This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer File: gYRmmwGJt_q-BecAMloNdJV76yc.cer (raw, json) Hash identifier: Z1w0KGEwNPSwWH4ahdz5JxkotYYVqadQO/xcJb8qoNc= Subject key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAA98DB3E179CAAA7F4F350351AE32 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20510 IP: 213.157.96.0 -- 213.157.123.255 IP: 2a0c:e280::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:a9:8d:b3:e1:79:ca:aa:7f:4f:35:03:51:ae:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8184669b0189b7fabe05e700325a0d74957beb27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:50:23:cb:64:fe:ca:c3:4c:39:e4:e0:35:43: 5c:22:f0:43:ab:c4:5d:05:b8:a3:ed:ab:0e:18:15: 4b:aa:89:84:c7:7e:35:1b:79:8e:1d:dc:38:b1:f4: da:f5:10:81:7b:13:e0:cc:cf:15:81:9a:2a:68:69: 4f:9a:5b:08:b4:bf:64:87:d4:ff:11:9a:c6:c4:82: 16:e9:70:45:ee:e5:41:c7:c1:75:b1:2b:40:5b:7e: 85:d5:21:a2:50:c5:65:d2:90:54:9b:41:5e:00:f6: c9:77:34:90:5d:c4:3b:a1:b2:33:17:1e:c7:77:50: a3:a6:8b:bb:e6:d4:b2:5c:63:d4:28:20:4d:4e:f7: 6e:5f:3b:38:ed:bb:d7:e5:62:b2:7d:2a:53:d2:59: 91:c3:16:d8:30:d7:3a:24:7d:44:bc:cd:c3:00:37: 70:57:cb:b9:cb:a9:04:51:62:52:73:5f:44:d6:bd: d2:8a:70:3d:c4:c8:2c:9d:06:ad:23:33:18:49:0d: 28:06:0c:fb:bb:fd:26:5a:0c:ce:a2:59:88:41:98: 6a:9f:28:fd:1f:80:e2:88:80:e4:b8:0d:ec:89:f6: ca:c1:2b:e4:b2:3e:b2:75:94:af:e6:68:53:dd:3c: 19:03:0e:2b:ab:e2:c5:a8:03:c7:1c:a5:97:3f:d7: 53:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.157.96.0-213.157.123.255 IPv6: 2a0c:e280::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20510 Signature Algorithm: sha256WithRSAEncryption 10:08:67:ba:63:2e:e1:8b:06:3e:6c:25:3c:dc:88:a6:ea:31: 46:51:b2:f5:4e:79:e7:da:7c:fe:c1:5a:17:03:20:58:96:39: f1:72:7a:43:33:58:60:7b:f7:9f:2e:51:15:06:31:54:46:ae: 03:e6:1e:c4:78:64:8a:2a:42:9f:cd:72:e7:8b:43:cd:c4:dd: d3:ea:62:d4:df:b7:c5:3d:e3:d6:f8:b1:3c:eb:5d:89:fc:e4: f2:9b:a7:b4:ae:5b:42:e4:1a:69:ea:13:a4:f9:21:95:cb:aa: fd:32:9c:54:bc:84:44:6d:ad:a5:e1:80:ce:6a:c9:46:58:70: 02:12:af:28:4b:70:58:8f:af:87:0b:04:44:aa:06:32:9c:07: 8b:ad:1b:8d:31:fb:ad:47:f1:2f:bb:02:00:7c:13:c1:50:6f: 32:77:3a:6b:a2:98:a4:0c:1f:8c:c1:b0:cd:3d:b9:7d:03:19: e2:ca:47:91:6b:78:ca:36:ee:09:e0:92:b0:84:2a:9f:90:e8: a8:f4:f4:4a:a7:01:d5:5f:5f:a3:84:68:1f:1b:2c:27:88:ba: 7f:12:e7:ae:32:94:65:bf:a6:ee:36:96:4b:57:a1:01:26:ac: a8:fb:3a:ee:66:02:e2:42:6d:c0:c2:88:d9:dc:11:da:df:a8: 01:bb:1c:46 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt26qmNs+F5yqp/TzUDUa4yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTg0NjY5YjAxODliN2ZhYmUwNWU3MDAzMjVhMGQ3NDk1N2JlYjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlAjy2T+ysNMOeTgNUNcIvBDq8Rd Bbij7asOGBVLqomEx341G3mOHdw4sfTa9RCBexPgzM8VgZoqaGlPmlsItL9kh9T/ EZrGxIIW6XBF7uVBx8F1sStAW36F1SGiUMVl0pBUm0FeAPbJdzSQXcQ7obIzFx7H d1Cjpou75tSyXGPUKCBNTvduXzs47bvX5WKyfSpT0lmRwxbYMNc6JH1EvM3DADdw V8u5y6kEUWJSc19E1r3SinA9xMgsnQatIzMYSQ0oBgz7u/0mWgzOolmIQZhqnyj9 H4DiiIDkuA3sifbKwSvksj6ydZSv5mhT3TwZAw4rq+LFqAPHHKWXP9dTUQIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFIGEZpsBibf6vgXnADJaDXSVe+snMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E0MzFl NDJlLTBkN2YtNDRkMC04MTNmLWI1ZTNhMmFiYmUyNS8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTQz MWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJiZTI1LzAvODE4NDY2OUIwMTg5 QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQnMCUwFAQCAAEwDjAM AwQF1Z1gAwQC1Z14MA0EAgACMAcDBQAqDOKAMBkGCCsGAQUFBwEIAQH/BAowCKAG MAQCAlAeMA0GCSqGSIb3DQEBCwUAA4IBAQAQCGe6Yy7hiwY+bCU83Iim6jFGUbL1 Tnnn2nz+wVoXAyBYljnxcnpDM1hge/efLlEVBjFURq4D5h7EeGSKKkKfzXLni0PN xN3T6mLU37fFPePW+LE8612J/OTym6e0rltC5Bpp6hOk+SGVy6r9MpxUvIREba2l 4YDOaslGWHACEq8oS3BYj6+HCwREqgYynAeLrRuNMfutR/EvuwIAfBPBUG8ydzpr opikDB+MwbDNPbl9AxniykeRa3jKNu4J4JKwhCqfkOio9PRKpwHVX1+jhGgfGywn iLp/EueuMpRlv6buNpZLV6EBJqyo+zruZgLiQm3AwojZ3BHa36gBuxxG -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:50 2026 by rpki-client