This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ghTcSLPpGeVc6BhNOpaQ0UklvL0.cer File: ghTcSLPpGeVc6BhNOpaQ0UklvL0.cer (raw, json) Hash identifier: bs+tuxI0ELJnXTzbXSe/KapIugxPk1ulAgtqnB/M/hA= Subject key identifier: 82:14:DC:48:B3:E9:19:E5:5C:E8:18:4D:3A:96:90:D1:49:25:BC:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6C3880B00F018E85DCA54E47B4CF3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49257 IP: 185.167.136.0/22 IP: 2a0a:1700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c3:88:0b:00:f0:18:e8:5d:ca:54:e4:7b:4c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8214dc48b3e919e55ce8184d3a9690d14925bcbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:88:df:2e:3d:4d:5d:ab:c3:f9:ce:57:d7:4e: 59:0f:a4:93:99:a5:67:c9:54:96:6c:f7:b8:88:a2: d9:ee:d0:11:61:f4:92:f9:de:17:9c:80:b3:f9:b4: b6:d7:62:66:43:e0:0b:18:ba:82:9e:ac:2f:24:f9: 20:e0:c9:5b:7e:22:0f:1f:59:fc:29:22:d7:43:e2: 53:10:a1:67:ad:bc:e9:2b:32:99:a9:2f:3b:41:fa: d4:66:a9:79:37:eb:aa:8a:40:96:a8:27:b2:5e:12: 2f:05:8a:65:25:a8:e1:44:ae:26:c4:12:1a:9f:77: 41:de:e7:62:ba:e9:b4:9b:b5:08:e7:8c:43:b1:26: 89:e1:be:2e:cc:e0:f5:7e:76:b5:df:26:ba:11:c5: 2a:9b:37:88:0e:9c:fc:ae:e8:02:42:70:1a:d5:c8: ab:92:9a:56:0d:c3:92:7a:ec:4e:17:8b:9d:0d:76: 26:a0:82:89:45:d8:11:bf:a1:94:5e:39:1c:b0:2f: 13:43:bc:ac:82:35:a1:4b:7f:c6:71:c1:05:f1:f1: 72:fa:36:55:12:fb:6f:68:40:c9:a9:2c:97:9c:67: 7c:24:cb:3f:d1:66:a4:91:33:64:98:e3:49:8e:68: a1:b5:e4:9d:63:70:ca:a1:0b:0c:e6:f4:75:04:58: e8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:14:DC:48:B3:E9:19:E5:5C:E8:18:4D:3A:96:90:D1:49:25:BC:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.136.0/22 IPv6: 2a0a:1700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49257 Signature Algorithm: sha256WithRSAEncryption 9b:ee:c2:b1:6b:3b:8c:97:c4:78:77:5a:ac:26:79:b3:da:2b: 77:b3:f7:c4:91:e8:e0:f8:ea:f7:3b:ae:4c:a2:35:b1:2b:82: bf:d0:a9:ce:b8:16:35:59:5a:ee:8d:f5:0c:6f:07:1d:b9:09: 53:0d:59:11:5c:e8:45:bb:42:18:94:45:1e:f0:41:ad:c6:3a: 9d:c3:50:93:00:c2:04:1e:ab:0a:f1:16:31:23:d9:6d:dc:5b: f4:8b:d9:40:86:5b:fb:fd:da:a5:bf:51:51:87:6a:f2:ef:97: 15:e7:04:25:5a:a1:98:a5:62:95:09:86:b6:3a:70:e1:e2:c3: 64:c5:29:43:f6:f1:9a:70:3d:a9:8b:26:54:66:4a:d2:54:30: 2e:49:65:ff:23:14:aa:b6:ec:12:84:2e:7d:62:e1:4e:fd:aa: 44:35:42:2e:04:fe:b9:cd:3f:f7:83:6f:50:65:63:c8:6a:06: 19:82:da:1e:be:ea:ef:55:35:e0:0f:79:13:c3:5f:66:e3:d1: d1:57:99:03:2c:38:60:dc:de:48:ad:32:9b:2c:e2:d1:db:82: 05:dd:12:3a:2a:03:2f:e9:91:34:e3:01:12:7c:f8:64:70:2f: 1c:6a:cc:1d:e3:89:96:cb:38:01:c2:21:53:28:41:d7:f0:f1: a0:c7:42:4b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+psOICwDwGOhdylTke0zzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjE0ZGM0OGIzZTkxOWU1NWNlODE4NGQzYTk2OTBkMTQ5MjViY2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIjfLj1NXavD+c5X105ZD6STmaVn yVSWbPe4iKLZ7tARYfSS+d4XnICz+bS212JmQ+ALGLqCnqwvJPkg4MlbfiIPH1n8 KSLXQ+JTEKFnrbzpKzKZqS87QfrUZql5N+uqikCWqCeyXhIvBYplJajhRK4mxBIa n3dB3udiuum0m7UI54xDsSaJ4b4uzOD1fna13ya6EcUqmzeIDpz8rugCQnAa1cir kppWDcOSeuxOF4udDXYmoIKJRdgRv6GUXjkcsC8TQ7ysgjWhS3/GccEF8fFy+jZV EvtvaEDJqSyXnGd8JMs/0WakkTNkmONJjmihteSdY3DKoQsM5vR1BFjo4QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIIU3Eiz6RnlXOgYTTqWkNFJJby9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzJhN2Ex OC04ZDRhLTRlODEtOTBhMC1mYmMwMjY5MTdmNjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvMmE3YTE4 LThkNGEtNGU4MS05MGEwLWZiYzAyNjkxN2Y2Mi8xL2doVGNTTFBwR2VWYzZCaE5P cGFRMFVrbHZMMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuaeIMA0EAgACMAcDBQMqChcAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDAaTANBgkqhkiG9w0BAQsFAAOCAQEAm+7CsWs7jJfE eHdarCZ5s9ord7P3xJHo4Pjq9zuuTKI1sSuCv9CpzrgWNVla7o31DG8HHbkJUw1Z EVzoRbtCGJRFHvBBrcY6ncNQkwDCBB6rCvEWMSPZbdxb9IvZQIZb+/3apb9RUYdq 8u+XFecEJVqhmKVilQmGtjpw4eLDZMUpQ/bxmnA9qYsmVGZK0lQwLkll/yMUqrbs EoQufWLhTv2qRDVCLgT+uc0/94NvUGVjyGoGGYLaHr7q71U14A95E8NfZuPR0VeZ Ayw4YNzeSK0ymyzi0duCBd0SOioDL+mRNOMBEnz4ZHAvHGrMHeOJlss4AcIhUyhB 1/DxoMdCSw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:05 2026 by rpki-client