This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer File: gQYKUYUo6GqOp38YigJjeQwI9rk.cer (raw, json) Hash identifier: mdLm08jxe0aOijl/Ad8qq2CU2ghxkRCPgtUf8kw6vLU= Subject key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E780ADEA4CC929CCCF2A533D9F714 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.217.126.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:78:0a:de:a4:cc:92:9c:cc:f2:a5:33:d9:f7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81060a518528e86a8ea77f188a0263790c08f6b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9b:c4:04:61:24:35:78:15:50:67:ce:61:d9: f1:38:82:75:f1:74:f4:65:30:7a:ba:22:f5:a4:d4: 39:c3:bb:b5:dd:1a:54:99:f6:72:57:75:e8:a8:59: 18:e6:cf:51:7a:58:74:7f:c0:fd:9f:d6:24:0f:7f: 1e:fe:98:0f:62:f9:10:cd:0c:47:45:40:7d:9e:2e: d3:b0:47:f0:d9:c3:d0:b7:37:7f:91:9e:00:69:8d: 98:82:41:5f:16:02:58:e6:59:a5:40:70:6e:d0:99: fe:61:56:d5:20:93:41:18:eb:b3:f3:75:1a:e1:f6: 37:84:c2:2c:1d:86:c8:72:d6:4b:b6:58:44:b5:f5: 8f:6f:1c:9e:97:4f:58:06:ea:7d:ca:0b:0a:51:ed: e4:bc:5a:57:92:00:a4:06:de:77:09:b3:3e:f2:26: 70:2e:5a:12:60:5b:04:ac:66:ed:e7:f4:0f:37:cd: 08:79:37:b7:ea:c3:49:d9:1d:71:22:ae:ea:c8:3d: cf:4e:78:31:97:da:8d:21:a4:03:4f:8e:ab:c5:ca: 23:35:14:a9:bb:f3:37:ad:b3:fa:62:64:1b:e1:cc: a6:92:c3:87:31:8d:c2:95:bb:f9:40:af:ef:f0:21: b8:d6:4f:ca:9d:c9:c6:cd:aa:11:cb:22:8e:47:95: e9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.126.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:da:cc:ad:57:96:12:a2:88:88:0b:f7:e2:b3:fb:6c:7d:e9: a4:30:a6:c0:18:fb:73:0f:d2:c7:49:2b:a4:ef:ce:7d:be:02: d4:12:9a:80:ed:3c:91:d4:88:dd:01:45:02:8a:97:94:9f:59: b7:c5:7c:07:db:b8:b3:63:f1:1d:4c:69:e6:86:e2:ae:42:e3: 90:1b:19:8a:b0:11:81:28:02:93:b4:4e:76:9c:a5:5d:77:43: e7:f8:7e:ad:b0:0c:8e:71:5f:3a:b1:e6:0f:13:01:f7:54:d7: 05:d0:4c:d0:0d:66:fd:13:fa:b3:d1:ad:91:49:f2:ff:ab:2c: a1:ff:22:b5:d1:f9:5e:38:2f:a3:33:73:1f:33:e5:d6:95:48: b9:8f:f3:4b:e6:27:31:75:b0:49:c2:fe:b7:00:4f:c6:aa:72: 05:0f:60:8f:d4:9a:2a:81:71:4c:ca:7c:6b:c6:f3:e1:40:3c: 9c:c9:6a:56:e7:d8:7b:29:e6:11:e2:d3:bc:66:0d:3f:4b:7d: 5e:fd:fe:fb:e2:0f:10:6c:98:ac:86:83:33:75:cd:12:d2:ce: 0f:22:2a:73:75:9f:99:fd:17:45:d2:32:8a:87:a1:2d:e1:f5: 93:64:89:a4:ef:52:1e:f7:fb:e3:82:e7:f2:b4:57:fa:72:2b: f3:62:8e:d4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5fngK3qTMkpzM8qUz2fcUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTA2MGE1MTg1MjhlODZhOGVhNzdmMTg4YTAyNjM3OTBjMDhmNmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5vEBGEkNXgVUGfOYdnxOIJ18XT0 ZTB6uiL1pNQ5w7u13RpUmfZyV3XoqFkY5s9Relh0f8D9n9YkD38e/pgPYvkQzQxH RUB9ni7TsEfw2cPQtzd/kZ4AaY2YgkFfFgJY5lmlQHBu0Jn+YVbVIJNBGOuz83Ua 4fY3hMIsHYbIctZLtlhEtfWPbxyel09YBup9ygsKUe3kvFpXkgCkBt53CbM+8iZw LloSYFsErGbt5/QPN80IeTe36sNJ2R1xIq7qyD3PTngxl9qNIaQDT46rxcojNRSp u/M3rbP6YmQb4cymksOHMY3Clbv5QK/v8CG41k/KncnGzaoRyyKOR5Xp5QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIEGClGFKOhqjqd/GIoCY3kMCPa5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzL2U1ZTJk MC1mNDM5LTQ1ZTQtODU0MC1mMTk2MDBjN2FkNTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvZTVlMmQw LWY0MzktNDVlNC04NTQwLWYxOTYwMGM3YWQ1NC8xL2dRWUtVWVVvNkdxT3AzOFlp Z0pqZVF3STlyay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW9l+MA0GCSqGSIb3DQEBCwUAA4IBAQBf2syt V5YSooiIC/fis/tsfemkMKbAGPtzD9LHSSuk7859vgLUEpqA7TyR1IjdAUUCipeU n1m3xXwH27izY/EdTGnmhuKuQuOQGxmKsBGBKAKTtE52nKVdd0Pn+H6tsAyOcV86 seYPEwH3VNcF0EzQDWb9E/qz0a2RSfL/qyyh/yK10fleOC+jM3MfM+XWlUi5j/NL 5icxdbBJwv63AE/GqnIFD2CP1JoqgXFMynxrxvPhQDycyWpW59h7KeYR4tO8Zg0/ S31e/f774g8QbJishoMzdc0S0s4PIipzdZ+Z/RdF0jKKh6Et4fWTZImk71Ie9/vj gufytFf6civzYo7U -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:20 2026 by rpki-client