This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer File: gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer (raw, json) Hash identifier: llP5sIjSyYogGB1eTQJm+6s/51G85rfyCIkZk3kK6v8= Subject key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1269F170F121920E3B4911AED0F087 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208012 IP: 45.129.120.0/22 IP: 185.77.90.0/24 IP: 2a0f:e680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:69:f1:70:f1:21:92:0e:3b:49:11:ae:d0:f0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:21:ce:34:d4:b4:e4:a7:98:52:86:60:19:ab: d2:f5:65:c6:3c:2e:6b:58:9c:e8:3a:da:02:b7:31: 4d:4c:a5:2f:9f:d6:19:2c:8a:0f:f8:e1:58:e5:a6: d8:e1:6e:c7:09:2c:f4:be:ec:39:5f:1f:ee:96:71: d0:f5:db:66:79:e2:b0:b1:32:f7:ae:f2:23:fc:1b: 03:13:03:8b:1c:3a:44:1c:8d:35:44:09:87:14:6f: 45:9f:2e:f7:e5:61:79:5e:40:72:4e:ff:43:e6:7f: 37:d2:12:13:48:af:0c:68:70:2e:cd:ea:2a:6d:f2: c2:c5:7f:81:21:c8:c1:53:d3:8e:85:f8:c9:71:8e: 16:c6:78:ab:c7:e8:6e:aa:3b:73:07:96:03:38:9a: 65:3b:9d:da:f6:3c:0f:ca:d8:5b:b3:f4:cc:a8:8b: 15:66:83:14:06:4d:76:18:0f:06:be:d8:89:9e:60: 2c:32:78:7b:48:df:36:3e:41:94:ff:10:bc:b8:b6: a6:03:71:ab:5b:ca:51:cc:13:89:5f:34:72:60:26: 55:62:66:c5:83:63:69:05:9b:d9:58:a8:73:9a:cd: d9:61:71:e4:cd:95:28:74:cb:17:01:3d:5b:db:30: 8b:61:26:f8:68:fb:d6:36:d9:00:63:40:e2:32:10: 85:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.120.0/22 185.77.90.0/24 IPv6: 2a0f:e680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208012 Signature Algorithm: sha256WithRSAEncryption 0b:9e:8b:99:2b:33:f1:31:f3:1e:a6:35:e2:17:67:52:49:f4: 57:38:51:7e:4e:f0:f1:04:74:99:06:8e:e6:dc:33:e6:3c:05: 8c:15:56:ba:fe:5e:34:f6:80:0c:dc:d9:ca:95:d1:e2:d8:45: e4:56:51:a9:95:44:a7:ef:e2:85:c6:22:66:06:87:97:33:91: f6:5c:a1:aa:c6:bd:2d:4e:4c:01:2d:cf:bd:22:ec:0f:4a:ea: ec:d1:45:8c:72:9c:89:dc:cd:a3:51:8b:9a:32:48:1a:db:75: be:cc:36:84:b4:43:f9:c2:14:49:8d:3f:b8:ee:45:c8:68:a3: f4:15:d5:81:7a:fb:82:7d:08:e1:e6:bb:6c:9c:93:6a:88:c1: f5:e0:26:93:95:56:4a:02:f5:cf:41:2f:cd:c8:16:f1:82:45: 1d:7b:0a:58:6a:e7:12:77:ec:bd:c1:2a:ad:3b:e7:4a:63:38: b1:87:98:78:9b:9f:f4:0b:3b:01:4d:f9:7b:ed:2e:f5:7e:ba: a9:b4:f5:97:02:7a:7d:cf:c5:02:10:fb:bb:e9:cb:af:d6:56: d8:a1:a3:ff:3e:a0:6f:d6:5d:0c:e9:c5:51:8e:b0:e5:2a:c7: 37:50:1a:6c:a0:45:0f:e4:cf:27:d9:07:b1:db:b6:57:7a:70: 39:07:8b:dd -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8EmnxcPEhkg47SRGu0PCHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDY5ZDlmZmUwNDhhNzAwMDNmMTZmMDZlMjRkOWJmMmRiODVlYjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SHONNS05KeYUoZgGavS9WXGPC5r WJzoOtoCtzFNTKUvn9YZLIoP+OFY5abY4W7HCSz0vuw5Xx/ulnHQ9dtmeeKwsTL3 rvIj/BsDEwOLHDpEHI01RAmHFG9Fny735WF5XkByTv9D5n830hITSK8MaHAuzeoq bfLCxX+BIcjBU9OOhfjJcY4Wxnirx+huqjtzB5YDOJplO53a9jwPythbs/TMqIsV ZoMUBk12GA8GvtiJnmAsMnh7SN82PkGU/xC8uLamA3GrW8pRzBOJXzRyYCZVYmbF g2NpBZvZWKhzms3ZYXHkzZUodMsXAT1b2zCLYSb4aPvWNtkAY0DiMhCFCQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIBp2f/gSKcAA/FvBuJNm/LbhetSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhL2U2NDE0 OC00YzhjLTRlODQtOTI1Yi1lMDIyZTMwMDlhNzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvZTY0MTQ4 LTRjOGMtNGU4NC05MjViLWUwMjJlMzAwOWE3MS8xL2dHblpfLUJJcHdBRDhXOEc0 azJiOHR1RjYxSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLYF4AwQAuU1aMA0EAgACMAcDBQMqD+aAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMsjDANBgkqhkiG9w0BAQsFAAOCAQEAC56L mSsz8THzHqY14hdnUkn0VzhRfk7w8QR0mQaO5twz5jwFjBVWuv5eNPaADNzZypXR 4thF5FZRqZVEp+/ihcYiZgaHlzOR9lyhqsa9LU5MAS3PvSLsD0rq7NFFjHKcidzN o1GLmjJIGtt1vsw2hLRD+cIUSY0/uO5FyGij9BXVgXr7gn0I4ea7bJyTaojB9eAm k5VWSgL1z0EvzcgW8YJFHXsKWGrnEnfsvcEqrTvnSmM4sYeYeJuf9As7AU35e+0u 9X66qbT1lwJ6fc/FAhD7u+nLr9ZW2KGj/z6gb9ZdDOnFUY6w5SrHN1AabKBFD+TP J9kHsdu2V3pwOQeL3Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:12 2026 by rpki-client