This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer File: gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer (raw, json) Hash identifier: cAx0fE9IY3DwHIiDe9Y7Hz3o/KJ8zKuj954GsvJNDg8= Subject key identifier: 82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FA44D9ABF2CF4632B3B28DD89F280 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15469 AS: 31087 AS: 201333 AS: 202056 AS: 206025 IP: 45.11.116.0/22 IP: 185.1.97.0/24 IP: 185.54.212.0/22 IP: 185.78.48.0/22 IP: 185.97.220.0/22 IP: 193.243.184.0/24 IP: 194.156.8.0/22 IP: 2001:7f8:b9::/48 IP: 2a02:4720::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:a4:4d:9a:bf:2c:f4:63:2b:3b:28:dd:89:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8293905afa134944f0630c949f3abda40646dac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:66:ba:d9:ec:1a:ca:1b:37:87:82:ea:94:8d: 80:b3:9a:dc:c8:b8:b3:96:e8:de:d9:ea:d7:2f:e1: 64:ce:0b:5e:c5:b7:55:a4:66:af:f2:e4:4a:35:b0: f6:2e:2d:bb:3e:0d:4e:62:24:0f:92:b3:19:02:b9: 0d:81:bc:77:7f:24:e6:fd:07:18:18:12:49:98:0a: b4:ab:af:9c:88:4b:39:fd:f0:28:72:5e:a5:f7:26: a3:7b:8d:9f:86:a1:a0:58:74:71:70:b5:d6:21:ef: fc:0e:d2:a1:9a:1f:38:18:13:49:d2:71:f2:ce:6a: 1d:0b:d0:10:b3:0b:ea:8b:84:48:5f:e0:23:72:8c: 6b:9d:bc:6d:c4:82:c4:d9:e8:d4:f2:8b:e9:2b:e0: 31:ef:e9:4e:3c:e2:13:d1:69:73:57:3d:5b:cb:36: 39:c7:13:8b:fc:15:cb:c4:62:e6:12:7f:23:00:b9: 9d:da:5f:4a:c7:5b:66:99:f3:e7:c0:88:ef:d1:31: cc:22:7c:ef:a5:ea:73:60:1b:12:e9:68:76:f3:bb: 46:3f:2e:e2:a1:e0:10:f7:90:c8:76:90:b5:69:04: ed:f3:ac:78:9a:44:1f:ec:e4:5f:54:7c:93:6a:b1: 44:7b:a0:92:f2:aa:71:d1:03:79:8b:fe:e4:ba:a5: 86:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.116.0/22 185.1.97.0/24 185.54.212.0/22 185.78.48.0/22 185.97.220.0/22 193.243.184.0/24 194.156.8.0/22 IPv6: 2001:7f8:b9::/48 2a02:4720::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15469 31087 201333 202056 206025 Signature Algorithm: sha256WithRSAEncryption 15:2a:73:d5:82:6e:85:0e:34:00:67:10:5f:85:43:80:12:f6: b7:ee:52:d1:08:6f:4d:3c:7f:ae:fc:3a:8f:2a:22:84:0e:53: 2d:a6:32:4e:81:a6:cf:71:64:b5:5c:0f:60:cf:97:81:75:ab: 37:4f:d8:88:d7:cf:68:73:55:58:8b:74:5b:0b:49:a9:b3:d4: aa:a6:86:2d:25:66:76:34:44:a4:1d:64:3a:fa:ef:17:8b:e8: b9:5b:14:fa:77:cd:99:ec:04:6a:e7:cd:83:55:e9:5c:5d:2d: e2:38:54:d1:05:f0:a7:33:d8:16:35:d0:d9:85:e8:05:5a:8e: c1:db:bd:dd:27:8f:51:44:ab:6b:2b:6d:4d:05:91:d8:d3:f7: ae:38:4b:70:99:3c:08:f1:9a:bc:17:a0:4c:40:6c:11:21:d3: bb:d1:9c:6d:f3:27:c4:8a:5c:ea:5b:ba:de:e6:51:4e:52:c9: 96:77:84:7f:e4:47:90:d9:8b:01:51:50:e5:bc:c8:91:37:99: 74:a7:49:46:e6:0e:c5:f2:57:cb:bd:76:3c:d0:b3:76:ca:81: 9f:88:af:c3:93:a1:bf:8f:50:14:32:4f:1a:2b:03:8a:46:df: 6e:29:32:ae:f9:79:08:31:ff:04:01:dc:fc:3f:39:22:53:0f: 9c:1e:f4:30 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgISAZt8f6RNmr8s9GMrOyjdifKAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjkzOTA1YWZhMTM0OTQ0ZjA2MzBjOTQ5ZjNhYmRhNDA2NDZkYWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2a62ewayhs3h4LqlI2As5rcyLiz luje2erXL+FkzgtexbdVpGav8uRKNbD2Li27Pg1OYiQPkrMZArkNgbx3fyTm/QcY GBJJmAq0q6+ciEs5/fAocl6l9yaje42fhqGgWHRxcLXWIe/8DtKhmh84GBNJ0nHy zmodC9AQswvqi4RIX+AjcoxrnbxtxILE2ejU8ovpK+Ax7+lOPOIT0WlzVz1byzY5 xxOL/BXLxGLmEn8jALmd2l9Kx1tmmfPnwIjv0THMInzvpepzYBsS6Wh287tGPy7i oeAQ95DIdpC1aQTt86x4mkQf7ORfVHyTarFEe6CS8qpx0QN5i/7kuqWGtwIDAQAB o4IC7jCCAuowHQYDVR0OBBYEFIKTkFr6E0lE8GMMlJ86vaQGRtrBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkL2UxYzM3 My02NGY4LTQyMjYtOTA0NC04MTA5NWExM2I5ZGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvZTFjMzcz LTY0ZjgtNDIyNi05MDQ0LTgxMDk1YTEzYjlkZS8xL2dwT1FXdm9UU1VUd1l3eVVu enE5cEFaRzJzRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGCCsGAQUF BwEHAQH/BEwwSjAwBAIAATAqAwQCLQt0AwQAuQFhAwQCuTbUAwQCuU4wAwQCuWHc AwQAwfO4AwQCwpwIMBYEAgACMBADBwAgAQf4ALkDBQMqAkcgMCwGCCsGAQUFBwEI AQH/BB0wG6AZMBcCAjxtAgJ5bwIDAxJ1AgMDFUgCAwMkyTANBgkqhkiG9w0BAQsF AAOCAQEAFSpz1YJuhQ40AGcQX4VDgBL2t+5S0QhvTTx/rvw6jyoihA5TLaYyToGm z3FktVwPYM+XgXWrN0/YiNfPaHNVWIt0WwtJqbPUqqaGLSVmdjREpB1kOvrvF4vo uVsU+nfNmewEaufNg1XpXF0t4jhU0QXwpzPYFjXQ2YXoBVqOwdu93SePUUSraytt TQWR2NP3rjhLcJk8CPGavBegTEBsESHTu9GcbfMnxIpc6lu63uZRTlLJlneEf+RH kNmLAVFQ5bzIkTeZdKdJRuYOxfJXy712PNCzdsqBn4ivw5Ohv49QFDJPGisDikbf bikyrvl5CDH/BAHc/D85IlMPnB70MA== -----END CERTIFICATE-----Generated at Tue Feb 10 02:50:27 2026 by rpki-client