This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer File: gF21Z4E54u6s6Jte6ZgsNUScCzs.cer (raw, json) Hash identifier: 7KngIpFI0g0QxFANmcZodWdFYy94KQ8Jaf4WCtcRge0= Subject key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B16E965402B794C68E0C628F13352 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209638 IP: 2a07:900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:16:e9:65:40:2b:79:4c:68:e0:c6:28:f1:33:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=805db5678139e2eeace89b5ee9982c35449c0b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d9:61:e5:72:44:de:f9:a8:a7:ab:ca:bb:bd: ac:3f:88:16:2b:89:50:8b:0f:8f:17:8b:34:e8:5e: e9:32:46:c2:24:fa:5c:9b:2f:2e:9f:5c:6d:c5:67: 95:22:18:03:9b:c1:f5:b9:a5:2e:af:14:fc:47:d8: 58:1d:74:e1:de:6b:ea:0f:b0:13:96:99:c3:0b:b6: dc:08:c3:c3:e7:88:be:9a:23:81:90:3b:99:a3:07: 81:c8:27:fc:47:32:c3:bd:c4:02:96:8c:fb:90:8c: bf:21:bc:28:b4:3b:01:a5:47:fe:dc:d6:eb:f6:aa: 14:ae:a7:ed:a8:35:b0:26:a1:ad:69:bf:67:c9:f7: 29:0d:80:e5:ab:85:ee:dd:6c:04:8e:73:e5:88:47: 7c:59:eb:49:78:4d:61:bc:91:0a:a7:fe:61:b4:7e: 53:54:6b:53:09:32:dc:9e:7d:61:24:21:11:fc:0c: 1b:80:86:83:f6:4b:d3:1c:b4:dd:16:db:27:9a:f7: d4:8a:c4:20:e4:bf:3a:74:23:fd:b7:b5:37:d4:58: fa:57:02:b5:99:b9:f4:d7:30:79:7f:24:c5:76:f7: f3:02:31:68:b9:e6:b0:e8:cf:d5:10:18:e0:72:d7: cc:2f:4b:c3:2c:70:27:b6:0e:05:68:32:70:de:29: b0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209638 Signature Algorithm: sha256WithRSAEncryption 9c:c9:2a:52:61:9b:70:d2:96:a0:83:58:1e:11:92:9d:9e:14: fe:e0:69:61:21:3f:54:8e:21:42:fd:dc:ca:94:d9:be:74:07: 55:db:24:ad:41:af:ed:f1:2a:e9:96:d7:34:cf:9e:f6:a5:c5: 6b:3e:c4:2d:03:9e:5f:fd:2f:67:68:3d:ff:0c:6c:9a:e3:89: 1b:c2:d2:b4:4a:63:48:fb:fd:ea:83:32:1c:c5:05:7e:ab:5f: d7:71:36:f0:45:5e:c9:37:9d:91:d3:dc:a5:ac:49:8a:d8:46: 58:58:33:56:dc:5e:fe:dd:f0:26:b7:2f:de:fb:d9:56:cb:15: 47:ac:1c:ac:cf:f8:94:18:f3:02:4c:23:12:78:ad:91:d0:2b: 67:bc:1e:e3:55:cc:5e:a1:b4:32:c5:ed:9e:d0:af:8d:af:d9: 4d:10:fe:fd:47:79:05:9e:4d:09:8e:0e:07:27:61:b4:b0:c3: ca:8e:26:77:6e:90:8a:8c:fc:e6:4d:4e:f2:d1:8b:ae:06:b8: 8a:c3:9c:44:81:0d:40:3c:39:70:2a:66:9c:ac:19:c4:a1:6d: f4:e6:32:e5:37:eb:be:b4:35:96:ff:2b:b0:2a:45:e7:de:f8: b4:d4:60:ea:4b:02:cc:89:bd:e2:a5:7d:89:da:17:9f:ae:93: fe:6b:9d:5c -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt6WxbpZUAreUxo4MYo8TNSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDVkYjU2NzgxMzllMmVlYWNlODliNWVlOTk4MmMzNTQ0OWMwYjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydlh5XJE3vmop6vKu72sP4gWK4lQ iw+PF4s06F7pMkbCJPpcmy8un1xtxWeVIhgDm8H1uaUurxT8R9hYHXTh3mvqD7AT lpnDC7bcCMPD54i+miOBkDuZoweByCf8RzLDvcQCloz7kIy/IbwotDsBpUf+3Nbr 9qoUrqftqDWwJqGtab9nyfcpDYDlq4Xu3WwEjnPliEd8WetJeE1hvJEKp/5htH5T VGtTCTLcnn1hJCER/AwbgIaD9kvTHLTdFtsnmvfUisQg5L86dCP9t7U31Fj6VwK1 mbn01zB5fyTFdvfzAjFoueaw6M/VEBjgctfML0vDLHAntg4FaDJw3imwpQIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFIBdtWeBOeLurOibXumYLDVEnAs7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzNkZDA4 Mi1jNTAzLTQ1YjgtOWIwNy05MjI5MjNlODk4ZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvM2RkMDgy LWM1MDMtNDViOC05YjA3LTkyMjkyM2U4OThlNi8xL2dGMjFaNEU1NHU2czZKdGU2 WmdzTlVTY0N6cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKgcJADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDMuYwDQYJKoZIhvcNAQELBQADggEBAJzJKlJhm3DSlqCDWB4Rkp2eFP7gaWEh P1SOIUL93MqU2b50B1XbJK1Br+3xKumW1zTPnvalxWs+xC0Dnl/9L2doPf8MbJrj iRvC0rRKY0j7/eqDMhzFBX6rX9dxNvBFXsk3nZHT3KWsSYrYRlhYM1bcXv7d8Ca3 L9772VbLFUesHKzP+JQY8wJMIxJ4rZHQK2e8HuNVzF6htDLF7Z7Qr42v2U0Q/v1H eQWeTQmODgcnYbSww8qOJndukIqM/OZNTvLRi64GuIrDnESBDUA8OXAqZpysGcSh bfTmMuU36760NZb/K7AqRefe+LTUYOpLAsyJveKlfYnaF5+uk/5rnVw= -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:21 2026 by rpki-client