This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer File: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer (raw, json) Hash identifier: GUeWejflJSD+f1e7rO8SHsCCA/FCzPInw4UxfKym3vI= Subject key identifier: 82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834A4F20F193432E09405C5CDB2B31E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202419 IP: 194.40.236.0/22 IP: 2a0c:c4c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a4:f2:0f:19:34:32:e0:94:05:c5:cd:b2:b3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8248c753d46cdc9e98009ee4db8107232c02eaf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5a:4e:1a:9b:bd:22:5c:85:75:6d:07:bb:a8: e0:57:a0:53:bf:5f:3d:5e:68:f5:2d:a3:09:39:ae: 66:58:a8:db:f1:36:72:69:d9:a1:27:cd:20:4c:b1: e3:5c:8e:53:74:38:62:a5:96:f3:f1:66:0d:01:9a: 2b:2c:f7:d5:16:f5:29:73:82:e4:2e:76:4b:2d:56: 00:e8:a9:46:e9:03:68:59:e9:dc:46:c3:04:69:1c: c1:ec:73:8b:99:4a:d1:5c:f3:29:f6:27:3d:60:f3: 7e:98:9f:a6:ce:9b:ab:c8:6e:09:28:83:21:54:d3: 23:0b:83:4d:57:ea:42:08:eb:c3:3e:c3:1d:34:fa: 13:6b:e2:46:3f:28:9b:33:30:78:06:0f:c8:f3:a3: b4:d3:3d:48:59:e1:a8:b6:71:3c:d6:b4:1d:d7:e3: e8:40:d2:7d:9c:50:69:5f:39:ff:e3:58:af:08:f5: fe:a6:16:1c:f5:c4:51:02:98:d0:40:7c:3b:6d:27: d1:2f:51:76:86:61:19:40:08:b8:6f:c0:80:40:4a: 35:a9:a6:97:7c:3a:df:fe:4f:aa:2d:ad:ec:02:70: 91:42:07:5d:1a:4a:82:a5:f1:bb:1d:4c:2f:94:7d: 35:30:2b:e2:74:06:cb:3e:6d:88:61:4d:4d:db:49: ce:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.40.236.0/22 IPv6: 2a0c:c4c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202419 Signature Algorithm: sha256WithRSAEncryption 5f:b1:72:2c:dd:70:75:5d:35:5d:5a:fa:7e:80:f2:bd:c5:fd: b4:09:cb:64:f9:41:41:be:1f:2a:26:ca:fe:34:aa:63:ad:b9: b1:7a:7b:c6:d6:d9:18:ce:a1:0e:66:99:82:78:8e:d9:45:e1: 76:04:3a:6f:d2:77:1d:28:09:79:7f:ff:1a:1d:ce:07:88:0d: f5:c2:82:eb:b5:df:1d:5a:ac:f3:d9:39:d3:02:e0:ab:97:e0: 6e:a6:66:28:6c:08:73:a7:7b:f4:31:72:0a:5d:55:af:ec:6e: 59:6e:d0:b1:5b:f6:84:c5:86:29:7f:64:38:f6:31:21:23:7e: 91:84:20:d1:f6:7e:e6:eb:00:e8:05:9d:8c:7b:f5:35:2d:2a: 59:03:fd:6b:27:e5:d3:04:41:36:98:0a:1a:37:c6:d0:d1:c3: aa:c1:ff:46:42:4f:f2:7f:52:7a:c0:b0:3b:9c:52:d5:1d:f5: 0c:fa:0a:ff:4d:31:a1:8d:38:ef:0e:76:2c:2b:29:f1:46:85: d0:a7:91:6c:4e:d3:3c:b6:a2:56:b4:2c:cd:80:64:b5:0d:c5: 80:5f:cf:ab:2c:37:19:10:19:38:23:df:5f:e0:eb:45:2f:11: 7c:e0:17:35:d7:61:80:69:a2:2a:ed:32:37:07:36:fb:a4:9a: e8:47:90:98 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NKTyDxk0MuCUBcXNsrMeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjQ4Yzc1M2Q0NmNkYzllOTgwMDllZTRkYjgxMDcyMzJjMDJlYWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1pOGpu9IlyFdW0Hu6jgV6BTv189 Xmj1LaMJOa5mWKjb8TZyadmhJ80gTLHjXI5TdDhipZbz8WYNAZorLPfVFvUpc4Lk LnZLLVYA6KlG6QNoWencRsMEaRzB7HOLmUrRXPMp9ic9YPN+mJ+mzpuryG4JKIMh VNMjC4NNV+pCCOvDPsMdNPoTa+JGPyibMzB4Bg/I86O00z1IWeGotnE81rQd1+Po QNJ9nFBpXzn/41ivCPX+phYc9cRRApjQQHw7bSfRL1F2hmEZQAi4b8CAQEo1qaaX fDrf/k+qLa3sAnCRQgddGkqCpfG7HUwvlH01MCvidAbLPm2IYU1N20nOBQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIJIx1PUbNyemACe5NuBByMsAur0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzFmYTQy Ni00MGQ2LTRlZWEtYmJhYy05MTMzMjI1Yzk0MjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvMWZhNDI2 LTQwZDYtNGVlYS1iYmFjLTkxMzMyMjVjOTQyNS8xL2drakhVOVJzM0o2WUFKN2sy NEVISXl3QzZ2US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwijsMA0EAgACMAcDBQMqDMTAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMWszANBgkqhkiG9w0BAQsFAAOCAQEAX7FyLN1wdV01 XVr6foDyvcX9tAnLZPlBQb4fKibK/jSqY625sXp7xtbZGM6hDmaZgniO2UXhdgQ6 b9J3HSgJeX//Gh3OB4gN9cKC67XfHVqs89k50wLgq5fgbqZmKGwIc6d79DFyCl1V r+xuWW7QsVv2hMWGKX9kOPYxISN+kYQg0fZ+5usA6AWdjHv1NS0qWQP9ayfl0wRB NpgKGjfG0NHDqsH/RkJP8n9SesCwO5xS1R31DPoK/00xoY047w52LCsp8UaF0KeR bE7TPLaiVrQszYBktQ3FgF/Pqyw3GRAZOCPfX+DrRS8RfOAXNddhgGmiKu0yNwc2 +6Sa6EeQmA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:47 2026 by rpki-client