This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer File: gci3Ore963b_SLLKCZYW7b5xxCY.cer (raw, json) Hash identifier: wLmBnsJUVQuWMcnoVGasNr+ZtAcfLr9pQsNAO1vlnrI= Subject key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B3993C6CDC27537047D7B09BDED04 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62164 IP: 5.181.164.0/22 IP: 45.11.88.0/22 IP: 45.81.148.0/22 IP: 45.92.28.0/22 IP: 85.209.84.0/22 IP: 185.149.232.0/22 IP: 185.191.228.0/22 IP: 185.199.224.0/22 IP: 185.202.172.0/22 IP: 185.215.148.0/22 IP: 185.218.232.0/22 IP: 185.229.240.0/22 IP: 185.235.12.0/22 IP: 193.39.184.0/22 IP: 212.162.148.0/22 IP: 2a0b:aac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:39:93:c6:cd:c2:75:37:04:7d:7b:09:bd:ed:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b8:5f:5f:26:bd:43:4a:30:46:72:3f:69:fc: 01:64:5b:1f:54:04:42:f0:b6:3a:d4:ff:46:76:1a: 90:36:58:fe:7d:48:d6:7f:de:bc:32:d0:15:f0:6a: d7:c0:80:eb:43:c0:1b:7f:e0:6f:37:47:ba:87:07: a5:b8:f4:25:fb:06:e1:e8:57:a8:61:22:5a:1a:19: 9d:2b:23:a1:f6:dc:fd:5b:37:a5:f6:7e:75:7b:eb: 70:c7:45:e8:97:5b:4d:72:a4:48:e8:07:9d:33:db: d8:17:85:64:6f:87:4f:20:2d:ac:a4:b3:77:e7:a0: 7a:22:9e:8d:ef:1b:26:34:cf:2b:bc:69:5f:57:21: 9a:d1:f5:ca:12:fa:0e:4d:5d:29:9c:52:b1:18:cf: 96:ec:5b:c9:eb:30:81:c6:b3:df:f2:bd:1d:e9:d3: 44:5b:90:16:7b:68:42:b1:5b:aa:dd:57:f0:2d:a3: 80:3d:2a:ca:38:f9:45:ec:52:ef:fc:b4:a5:83:37: 40:df:f5:a0:81:27:03:cd:58:2c:d1:d0:97:da:68: 07:a6:d8:60:7d:42:d3:21:99:f7:19:be:bd:32:c4: 75:1f:14:66:c5:0c:da:28:db:5e:a6:41:ff:4f:9d: ef:f0:ee:ef:6a:4c:b1:ee:af:f8:d3:d0:a6:cc:58: 3d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.164.0/22 45.11.88.0/22 45.81.148.0/22 45.92.28.0/22 85.209.84.0/22 185.149.232.0/22 185.191.228.0/22 185.199.224.0/22 185.202.172.0/22 185.215.148.0/22 185.218.232.0/22 185.229.240.0/22 185.235.12.0/22 193.39.184.0/22 212.162.148.0/22 IPv6: 2a0b:aac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62164 Signature Algorithm: sha256WithRSAEncryption 49:f5:a9:af:eb:ab:10:de:44:bd:fb:f9:34:24:c0:30:1a:eb: 4e:3d:cd:1f:b4:90:3a:85:03:2d:7c:8c:17:8f:6e:72:db:2e: 33:e3:c4:a7:43:1f:c3:0b:8e:72:64:4c:8e:39:4a:1f:7b:bd: c8:64:57:57:ca:5a:cc:95:cd:91:33:3f:ca:83:5e:be:c3:b4: 63:cc:26:f0:b4:7e:cb:8f:5d:28:f2:dd:a6:e5:50:b3:90:da: 5c:01:32:fd:ba:88:5e:bd:fd:4b:e5:0e:5c:11:26:24:59:13: 37:89:41:ee:2b:43:87:a0:73:47:5e:f4:5f:01:c7:af:44:00: 29:5f:99:36:ba:84:f6:a9:ca:e5:51:97:b5:7f:c4:d8:46:60: 05:fb:ec:1b:ea:f7:5d:c6:56:29:3b:ba:54:36:dd:9c:7b:50: c4:2f:f1:b2:d4:8a:0f:56:d6:55:e2:31:79:1d:f7:da:71:0c: 92:dd:82:bd:82:7f:8d:79:1f:67:ed:ca:f3:b8:5a:bb:2b:6a: e2:7f:50:42:75:0e:d9:0c:5e:1c:13:07:7d:32:8a:05:d2:66: c8:a3:e7:b3:14:d7:8a:3d:af:62:c6:ab:14:8b:37:5c:73:85: 40:5e:70:c3:4b:d1:28:a3:e7:66:05:00:06:92:a0:8c:21:e8: 1d:48:ec:6f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgISAZt9WzmTxs3CdTcEfXsJve0EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWM4YjczYWI3YmRlYjc2ZmY0OGIyY2EwOTk2MTZlZGJlNzFjNDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrhfXya9Q0owRnI/afwBZFsfVARC 8LY61P9GdhqQNlj+fUjWf968MtAV8GrXwIDrQ8Abf+BvN0e6hweluPQl+wbh6Feo YSJaGhmdKyOh9tz9Wzel9n51e+twx0Xol1tNcqRI6AedM9vYF4Vkb4dPIC2spLN3 56B6Ip6N7xsmNM8rvGlfVyGa0fXKEvoOTV0pnFKxGM+W7FvJ6zCBxrPf8r0d6dNE W5AWe2hCsVuq3VfwLaOAPSrKOPlF7FLv/LSlgzdA3/WggScDzVgs0dCX2mgHpthg fULTIZn3Gb69MsR1HxRmxQzaKNtepkH/T53v8O7vakyx7q/409CmzFg9bQIDAQAB o4IDBDCCAwAwHQYDVR0OBBYEFIHItzq3vet2/0iyygmWFu2+ccQmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4LzIwNzkz NC05ZWRjLTRhODktODIwZS1kODQ4OGIzYWI0MmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvMjA3OTM0 LTllZGMtNGE4OS04MjBlLWQ4NDg4YjNhYjQyZi8xL2djaTNPcmU5NjNiX1NMTEtD WllXN2I1eHhDWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGCBggrBgEF BQcBBwEB/wRzMHEwYAQCAAEwWgMEAgW1pAMEAi0LWAMEAi1RlAMEAi1cHAMEAlXR VAMEArmV6AMEArm/5AMEArnH4AMEArnKrAMEArnXlAMEArna6AMEArnl8AMEArnr DAMEAsEnuAMEAtSilDANBAIAAjAHAwUDKguqwDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMA8tQwDQYJKoZIhvcNAQELBQADggEBAEn1qa/rqxDeRL37+TQkwDAa6049 zR+0kDqFAy18jBePbnLbLjPjxKdDH8MLjnJkTI45Sh97vchkV1fKWsyVzZEzP8qD Xr7DtGPMJvC0fsuPXSjy3ablULOQ2lwBMv26iF69/UvlDlwRJiRZEzeJQe4rQ4eg c0de9F8Bx69EAClfmTa6hPapyuVRl7V/xNhGYAX77Bvq913GVik7ulQ23Zx7UMQv 8bLUig9W1lXiMXkd99pxDJLdgr2Cf415H2ftyvO4WrsrauJ/UEJ1DtkMXhwTB30y igXSZsij57MU14o9r2LGqxSLN1xzhUBecMNL0Sij52YFAAaSoIwh6B1I7G8= -----END CERTIFICATE-----Generated at Sat Jan 24 20:10:33 2026 by rpki-client