This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer File: gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer (raw, json) Hash identifier: CyR91Bo6IOVnGMMN4igJz5RWRgKjSNBaBLvN2LFK/wQ= Subject key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CE49AED5DD99A261FDCBF4DEF4277 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3212 AS: 12644 AS: 16016 AS: 41828 IP: 31.15.128.0/17 IP: 46.150.32.0/19 IP: 46.182.224.0/21 IP: 77.38.0.0/17 IP: 77.73.104.0/22 IP: 77.111.0.0/18 IP: 78.153.32.0/19 IP: 82.149.0.0/19 IP: 82.192.32.0/19 IP: 84.20.224.0/19 IP: 84.52.128.0/18 IP: 86.58.0.0/17 IP: 87.119.128.0/19 IP: 91.132.208.0/22 IP: 91.185.192.0/19 IP: 91.237.132.0/22 IP: 92.53.128.0/19 IP: 92.63.16.0/20 IP: 94.140.64.0/19 IP: 95.143.144.0/20 IP: 176.57.92.0/22 IP: 176.76.0.0/16 IP: 178.79.64.0/18 IP: 185.30.136.0/22 IP: 185.65.228.0/22 IP: 185.66.148.0/22 IP: 185.72.60.0/22 IP: 185.79.228.0/22 IP: 185.85.148.0/22 IP: 185.97.68.0/22 IP: 193.111.220.0/22 IP: 194.152.0.0/19 IP: 195.47.228.0/24 IP: 212.85.160.0/19 IP: 213.143.64.0/19 IP: 213.161.0.0/19 IP: 213.172.224.0/19 IP: 217.72.64.0/19 IP: 2001:1688::/29 IP: 2a00:fc0::/32 IP: 2a00:13d8::/29 IP: 2a02:840::/32 IP: 2a05:acc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e4:9a:ed:5d:d9:9a:26:1f:dc:bf:4d:ef:42:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:34:c8:d9:d7:40:a6:84:61:6b:1e:53:1a:95: 1a:20:bd:63:01:5e:51:8a:d8:9e:1c:1f:ae:28:03: 78:d5:f1:d5:15:9c:1f:5f:b9:01:58:3a:d8:03:51: 0d:12:96:5d:6a:60:a1:b9:49:39:ae:9b:40:64:d4: 92:84:f9:ca:e7:21:90:3a:ec:36:7c:fb:af:c3:c9: c6:b8:b0:2e:15:aa:cb:cd:3d:06:f5:d6:f1:30:bb: b8:3a:0d:7b:af:2a:de:77:d8:7f:f9:80:67:ff:82: 8b:9c:92:0d:da:8e:c0:eb:91:4e:7e:cb:f5:d4:1b: 0c:0f:63:8a:cf:9f:43:f5:57:e6:17:dc:4b:5e:b8: d4:e4:e5:f6:91:8a:1c:d8:97:e4:8d:4f:af:2c:95: 61:38:83:2f:fe:0e:84:29:ba:e2:c8:c2:22:79:7d: cb:79:d2:9c:c3:08:9a:05:c9:a4:55:ba:e8:3f:b4: 95:26:27:0d:3e:bc:90:ef:88:91:68:ed:26:88:4b: 78:0e:4f:39:bf:48:b6:cb:8b:2d:a4:31:64:d0:83: b3:76:4e:3f:80:68:c5:ba:0a:ee:08:9f:d3:f5:2d: 2c:be:5a:89:31:de:32:53:8e:22:5f:e5:6b:02:8d: 63:bc:00:6e:7a:71:88:43:60:87:3e:dc:02:51:8b: 4c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.15.128.0/17 46.150.32.0/19 46.182.224.0/21 77.38.0.0/17 77.73.104.0/22 77.111.0.0/18 78.153.32.0/19 82.149.0.0/19 82.192.32.0/19 84.20.224.0/19 84.52.128.0/18 86.58.0.0/17 87.119.128.0/19 91.132.208.0/22 91.185.192.0/19 91.237.132.0/22 92.53.128.0/19 92.63.16.0/20 94.140.64.0/19 95.143.144.0/20 176.57.92.0/22 176.76.0.0/16 178.79.64.0/18 185.30.136.0/22 185.65.228.0/22 185.66.148.0/22 185.72.60.0/22 185.79.228.0/22 185.85.148.0/22 185.97.68.0/22 193.111.220.0/22 194.152.0.0/19 195.47.228.0/24 212.85.160.0/19 213.143.64.0/19 213.161.0.0/19 213.172.224.0/19 217.72.64.0/19 IPv6: 2001:1688::/29 2a00:fc0::/32 