This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer File: ggBZa784LUmLxewrP9ZTOehbmPI.cer (raw, json) Hash identifier: QbIwDc6tubgJHHC57H0240RyDALLNkcbKKUF8UUJOoU= Subject key identifier: 82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8B41149880336751B71DDE54FA34D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43104 IP: 193.200.224.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b4:11:49:88:03:36:75:1b:71:dd:e5:4f:a3:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:01:a1:0d:0c:00:63:3a:0b:1b:da:af:cf:32: 18:e4:67:fa:83:6e:49:28:9a:e6:58:49:ed:13:fc: a4:2e:d3:0f:2a:80:0a:9a:15:0d:8a:12:b8:62:f3: 89:03:4d:8c:77:f1:9a:f0:13:01:2d:84:2c:6c:6e: 54:86:7d:95:f1:6f:53:9a:4f:bb:c2:44:d9:1b:ac: 24:9d:04:af:7a:3b:fc:27:46:cd:e0:84:55:01:61: 34:26:6d:24:76:f9:6e:e6:63:05:a2:88:d2:5a:6a: ae:09:f0:89:b8:7c:5e:84:3e:cf:bf:f5:cc:01:f3: 9b:87:b9:53:c8:8f:7c:a8:df:e8:ec:61:d9:dc:d1: e7:c4:7e:4b:e1:b1:f7:f0:90:22:7e:15:a5:71:42: 3e:79:aa:05:12:a1:31:75:61:99:17:17:c3:bf:82: 28:76:d1:0b:ce:dd:4b:a7:7b:df:ba:d0:96:46:39: bd:86:de:ef:eb:a9:bc:b1:98:10:35:70:dc:10:8a: 64:e1:55:29:c0:0b:dc:a5:fd:87:bc:c2:4a:74:59: 37:dc:e6:c1:2a:9a:87:be:d6:cf:a4:7e:39:06:de: c6:6d:00:3c:9f:7d:b6:70:51:a3:8f:6d:e4:60:cb: c3:e4:e9:4c:0b:0d:4b:9f:23:66:59:83:ce:80:55: 64:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.224.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43104 Signature Algorithm: sha256WithRSAEncryption 05:23:28:69:b1:d0:f7:27:4d:6e:30:a1:fb:24:fa:e9:05:29: df:77:1c:90:98:83:6c:7e:91:c0:19:52:79:3c:69:f9:0b:e3: 24:de:6c:f2:1e:6c:ab:9a:78:03:b9:95:56:57:ea:4f:67:b5: fb:c3:5f:8b:5e:1d:21:e4:8c:56:17:33:1e:28:b4:f4:7e:15: da:54:e0:44:5b:66:88:19:fe:bf:fc:11:6d:40:51:12:36:fc: f1:67:7c:be:b5:95:ad:bf:ca:f7:90:87:ee:32:f3:8c:de:4a: 70:34:33:4f:0f:28:6c:01:0f:a0:41:bd:54:de:1c:0b:5b:12: 86:fe:71:ac:27:8d:52:98:86:ce:6c:ba:f5:d8:b0:b3:10:29: 6b:3f:ac:eb:14:36:c4:e2:cb:6d:6b:5d:74:76:a0:8a:2e:9d: a6:b3:d3:07:42:22:11:a7:f1:64:ad:0c:31:c2:15:c2:a9:34: fc:d1:ed:d9:42:0a:19:8b:58:75:08:eb:f5:0a:b4:50:2c:71: 63:3b:bf:c7:e9:56:08:a8:90:0b:d0:48:c1:a5:f0:1b:1a:75: ad:88:1f:80:d9:76:bd:b9:c1:1a:1b:88:d5:d9:d4:fa:7e:4b: 6a:34:17:e4:b6:2d:4e:c0:a0:8f:38:2c:ec:2e:01:1e:09:07: 44:e2:51:88 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6yLQRSYgDNnUbcd3lT6NNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjAwNTk2YmJmMzgyZDQ5OGJjNWVjMmIzZmQ2NTMzOWU4NWI5OGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAGhDQwAYzoLG9qvzzIY5Gf6g25J KJrmWEntE/ykLtMPKoAKmhUNihK4YvOJA02Md/Ga8BMBLYQsbG5Uhn2V8W9Tmk+7 wkTZG6wknQSvejv8J0bN4IRVAWE0Jm0kdvlu5mMFoojSWmquCfCJuHxehD7Pv/XM AfObh7lTyI98qN/o7GHZ3NHnxH5L4bH38JAifhWlcUI+eaoFEqExdWGZFxfDv4Io dtELzt1Lp3vfutCWRjm9ht7v66m8sZgQNXDcEIpk4VUpwAvcpf2HvMJKdFk33ObB KpqHvtbPpH45Bt7GbQA8n322cFGjj23kYMvD5OlMCw1LnyNmWYPOgFVkjwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIIAWWu/OC1Ji8XsKz/WUznoW5jyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlLzUzNjQz MS05Y2JlLTQzYTktOGMxZi02OGFkMmQxMTFiYWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvNTM2NDMx LTljYmUtNDNhOS04YzFmLTY4YWQyZDExMWJhYy8xL2dnQlphNzg0TFVtTHhld3JQ OVpUT2VoYm1QSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwcjgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCoYDANBgkqhkiG9w0BAQsFAAOCAQEABSMoabHQ9ydNbjCh+yT66QUp33cckJiD bH6RwBlSeTxp+QvjJN5s8h5sq5p4A7mVVlfqT2e1+8Nfi14dIeSMVhczHii09H4V 2lTgRFtmiBn+v/wRbUBREjb88Wd8vrWVrb/K95CH7jLzjN5KcDQzTw8obAEPoEG9 VN4cC1sShv5xrCeNUpiGzmy69diwsxApaz+s6xQ2xOLLbWtddHagii6dprPTB0Ii EafxZK0MMcIVwqk0/NHt2UIKGYtYdQjr9Qq0UCxxYzu/x+lWCKiQC9BIwaXwGxp1 rYgfgNl2vbnBGhuI1dnU+n5LajQX5LYtTsCgjzgs7C4BHgkHROJRiA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:27 2026 by rpki-client