTLxZEeUfm7X6cOF1hly68k9Os2nDeGV B6mctzCd8FJXS8x/8G4qS1uoeSKo54ckts1Uj3C+75VRWkTZontFfchhjTE5smd6 sfbF8sjUaWFBp+jVOmZz+Lin7WVNpVBAQbs4raHoxlulQsDrLwIEYf58yQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFIBB/uoSP8sH6HKoy0vdmre42i/PMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmL2QzMTdj YS0zOTYxLTRmZTAtYmRlOC1mN2M1MDE0MThlNTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvZDMxN2Nh LTM5NjEtNGZlMC1iZGU4LWY3YzUwMTQxOGU1Ni8xL2dFSC02aElfeXdmb2NxakxT OTJhdDdqYUw4OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAtQMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMOQjANBgkqhkiG9w0BAQsFAAOCAQEAMr2wOKcBJPHq+3mJMqpneT1SN92n LQovWyoNp530o/ylOjYvNrkzg1gUkxr0gb5d88tsbgx7Q8xlY3oGa+mf/PSvohM4 rkBeWf0u4fDfOhvfL6+UnX8tFoublBjLJGMJJ9o+KORO/JNeKnZlnkyQRxfANftG 04j1mlI6/nDesXNNJaeKcIB3ft/gtTGk3Lcr28h9ylM8LEjDeIk67bi778zkUxp+ HfFZ8b1VVMyRPw7CmFsXskI4zxfFhaG5DL0LEVHR+gspQq/kpHusTCs1tr0S98QZ 49uBAfhugmB0FoYsjjmg5ObSicW8Urx+X1i0riM/6OSqz5luEiF95QUhEg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:45 2026 by rpki-client