This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer File: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer (raw, json) Hash identifier: 4F/vH0+6vJD7hWinzp5st1v2i1V3KqA7ODR4nU5r1TU= Subject key identifier: 82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1367AC0517967FDB41FF52385D6ABA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197382 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:67:ac:05:17:96:7f:db:41:ff:52:38:5d:6a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8260c94351066ec06debfab2bca9dfaed407e698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:11:a9:73:20:32:2d:82:23:1e:ea:b1:31:e5: 49:20:ae:b2:a3:49:c9:01:c4:10:10:88:50:f0:3b: 04:14:4c:d9:5b:50:db:16:12:01:40:6d:1c:b7:98: 1a:41:19:a6:7b:72:b3:c8:3c:d2:75:4f:47:f1:83: ae:4b:bf:27:f5:e0:27:75:ff:36:e5:bc:b5:58:5e: 40:20:2e:7a:16:fa:ac:8f:84:a6:0e:c5:64:e7:66: 9b:91:4b:0b:80:10:f6:df:f9:ad:94:52:e5:04:b2: dc:7a:39:08:9d:f7:54:da:90:b9:27:a2:17:b6:82: 1b:21:58:f0:25:dc:fe:00:32:b4:3e:b7:23:43:19: a1:4b:a3:70:90:f1:16:ac:a5:9e:5d:e3:74:64:6f: 7d:87:9f:a1:ba:cd:35:e8:cb:47:c1:b4:02:65:56: 32:20:73:72:a4:13:ef:e4:45:84:64:35:75:6d:62: ef:cf:17:dc:cb:c4:de:de:d8:54:6b:06:65:e9:11: 90:20:ff:5b:0b:8c:d4:e4:5f:ec:98:c9:f3:30:c9: d4:ac:2e:f3:7d:ee:d2:db:8e:d9:2a:83:20:17:bf: 63:7a:aa:68:b4:05:c5:f7:72:01:51:70:fc:23:bc: f6:8d:63:5f:9c:5e:1d:1f:e6:2c:84:5c:d2:9b:e5: 51:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 197382 Signature Algorithm: sha256WithRSAEncryption 73:06:3b:4b:1e:2e:dd:bb:34:bd:07:bb:ab:7c:bb:57:a8:57: 0c:62:9e:a9:c0:dd:f4:a0:40:eb:70:ae:fb:55:13:9d:49:e0: 25:28:18:97:3f:58:29:4c:81:20:1c:17:88:15:95:84:89:fc: 14:db:ce:ec:51:84:7f:90:e4:c5:de:ea:15:aa:ba:eb:87:36: 09:c4:2e:a8:75:63:cf:c6:9a:78:02:de:4d:e5:5f:58:8f:aa: a5:56:4a:34:43:af:b0:d6:41:06:2a:49:8f:44:f9:54:fd:2a: 07:18:c4:85:ff:f7:da:1c:95:c9:4e:db:06:db:07:d4:c1:bd: d3:c1:a0:5f:40:b5:75:71:ac:5f:49:d1:59:98:8e:75:e1:3d: 8f:b9:e5:47:60:11:53:1e:40:0a:e7:0c:7c:ea:b8:c2:88:2c: d0:c7:27:f3:42:7b:72:b8:88:5f:2c:f8:f8:2e:b2:dd:55:ef: 73:bf:f7:23:7d:9b:b3:ec:0f:76:88:12:17:84:f5:3c:a7:36: 23:bb:1d:61:aa:e2:16:ca:03:45:f4:b8:3a:97:99:f4:d1:46: 6f:e5:17:3b:ea:be:0d:f2:5a:94:e3:8b:80:6d:bb:7c:3f:95: e1:21:5a:53:95:a9:2c:68:68:3d:76:99:e5:41:90:1a:1c:49: 32:c1:21:8f -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/E2esBReWf9tB/1I4XWq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjYwYzk0MzUxMDY2ZWMwNmRlYmZhYjJiY2E5ZGZhZWQ0MDdlNjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRGpcyAyLYIjHuqxMeVJIK6yo0nJ AcQQEIhQ8DsEFEzZW1DbFhIBQG0ct5gaQRmme3KzyDzSdU9H8YOuS78n9eAndf82 5by1WF5AIC56Fvqsj4SmDsVk52abkUsLgBD23/mtlFLlBLLcejkInfdU2pC5J6IX toIbIVjwJdz+ADK0PrcjQxmhS6NwkPEWrKWeXeN0ZG99h5+hus016MtHwbQCZVYy IHNypBPv5EWEZDV1bWLvzxfcy8Te3thUawZl6RGQIP9bC4zU5F/smMnzMMnUrC7z fe7S247ZKoMgF79jeqpotAXF93IBUXD8I7z2jWNfnF4dH+YshFzSm+VReQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFIJgyUNRBm7Abev6sryp367UB+aYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzg2Y2Q5 YS1lNzMyLTRmZjUtYWU0NC04NDY0YTgxMTQxODAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvODZjZDlh LWU3MzItNGZmNS1hZTQ0LTg0NjRhODExNDE4MC8xL2dtREpRMUVHYnNCdDZfcXl2 S25mcnRRSDVwZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMDBjANBgkqhkiG9w0BAQsFAAOCAQEAcwY7Sx4u3bs0 vQe7q3y7V6hXDGKeqcDd9KBA63Cu+1UTnUngJSgYlz9YKUyBIBwXiBWVhIn8FNvO 7FGEf5Dkxd7qFaq664c2CcQuqHVjz8aaeALeTeVfWI+qpVZKNEOvsNZBBipJj0T5 VP0qBxjEhf/32hyVyU7bBtsH1MG908GgX0C1dXGsX0nRWZiOdeE9j7nlR2ARUx5A CucMfOq4wogs0Mcn80J7criIXyz4+C6y3VXvc7/3I32bs+wPdogSF4T1PKc2I7sd YariFsoDRfS4OpeZ9NFGb+UXO+q+DfJalOOLgG27fD+V4SFaU5WpLGhoPXaZ5UGQ GhxJMsEhjw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:59 2026 by rpki-client