This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer File: gmkF0cEWiypmBwmtsg80xuTAPX8.cer (raw, json) Hash identifier: UpgQLgPkuL12q/dagYiK/BNQJ831WqSciC1BTXhA/+k= Subject key identifier: 82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B003F96B1B69EC592667DDEE43558 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.98.108.0/22 IP: 2a06:b80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:00:3f:96:b1:b6:9e:c5:92:66:7d:de:e4:35:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=826905d1c1168b2a660709adb20f34c6e4c03d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:19:9e:cc:01:c9:ed:0a:a3:85:48:24:62:d1: a1:b7:7d:c7:d7:13:6e:b1:48:3f:71:ba:f0:c4:9c: 71:3c:c6:78:c4:71:9a:c7:4a:b3:8c:3b:ea:3d:01: af:5e:a9:cd:f8:9d:be:66:47:32:1c:d9:0e:e9:3d: 17:e8:74:c4:47:6b:38:85:ef:16:a5:c7:c6:87:bd: 09:cc:ed:13:cc:0d:4b:ee:31:a6:ea:c6:60:81:1e: 0a:50:e2:bd:f7:e8:a2:f6:c5:37:fd:d0:9d:8d:85: 3d:48:c4:b7:7c:de:d5:cc:8b:5a:87:9c:0e:3b:48: de:92:41:58:46:5c:aa:2f:07:b8:dd:05:7c:ac:c6: dd:21:99:3b:6d:fc:1d:68:8d:11:21:77:71:33:f5: c8:69:c4:d5:be:94:d3:89:ea:61:74:58:52:59:cf: e5:71:d3:fc:cc:0a:b2:d7:12:02:13:8d:bc:96:84: 98:96:93:ca:5e:8f:71:a9:65:31:4b:ea:58:6c:f1: 08:fd:d7:1e:9a:9b:ec:c5:49:c4:c9:4f:8b:cb:06: 2c:86:c9:ea:9b:d9:01:03:b2:df:2c:70:31:91:c0: 97:ad:9e:bb:4e:47:56:5e:ac:2e:92:02:ac:ff:31: 8d:01:ff:ed:e4:9d:a2:a2:03:a3:14:d9:6a:1b:44: 23:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.98.108.0/22 IPv6: 2a06:b80::/29 Signature Algorithm: sha256WithRSAEncryption 79:02:22:20:b4:59:0b:79:ae:f5:01:69:a1:c0:40:16:d0:22: 98:72:04:6c:f5:d2:e9:3c:34:13:d5:cc:dc:ff:67:82:36:a1: 7a:e5:64:a2:fb:3d:7d:81:cd:16:11:25:01:4b:ce:c5:3f:60: 1f:7b:ba:65:93:c7:5f:20:59:b4:2c:27:53:4f:b4:c1:76:19: e2:bf:80:da:94:ce:5a:85:27:33:f0:db:e4:7c:ce:fe:78:2f: c4:d0:7b:aa:0b:ed:d7:48:ad:ad:03:5a:19:d3:95:83:31:68: 38:b9:8b:38:28:70:5e:2b:80:d6:54:16:19:78:20:db:15:e0: e5:68:91:86:c7:fc:80:a6:d9:8d:ec:b5:7f:32:99:09:c3:70: e0:90:2e:47:55:1d:90:3b:16:54:12:33:be:9c:08:a1:e9:b1: 94:17:8b:8f:f9:b2:fc:54:4b:be:4a:e7:34:43:16:82:03:14: a8:8c:48:04:49:40:5f:90:77:a4:0c:aa:d6:1a:b2:4d:20:a2: 32:d4:1b:ed:79:d2:71:91:16:0a:40:b9:9a:2f:a8:ef:92:cc: 56:2b:99:ff:3e:63:8d:77:95:64:db:23:31:e6:a4:b3:d2:ee: cc:75:42:b1:c9:75:15:3b:1e:e7:c8:ea:6b:d5:17:8d:0b:12: d8:da:3f:1d -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6WwA/lrG2nsWSZn3e5DVYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjY5MDVkMWMxMTY4YjJhNjYwNzA5YWRiMjBmMzRjNmU0YzAzZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxmezAHJ7QqjhUgkYtGht33H1xNu sUg/cbrwxJxxPMZ4xHGax0qzjDvqPQGvXqnN+J2+ZkcyHNkO6T0X6HTER2s4he8W pcfGh70JzO0TzA1L7jGm6sZggR4KUOK99+ii9sU3/dCdjYU9SMS3fN7VzItah5wO O0jekkFYRlyqLwe43QV8rMbdIZk7bfwdaI0RIXdxM/XIacTVvpTTiephdFhSWc/l cdP8zAqy1xICE428loSYlpPKXo9xqWUxS+pYbPEI/dcempvsxUnEyU+LywYshsnq m9kBA7LfLHAxkcCXrZ67TkdWXqwukgKs/zGNAf/t5J2iogOjFNlqG0QjbQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFIJpBdHBFosqZgcJrbIPNMbkwD1/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlL2ZjMjgy Yy1jZDdjLTQzNWEtYWFiNC1iMjVlOWRjYjQ2NmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvZmMyODJj LWNkN2MtNDM1YS1hYWI0LWIyNWU5ZGNiNDY2ZS8xL2dta0YwY0VXaXlwbUJ3bXRz ZzgweHVUQVBYOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuWJsMA0EAgACMAcDBQMqBguAMA0GCSqGSIb3 DQEBCwUAA4IBAQB5AiIgtFkLea71AWmhwEAW0CKYcgRs9dLpPDQT1czc/2eCNqF6 5WSi+z19gc0WESUBS87FP2Afe7plk8dfIFm0LCdTT7TBdhniv4DalM5ahScz8Nvk fM7+eC/E0HuqC+3XSK2tA1oZ05WDMWg4uYs4KHBeK4DWVBYZeCDbFeDlaJGGx/yA ptmN7LV/MpkJw3DgkC5HVR2QOxZUEjO+nAih6bGUF4uP+bL8VEu+Suc0QxaCAxSo jEgESUBfkHekDKrWGrJNIKIy1BvtedJxkRYKQLmaL6jvksxWK5n/PmONd5Vk2yMx 5qSz0u7MdUKxyXUVOx7nyOpr1ReNCxLY2j8d -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:06 2026 by rpki-client