This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer File: gL0AgpU21HdF9H2p0ainL23UYtQ.cer (raw, json) Hash identifier: 2hveeaX0sUkdXLHtu1Ld1tyHEN0yIRSCDqipF0fGQgQ= Subject key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDA4CEC1EB21DF7CA45A10912B6A50 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21141 AS: 43032 AS: 51640 IP: 88.135.16.0/20 IP: 185.110.132.0/22 IP: 193.200.209.0/24 IP: 2a06:5600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:a4:ce:c1:eb:21:df:7c:a4:5a:10:91:2b:6a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9d:4a:f2:84:bd:6f:75:6d:4d:50:03:88:02: 5d:09:9e:bc:6c:59:e9:fb:69:0c:39:4c:2c:c3:1a: c1:e3:2e:91:1d:2b:dd:a8:d2:aa:6f:d9:82:ea:7d: ab:07:dc:36:78:f3:a3:b5:d2:36:f1:2d:5c:c8:16: 56:f4:f3:b9:95:dc:1a:99:66:62:63:60:f3:9a:c5: df:b3:5b:0f:b7:16:81:8a:7c:52:f2:7d:62:e4:8d: 75:e2:c7:e9:27:8c:da:aa:89:48:03:02:23:a1:94: ee:38:f3:9d:21:8c:50:be:f5:13:28:1b:8d:07:47: 43:0e:45:07:d8:e2:3b:9e:1c:58:cb:fa:c1:a9:88: cd:87:37:75:0d:1e:fe:c9:5a:78:d9:90:35:79:b5: 33:48:24:8f:ba:30:03:d9:c8:e2:41:ed:f3:31:a8: c5:00:88:ea:66:b3:76:59:39:90:f3:dc:91:79:ee: ed:6d:f7:d1:8c:ad:24:dc:91:eb:86:fe:ae:28:86: ed:5e:b4:cf:d6:60:25:88:78:c1:c5:50:6c:a4:61: a5:40:37:83:6b:74:0a:26:3b:2d:8f:ff:6e:e1:6a: 41:af:cc:34:f3:72:1d:a6:4c:52:ca:a9:88:33:9c: fa:92:b1:e5:d7:0f:35:3b:00:32:4a:6d:48:8c:51: ff:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.135.16.0/20 185.110.132.0/22 193.200.209.0/24 IPv6: 2a06:5600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21141 43032 51640 Signature Algorithm: sha256WithRSAEncryption 50:98:5e:a1:bc:dd:77:d1:81:7e:fd:6d:da:9a:d3:3a:89:7c: ea:27:d6:79:a9:35:b3:df:e6:1a:64:93:d8:43:eb:cf:bf:96: 17:4c:28:b4:7f:71:25:58:27:f3:b9:24:6d:9b:be:a2:32:9e: 1b:f2:f7:18:fc:c0:79:0f:88:26:09:3d:62:75:8f:19:ea:71: 8b:63:2d:0a:16:4f:d9:9a:dd:be:b5:d0:a8:ca:d1:fd:b9:1c: 40:9a:b7:2a:0d:4d:74:ec:bf:c4:22:b4:3f:69:e6:a2:75:89: 0e:3e:bd:03:4a:94:4f:fc:80:47:51:96:0d:55:eb:43:42:e7: a1:6d:9e:22:32:d2:09:6e:2c:43:c2:77:13:bc:06:cf:b2:94: b3:17:3a:29:26:b2:2c:5e:f6:f9:a1:9a:04:8c:1c:3f:5b:99: ec:35:4b:96:f9:dc:e1:af:1c:fc:9c:37:30:84:7a:85:cb:4c: 96:0a:e6:54:58:60:8f:43:38:26:2d:e6:a8:ac:be:0e:ef:fb: 60:33:47:0a:31:b5:7a:6a:6f:28:2f:83:e6:d2:50:c9:b0:31: f9:70:55:0d:e4:dc:c3:da:b3:f9:26:b3:31:36:e7:b8:b7:d9: c9:a5:e5:14:bb:f3:03:23:4a:a4:c9:7e:f5:bc:d1:ee:5b:7c: d2:a9:e4:4c -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZt87aTOwesh33ykWhCRK2pQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGJkMDA4Mjk1MzZkNDc3NDVmNDdkYTlkMWE4YTcyZjZkZDQ2MmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J1K8oS9b3VtTVADiAJdCZ68bFnp +2kMOUwswxrB4y6RHSvdqNKqb9mC6n2rB9w2ePOjtdI28S1cyBZW9PO5ldwamWZi Y2DzmsXfs1sPtxaBinxS8n1i5I114sfpJ4zaqolIAwIjoZTuOPOdIYxQvvUTKBuN B0dDDkUH2OI7nhxYy/rBqYjNhzd1DR7+yVp42ZA1ebUzSCSPujAD2cjiQe3zMajF AIjqZrN2WTmQ89yRee7tbffRjK0k3JHrhv6uKIbtXrTP1mAliHjBxVBspGGlQDeD a3QKJjstj/9u4WpBr8w083IdpkxSyqmIM5z6krHl1w81OwAySm1IjFH/TQIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFIC9AIKVNtR3RfR9qdGopy9t1GLUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzY0ZTE5 Zi1mZTU0LTQyY2QtODkyMy0wOWI5OTIwZmUwMGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvNjRlMTlm LWZlNTQtNDJjZC04OTIzLTA5Yjk5MjBmZTAwZi8xL2dMMEFncFUyMUhkRjlIMnAw YWluTDIzVVl0US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQEWIcQAwQCuW6EAwQAwcjRMA0EAgACMAcDBQMq BlYAMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4CAlKVAgMAqBgCAwDJuDANBgkqhkiG 9w0BAQsFAAOCAQEAUJheobzdd9GBfv1t2prTOol86ifWeak1s9/mGmST2EPrz7+W F0wotH9xJVgn87kkbZu+ojKeG/L3GPzAeQ+IJgk9YnWPGepxi2MtChZP2ZrdvrXQ qMrR/bkcQJq3Kg1NdOy/xCK0P2nmonWJDj69A0qUT/yAR1GWDVXrQ0LnoW2eIjLS CW4sQ8J3E7wGz7KUsxc6KSayLF72+aGaBIwcP1uZ7DVLlvnc4a8c/Jw3MIR6hctM lgrmVFhgj0M4Ji3mqKy+Du/7YDNHCjG1empvKC+D5tJQybAx+XBVDeTcw9qz+Saz MTbnuLfZyaXlFLvzAyNKpMl+9bzR7lt80qnkTA== -----END CERTIFICATE-----Generated at Mon Jan 19 18:47:26 2026 by rpki-client