This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer File: gYFECjZ6NNMGvA9oWunNhpUvf5U.cer (raw, json) Hash identifier: WWv8u9S/8G5Suipm9zMHOKG2nWvWqSsgX1tUNh1yRtY= Subject key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A351885D55A5D0B55DE396A14B2CD2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 78.40.111.0/24 IP: 171.22.18.0/24 IP: 2a14:8880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:51:88:5d:55:a5:d0:b5:5d:e3:96:a1:4b:2c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8181440a367a34d306bc0f685ae9cd86952f7f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cd:c7:4c:76:b3:e1:94:83:ca:f0:fb:1b:ce: 8b:d8:87:02:d5:e9:63:4f:cf:72:11:14:f4:48:19: ff:c5:de:82:24:66:71:84:06:02:b7:18:bd:9e:61: e2:1c:68:48:dd:f2:be:a8:41:38:9d:59:36:c2:3b: 12:98:41:8c:32:81:6b:28:9f:57:d4:91:c1:06:f4: 4e:e2:63:ac:92:74:d9:1c:6e:ad:b8:47:e3:a8:f8: 43:44:34:72:bc:af:57:b5:6e:d0:e6:60:18:74:94: 8b:c7:96:09:8d:01:39:63:63:74:f9:b1:08:fc:3e: 7a:26:72:eb:bf:9b:ec:73:c0:51:e8:ec:06:a3:0f: 03:3c:49:b9:aa:da:c6:d2:d8:34:42:09:a4:1a:64: 5e:89:04:c2:fa:93:72:1b:32:16:1c:33:79:c0:6c: a3:40:6d:06:34:60:f2:f9:2d:5f:ef:8a:5c:0e:ff: 01:8e:f4:02:15:e3:a9:f0:ba:78:02:ae:61:db:2a: f6:9b:6d:54:72:b5:7b:b5:66:97:f4:1b:69:e7:f2: 67:91:2b:e5:21:22:23:ae:89:f8:96:12:d9:9c:7a: 80:d1:e9:03:6c:65:a2:5f:e8:39:a8:dc:30:d5:e5: 8d:b3:ff:28:48:e1:15:53:36:62:7f:77:c7:ad:08: 43:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.111.0/24 171.22.18.0/24 IPv6: 2a14:8880::/29 Signature Algorithm: sha256WithRSAEncryption 1c:2f:36:5d:48:2c:2a:29:93:9b:96:d5:c2:5f:81:07:cf:02: 06:7b:4e:c8:4f:ed:e7:99:2a:a1:d5:91:97:43:3d:54:e1:47: 4c:e2:64:bb:6e:a5:c1:65:77:d1:e3:6a:91:d8:76:1f:fa:24: c8:d3:ea:9b:5d:48:a8:cb:fe:f3:e9:2e:80:15:da:63:49:be: 99:68:18:d1:6c:3d:25:40:6d:72:18:f8:db:34:ac:78:77:b3: 9c:7c:da:9c:96:f0:fd:1e:f0:0c:3d:64:40:32:02:5e:f9:d8: 26:30:bc:3b:6f:de:16:b3:df:e2:78:44:be:cd:0a:44:4d:b1: 37:02:f1:e9:6c:91:3b:e1:18:ce:8f:fd:38:f2:a4:57:ed:16: 9e:ed:c3:25:9f:36:16:b3:1b:c5:67:56:62:cb:84:35:03:f8: d2:8b:46:d8:7b:b8:41:e0:fd:22:9c:54:11:1b:bf:9b:b0:82: a5:db:1c:26:3a:0b:58:31:f7:17:e7:da:52:db:89:b2:81:d4: 9c:31:76:71:5e:00:ac:af:80:97:6e:f8:a0:9b:0b:b6:b3:7d: cf:96:8c:1f:53:54:fe:78:b3:d8:da:fd:ea:11:08:55:a5:8b: 65:4f:3c:c9:5a:d0:31:e8:cd:1e:2f:3b:14:ea:eb:6f:3d:c3: 77:5e:f2:77 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt4o1GIXVWl0LVd45ahSyzSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTgxNDQwYTM2N2EzNGQzMDZiYzBmNjg1YWU5Y2Q4Njk1MmY3Zjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys3HTHaz4ZSDyvD7G86L2IcC1elj T89yERT0SBn/xd6CJGZxhAYCtxi9nmHiHGhI3fK+qEE4nVk2wjsSmEGMMoFrKJ9X 1JHBBvRO4mOsknTZHG6tuEfjqPhDRDRyvK9XtW7Q5mAYdJSLx5YJjQE5Y2N0+bEI /D56JnLrv5vsc8BR6OwGow8DPEm5qtrG0tg0QgmkGmReiQTC+pNyGzIWHDN5wGyj QG0GNGDy+S1f74pcDv8BjvQCFeOp8Lp4Aq5h2yr2m21UcrV7tWaX9Btp5/JnkSvl ISIjron4lhLZnHqA0ekDbGWiX+g5qNww1eWNs/8oSOEVUzZif3fHrQhD/QIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFIGBRAo2ejTTBrwPaFrpzYaVL3+VMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkLzE2MmY4 Zi02ODdmLTQ2NzEtYTUyNC01NTY5MWE1Njk3MjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvMTYyZjhm LTY4N2YtNDY3MS1hNTI0LTU1NjkxYTU2OTcyMC8xL2dZRkVDalo2Tk5NR3ZBOW9X dW5OaHBVdmY1VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQATihvAwQAqxYSMA0EAgACMAcDBQMqFIiAMA0G CSqGSIb3DQEBCwUAA4IBAQAcLzZdSCwqKZObltXCX4EHzwIGe07IT+3nmSqh1ZGX Qz1U4UdM4mS7bqXBZXfR42qR2HYf+iTI0+qbXUioy/7z6S6AFdpjSb6ZaBjRbD0l QG1yGPjbNKx4d7OcfNqclvD9HvAMPWRAMgJe+dgmMLw7b94Ws9/ieES+zQpETbE3 AvHpbJE74RjOj/048qRX7Rae7cMlnzYWsxvFZ1Ziy4Q1A/jSi0bYe7hB4P0inFQR G7+bsIKl2xwmOgtYMfcX59pS24mygdScMXZxXgCsr4CXbvigmwu2s33PlowfU1T+ eLPY2v3qEQhVpYtlTzzJWtAx6M0eLzsU6utvPcN3XvJ3 -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:41 2026 by rpki-client