This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gXS2uiCeYit5ihT86qlEdi-nYpo.cer File: gXS2uiCeYit5ihT86qlEdi-nYpo.cer (raw, json) Hash identifier: UBZOQE8qNCkXexb14tjZCF6bJWs6QNWvPRVkQ8K4K4c= Subject key identifier: 81:74:B6:BA:20:9E:62:2B:79:8A:14:FC:EA:A9:44:76:2F:A7:62:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECCAF478EF3DD704AB40EDE35C58E5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211747 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ca:f4:78:ef:3d:d7:04:ab:40:ed:e3:5c:58:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8174b6ba209e622b798a14fceaa944762fa7629a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:50:62:2c:e8:75:27:a1:8d:bb:c4:31:a5:99: ee:01:07:4e:a6:03:11:1e:dc:08:00:0f:9c:04:5f: 57:68:0b:19:d6:81:5a:88:c2:a4:c2:50:2a:0a:04: a6:4c:38:32:f7:c0:ab:6f:cf:62:f8:71:33:33:f8: dd:2a:af:56:0b:ce:47:06:83:4f:9d:31:0e:c2:94: 3b:4a:85:33:79:34:3f:df:fa:71:61:23:ad:41:97: 68:d7:09:0d:6a:fe:d5:5c:f0:21:56:e8:9e:a4:f6: 71:3c:b6:ff:36:96:f9:dc:ce:3e:7f:d3:8f:c8:05: 20:f0:cc:f6:04:8d:fb:48:40:d7:f7:be:f8:99:f4: 6a:f9:ac:15:2a:a2:33:23:e2:d2:ec:fb:01:c0:45: 45:03:31:69:60:a1:5b:f4:ad:d4:d9:09:b6:86:45: b2:d3:96:32:cf:94:37:3e:29:d7:22:c0:27:02:d0: aa:9b:fa:27:6b:6c:bd:8f:e8:f0:7c:61:a6:a0:1c: eb:76:b6:0e:5d:5b:7d:cc:8c:93:4b:cf:c5:d4:04: 36:e7:50:c8:68:ab:69:ce:cd:0a:26:90:5e:1b:17: 6e:50:6d:23:ed:b3:68:31:07:3e:0c:f6:f4:8f:da: c8:be:45:f0:7a:3c:84:ad:0b:a9:d2:13:ad:74:85: 5f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:74:B6:BA:20:9E:62:2B:79:8A:14:FC:EA:A9:44:76:2F:A7:62:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211747 Signature Algorithm: sha256WithRSAEncryption 34:b7:c3:6d:90:9b:93:78:be:4b:d4:7c:30:8e:61:0b:ac:46: 72:81:20:b2:04:44:9c:61:7b:ee:cb:07:15:12:e6:a3:7d:a0: 5d:82:c1:f8:6b:d1:e3:69:6d:cd:c6:2f:a4:19:29:4d:87:bd: e0:95:d7:7a:bf:e4:c4:90:09:c0:31:51:da:3e:1b:d8:8f:da: 42:85:37:8c:85:02:ed:5f:a8:c0:07:f3:58:9d:65:02:0b:b4: b1:b1:1e:cb:53:21:25:e8:5e:4c:fa:ea:b1:97:53:45:5a:c1: ed:4c:af:03:82:85:ae:bf:71:33:e6:da:4b:86:d7:fd:ee:21: a8:86:f8:e5:b8:cf:de:3b:94:91:08:dd:b4:a8:23:04:fc:28: 81:35:50:b9:56:61:01:44:a1:8c:f0:d8:c8:f2:77:05:fb:28: c6:04:9e:d4:69:85:c5:59:ed:41:b5:db:cd:21:8e:68:f6:6b: a8:7d:d9:4e:12:26:7d:c9:60:c3:ac:67:9a:ce:df:57:59:f9: ee:10:a6:96:aa:48:c7:6d:42:c8:a9:2c:14:97:89:61:8d:1b: 55:67:a5:82:eb:6d:d6:1b:88:07:b6:af:3d:95:52:f7:b1:48: 50:75:ea:56:d2:a2:41:d9:a5:ca:d8:b7:5e:50:08:db:40:bb: 5c:ca:c7:73 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt57Mr0eO891wSrQO3jXFjlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTc0YjZiYTIwOWU2MjJiNzk4YTE0ZmNlYWE5NDQ3NjJmYTc2MjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFBiLOh1J6GNu8QxpZnuAQdOpgMR HtwIAA+cBF9XaAsZ1oFaiMKkwlAqCgSmTDgy98Crb89i+HEzM/jdKq9WC85HBoNP nTEOwpQ7SoUzeTQ/3/pxYSOtQZdo1wkNav7VXPAhVuiepPZxPLb/Npb53M4+f9OP yAUg8Mz2BI37SEDX9774mfRq+awVKqIzI+LS7PsBwEVFAzFpYKFb9K3U2Qm2hkWy 05Yyz5Q3PinXIsAnAtCqm/ona2y9j+jwfGGmoBzrdrYOXVt9zIyTS8/F1AQ251DI aKtpzs0KJpBeGxduUG0j7bNoMQc+DPb0j9rIvkXwejyErQup0hOtdIVfnwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFIF0trognmIreYoU/OqpRHYvp2KaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5L2RjOTA4 Mi01YTlmLTQxZWUtOGQ0NC02MThjZDA2ODJiMTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvZGM5MDgy LTVhOWYtNDFlZS04ZDQ0LTYxOGNkMDY4MmIxMC8xL2dYUzJ1aUNlWWl0NWloVDg2 cWxFZGktbllwby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM7IzANBgkqhkiG9w0BAQsFAAOCAQEANLfDbZCbk3i+ S9R8MI5hC6xGcoEgsgREnGF77ssHFRLmo32gXYLB+GvR42ltzcYvpBkpTYe94JXX er/kxJAJwDFR2j4b2I/aQoU3jIUC7V+owAfzWJ1lAgu0sbEey1MhJeheTPrqsZdT RVrB7UyvA4KFrr9xM+baS4bX/e4hqIb45bjP3juUkQjdtKgjBPwogTVQuVZhAUSh jPDYyPJ3BfsoxgSe1GmFxVntQbXbzSGOaPZrqH3ZThImfclgw6xnms7fV1n57hCm lqpIx21CyKksFJeJYY0bVWelgutt1huIB7avPZVS97FIUHXqVtKiQdmlyti3XlAI 20C7XMrHcw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:57 2026 by rpki-client