This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer File: gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer (raw, json) Hash identifier: ILt55Ce7ChI6heYKkF5kowHjVSd7iavxeukNS1zdtks= Subject key identifier: 82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC79DF3D9690D360E678CC845AC9827 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49703 IP: 193.24.116.0/24 IP: 2a13:f700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:9d:f3:d9:69:0d:36:0e:67:8c:c8:45:ac:98:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:74:57:10:35:fb:54:32:2d:55:b4:5b:5e:92: 7f:55:03:a5:08:f0:83:84:0d:4b:65:cd:8e:ad:29: 8d:c7:63:3a:dc:37:cf:e6:03:79:fe:88:d1:3b:50: 4e:d4:3e:46:da:9a:e6:21:74:bb:93:ac:f5:b7:4d: 7b:00:55:65:86:ac:dd:86:4e:f5:98:ba:64:a3:40: 7a:56:0b:f9:0f:55:82:85:69:79:0b:95:6a:22:c4: d6:78:b6:bb:ca:4f:89:5e:a8:44:23:23:ca:21:0c: 9e:ac:11:09:8b:80:6a:71:ac:9d:92:81:a3:02:f7: 1f:81:25:9b:4b:66:ea:6f:6f:9a:fe:c0:79:6a:db: 6d:4d:cc:78:ae:2e:45:5d:2c:89:b4:2c:c1:c8:fe: 26:26:1c:c2:cb:a7:02:47:c0:dc:75:a6:42:c3:66: 1c:fe:ac:3b:ff:55:d8:ba:d3:49:42:bf:77:6f:43: bd:f0:71:69:0a:00:80:fd:d1:9c:67:ce:8a:0d:c9: e1:47:05:ca:9f:bd:b0:72:f8:cd:5b:9b:9a:dc:7e: a1:79:f6:37:34:e5:dd:2f:c5:45:48:2f:06:76:03: 0f:73:ff:61:6f:55:64:bd:61:9d:47:82:50:cb:0c: fa:56:3f:ee:10:0b:e4:50:2f:66:4f:00:d9:52:af: d6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.116.0/24 IPv6: 2a13:f700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49703 Signature Algorithm: sha256WithRSAEncryption a5:40:98:c0:a1:ba:43:11:52:75:79:76:14:b8:33:89:65:30: 96:41:76:fd:b0:f0:a0:4f:e5:f1:0c:04:48:d5:10:fa:99:a0: ec:dc:29:0d:dc:7f:92:cd:aa:9d:2e:f7:d5:62:89:87:ff:f7: 57:44:74:ee:8f:a8:fa:cf:04:5d:a5:cd:7f:27:2a:46:5d:7f: a7:07:80:ca:e6:34:4c:dc:41:09:7f:02:c9:64:12:32:d2:d4: 9a:a3:d4:91:dc:2c:52:97:3e:a8:a3:c1:b9:a3:a4:ed:81:e7: 13:25:c7:ee:00:04:b2:3f:0f:94:80:3a:1b:06:f9:84:90:d1: 34:5c:5e:d0:02:47:a8:c1:e7:a3:f2:50:71:10:e6:1c:9e:08: 14:b3:5b:96:8f:3f:fe:ce:86:92:8e:ad:a4:d1:05:5d:36:ca: ae:0c:28:94:ef:b1:ca:ee:e8:1f:0e:64:80:18:0c:7b:61:e2: 91:84:ea:61:82:01:60:89:19:14:90:b2:78:44:81:32:dc:f4: f3:75:e0:66:bf:12:b6:bd:3f:3d:9c:4c:15:76:8f:f1:bd:c2: f9:d9:18:f7:5d:a1:99:87:4b:d6:6a:f2:e8:22:a0:80:b4:fc: 1e:ca:08:54:1c:ba:dc:da:a2:49:87:df:71:c4:d7:38:3b:83: 33:8b:7e:ee -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6x53z2WkNNg5njMhFrJgnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjYxYTQyYmYyMjY0Y2I1ZWJjZWM2ZTE5MGQwMmE2ZDU1M2I2MjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHRXEDX7VDItVbRbXpJ/VQOlCPCD hA1LZc2OrSmNx2M63DfP5gN5/ojRO1BO1D5G2prmIXS7k6z1t017AFVlhqzdhk71 mLpko0B6Vgv5D1WChWl5C5VqIsTWeLa7yk+JXqhEIyPKIQyerBEJi4BqcaydkoGj AvcfgSWbS2bqb2+a/sB5atttTcx4ri5FXSyJtCzByP4mJhzCy6cCR8DcdaZCw2Yc /qw7/1XYutNJQr93b0O98HFpCgCA/dGcZ86KDcnhRwXKn72wcvjNW5ua3H6hefY3 NOXdL8VFSC8GdgMPc/9hb1VkvWGdR4JQywz6Vj/uEAvkUC9mTwDZUq/W1QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIJhpCvyJky1687G4ZDQKm1VO2IzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1LzU0YjY3 OC1iMmZlLTQ0OWQtYjMyNi1kY2FlNzBmMWM5M2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvNTRiNjc4 LWIyZmUtNDQ5ZC1iMzI2LWRjYWU3MGYxYzkzYi8xL2dtR2tLX0ltVExYcnpzYmhr TkFxYlZVN1lqTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwRh0MA0EAgACMAcDBQMqE/cAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDCJzANBgkqhkiG9w0BAQsFAAOCAQEApUCYwKG6QxFS dXl2FLgziWUwlkF2/bDwoE/l8QwESNUQ+pmg7NwpDdx/ks2qnS731WKJh//3V0R0 7o+o+s8EXaXNfycqRl1/pweAyuY0TNxBCX8CyWQSMtLUmqPUkdwsUpc+qKPBuaOk 7YHnEyXH7gAEsj8PlIA6Gwb5hJDRNFxe0AJHqMHno/JQcRDmHJ4IFLNblo8//s6G ko6tpNEFXTbKrgwolO+xyu7oHw5kgBgMe2HikYTqYYIBYIkZFJCyeESBMtz083Xg Zr8Str0/PZxMFXaP8b3C+dkY912hmYdL1mry6CKggLT8HsoIVBy63NqiSYffccTX ODuDM4t+7g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:15 2026 by rpki-client