This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer File: gcAMyMc9EUHIklTtVWqNASypAiY.cer (raw, json) Hash identifier: Lk8l7nmVyE+DLVjRtgqMw/Bndrw5v+RJhOgXI9bvRwU= Subject key identifier: 81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FB9055CB4D49E364DE3C958F2864C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41644 IP: 185.144.212.0/22 IP: 193.219.102.0/24 IP: 2001:3e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:b9:05:5c:b4:d4:9e:36:4d:e3:c9:58:f2:86:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81c00cc8c73d1141c89254ed556a8d012ca90226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b3:19:a0:a8:c3:58:09:ee:c8:14:c5:a6:d4: fc:09:0a:8a:69:13:13:ff:56:ca:ac:ad:72:d3:38: c5:23:49:54:ed:9d:68:01:e6:65:99:e9:68:8e:63: 4a:c3:ba:5c:f1:a5:5a:f1:a7:92:1a:e7:70:5f:41: bc:9f:b6:97:02:f1:bb:a9:46:a2:4d:eb:ce:74:25: 0d:39:a8:72:91:19:79:7d:c5:47:a7:87:98:36:6d: eb:43:fd:bc:da:e5:73:f3:e6:71:6a:61:9d:38:f2: b8:73:1c:a1:8f:07:ee:58:72:82:51:ae:2e:75:4d: ff:50:f2:3b:c1:de:e4:c9:d5:cc:79:0d:fc:de:54: eb:b5:15:38:57:ae:8f:43:91:c6:b8:dd:9a:8d:34: 1c:bf:5a:cb:06:42:56:7a:af:c4:64:ef:c0:45:6b: ac:ce:67:b6:eb:87:0b:25:ee:11:54:a5:a6:ee:07: 76:86:00:60:19:10:00:bb:80:1f:a3:25:4a:b0:4f: 3b:ec:1c:3d:7c:35:9f:13:28:83:66:4f:cd:1a:98: 00:e8:68:7e:96:8a:39:b8:bb:f0:e5:d1:6e:7e:f4: 44:d0:eb:59:5f:b5:a6:c6:bc:5b:b2:b1:43:29:59: cd:7b:c5:30:de:6c:04:75:65:72:70:99:21:8f:92: fe:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.212.0/22 193.219.102.0/24 IPv6: 2001:3e40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41644 Signature Algorithm: sha256WithRSAEncryption 9d:86:a3:e5:92:01:c7:db:b7:b3:d4:82:9d:8e:9b:85:96:0f: 6d:98:cf:61:83:9d:88:6c:2d:6e:be:12:f3:0e:85:b3:b3:39: 17:b4:5a:af:08:a0:b1:6d:3d:ce:95:c0:3c:80:c8:d9:70:e0: c6:af:b6:b1:5d:14:25:f4:de:62:1f:ab:d3:36:71:50:c4:71: ed:e8:ca:a2:80:9e:2a:f6:49:48:e4:0a:0c:0e:6c:3d:8d:f6: f4:c3:69:0d:06:60:ba:57:e8:71:97:9d:a7:e0:d1:74:b4:df: c8:9c:cd:fc:bf:4e:7f:84:ba:b9:00:54:47:3a:d2:0a:28:50: 20:3e:6f:1f:ca:0a:8d:42:7c:ce:c4:c0:8d:48:50:6d:73:22: 23:ab:15:73:d2:f3:9a:b7:f8:03:bd:b6:eb:8e:c1:ee:1d:d9: d2:d3:b4:a0:22:c9:9b:3b:ea:61:91:80:b7:cb:a1:d2:d4:e6: a0:3e:02:ed:14:63:26:a2:0a:14:d9:5c:a4:a1:c7:03:0d:e9: ec:9d:64:d0:01:46:ae:5c:f9:6d:db:84:f6:f1:94:07:20:f7: 24:b9:0c:c0:80:fe:2a:ce:46:d5:39:7e:16:7c:4e:11:84:d1: ed:68:18:9c:63:ad:ee:99:b2:55:70:cf:01:2a:7c:40:b5:54: 81:c3:e7:1e -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8f7kFXLTUnjZN48lY8oZMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWMwMGNjOGM3M2QxMTQxYzg5MjU0ZWQ1NTZhOGQwMTJjYTkwMjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprMZoKjDWAnuyBTFptT8CQqKaRMT /1bKrK1y0zjFI0lU7Z1oAeZlmelojmNKw7pc8aVa8aeSGudwX0G8n7aXAvG7qUai TevOdCUNOahykRl5fcVHp4eYNm3rQ/282uVz8+ZxamGdOPK4cxyhjwfuWHKCUa4u dU3/UPI7wd7kydXMeQ383lTrtRU4V66PQ5HGuN2ajTQcv1rLBkJWeq/EZO/ARWus zme264cLJe4RVKWm7gd2hgBgGRAAu4AfoyVKsE877Bw9fDWfEyiDZk/NGpgA6Gh+ loo5uLvw5dFufvRE0OtZX7WmxrxbsrFDKVnNe8Uw3mwEdWVycJkhj5L+AwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIHADMjHPRFByJJU7VVqjQEsqQImMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjL2I0ZDRl YS1mMTBiLTRiY2QtYTNmNS05MDUyNzZjNWM0MTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvYjRkNGVh LWYxMGItNGJjZC1hM2Y1LTkwNTI3NmM1YzQxNC8xL2djQU15TWM5RVVISWtsVHRW V3FOQVN5cEFpWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuZDUAwQAwdtmMA0EAgACMAcDBQMgAT5AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCirDANBgkqhkiG9w0BAQsFAAOCAQEAnYaj 5ZIBx9u3s9SCnY6bhZYPbZjPYYOdiGwtbr4S8w6Fs7M5F7RarwigsW09zpXAPIDI 2XDgxq+2sV0UJfTeYh+r0zZxUMRx7ejKooCeKvZJSOQKDA5sPY329MNpDQZgulfo cZedp+DRdLTfyJzN/L9Of4S6uQBURzrSCihQID5vH8oKjUJ8zsTAjUhQbXMiI6sV c9Lzmrf4A722647B7h3Z0tO0oCLJmzvqYZGAt8uh0tTmoD4C7RRjJqIKFNlcpKHH Aw3p7J1k0AFGrlz5bduE9vGUByD3JLkMwID+Ks5G1Tl+FnxOEYTR7WgYnGOt7pmy VXDPASp8QLVUgcPnHg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:43 2026 by rpki-client