This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/giKx_lqaAWNQKFrAeI08yrPrORk.cer File: giKx_lqaAWNQKFrAeI08yrPrORk.cer (raw, json) Hash identifier: DK2cS60F02UWbBc7y3YqxNrEiVbD7qeOL8oYbTunUNs= Subject key identifier: 82:22:B1:FE:5A:9A:01:63:50:28:5A:C0:78:8D:3C:CA:B3:EB:39:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECD66A93004C9208B053C06927D003 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/giKx_lqaAWNQKFrAeI08yrPrORk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202375 IP: 45.135.196.0/22 IP: 185.243.92.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d6:6a:93:00:4c:92:08:b0:53:c0:69:27:d0:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8222b1fe5a9a016350285ac0788d3ccab3eb3919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6b:88:f9:eb:36:41:c5:15:69:d9:cb:27:5f: c3:ea:60:08:e0:83:9d:25:9e:65:dc:82:62:f2:c3: f4:d8:3e:a9:1a:19:8f:69:32:b3:fc:9d:b1:13:f6: 15:40:19:bc:77:d8:2c:f9:5d:1a:66:9d:29:00:13: d8:ed:26:90:78:27:e0:f3:79:51:3c:38:45:1e:68: b4:ee:a5:5c:cb:20:6f:a7:b4:71:c5:17:69:34:64: 71:0c:66:b8:50:48:81:28:17:7a:97:c5:1b:68:79: eb:8f:4b:05:50:a5:63:45:0e:c3:df:96:33:3c:43: 88:c0:20:b7:c8:19:46:fd:e7:4c:c2:e7:f4:9a:99: a3:45:25:30:7c:99:d7:bf:af:80:fc:39:35:ed:ff: 3c:84:99:85:1a:7f:8d:95:3c:7b:56:04:a3:72:18: 99:a6:81:54:93:5c:f0:98:16:99:68:16:45:cd:89: 26:28:2e:46:bd:c6:e3:96:a7:01:25:8a:db:26:04: ac:78:83:29:3a:21:bb:b9:76:66:ca:05:95:e7:90: f5:9d:19:39:3d:44:a0:bd:2a:04:18:de:8f:46:22: d5:e2:9c:f9:44:16:1f:d2:d7:9a:49:4e:85:06:c5: 90:17:ea:c7:67:6f:f9:6c:b5:08:7b:b4:c0:6f:8e: 16:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:22:B1:FE:5A:9A:01:63:50:28:5A:C0:78:8D:3C:CA:B3:EB:39:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/giKx_lqaAWNQKFrAeI08yrPrORk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.196.0/22 185.243.92.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202375 Signature Algorithm: sha256WithRSAEncryption 55:c4:cf:51:1c:fb:70:56:41:67:25:6b:d4:ac:62:91:24:4d: d9:fa:c1:b8:27:a2:fe:18:67:87:0e:83:15:bb:b5:39:20:33: 8e:c8:11:59:c8:85:3c:a5:37:38:bc:a3:41:6c:b4:12:24:1f: 13:92:aa:45:d6:af:d6:2e:3b:4b:ef:89:e7:74:d4:22:f7:05: 2b:27:59:8e:c1:81:87:90:54:8b:ae:35:a5:e6:d7:b2:07:9f: ba:49:ad:54:c5:ab:09:b9:01:32:e2:7f:fc:91:4b:b5:3c:64: 9a:98:35:9a:57:4b:e4:cc:51:8f:f9:8f:a9:9e:88:de:d4:c3: 56:ff:4d:e8:e9:e8:a7:d1:67:63:35:39:7e:66:8a:e9:7f:d3: 25:09:a9:11:8c:18:63:c2:e3:c2:c5:2d:15:fc:ac:15:9e:a3: 20:e1:9b:de:4c:ea:f8:c4:15:c5:a4:ed:5e:9f:94:91:92:e2: 43:2e:4a:d7:f7:08:2d:dd:b4:00:a7:56:10:52:e6:4d:7f:14: 01:88:95:38:8b:c2:ca:ee:b5:68:77:da:52:62:26:1a:c0:78: f8:ee:70:e3:79:08:22:b8:c1:a6:cf:5f:3b:a5:d0:fa:0e:6f: 94:9c:37:20:93:f8:c8:c4:fb:9c:e3:6d:18:a3:51:ec:b3:2b: a9:d2:85:83 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt57NZqkwBMkgiwU8BpJ9ADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjIyYjFmZTVhOWEwMTYzNTAyODVhYzA3ODhkM2NjYWIzZWIzOTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WuI+es2QcUVadnLJ1/D6mAI4IOd JZ5l3IJi8sP02D6pGhmPaTKz/J2xE/YVQBm8d9gs+V0aZp0pABPY7SaQeCfg83lR PDhFHmi07qVcyyBvp7RxxRdpNGRxDGa4UEiBKBd6l8UbaHnrj0sFUKVjRQ7D35Yz PEOIwCC3yBlG/edMwuf0mpmjRSUwfJnXv6+A/Dk17f88hJmFGn+NlTx7VgSjchiZ poFUk1zwmBaZaBZFzYkmKC5GvcbjlqcBJYrbJgSseIMpOiG7uXZmygWV55D1nRk5 PUSgvSoEGN6PRiLV4pz5RBYf0teaSU6FBsWQF+rHZ2/5bLUIe7TAb44WSQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFIIisf5amgFjUChawHiNPMqz6zkZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhLzIyMGNh ZS04NDU5LTQ4NzAtYTZhMi0zMGExNjQ4NWY1YzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvMjIwY2Fl LTg0NTktNDg3MC1hNmEyLTMwYTE2NDg1ZjVjNC8xL2dpS3hfbHFhQVdOUUtGckFl STA4eXJQck9Say5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCLYfEAwQCufNcMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMWhzANBgkqhkiG9w0BAQsFAAOCAQEAVcTPURz7cFZBZyVr1KxikSRN 2frBuCei/hhnhw6DFbu1OSAzjsgRWciFPKU3OLyjQWy0EiQfE5KqRdav1i47S++J 53TUIvcFKydZjsGBh5BUi641pebXsgefukmtVMWrCbkBMuJ//JFLtTxkmpg1mldL 5MxRj/mPqZ6I3tTDVv9N6Onop9FnYzU5fmaK6X/TJQmpEYwYY8LjwsUtFfysFZ6j IOGb3kzq+MQVxaTtXp+UkZLiQy5K1/cILd20AKdWEFLmTX8UAYiVOIvCyu61aHfa UmImGsB4+O5w43kIIrjBps9fO6XQ+g5vlJw3IJP4yMT7nONtGKNR7LMrqdKFgw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:56 2026 by rpki-client