This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer File: gnMxRuPp1uEVRjF_dSGeogLF-S0.cer (raw, json) Hash identifier: ov4ccIHfkxge+NkQsGOAijfoDvOTG8/Smq8iW8tH5s4= Subject key identifier: 82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7BA15D181D216D3D821C61D9B82E0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.39.115.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ba:15:d1:81:d2:16:d3:d8:21:c6:1d:9b:82:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82733146e3e9d6e11546317f75219ea202c5f92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cc:e1:fb:6b:88:a5:f5:f2:92:c3:d2:af:7d: c4:6c:f6:95:f8:39:1d:35:e0:51:92:41:07:2e:bb: 5d:8b:b9:a3:f3:e4:22:3d:80:ca:c0:1f:70:2c:13: 23:ab:3f:e0:e7:c5:0a:b3:e4:cb:88:65:6e:29:bd: 88:42:9c:3f:bc:a6:c5:f6:16:01:38:2e:33:c8:af: 76:4f:11:98:d0:63:2a:c2:30:a1:93:31:af:5f:1e: ca:df:71:56:88:58:99:d5:83:e6:ac:70:00:b9:4d: e5:a4:fe:3f:7d:bd:f6:22:ad:ea:c3:9d:0b:0a:46: 6f:87:59:3b:7c:e3:c1:74:32:34:41:d0:21:f0:6c: 39:d3:a9:dd:4a:8d:6e:4c:34:82:0b:4b:5d:d4:f4: 72:23:88:87:80:2a:22:ae:44:16:bd:7e:d3:91:ff: 1f:a2:62:93:ce:28:bd:31:c6:8d:44:bf:f3:55:50: 6f:29:b1:e5:d5:25:3e:c9:8c:e5:4b:99:d3:96:bd: 9d:56:c5:c0:e9:18:8f:cc:6f:21:ea:f2:1c:e7:cc: f5:29:36:2c:06:84:95:28:5d:bb:e9:61:7e:6e:aa: 51:22:52:fd:4d:ed:f4:01:02:f9:f0:fd:3b:ad:e1: 6c:ea:fe:20:54:7a:7d:cc:e2:45:fa:4d:74:84:70: 22:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.39.115.0/24 Signature Algorithm: sha256WithRSAEncryption 55:e4:ac:fb:ae:75:d0:14:9b:4a:50:18:bb:30:18:e2:6f:85: 4d:a7:96:2b:23:5f:bf:17:f4:5c:11:2f:0e:09:72:f8:52:96: ad:90:b3:88:14:32:75:34:e9:b6:40:2c:2e:6b:c1:f4:52:96: 2c:24:ec:ea:03:e1:1e:6d:a3:7f:5a:44:41:64:cb:66:9c:b1: 38:98:57:14:97:9f:4d:f9:b9:77:52:5b:91:d3:27:1f:ac:9a: 42:b2:b1:1a:ab:8e:4e:5d:5d:69:b7:5e:f4:37:1b:c2:e3:7d: 26:98:1d:38:56:f8:13:79:68:b9:a7:e3:83:b6:58:98:26:0e: 41:e8:0d:92:22:6c:e7:58:91:be:3d:66:4c:7e:7b:32:7c:c6: 11:d8:be:25:2f:42:53:17:fc:22:c5:71:db:8c:79:c6:b8:48: 2f:5b:94:99:3f:c6:b4:f9:ee:92:a1:44:45:d2:e4:45:58:3c: 68:6b:a9:ae:52:16:e8:4d:71:b1:d3:9d:54:f6:8e:87:58:9f: 50:77:c6:7d:80:d1:e0:69:d5:9c:3f:aa:91:2b:c3:14:96:ea: 3c:b3:d6:da:af:32:df:e3:a6:c2:f8:0c:5d:dc:84:80:60:ab: 8d:65:17:ec:7d:08:3a:da:87:97:a4:d9:96:1d:2d:e9:fc:56: 92:e8:7b:27 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6x7oV0YHSFtPYIcYdm4LgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjczMzE0NmUzZTlkNmUxMTU0NjMxN2Y3NTIxOWVhMjAyYzVmOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApszh+2uIpfXyksPSr33EbPaV+Dkd NeBRkkEHLrtdi7mj8+QiPYDKwB9wLBMjqz/g58UKs+TLiGVuKb2IQpw/vKbF9hYB OC4zyK92TxGY0GMqwjChkzGvXx7K33FWiFiZ1YPmrHAAuU3lpP4/fb32Iq3qw50L CkZvh1k7fOPBdDI0QdAh8Gw506ndSo1uTDSCC0td1PRyI4iHgCoirkQWvX7Tkf8f omKTzii9McaNRL/zVVBvKbHl1SU+yYzlS5nTlr2dVsXA6RiPzG8h6vIc58z1KTYs BoSVKF276WF+bqpRIlL9Te30AQL58P07reFs6v4gVHp9zOJF+k10hHAiiwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIJzMUbj6dbhFUYxf3UhnqICxfktMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxLzRkNWUx Ni01ZTY1LTRlZDgtYmJlMy1iYWNiMDI4NTM4ZGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvNGQ1ZTE2 LTVlNjUtNGVkOC1iYmUzLWJhY2IwMjg1MzhkYy8xL2duTXhSdVBwMXVFVlJqRl9k U0dlb2dMRi1TMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwSdzMA0GCSqGSIb3DQEBCwUAA4IBAQBV5Kz7 rnXQFJtKUBi7MBjib4VNp5YrI1+/F/RcES8OCXL4UpatkLOIFDJ1NOm2QCwua8H0 UpYsJOzqA+EebaN/WkRBZMtmnLE4mFcUl59N+bl3UluR0ycfrJpCsrEaq45OXV1p t170NxvC430mmB04VvgTeWi5p+ODtliYJg5B6A2SImznWJG+PWZMfnsyfMYR2L4l L0JTF/wixXHbjHnGuEgvW5SZP8a0+e6SoURF0uRFWDxoa6muUhboTXGx051U9o6H WJ9Qd8Z9gNHgadWcP6qRK8MUluo8s9barzLf46bC+Axd3ISAYKuNZRfsfQg62oeX pNmWHS3p/FaS6Hsn -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:54 2026 by rpki-client