This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer File: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer (raw, json) Hash identifier: FH7tH6ynCMHAx3PfqJTaSIoCKS/MAx+H8P/1zjX1JL4= Subject key identifier: 82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B368F4FA3F0E9BAD1AB71F0FB75EAE0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212535 IP: 193.17.35.0/24 IP: 2a10:cdc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:8f:4f:a3:f0:e9:ba:d1:ab:71:f0:fb:75:ea:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=827173a380cdf93c7b28668fabae569aa6f7a35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:15:98:5a:1e:d0:18:83:d1:a4:f9:0c:af:34: fc:50:b8:71:52:53:88:98:99:76:38:16:be:b6:0e: 1e:59:53:ef:63:c1:31:33:2b:d2:a8:14:d9:ae:3c: 63:04:d2:92:38:fd:9d:0d:c7:69:3f:b9:0b:64:c0: a8:c5:fa:ba:a5:cc:25:bc:29:ce:bb:73:07:0d:d6: 70:00:7f:f6:24:28:24:52:3d:c6:21:07:b7:e4:0a: 5b:5f:3d:f4:83:98:91:e6:6f:97:48:37:3a:62:ca: bb:5a:5a:d3:91:00:d5:ed:86:c0:06:a9:71:7e:fd: a0:f0:d7:fb:b3:d9:28:8d:87:8a:b8:0e:14:27:1f: b6:a0:2e:fb:cd:62:50:4f:61:65:71:c8:66:72:54: 27:35:26:6e:30:4c:b2:4d:24:65:41:36:6c:27:19: e4:04:99:5c:48:36:0a:ea:08:fa:0f:c0:e8:22:b0: 1b:85:68:57:57:55:13:a5:29:5f:ab:07:e5:d0:9c: 87:0c:bd:7b:39:f3:ca:42:d2:21:70:09:47:04:82: f1:a5:ea:ae:da:8d:17:d2:09:be:42:a5:3d:6b:d2: 32:40:39:37:7b:84:5e:a9:c5:96:22:dc:a4:37:3d: 10:50:5d:7c:90:7d:7a:d5:c6:ec:07:21:32:d6:77: 3d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.35.0/24 IPv6: 2a10:cdc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212535 Signature Algorithm: sha256WithRSAEncryption 7c:d8:cb:46:54:b9:42:ea:72:32:bb:48:e7:18:38:e7:84:53: e5:67:9e:bf:e5:fd:63:cc:1e:cd:e8:f0:56:aa:dc:b3:3b:91: 53:02:30:d0:1f:7d:4d:3e:69:80:ca:fa:4b:bf:89:dd:b8:2d: db:7e:45:35:19:b0:b5:07:a1:60:36:5e:40:23:c8:93:db:13: 4c:d2:2f:f5:fb:91:eb:93:ae:5b:a8:75:86:ea:a9:b5:42:06: 1b:b3:97:39:59:bd:75:1e:28:72:00:6f:2e:eb:7f:48:b0:fd: 04:a2:a4:e4:b6:17:52:84:99:82:48:ac:46:8d:65:52:1f:f8: 77:36:0e:64:8f:e8:3e:e2:c9:0d:8d:9a:b1:79:f7:32:86:f2: 5a:f9:7c:ee:48:18:f0:bc:a8:99:94:ca:2f:05:0a:63:aa:5b: e7:32:17:26:8b:0b:e2:76:d9:ce:17:43:bd:16:b4:52:5a:8a: da:e1:e9:84:b4:65:06:ad:66:2b:dd:1e:ad:cb:da:12:af:fb: a3:54:04:a4:b7:cc:06:aa:5c:69:76:64:1b:0c:cc:29:ac:ea: d0:e6:01:c8:d4:85:ae:39:36:a1:25:d7:da:d7:1f:f5:f1:e7: 0f:16:db:10:72:12:51:e5:57:1b:ab:68:85:76:7b:d7:b0:cb: ca:ef:0c:c8 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7No9Po/DputGrcfD7dergMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjcxNzNhMzgwY2RmOTNjN2IyODY2OGZhYmFlNTY5YWE2ZjdhMzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xWYWh7QGIPRpPkMrzT8ULhxUlOI mJl2OBa+tg4eWVPvY8ExMyvSqBTZrjxjBNKSOP2dDcdpP7kLZMCoxfq6pcwlvCnO u3MHDdZwAH/2JCgkUj3GIQe35ApbXz30g5iR5m+XSDc6Ysq7WlrTkQDV7YbABqlx fv2g8Nf7s9kojYeKuA4UJx+2oC77zWJQT2FlcchmclQnNSZuMEyyTSRlQTZsJxnk BJlcSDYK6gj6D8DoIrAbhWhXV1UTpSlfqwfl0JyHDL17OfPKQtIhcAlHBILxpequ 2o0X0gm+QqU9a9IyQDk3e4ReqcWWItykNz0QUF18kH161cbsByEy1nc9TwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIJxc6OAzfk8eyhmj6uuVpqm96NaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhL2NlZjEx NC01ODY4LTQ3YjgtOTc4OC03YjY0MDg5YmIxNDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvY2VmMTE0 LTU4NjgtNDdiOC05Nzg4LTdiNjQwODliYjE0MS8xL2duRnpvNEROLVR4N0tHYVBx NjVXbXFiM28xby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwREjMA0EAgACMAcDBQMqEM3AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM+NzANBgkqhkiG9w0BAQsFAAOCAQEAfNjLRlS5Qupy MrtI5xg454RT5Weev+X9Y8wezejwVqrcszuRUwIw0B99TT5pgMr6S7+J3bgt235F NRmwtQehYDZeQCPIk9sTTNIv9fuR65OuW6h1huqptUIGG7OXOVm9dR4ocgBvLut/ SLD9BKKk5LYXUoSZgkisRo1lUh/4dzYOZI/oPuLJDY2asXn3MobyWvl87kgY8Lyo mZTKLwUKY6pb5zIXJosL4nbZzhdDvRa0UlqK2uHphLRlBq1mK90ercvaEq/7o1QE pLfMBqpcaXZkGwzMKazq0OYByNSFrjk2oSXX2tcf9fHnDxbbEHISUeVXG6tohXZ7 17DLyu8MyA== -----END CERTIFICATE-----Generated at Mon Jan 26 21:19:32 2026 by rpki-client