This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer File: gQacCVUbP-O6LJpuVdjgWbugsYY.cer (raw, json) Hash identifier: hz47wACmSASbE0qaMY9PMLLNwh18010lUmeRp6Irzac= Subject key identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB554D894DE6AF7040E5F744D582D6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21221 IP: 82.210.96.0/19 IP: 84.35.0.0/16 IP: 212.29.160.0/19 IP: 2001:15b0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 08:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:55:4d:89:4d:e6:af:70:40:e5:f7:44:d5:82:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:67:a0:db:c0:e7:ca:6b:30:54:b5:dc:f3:a6: 2d:47:86:53:8c:41:32:be:5e:26:70:0d:ee:51:3c: 61:c7:61:ff:ec:2b:e5:99:73:4d:89:89:95:82:95: ca:90:45:21:f4:bd:0d:0c:b9:d8:d3:c4:11:0c:19: 2e:96:66:79:c7:bf:07:b4:3e:f8:d0:d8:39:dc:e1: 30:69:8c:6d:13:6a:98:13:5f:40:52:61:1c:01:31: b3:cf:bf:ca:02:f3:29:03:f4:09:4b:5c:31:5a:c8: a8:23:13:8a:05:1b:46:24:9e:1f:3b:e9:94:d3:8f: 40:9d:e0:a8:2a:85:91:b0:5c:df:de:5e:f0:25:76: 92:44:09:20:1e:69:c1:99:c7:ce:c2:74:20:44:84: d8:ce:de:8e:18:35:0b:8f:7f:fe:96:5c:55:c1:9d: 5d:e3:cd:da:23:d5:11:51:16:00:62:9e:c6:6d:83: 14:05:8f:5f:42:99:37:8b:3b:27:c6:41:67:28:10: dd:30:8f:a7:4e:db:08:47:06:d8:03:fe:24:b5:44: d2:f2:01:1c:79:6d:fc:ff:1b:28:b4:c1:7a:ed:46: 90:a9:e5:07:74:74:f1:51:c3:10:10:fb:ff:39:9b: d1:6f:60:29:b0:46:79:bc:83:cd:17:d0:b2:1b:98: 23:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.210.96.0/19 84.35.0.0/16 212.29.160.0/19 IPv6: 2001:15b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21221 Signature Algorithm: sha256WithRSAEncryption a1:13:cb:d0:80:7f:a8:6a:8f:40:be:02:6c:90:31:d2:05:98: 31:3f:05:82:14:4b:21:ea:be:fa:87:49:eb:cf:30:87:39:da: 73:29:76:cc:ac:23:b2:eb:fd:c3:6a:95:86:1d:d2:ef:7e:1b: c4:10:86:bf:c8:44:35:43:2f:50:69:c8:77:c8:d9:3d:0b:2e: 7e:b7:b3:20:b4:2f:e6:24:51:db:ee:e0:51:ef:72:82:29:bd: 97:59:2e:e7:a6:9c:72:7e:2d:cd:5e:3f:b0:38:b7:13:5e:d7: d2:c1:b3:da:2f:2d:3f:06:3f:0b:36:10:1e:1b:75:5e:41:83: cf:0b:6f:57:5d:a3:61:e9:48:19:8d:42:86:96:33:21:24:fa: 6b:aa:b2:49:24:9b:18:8e:be:cb:fd:29:f6:26:81:09:41:c6: 9d:a9:4c:e3:20:32:f3:5c:a4:74:90:1e:46:cb:3c:de:5b:8e: 28:15:81:b2:2c:e9:06:2e:b3:e6:51:97:b9:84:20:b8:37:dd: 31:ae:1b:e3:fd:ec:0d:80:b9:b6:89:68:71:45:d8:e5:d0:e7: 5e:cb:19:7f:a5:3c:20:7d:23:df:27:99:db:5e:0c:c4:8a:af: 02:55:3e:35:41:24:70:51:08:67:7e:46:1e:e0:f0:b1:75:9c: 43:e3:84:d2 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt261VNiU3mr3BA5fdE1YLWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTA2OWMwOTU1MWIzZmUzYmEyYzlhNmU1NWQ4ZTA1OWJiYTBiMTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWeg28DnymswVLXc86YtR4ZTjEEy vl4mcA3uUTxhx2H/7CvlmXNNiYmVgpXKkEUh9L0NDLnY08QRDBkulmZ5x78HtD74 0Ng53OEwaYxtE2qYE19AUmEcATGzz7/KAvMpA/QJS1wxWsioIxOKBRtGJJ4fO+mU 049AneCoKoWRsFzf3l7wJXaSRAkgHmnBmcfOwnQgRITYzt6OGDULj3/+llxVwZ1d 483aI9URURYAYp7GbYMUBY9fQpk3izsnxkFnKBDdMI+nTtsIRwbYA/4ktUTS8gEc eW38/xsotMF67UaQqeUHdHTxUcMQEPv/OZvRb2ApsEZ5vIPNF9CyG5gjzwIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFIEGnAlVGz/juiyablXY4Fm7oLGGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdmL2YzNzhk My0zOTQ3LTQ3ZjktODA1ZC04MjlhY2ViYzExNjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2YvZjM3OGQz LTM5NDctNDdmOS04MDVkLTgyOWFjZWJjMTE2OS8xL2dRYWNDVlViUC1PNkxKcHVW ZGpnV2J1Z3NZWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF BwEHAQH/BCowKDAXBAIAATARAwQFUtJgAwMAVCMDBAXUHaAwDQQCAAIwBwMFACAB FbAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICUuUwDQYJKoZIhvcNAQELBQADggEB AKETy9CAf6hqj0C+AmyQMdIFmDE/BYIUSyHqvvqHSevPMIc52nMpdsysI7Lr/cNq lYYd0u9+G8QQhr/IRDVDL1BpyHfI2T0LLn63syC0L+YkUdvu4FHvcoIpvZdZLuem nHJ+Lc1eP7A4txNe19LBs9ovLT8GPws2EB4bdV5Bg88Lb1ddo2HpSBmNQoaWMyEk +muqskkkmxiOvsv9KfYmgQlBxp2pTOMgMvNcpHSQHkbLPN5bjigVgbIs6QYus+ZR l7mEILg33TGuG+P97A2AubaJaHFF2OXQ517LGX+lPCB9I98nmdteDMSKrwJVPjVB JHBRCGd+Rh7g8LF1nEPjhNI= -----END CERTIFICATE-----Generated at Wed Feb 4 10:55:02 2026 by rpki-client