This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer File: gi9abAuVZH8HA1DmUk4SIPukf6M.cer (raw, json) Hash identifier: eJclfv8BRh0/Gv5SASZLR79frTCmxi1XpYOl3MLQ6XQ= Subject key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C123635E793811B5D7F790695A73DA5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209042 IP: 5.182.248.0/22 IP: 2a0e:a400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:36:35:e7:93:81:1b:5d:7f:79:06:95:a7:3d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=822f5a6c0b95647f070350e6524e1220fba47fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fc:5f:9e:27:be:ac:cf:f7:65:d0:8c:91:9e: 5a:c6:2a:e3:34:95:2d:20:17:64:3d:8e:2e:cf:cc: 01:80:1a:34:55:aa:e5:c8:69:83:79:f3:a0:00:97: 42:d7:d7:ac:34:35:b5:4a:35:55:98:9b:60:72:c2: 25:74:2c:57:1f:c6:e9:13:c8:f9:26:d5:7e:9c:af: 5e:40:a9:a5:b7:81:98:96:ed:d6:13:a1:e7:7c:a9: 35:b0:ab:f3:0c:04:85:a6:71:f2:d3:7c:87:72:77: cf:78:d9:56:b9:b3:8f:21:6f:dc:cd:e2:18:98:85: c4:e0:c5:34:69:dd:1c:8f:2f:fe:b2:42:04:a6:4e: 26:b8:ce:fd:5b:53:72:de:5f:5a:a5:67:ee:64:91: 95:8d:42:d0:d3:8e:5e:7c:90:9c:30:c2:df:c9:b6: a2:66:4e:7d:88:de:9f:6c:0c:b0:49:2f:aa:8e:56: ca:39:d3:7e:0d:eb:c4:4f:67:a5:0e:16:42:58:a7: 2f:41:1b:74:39:c3:0e:36:3e:2c:a6:cc:35:d2:40: fc:97:90:98:6e:74:09:e2:c9:9c:04:6c:bc:45:15: 01:52:58:f4:7b:74:39:27:a8:f4:ca:1d:fd:8f:d8: 71:4b:5a:65:03:65:c8:eb:a3:5f:fd:4e:0f:c9:bf: ce:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.248.0/22 IPv6: 2a0e:a400::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209042 Signature Algorithm: sha256WithRSAEncryption a0:4c:bf:b9:21:0f:ca:b0:33:96:b6:e2:b9:f3:a7:bf:65:ec: 7a:6f:72:92:c4:5a:7e:a8:f2:fd:23:73:fb:88:40:f6:18:4a: e7:f0:05:16:48:de:b6:fc:17:71:96:75:cc:00:e5:77:ca:40: fd:a4:2b:5e:e6:e5:dc:01:d2:bf:f2:c9:4d:da:86:68:19:0c: de:e7:e3:78:83:88:a3:6a:b6:f6:b3:d4:40:46:b7:d1:54:90: 44:a9:16:62:53:9b:b8:13:de:c1:0b:e8:26:21:11:ea:05:c8: 9d:a3:87:0a:db:38:02:7f:24:4a:56:07:a6:7d:71:4c:f4:36: 4f:0c:1d:80:64:5a:22:bc:47:01:81:12:a0:14:08:67:fe:02: 87:f8:e9:cd:62:ff:74:4c:53:af:c3:2c:4b:1c:8e:1d:37:7e: 17:38:e3:29:b4:d2:79:02:97:3f:64:29:65:8f:92:99:e0:da: df:ce:99:63:0b:d0:df:82:cf:2c:fb:ee:fb:82:70:3a:8f:06: d1:2a:cd:b4:4b:eb:bf:da:56:ee:f8:de:bc:bc:c2:55:2c:3f: 8e:ce:fc:e0:3f:c1:9e:db:3b:6d:b1:aa:32:db:61:10:ec:18: 8e:7b:44:93:70:26:73:f1:99:6b:1e:5a:2e:3f:f8:c4:46:05: 29:2f:a7:a3 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8EjY155OBG11/eQaVpz2lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjJmNWE2YzBiOTU2NDdmMDcwMzUwZTY1MjRlMTIyMGZiYTQ3ZmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvxfnie+rM/3ZdCMkZ5axirjNJUt IBdkPY4uz8wBgBo0VarlyGmDefOgAJdC19esNDW1SjVVmJtgcsIldCxXH8bpE8j5 JtV+nK9eQKmlt4GYlu3WE6HnfKk1sKvzDASFpnHy03yHcnfPeNlWubOPIW/czeIY mIXE4MU0ad0cjy/+skIEpk4muM79W1Ny3l9apWfuZJGVjULQ045efJCcMMLfybai Zk59iN6fbAywSS+qjlbKOdN+DevET2elDhZCWKcvQRt0OcMONj4spsw10kD8l5CY bnQJ4smcBGy8RRUBUlj0e3Q5J6j0yh39j9hxS1plA2XI66Nf/U4Pyb/ONwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIIvWmwLlWR/BwNQ5lJOEiD7pH+jMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzVkZjI2 Mi0yZTBiLTRmYjctYjBkMy01ZDBlMDlhMDIwNGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvNWRmMjYy LTJlMGItNGZiNy1iMGQzLTVkMGUwOWEwMjA0Zi8xL2dpOWFiQXVWWkg4SEExRG1V azRTSVB1a2Y2TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCBbb4MA0EAgACMAcDBQMqDqQAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMwkjANBgkqhkiG9w0BAQsFAAOCAQEAoEy/uSEPyrAz lrbiufOnv2Xsem9yksRafqjy/SNz+4hA9hhK5/AFFkjetvwXcZZ1zADld8pA/aQr Xubl3AHSv/LJTdqGaBkM3ufjeIOIo2q29rPUQEa30VSQRKkWYlObuBPewQvoJiER 6gXInaOHCts4An8kSlYHpn1xTPQ2TwwdgGRaIrxHAYESoBQIZ/4Ch/jpzWL/dExT r8MsSxyOHTd+FzjjKbTSeQKXP2QpZY+SmeDa386ZYwvQ34LPLPvu+4JwOo8G0SrN tEvrv9pW7vjevLzCVSw/js784D/Bnts7bbGqMtthEOwYjntEk3Amc/GZax5aLj/4 xEYFKS+now== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:26 2026 by rpki-client