This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer File: gRsX62FjiTMhtH5K9_pWsBxfN7U.cer (raw, json) Hash identifier: G9vehKPBM1x7XvnRIs7t8pIylH1sisBSlPtjalMNEak= Subject key identifier: 81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84B0CA0DDAF3EEE37903548200C983 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56966 IP: 141.8.208.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b0:ca:0d:da:f3:ee:e3:79:03:54:82:00:c9:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=811b17eb6163893321b47e4af7fa56b01c5f37b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4a:27:91:08:21:df:de:ed:01:38:ce:c8:66: 4f:0e:0d:b8:ab:a7:af:a4:10:a8:b2:4e:47:9f:57: 10:3b:b8:8c:ee:0e:a1:bf:05:a3:cf:3b:44:49:5f: c1:78:8f:d5:5f:83:e8:c5:4a:4f:1f:0f:b8:56:f0: 9a:b4:19:93:46:64:2f:fb:a9:b5:05:ec:a5:9b:78: 1c:f6:2c:6f:8f:b9:d8:eb:58:da:e8:df:14:48:d5: 5e:8f:be:f5:df:75:e1:11:26:93:5b:62:98:b3:53: 32:d5:31:46:c0:44:8a:54:3f:54:3a:e7:fc:20:69: 51:40:8d:11:4d:4d:12:53:37:42:74:79:9d:79:69: e4:2f:95:8b:24:a4:60:87:67:ef:d1:0f:79:70:96: df:ca:ee:89:74:16:30:3e:b6:95:02:b8:a5:1d:a9: 1d:9a:20:49:3c:55:5b:c2:1f:8d:02:15:7b:51:b3: 27:4f:84:fb:a3:bb:ab:a5:84:1c:74:73:12:be:f3: 20:80:73:af:de:fe:ca:31:c6:79:ec:69:60:af:ec: 50:22:fa:ca:71:73:38:5c:b9:ab:69:12:8f:c4:2a: 60:13:7b:4c:d0:b0:1c:88:49:02:37:28:06:71:f0: eb:73:50:3a:26:ba:34:26:9c:e4:2b:07:2e:18:e4: c0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.8.208.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56966 Signature Algorithm: sha256WithRSAEncryption 66:dd:74:62:ed:78:78:37:97:1b:a3:b4:fb:0d:e6:9a:99:60: ca:4d:c2:c6:68:6a:2c:a3:d7:3e:f9:89:c7:52:38:56:0f:7e: 62:94:0a:95:53:22:fc:40:36:12:d3:31:4b:b6:38:54:c2:9d: 4a:e7:af:26:3d:57:cb:ee:78:ee:1e:d0:42:2d:d6:ce:2e:a5: 1d:9a:ee:20:56:5c:f0:be:fe:88:3b:b9:cc:81:15:18:62:91: 00:c1:47:47:d2:1d:64:2a:f0:22:c5:43:cb:8f:3b:02:57:b2: ff:ef:a8:51:3a:bd:eb:be:1f:11:7a:34:5b:27:18:f0:f0:3f: ef:6d:17:12:4f:eb:ab:71:96:34:91:be:bc:e1:23:60:8f:42: 5a:9f:a7:b3:69:4b:ef:79:9e:dc:98:29:1b:35:7d:73:e1:f2: 64:92:bb:51:eb:2e:82:a1:55:4d:ab:8a:e8:0c:ea:a9:e5:93: 7b:52:db:68:af:dd:d5:aa:e3:d7:b6:f8:2e:e2:b5:50:9e:37: 20:2d:7b:15:1e:ea:3e:47:70:36:96:f4:30:b9:72:9c:ea:a7: 43:ec:5e:b7:4d:59:84:d4:d2:56:9c:a3:08:96:d8:cd:a7:da: 13:f7:31:91:65:7d:7b:c8:6d:f1:f5:b6:ad:32:71:7d:6c:a3: a0:b5:f7:65 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/hLDKDdrz7uN5A1SCAMmDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTFiMTdlYjYxNjM4OTMzMjFiNDdlNGFmN2ZhNTZiMDFjNWYzN2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkonkQgh397tATjOyGZPDg24q6ev pBCosk5Hn1cQO7iM7g6hvwWjzztESV/BeI/VX4PoxUpPHw+4VvCatBmTRmQv+6m1 Beylm3gc9ixvj7nY61ja6N8USNVej77133XhESaTW2KYs1My1TFGwESKVD9UOuf8 IGlRQI0RTU0SUzdCdHmdeWnkL5WLJKRgh2fv0Q95cJbfyu6JdBYwPraVArilHakd miBJPFVbwh+NAhV7UbMnT4T7o7urpYQcdHMSvvMggHOv3v7KMcZ57Glgr+xQIvrK cXM4XLmraRKPxCpgE3tM0LAciEkCNygGcfDrc1A6Jro0JpzkKwcuGOTA2wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIEbF+thY4kzIbR+Svf6VrAcXze1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzLzdlMWM1 Ny1mNDAwLTQ2MTMtYWE1OS1kNGE3YmE2NjBjZWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvN2UxYzU3 LWY0MDAtNDYxMy1hYTU5LWQ0YTdiYTY2MGNlZS8xL2dSc1g2MkZqaVRNaHRINUs5 X3BXc0J4Zk43VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDjQjQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDehjANBgkqhkiG9w0BAQsFAAOCAQEAZt10Yu14eDeXG6O0+w3mmplgyk3Cxmhq LKPXPvmJx1I4Vg9+YpQKlVMi/EA2EtMxS7Y4VMKdSuevJj1Xy+547h7QQi3Wzi6l HZruIFZc8L7+iDu5zIEVGGKRAMFHR9IdZCrwIsVDy487Aley/++oUTq9674fEXo0 WycY8PA/720XEk/rq3GWNJG+vOEjYI9CWp+ns2lL73me3JgpGzV9c+HyZJK7Uesu gqFVTauK6AzqqeWTe1LbaK/d1arj17b4LuK1UJ43IC17FR7qPkdwNpb0MLlynOqn Q+xet01ZhNTSVpyjCJbYzafaE/cxkWV9e8ht8fW2rTJxfWyjoLX3ZQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:46 2026 by rpki-client