This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer File: g_gpRGn7euwmAbsDdy0BVvRwt00.cer (raw, json) Hash identifier: W9AXc8dBb8NYEavYDOoTXRGJHCmgUdaR/ZVw5jPFXpI= Subject key identifier: 83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D0808F80992D3E3EFC9B0262FEB5C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59884 IP: 185.67.212.0/22 IP: 2a05:1340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:08:08:f8:09:92:d3:e3:ef:c9:b0:26:2f:eb:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83f8294469fb7aec2601bb03772d0156f470b74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:40:3d:2f:4d:8c:6b:65:99:55:f8:90:ec:40: 24:9b:a3:d4:5c:f3:91:ee:80:ca:65:cc:19:b5:55: 51:60:c8:01:c7:77:b9:83:4d:e2:20:1d:83:f3:b2: 42:25:78:a7:9f:c1:ee:ff:03:ca:48:08:78:eb:b5: 1f:88:67:06:1b:60:32:10:c3:f9:2a:1a:cf:10:3e: 4d:41:a3:f0:b4:2f:4a:b7:08:86:88:bf:2b:60:ae: 22:87:33:7f:d0:ca:0b:1f:9e:af:30:ba:90:b4:b6: 9e:64:c9:12:84:08:56:be:f1:c5:d9:de:85:e7:8c: f9:3a:df:92:2a:1a:9d:77:09:f6:52:12:dc:6d:7a: 7e:bc:8f:20:c5:08:5b:93:bc:7b:33:32:9b:3c:8b: 29:ce:17:d5:af:76:3c:e4:0c:bd:27:13:cd:5a:90: 4a:f4:7e:59:2c:57:2b:82:9a:83:f8:68:d0:e4:3c: 30:ea:6a:81:67:4e:02:fe:36:d6:47:69:09:d6:69: cf:29:78:c6:9e:9e:cf:84:0f:64:6a:0c:ac:8a:d1: dc:8f:de:ad:cb:2d:b9:dd:93:46:20:78:d4:6f:ca: bf:a3:f1:4b:e9:45:a3:f6:31:0d:df:34:f7:cf:54: a7:d4:74:9d:c0:2b:ab:1a:a5:cd:59:e4:7a:53:8f: d7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.67.212.0/22 IPv6: 2a05:1340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59884 Signature Algorithm: sha256WithRSAEncryption 9e:e0:52:32:69:09:59:28:92:ec:1a:b8:ee:34:82:a5:33:66: 31:d4:d6:03:8d:6c:13:4b:6a:7c:5a:b5:72:c0:5a:3d:f2:6f: 56:cc:00:54:4a:4e:cd:b1:41:ec:10:50:1f:20:8b:ac:d5:b9: 16:d8:9f:47:13:02:a3:41:87:de:2d:af:8e:c0:4d:c1:ac:3f: 52:fd:c3:e9:66:13:fd:5b:4b:82:08:98:fb:1c:5f:8c:ed:f2: ad:f7:e1:0f:cb:49:49:30:c1:9d:52:c9:b1:d3:61:ba:60:db: da:c0:b3:9d:18:89:58:a2:de:51:ee:1c:a5:32:d3:5a:f0:32: 2e:56:e0:35:48:74:06:72:b7:ae:da:99:9c:b7:8b:d1:5f:82: e9:17:e7:ef:b0:78:fb:ef:42:7f:d1:b1:6d:37:6f:b7:5e:f7: e7:df:fa:b3:29:ad:64:8d:9f:b7:b1:aa:68:45:8d:59:4a:dc: d4:a5:d2:a8:6c:b5:0c:58:57:5a:1d:1f:94:64:7d:8e:0f:3a: dc:12:49:83:e0:50:fe:df:6c:3b:7b:53:cd:63:06:a1:9e:82: d9:13:34:35:41:e2:74:ed:4b:ee:c9:88:b4:aa:7d:41:f2:84: 4c:6c:19:70:f5:cb:e0:6f:50:cf:7d:48:78:2f:a0:26:75:78: 24:c7:e0:e2 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XQgI+AmS0+PvybAmL+tcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2Y4Mjk0NDY5ZmI3YWVjMjYwMWJiMDM3NzJkMDE1NmY0NzBiNzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEA9L02Ma2WZVfiQ7EAkm6PUXPOR 7oDKZcwZtVVRYMgBx3e5g03iIB2D87JCJXinn8Hu/wPKSAh467UfiGcGG2AyEMP5 KhrPED5NQaPwtC9KtwiGiL8rYK4ihzN/0MoLH56vMLqQtLaeZMkShAhWvvHF2d6F 54z5Ot+SKhqddwn2UhLcbXp+vI8gxQhbk7x7MzKbPIspzhfVr3Y85Ay9JxPNWpBK 9H5ZLFcrgpqD+GjQ5Dww6mqBZ04C/jbWR2kJ1mnPKXjGnp7PhA9kagysitHcj96t yy253ZNGIHjUb8q/o/FL6UWj9jEN3zT3z1Sn1HSdwCurGqXNWeR6U4/XMwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIP4KURp+3rsJgG7A3ctAVb0cLdNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzLzg2MWYz Mi04MWY0LTRkNjQtODYxMC01NGRlN2E2Y2IzYjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvODYxZjMy LTgxZjQtNGQ2NC04NjEwLTU0ZGU3YTZjYjNiMS8xL2dfZ3BSR243ZXV3bUFic0Rk eTBCVnZSd3QwMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUPUMA0EAgACMAcDBQMqBRNAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDp7DANBgkqhkiG9w0BAQsFAAOCAQEAnuBSMmkJWSiS 7Bq47jSCpTNmMdTWA41sE0tqfFq1csBaPfJvVswAVEpOzbFB7BBQHyCLrNW5Ftif RxMCo0GH3i2vjsBNwaw/Uv3D6WYT/VtLggiY+xxfjO3yrffhD8tJSTDBnVLJsdNh umDb2sCznRiJWKLeUe4cpTLTWvAyLlbgNUh0BnK3rtqZnLeL0V+C6Rfn77B4++9C f9GxbTdvt17359/6symtZI2ft7GqaEWNWUrc1KXSqGy1DFhXWh0flGR9jg863BJJ g+BQ/t9sO3tTzWMGoZ6C2RM0NUHidO1L7smItKp9QfKETGwZcPXL4G9Qz31IeC+g JnV4JMfg4g== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:07 2026 by rpki-client