This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer File: gFBQT0sXdugLitn4s1bmE7WFs1o.cer (raw, json) Hash identifier: YhEqpcV3d0aMavugZOR3WjHS9p//0oOgTQVVZKDVQFg= Subject key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED467D1B58342637E1F93DB6BC61A0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.135.56.0 -- 193.135.58.255 IP: 2001:678:e44::/48 IP: 2001:678:e48::/48 IP: 2001:67c:3d4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:46:7d:1b:58:34:26:37:e1:f9:3d:b6:bc:61:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:bd:f3:9a:65:19:5d:4b:9a:4a:01:d9:e7: c7:ab:a0:2f:58:ff:81:08:f7:26:66:86:72:7c:2f: a8:79:6e:63:d6:3e:e5:6a:e7:9c:a9:fc:ff:58:e6: 00:b9:d7:4f:bc:0b:e2:70:43:dd:4f:a1:b0:0c:41: 27:f3:12:8a:c4:26:67:08:c6:25:0f:b0:e3:79:32: 9f:11:97:71:1e:15:3a:68:04:d6:a3:50:86:f3:8f: 98:cc:94:5e:a3:93:2d:e9:ed:a9:11:e1:fe:b7:2e: 7c:3c:0e:d5:75:3f:12:7c:2b:4c:d8:f9:a2:dd:69: 7f:63:21:0a:54:c2:6e:80:55:03:50:68:d1:78:3f: 87:ac:bb:0a:15:32:9d:d8:53:a5:39:0c:23:31:f5: e0:85:1d:be:d2:b0:75:d9:53:cf:18:dc:55:95:5d: d7:49:e6:b2:ed:8b:72:e4:94:d5:d8:35:2a:f3:2a: 3d:1c:5b:cc:f6:93:c6:5f:a3:fb:6f:9c:49:2f:c5: bc:b7:fe:ab:06:4d:c7:83:ef:78:8d:60:72:04:b7: c1:06:a8:c4:3a:5c:7c:45:3f:9e:5c:e9:8b:62:54: 82:95:62:dc:ea:86:45:dd:56:85:b1:d0:30:52:9e: 78:10:36:20:ca:5e:99:83:8b:ba:ac:e5:8e:d7:2b: 6c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.135.56.0-193.135.58.255 IPv6: 2001:678:e44::/48 2001:678:e48::/48 2001:67c:3d4::/48 Signature Algorithm: sha256WithRSAEncryption 0e:cd:7e:05:7a:41:b1:15:64:e5:1b:6a:72:d4:02:f7:cb:c0: 4c:ff:b3:83:5c:a1:c9:e6:09:fb:80:38:3d:7e:6a:c2:68:0a: 43:c9:49:2f:e2:6c:4b:f8:50:fb:5c:2e:37:39:e2:4b:f3:dc: 05:5d:dc:12:bc:cb:ec:ba:67:b7:dd:d4:9e:9a:92:83:47:44: 7f:6a:35:1b:df:66:1f:da:dc:49:fc:00:83:bd:d1:57:72:81: 75:a5:7a:53:bc:f3:69:66:a7:0f:65:30:a0:37:25:81:06:1a: 8c:21:25:cf:95:d3:fd:5d:72:c4:7a:42:29:06:a7:17:21:76: b0:c8:de:65:7d:6d:22:76:7c:4a:d8:2c:2d:80:f5:b2:e0:a0: b3:ae:68:a0:4e:d0:f1:2e:17:92:d2:f6:23:6f:b8:e5:10:e8: 24:28:fb:5c:4f:ad:3e:8a:d2:a9:58:ad:5d:46:1d:71:04:a2: f8:27:95:3a:5b:76:4c:ba:3d:54:f7:8c:31:b4:05:20:e5:87: d1:1c:e6:a8:7b:a6:e0:8f:b7:50:69:d8:5f:6b:79:2b:d8:79: 61:6f:4f:b7:c7:d0:bf:d0:fc:66:a2:90:fe:4c:99:5f:31:0b: 73:59:90:78:79:00:9a:1d:77:93:6f:29:1b:ad:6d:36:ae:3a: 2e:14:83:1a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87UZ9G1g0Jjfh+T22vGGgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDUwNTA0ZjRiMTc3NmU4MGI4YWQ5ZjhiMzU2ZTYxM2I1ODViMzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsS985plGV1LmkoB2efHq6AvWP+B CPcmZoZyfC+oeW5j1j7lauecqfz/WOYAuddPvAvicEPdT6GwDEEn8xKKxCZnCMYl D7DjeTKfEZdxHhU6aATWo1CG84+YzJReo5Mt6e2pEeH+ty58PA7VdT8SfCtM2Pmi 3Wl/YyEKVMJugFUDUGjReD+HrLsKFTKd2FOlOQwjMfXghR2+0rB12VPPGNxVlV3X Seay7Yty5JTV2DUq8yo9HFvM9pPGX6P7b5xJL8W8t/6rBk3Hg+94jWByBLfBBqjE Olx8RT+eXOmLYlSClWLc6oZF3VaFsdAwUp54EDYgyl6Zg4u6rOWO1ytsUQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIBQUE9LF3boC4rZ+LNW5hO1hbNaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0L2I1OTcx NS1iMDVhLTRiNGEtYTkyMi0wMTQ0YTMyODJhMmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvYjU5NzE1 LWIwNWEtNGI0YS1hOTIyLTAxNDRhMzI4MmEyZS8xL2dGQlFUMHNYZHVnTGl0bjRz MWJtRTdXRnMxby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEoGCCsGAQUF BwEHAQH/BDswOTAUBAIAATAOMAwDBAPBhzgDBADBhzowIQQCAAIwGwMHACABBngO RAMHACABBngOSAMHACABBnwD1DANBgkqhkiG9w0BAQsFAAOCAQEADs1+BXpBsRVk 5RtqctQC98vATP+zg1yhyeYJ+4A4PX5qwmgKQ8lJL+JsS/hQ+1wuNzniS/PcBV3c ErzL7Lpnt93UnpqSg0dEf2o1G99mH9rcSfwAg73RV3KBdaV6U7zzaWanD2UwoDcl gQYajCElz5XT/V1yxHpCKQanFyF2sMjeZX1tInZ8StgsLYD1suCgs65ooE7Q8S4X ktL2I2+45RDoJCj7XE+tPorSqVitXUYdcQSi+CeVOlt2TLo9VPeMMbQFIOWH0Rzm qHum4I+3UGnYX2t5K9h5YW9Pt8fQv9D8ZqKQ/kyZXzELc1mQeHkAmh13k28pG61t Nq46LhSDGg== -----END CERTIFICATE-----Generated at Mon Jan 26 20:43:27 2026 by rpki-client