This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer File: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer (raw, json) Hash identifier: 0nrWNoYUNytF2FT4KfeN9TSf6qWni1ydSw1nOncTi7E= Subject key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6E78FB00569B18883CD285B272032 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199669 IP: 46.29.118.0/23 IP: 91.109.200.0/21 IP: 93.183.104.0 -- 93.183.119.255 IP: 176.123.188.0/22 IP: 185.10.44.0/22 IP: 185.71.196.0/22 IP: 185.179.160.0/22 IP: 185.195.170.0/23 IP: 2a03:ec0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e7:8f:b0:05:69:b1:88:83:cd:28:5b:27:20:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80615315dc750c03e60fc36a750c5e3ff66eac94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e7:7c:97:cd:84:be:1d:01:8a:e2:a7:90:54: b8:ad:5f:41:df:44:c8:ce:82:da:a9:66:3d:e5:6b: b9:74:79:a3:95:2b:23:54:9e:ee:60:90:35:75:94: 61:50:7d:73:79:a7:e5:27:d8:53:fe:93:dd:87:2c: 33:48:20:ae:a9:fc:dc:9a:10:cb:ce:5b:2c:1d:bf: 94:67:4c:1f:dd:d7:26:70:3f:54:7c:3e:44:2f:76: 50:14:7a:59:c5:09:9a:8a:20:ca:bf:04:21:5e:45: c9:a5:b1:e8:79:e0:6d:03:7c:d3:b3:93:14:95:7b: 9c:87:e4:84:b0:44:3b:66:04:d1:30:93:93:58:e7: ad:cc:8a:9d:fa:fd:74:e7:f7:0f:86:00:41:81:25: ef:c3:38:2f:77:17:c6:36:ad:3b:09:6a:52:87:f8: 3e:2c:cf:92:20:f8:a9:fb:4b:bc:ee:fe:0d:30:ea: ad:e6:8a:96:8b:78:8a:00:0c:15:2a:e8:cb:ed:9a: 30:c3:d4:1f:c9:bd:07:7c:3a:eb:c3:d2:70:13:9e: 33:12:50:8f:5b:d0:f7:11:61:ae:76:0d:75:3b:0a: 63:ab:9e:3b:01:9d:27:67:34:97:df:84:e1:be:e8: 49:40:6d:cb:77:19:f8:f5:e4:ed:b9:fe:f4:49:94: 7d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.118.0/23 91.109.200.0/21 93.183.104.0-93.183.119.255 176.123.188.0/22 185.10.44.0/22 185.71.196.0/22 185.179.160.0/22 185.195.170.0/23 IPv6: 2a03:ec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199669 Signature Algorithm: sha256WithRSAEncryption 88:ca:13:f1:02:31:24:e9:c8:c9:df:f2:97:b8:93:93:d2:4f: 72:0d:a5:19:1d:6e:4c:ce:cd:a8:bc:07:cb:5a:e6:4d:6d:78: 0a:13:bf:57:01:86:43:61:c2:3b:c3:1d:e2:02:cf:3d:3b:d2: b1:2f:8e:18:b5:c0:a5:9a:7d:bd:0d:ab:83:ea:d8:c6:ce:ea: 2a:5a:aa:b2:db:49:22:42:77:0d:8d:12:39:87:df:ea:25:64: 41:41:2d:a3:f0:3a:4e:d9:bd:d2:c3:a7:db:2f:71:01:2c:dd: 3b:a3:1e:a5:a8:f2:8f:52:f1:08:22:2e:fc:49:d8:22:12:42: 25:30:fe:f7:35:45:55:23:61:57:c1:e1:6e:c8:b3:fa:2f:a8: 94:20:2b:8b:b9:96:00:e3:5f:1f:83:06:ab:ff:32:04:a9:cf: 6c:82:8a:f3:bf:8b:c9:36:50:ce:1c:68:01:c3:27:c2:bc:2b: 09:a3:58:04:fa:67:08:c1:fd:9a:5b:7f:91:e3:4a:e8:5a:1f: 46:9b:79:08:1a:89:1c:b6:5b:20:d7:a2:03:17:99:e0:ad:ff: 88:7c:d6:62:ed:1e:4c:27:37:af:53:4f:8c:55:52:2e:b5:8b: 1f:0a:d5:4c:2a:2c:c0:04:1f:cd:5a:eb:9f:9f:91:95:61:19: 12:86:20:1d -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgISAZt3xuePsAVpsYiDzShbJyAyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDYxNTMxNWRjNzUwYzAzZTYwZmMzNmE3NTBjNWUzZmY2NmVhYzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+d8l82Evh0BiuKnkFS4rV9B30TI zoLaqWY95Wu5dHmjlSsjVJ7uYJA1dZRhUH1zeaflJ9hT/pPdhywzSCCuqfzcmhDL zlssHb+UZ0wf3dcmcD9UfD5EL3ZQFHpZxQmaiiDKvwQhXkXJpbHoeeBtA3zTs5MU lXuch+SEsEQ7ZgTRMJOTWOetzIqd+v105/cPhgBBgSXvwzgvdxfGNq07CWpSh/g+ LM+SIPip+0u87v4NMOqt5oqWi3iKAAwVKujL7Zoww9Qfyb0HfDrrw9JwE54zElCP W9D3EWGudg11Owpjq547AZ0nZzSX34ThvuhJQG3Ldxn49eTtuf70SZR9qwIDAQAB o4IC4TCCAt0wHQYDVR0OBBYEFIBhUxXcdQwD5g/DanUMXj/2bqyUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViL2RlODRj ZS1kNzA0LTQ3NjYtYTM4OC1mOGU1YjJkODY4MGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvZGU4NGNl LWQ3MDQtNDc2Ni1hMzg4LWY4ZTViMmQ4NjgwYy8xL2dHRlRGZHgxREFQbUQ4TnFk UXhlUF9adXJKUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGCCsGAQUF BwEHAQH/BFEwTzA+BAIAATA4AwQBLh12AwQDW23IMAwDBANdt2gDBANdt3ADBAKw e7wDBAK5CiwDBAK5R8QDBAK5s6ADBAG5w6owDQQCAAIwBwMFACoDDsAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAwv1MA0GCSqGSIb3DQEBCwUAA4IBAQCIyhPxAjEk 6cjJ3/KXuJOT0k9yDaUZHW5Mzs2ovAfLWuZNbXgKE79XAYZDYcI7wx3iAs89O9Kx L44YtcClmn29DauD6tjGzuoqWqqy20kiQncNjRI5h9/qJWRBQS2j8DpO2b3Sw6fb L3EBLN07ox6lqPKPUvEIIi78SdgiEkIlMP73NUVVI2FXweFuyLP6L6iUICuLuZYA 418fgwar/zIEqc9sgorzv4vJNlDOHGgBwyfCvCsJo1gE+mcIwf2aW3+R40roWh9G m3kIGokctlsg16IDF5ngrf+IfNZi7R5MJzevU0+MVVIutYsfCtVMKizABB/NWuuf n5GVYRkShiAd -----END CERTIFICATE-----Generated at Wed Feb 4 21:57:02 2026 by rpki-client