2a00:13d8::/29 2a02:840::/32 2a05:acc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3212 12644 16016 41828 Signature Algorithm: sha256WithRSAEncryption 33:cb:70:68:b9:fb:2a:6e:bc:82:d5:14:08:3e:8a:9b:17:46: 91:1d:93:7b:0c:f2:c6:8e:fa:7f:88:12:1e:0e:a4:45:77:a1: 82:02:9c:a6:0f:64:0e:0d:cd:28:b9:c4:ea:0d:67:37:12:78: 74:0f:9d:ee:73:c6:de:05:85:e5:d6:f2:1e:13:81:19:65:a0: 7c:1a:19:a9:ee:d6:70:c1:af:b8:f1:8c:df:a8:b2:4d:c3:2d: 87:9d:ae:17:72:b1:0b:9c:aa:76:f6:a9:1f:d0:57:9d:5c:61: e8:24:63:d3:ca:69:dc:7a:3e:39:e9:1c:69:9b:85:69:c9:a6: c8:3a:a8:ba:80:eb:9c:f0:8c:e7:3a:ab:76:43:10:d7:e2:0b: b1:9f:56:98:34:89:11:47:15:74:ca:06:57:91:64:2a:69:c1: f3:6e:4a:a7:02:94:0a:fe:bf:8e:68:da:d1:84:01:0c:23:25: c5:61:e2:31:55:75:bf:3b:57:ea:31:69:e7:40:65:37:1f:70: 56:9c:8c:ad:0f:f6:a3:18:24:c3:40:f9:36:9c:f5:8f:91:cf: cd:63:e9:ee:08:79:c2:0b:75:fb:d4:73:41:7e:ae:80:fe:02: 48:d0:dc:50:1c:14:86:17:c0:9a:fd:d8:6a:e5:89:5f:da:36: b9:0f:34:48 -----BEGIN CERTIFICATE----- MIIGsDCCBZigAwIBAgISAZt9XOSa7V3ZmiYf3L9N70J3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGY5YTI0YmQyNmNjODIxNzUxOGExMWY1OThlNjM3MjAyNWU4YWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijTI2ddApoRhax5TGpUaIL1jAV5R itieHB+uKAN41fHVFZwfX7kBWDrYA1ENEpZdamChuUk5rptAZNSShPnK5yGQOuw2 fPuvw8nGuLAuFarLzT0G9dbxMLu4Og17ryred9h/+YBn/4KLnJIN2o7A65FOfsv1 1BsMD2OKz59D9VfmF9xLXrjU5OX2kYoc2JfkjU+vLJVhOIMv/g6EKbriyMIieX3L edKcwwiaBcmkVbroP7SVJicNPryQ74iRaO0miEt4Dk85v0i2y4stpDFk0IOzdk4/ gGjFugruCJ/T9S0svlqJMd4yU44iX+VrAo1jvABuenGIQ2CHPtwCUYtMDQIDAQAB o4IDvDCCA7gwHQYDVR0OBBYEFID5okvSbMghdRihH1mOY3ICXorpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3L2ZiMjEy YS03YTc2LTQyZTItODk4OS05NjU1MjlmMjBkMTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvZmIyMTJh LTdhNzYtNDJlMi04OTg5LTk2NTUyOWYyMGQxMS8xL2dQbWlTOUpzeUNGMUdLRWZX WTVqY2dKZWl1ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBLQYIKwYB BQUHAQcBAf8EggEcMIIBGDCB6gQCAAEwgeMDBAcfD4ADBAUuliADBAMutuADBAdN JgADBAJNSWgDBAZNbwADBAVOmSADBAVSlQADBAVSwCADBAVUFOADBAZUNIADBAdW OgADBAVXd4ADBAJbhNADBAVbucADBAJb7YQDBAVcNYADBARcPxADBAVejEADBARf j5ADBAKwOVwDAwCwTAMEBrJPQAMEArkeiAMEArlB5AMEArlClAMEArlIPAMEArlP 5AMEArlVlAMEArlhRAMEAsFv3AMEBcKYAAMEAMMv5AMEBdRVoAMEBdWPQAMEBdWh AAMEBdWs4AMEBdlIQDApBAIAAjAjAwUDIAEWiAMFACoAD8ADBQMqABPYAwUAKgII QAMFAyoFrMAwJgYIKwYBBQUHAQgBAf8EFzAVoBMwEQICDIwCAjFkAgI+kAIDAKNk MA0GCSqGSIb3DQEBCwUAA4IBAQAzy3BoufsqbryC1RQIPoqbF0aRHZN7DPLGjvp/ iBIeDqRFd6GCApymD2QODc0oucTqDWc3Enh0D53uc8beBYXl1vIeE4EZZaB8Ghmp 7tZwwa+48YzfqLJNwy2Hna4XcrELnKp29qkf0FedXGHoJGPTymncej456Rxpm4Vp yabIOqi6gOuc8IznOqt2QxDX4guxn1aYNIkRRxV0ygZXkWQqacHzbkqnApQK/r+O aNrRhAEMIyXFYeIxVXW/O1fqMWnnQGU3H3BWnIytD/ajGCTDQPk2nPWPkc/NY+nu CHnCC3X71HNBfq6A/gJI0NxQHBSGF8Ca/dhq5Ylf2ja5DzRI -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:02 2026 by rpki-client