This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer File: gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer (raw, json) Hash identifier: s4yUoAgAWm6OQkoaxWlDqlD4e8+zcXkV4+8AC6UWrXI= Subject key identifier: 81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA524467229140DA0A549CEC816BA14 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199214 IP: 91.240.74.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:24:46:72:29:14:0d:a0:a5:49:ce:c8:16:ba:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9d:35:52:5f:24:fb:12:b7:f9:25:53:03:21: 60:86:c9:d8:80:75:d5:02:95:3d:70:d3:7f:43:db: e7:33:c8:69:a8:83:80:0f:a1:63:2a:57:cf:b5:97: 3b:df:d7:67:1a:b1:a6:ef:45:f9:b6:bd:c7:36:33: 28:76:69:e8:4d:fe:0c:03:e2:75:d0:9a:9f:7b:21: 49:b4:ca:12:2f:f1:ff:e3:94:ec:b8:ab:ce:4f:0e: 27:70:dc:3f:fc:b3:33:3c:ed:fd:ac:4a:f1:fa:7d: 88:fc:3d:08:ee:f5:44:7c:9c:d6:90:58:30:14:b6: 8a:b4:5f:f5:d5:74:89:a9:98:7e:a4:65:1e:29:4e: 2f:29:f3:7b:b9:60:1c:f9:e2:c8:a2:7e:e4:63:ab: 85:11:43:77:c2:d2:ce:23:81:d4:bf:67:08:71:00: 44:8d:96:3d:44:d0:1f:39:09:2b:65:6e:47:56:b6: e7:bb:53:9f:48:42:55:03:57:64:96:95:67:df:2a: 69:9b:3e:94:70:be:30:9a:b4:56:a9:64:68:5e:a9: c3:ac:86:f7:d6:73:e2:8c:c5:47:f2:9c:31:1c:24: 26:c3:95:49:c6:ca:ca:80:3c:43:d1:1e:23:c7:a5: 84:64:d2:ad:3a:7b:cc:a5:10:0c:ae:9a:43:fd:0c: fd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.74.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199214 Signature Algorithm: sha256WithRSAEncryption 2e:f1:38:b9:1a:62:3b:2c:20:a2:99:45:b3:a9:da:e8:fc:a5: 24:61:71:7b:d7:5c:a7:16:0f:09:7b:b1:2d:7d:97:02:ec:46: b4:e4:34:41:ad:1d:09:07:85:9b:15:d3:6e:38:35:6b:62:90: 8d:65:80:95:1c:c2:6b:f0:ca:1a:6d:65:11:20:fb:80:fc:81: 28:34:51:4e:8e:73:bc:76:f5:ab:df:7f:ca:8b:a4:67:43:2a: e3:27:b7:de:ef:c0:02:52:99:31:6c:79:61:ce:2d:38:9c:e6: 65:3f:86:80:89:c1:f4:e4:7b:f6:b6:6a:60:1d:ff:1a:62:cd: c1:89:cb:76:4c:c1:35:7e:6c:8d:3e:82:8e:4d:31:76:f0:11: 3e:18:e1:e6:8e:ae:7d:8c:c2:64:2e:cd:9c:e7:37:ea:ea:bc: 2a:80:9c:44:91:4a:e4:39:42:9d:ad:ae:6d:c6:bd:8a:12:d7: c2:0a:89:4a:95:aa:32:44:c1:a7:68:c7:9d:ca:a9:f7:c0:34: 1d:88:5e:69:73:e2:7f:73:b7:5c:18:4c:27:9c:74:26:19:aa: 03:b6:73:33:15:39:ce:61:cc:35:1b:de:96:86:ce:21:0d:17: 7b:82:62:36:91:2b:0d:79:d4:17:43:9a:08:e1:7c:21:87:5c: a9:99:d6:1a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7pSRGcikUDaClSc7IFroUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTA3ZGMwMzZkOWQ2YzI4ZjFkODdhYjY0ZTc4ZWU0ODVhOTZmZDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0p01Ul8k+xK3+SVTAyFghsnYgHXV ApU9cNN/Q9vnM8hpqIOAD6FjKlfPtZc739dnGrGm70X5tr3HNjModmnoTf4MA+J1 0JqfeyFJtMoSL/H/45TsuKvOTw4ncNw//LMzPO39rErx+n2I/D0I7vVEfJzWkFgw FLaKtF/11XSJqZh+pGUeKU4vKfN7uWAc+eLIon7kY6uFEUN3wtLOI4HUv2cIcQBE jZY9RNAfOQkrZW5HVrbnu1OfSEJVA1dklpVn3yppmz6UcL4wmrRWqWRoXqnDrIb3 1nPijMVH8pwxHCQmw5VJxsrKgDxD0R4jx6WEZNKtOnvMpRAMrppD/Qz9ZwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIEH3ANtnWwo8dh6tk547khalv2BMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmLzE1OTg2 MC1mODMyLTQzOGEtOWU2Zi03NmExNDFjZGQ0MWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvMTU5ODYw LWY4MzItNDM4YS05ZTZmLTc2YTE0MWNkZDQxZi8xL2dRZmNBMjJkYkNqeDJIcTJU bmp1U0ZxV19ZRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW/BKMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMKLjANBgkqhkiG9w0BAQsFAAOCAQEALvE4uRpiOywgoplFs6na6PylJGFxe9dc pxYPCXuxLX2XAuxGtOQ0Qa0dCQeFmxXTbjg1a2KQjWWAlRzCa/DKGm1lESD7gPyB KDRRTo5zvHb1q99/youkZ0Mq4ye33u/AAlKZMWx5Yc4tOJzmZT+GgInB9OR79rZq YB3/GmLNwYnLdkzBNX5sjT6Cjk0xdvARPhjh5o6ufYzCZC7NnOc36uq8KoCcRJFK 5DlCna2ubca9ihLXwgqJSpWqMkTBp2jHncqp98A0HYheaXPif3O3XBhMJ5x0Jhmq A7ZzMxU5zmHMNRvelobOIQ0Xe4JiNpErDXnUF0OaCOF8IYdcqZnWGg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:33 2026 by rpki-client