This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer File: gmf7Sgtne4N3kHuC-x-4gQov7wg.cer (raw, json) Hash identifier: XxweCBr6Pz/T+sQ7xAZUvokw2vhIy03d+s0CRv+oMD4= Subject key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA5429DCAC11159E96EA0ADB7766977 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50290 AS: 200630 AS: 204341 IP: 31.15.120.0/21 IP: 46.30.128.0/21 IP: 109.69.32.0/21 IP: 185.74.172.0/22 IP: 193.200.52.0/23 IP: 193.200.56.0/23 IP: 2a03:eb00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:42:9d:ca:c1:11:59:e9:6e:a0:ad:b7:76:69:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:0e:0b:3e:14:36:cb:93:4b:5f:2e:06:1f:94: 58:bf:37:02:90:c3:56:34:74:7c:9f:ea:9c:b7:90: 44:59:49:c4:e9:17:d3:eb:05:c1:5f:0d:8a:96:cc: c0:6c:50:42:b8:c5:e9:44:b4:67:f9:68:3a:47:c3: 43:7a:53:df:69:8f:ac:a1:44:c2:7c:2e:11:bb:56: ea:d3:22:22:d3:fe:ec:fb:51:42:6e:20:a7:76:22: 47:fe:fe:f9:ee:50:b7:85:87:cb:3c:00:e3:1b:ec: c7:62:48:84:7a:20:79:15:c9:80:ed:14:09:22:8f: 25:0f:77:cb:d7:28:ca:9d:05:0e:9f:c6:c7:00:89: d5:7f:66:fb:e3:4a:58:2b:f4:05:85:65:b3:78:a6: d8:bd:3f:fb:3f:89:b4:cd:b1:2e:dd:cf:83:80:d2: 10:da:5e:f9:b8:ad:b7:4f:d1:d9:a9:18:65:fe:26: 5e:0b:99:78:b6:40:b4:a8:4f:96:9b:ad:41:98:2b: 59:6c:1b:7c:10:72:f0:38:5b:97:24:66:f0:b2:5a: af:28:01:1d:94:24:33:4d:da:0b:ab:b9:f7:45:05: 17:78:b7:e5:06:94:48:4e:cb:b0:7b:28:8d:6e:b2: ad:5e:96:ce:ee:e1:b0:2e:ba:f8:db:9f:62:91:4e: cb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.15.120.0/21 46.30.128.0/21 109.69.32.0/21 185.74.172.0/22 193.200.52.0/23 193.200.56.0/23 IPv6: 2a03:eb00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50290 200630 204341 Signature Algorithm: sha256WithRSAEncryption 19:63:38:73:75:66:10:57:ee:3c:b9:ce:ac:36:ed:2d:77:ef: 09:38:3d:76:b5:99:2b:bc:fe:ad:06:b6:ae:68:42:f8:d9:81: 79:05:a1:31:de:84:ee:76:80:ee:05:d0:15:3f:f3:96:30:80: 03:ed:02:1c:04:df:0a:22:f7:15:77:57:e0:4b:1d:72:09:ed: 97:a5:6a:5a:ad:ec:7e:59:48:f0:ff:6e:2b:af:3c:89:04:f6: 25:21:68:fb:a8:73:b1:64:3b:36:12:3a:09:a8:2a:d2:76:2e: 1c:da:1c:3a:cd:3c:34:91:ac:af:30:38:ae:ab:64:70:05:ea: a1:4b:7d:06:48:6a:ec:df:f8:ff:ee:64:2f:32:dd:2d:12:8a: fc:20:f0:18:15:2e:5a:52:fd:35:4c:8d:2a:7d:df:95:78:4f: 20:57:df:7e:7f:f8:2e:a2:95:c2:ca:27:40:90:d7:e0:99:96: d1:27:f1:76:eb:e6:d8:29:1b:e1:72:c7:90:e7:20:40:f5:62: 35:96:9b:b0:73:e9:ba:e8:4a:80:b0:11:41:4c:34:22:2e:91: 79:9e:2f:ff:d0:34:ca:a7:20:6f:fe:fb:78:0f:87:27:13:9a: 95:e6:bb:6d:f5:3b:3a:76:f3:ee:7c:3b:62:d7:cc:34:96:dc: b4:86:9f:bc -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgISAZt7pUKdysERWeluoK23dml3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjY3ZmI0YTBiNjc3YjgzNzc5MDdiODJmYjFmYjg4MTBhMmZlZjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8g4LPhQ2y5NLXy4GH5RYvzcCkMNW NHR8n+qct5BEWUnE6RfT6wXBXw2KlszAbFBCuMXpRLRn+Wg6R8NDelPfaY+soUTC fC4Ru1bq0yIi0/7s+1FCbiCndiJH/v757lC3hYfLPADjG+zHYkiEeiB5FcmA7RQJ Io8lD3fL1yjKnQUOn8bHAInVf2b740pYK/QFhWWzeKbYvT/7P4m0zbEu3c+DgNIQ 2l75uK23T9HZqRhl/iZeC5l4tkC0qE+Wm61BmCtZbBt8EHLwOFuXJGbwslqvKAEd lCQzTdoLq7n3RQUXeLflBpRITsuweyiNbrKtXpbO7uGwLrr4259ikU7LvQIDAQAB o4IC1zCCAtMwHQYDVR0OBBYEFIJn+0oLZ3uDd5B7gvsfuIEKL+8IMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmLzBkZGE0 Mi01M2E1LTRhYmEtODZhZS02MzllMTRkMDRkZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvMGRkYTQy LTUzYTUtNGFiYS04NmFlLTYzOWUxNGQwNGRlNi8xL2dtZjdTZ3RuZTROM2tIdUMt eC00Z1Fvdjd3Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQDHw94AwQDLh6AAwQDbUUgAwQCuUqsAwQBwcg0 AwQBwcg4MA0EAgACMAcDBQMqA+sAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwDE cgIDAw+2AgMDHjUwDQYJKoZIhvcNAQELBQADggEBABljOHN1ZhBX7jy5zqw27S13 7wk4PXa1mSu8/q0Gtq5oQvjZgXkFoTHehO52gO4F0BU/85YwgAPtAhwE3woi9xV3 V+BLHXIJ7Zelalqt7H5ZSPD/biuvPIkE9iUhaPuoc7FkOzYSOgmoKtJ2LhzaHDrN PDSRrK8wOK6rZHAF6qFLfQZIauzf+P/uZC8y3S0Sivwg8BgVLlpS/TVMjSp935V4 TyBX335/+C6ilcLKJ0CQ1+CZltEn8Xbr5tgpG+Fyx5DnIED1YjWWm7Bz6broSoCw EUFMNCIukXmeL//QNMqnIG/++3gPhycTmpXmu231Ozp28+58O2LXzDSW3LSGn7w= -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:44 2026 by rpki-client