This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer File: goiQPZDAHi1c4YeIBa1KktKK7ck.cer (raw, json) Hash identifier: B8m5l5WADEh2K9F2AK2BWHJOfohCSIXUaX50Das4Ey4= Subject key identifier: 82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C116A7C706FC595EBAC50F0DC201DA5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206732 IP: 185.178.8.0/22 IP: 2a12:b140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:6a:7c:70:6f:c5:95:eb:ac:50:f0:dc:20:1d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8288903d90c01e2d5ce1878805ad4a92d28aedc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:35:72:a6:08:96:bb:aa:a7:56:d1:19:8a: 75:15:f8:81:6c:d1:75:49:fc:17:46:ad:89:fd:67: 06:55:1e:45:c6:7b:80:6c:96:f7:05:d4:80:b7:bc: 37:32:6f:e9:81:1a:28:0a:01:2e:14:03:79:8e:55: dc:36:70:d8:fa:cd:e4:14:bd:e9:43:b4:96:01:c1: e5:a8:b6:ab:7d:13:19:9e:34:2e:45:4f:d4:e7:28: a1:dc:37:cc:bf:20:23:be:3f:d7:8e:01:18:84:9f: a4:be:d0:c2:04:92:65:67:05:54:66:6e:f1:bf:94: 18:f9:f6:a8:18:15:39:85:47:39:e5:a6:79:22:6b: 0b:30:f3:42:95:f7:7c:7c:17:eb:4d:dd:9a:c1:4c: 9c:e3:82:9e:88:3d:9f:d6:03:37:c9:cf:ff:20:5b: 83:0b:04:eb:e0:f5:5e:bd:57:8e:db:f9:e9:43:5b: dd:fe:7f:1b:fe:a5:37:dd:31:81:90:dd:d2:e6:3e: 5b:f9:c9:50:8f:39:96:ff:90:1c:25:5e:4d:f6:b2: 1e:12:78:c1:42:a2:ee:f4:14:c5:cc:86:1c:24:aa: cc:bd:82:46:3e:e0:d3:54:48:1e:8f:c9:cc:9d:21: 0a:ac:c8:e1:7c:c6:58:34:7f:66:22:12:bd:ea:2d: dd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.178.8.0/22 IPv6: 2a12:b140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206732 Signature Algorithm: sha256WithRSAEncryption 69:fd:d7:6f:c8:ca:85:38:11:3b:33:c9:75:a5:36:88:93:fd: 62:d6:16:eb:f3:60:1a:fd:0f:8b:b3:19:db:27:c9:2f:cd:77: 90:43:f7:24:84:56:48:f2:bb:09:ab:cf:74:37:a9:29:97:90: 55:91:59:30:06:a4:fb:3b:2d:74:c6:0b:f3:c2:e1:90:39:dc: ad:45:15:46:85:54:04:a7:3b:e1:73:c4:70:21:fb:78:a1:90: fd:5a:29:29:d4:d3:d0:b2:c5:77:3e:92:3f:8d:af:4d:9c:dd: b3:68:91:f6:ab:e0:17:4a:d9:f4:45:0b:86:66:26:27:35:7a: e3:62:0f:41:d5:22:ea:69:a9:ca:f9:04:1d:34:9a:06:f8:f3: ee:14:f3:cf:72:81:dc:e4:c5:90:45:60:ba:75:06:31:55:35: 37:67:61:ee:61:18:f9:6d:20:c4:67:8d:63:48:0b:70:e5:16: 2e:35:b4:bd:13:aa:37:0b:51:ba:8e:45:1c:4a:a5:9e:3d:38: af:e3:8b:0a:0f:92:1c:cf:fb:49:ca:6d:65:5b:51:a0:2f:1f: 41:55:7e:95:06:44:15:2d:bb:c5:c7:17:c5:af:92:db:f2:2b: f7:94:5e:c3:46:5a:14:b5:12:50:36:79:8d:9e:21:41:f2:bf: af:6b:88:70 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8EWp8cG/FleusUPDcIB2lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mjg4OTAzZDkwYzAxZTJkNWNlMTg3ODgwNWFkNGE5MmQyOGFlZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOM1cqYIlruqp1bRGYp1FfiBbNF1 SfwXRq2J/WcGVR5FxnuAbJb3BdSAt7w3Mm/pgRooCgEuFAN5jlXcNnDY+s3kFL3p Q7SWAcHlqLarfRMZnjQuRU/U5yih3DfMvyAjvj/XjgEYhJ+kvtDCBJJlZwVUZm7x v5QY+faoGBU5hUc55aZ5ImsLMPNClfd8fBfrTd2awUyc44KeiD2f1gM3yc//IFuD CwTr4PVevVeO2/npQ1vd/n8b/qU33TGBkN3S5j5b+clQjzmW/5AcJV5N9rIeEnjB QqLu9BTFzIYcJKrMvYJGPuDTVEgej8nMnSEKrMjhfMZYNH9mIhK96i3dYQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIKIkD2QwB4tXOGHiAWtSpLSiu3JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzgzZjgy ZC0xNTQ1LTQwNzQtODY4Mi1hMWRlNThhM2IzNWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvODNmODJk LTE1NDUtNDA3NC04NjgyLWExZGU1OGEzYjM1Yi8xL2dvaVFQWkRBSGkxYzRZZUlC YTFLa3RLSzdjay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubIIMA0EAgACMAcDBQMqErFAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMnjDANBgkqhkiG9w0BAQsFAAOCAQEAaf3Xb8jKhTgR OzPJdaU2iJP9YtYW6/NgGv0Pi7MZ2yfJL813kEP3JIRWSPK7CavPdDepKZeQVZFZ MAak+zstdMYL88LhkDncrUUVRoVUBKc74XPEcCH7eKGQ/VopKdTT0LLFdz6SP42v TZzds2iR9qvgF0rZ9EULhmYmJzV642IPQdUi6mmpyvkEHTSaBvjz7hTzz3KB3OTF kEVgunUGMVU1N2dh7mEY+W0gxGeNY0gLcOUWLjW0vROqNwtRuo5FHEqlnj04r+OL Cg+SHM/7ScptZVtRoC8fQVV+lQZEFS27xccXxa+S2/Ir95Rew0ZaFLUSUDZ5jZ4h QfK/r2uIcA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:40 2026 by rpki-client