This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer File: griIeR5H8Xu-ofUbnJdpd2JPBBw.cer (raw, json) Hash identifier: t7Iv1l1IlPKW2Cacz+GKNh13dwEVvFVD1K5amcLinNk= Subject key identifier: 82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9AA09FC8B1144D4B6136824104875 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199406 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:aa:09:fc:8b:11:44:d4:b6:13:68:24:10:48:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82b888791e47f17bbea1f51b9c976977624f041c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e0:f9:04:d5:af:8e:2a:04:fd:69:76:5c:2b: 25:37:5e:98:65:da:96:02:ad:d7:6d:85:ab:f9:ba: 7c:c7:d3:79:df:4a:c0:a5:16:ee:4e:21:d8:44:05: 50:ad:fe:50:90:8d:0e:0e:df:00:71:e4:d5:28:8f: c8:7f:d1:83:99:7b:23:71:77:10:6f:cf:17:bd:2a: 9f:2b:8e:04:4c:04:85:4a:9c:3d:8b:9e:a7:34:f5: 25:6b:7b:71:bb:ea:d3:70:8b:03:26:4b:42:a9:fc: 6e:0c:bd:b7:07:48:d6:14:78:b8:86:7b:7a:11:a9: 44:99:be:37:e3:32:8f:20:33:d1:22:92:f0:03:16: 8d:f3:63:23:5b:12:f4:7e:a2:d3:fe:45:d5:1d:03: f4:09:ea:b9:71:d1:47:0f:c7:7b:e2:15:28:44:34: 79:3e:73:21:47:95:30:71:62:23:e0:9d:2d:30:e1: c8:b0:d8:63:4d:30:40:8f:36:b9:b5:d7:2d:c1:42: 2a:c5:a0:62:9a:8a:78:09:89:37:0a:fc:f6:d6:01: 28:7a:aa:cc:b8:03:fa:21:f0:f6:3c:7f:37:6d:2f: d6:97:01:eb:2b:59:55:35:56:e4:7d:28:e1:ee:70: bf:69:9f:ad:70:da:21:2c:9b:15:97:5c:c3:a9:63: 03:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 199406 Signature Algorithm: sha256WithRSAEncryption a7:52:70:ae:44:f3:3c:56:a4:fb:c8:32:f7:fe:a2:f4:6d:e8: b1:fc:7f:20:b8:db:fe:a0:c7:64:12:5b:8e:59:17:95:fa:87: ce:44:9d:ad:6f:70:60:0e:3c:c4:96:a2:85:d0:20:9c:5e:10: 54:f4:1a:40:85:5a:1f:81:2b:ba:fc:07:23:67:d2:37:1b:39: b5:c1:f1:76:55:2d:1b:27:31:a6:80:21:f8:89:c1:be:9e:b2: a7:ee:0e:ef:0d:bf:6d:6e:b0:92:a9:10:81:70:4f:a5:b9:a6: 01:f8:89:6b:ad:a7:58:67:12:51:38:72:66:4b:4d:1d:da:f6: 5d:d4:fc:ae:0f:0c:d3:06:e2:c1:2a:0b:ef:93:7b:fa:04:6f: f1:71:d9:9e:a9:9b:65:06:ef:0c:12:14:30:b3:d2:1d:90:94: 3f:72:ee:06:22:5a:f6:11:10:bd:63:fb:b6:b6:3c:f0:7c:11: b4:f7:53:fe:3d:dc:2b:6c:f1:3b:60:d8:81:42:4a:f1:a8:57: 4d:9b:31:93:b1:0f:3c:11:ea:2f:e1:fb:6e:d1:38:52:7c:df: 80:c6:95:54:37:a8:b4:9a:d8:62:42:57:6c:0a:77:2c:9d:02: 42:b3:6e:f4:96:d4:af:fb:01:67:78:ab:d9:dd:f8:f3:86:86: fe:d0:5d:8b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9yaoJ/IsRRNS2E2gkEEh1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmI4ODg3OTFlNDdmMTdiYmVhMWY1MWI5Yzk3Njk3NzYyNGYwNDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+D5BNWvjioE/Wl2XCslN16YZdqW Aq3XbYWr+bp8x9N530rApRbuTiHYRAVQrf5QkI0ODt8AceTVKI/If9GDmXsjcXcQ b88XvSqfK44ETASFSpw9i56nNPUla3txu+rTcIsDJktCqfxuDL23B0jWFHi4hnt6 EalEmb434zKPIDPRIpLwAxaN82MjWxL0fqLT/kXVHQP0Ceq5cdFHD8d74hUoRDR5 PnMhR5UwcWIj4J0tMOHIsNhjTTBAjza5tdctwUIqxaBimop4CYk3Cvz21gEoeqrM uAP6IfD2PH83bS/WlwHrK1lVNVbkfSjh7nC/aZ+tcNohLJsVl1zDqWMDyQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFIK4iHkeR/F7vqH1G5yXaXdiTwQcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwL2U0ZWMx NC1kMGU4LTQzNDgtYWUwNy00ZTkxZDdhN2Q5Y2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvZTRlYzE0 LWQwZTgtNDM0OC1hZTA3LTRlOTFkN2E3ZDljZS8xL2dyaUllUjVIOFh1LW9mVWJu SmRwZDJKUEJCdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMK7jANBgkqhkiG9w0BAQsFAAOCAQEAp1JwrkTzPFak +8gy9/6i9G3osfx/ILjb/qDHZBJbjlkXlfqHzkSdrW9wYA48xJaihdAgnF4QVPQa QIVaH4EruvwHI2fSNxs5tcHxdlUtGycxpoAh+InBvp6yp+4O7w2/bW6wkqkQgXBP pbmmAfiJa62nWGcSUThyZktNHdr2XdT8rg8M0wbiwSoL75N7+gRv8XHZnqmbZQbv DBIUMLPSHZCUP3LuBiJa9hEQvWP7trY88HwRtPdT/j3cK2zxO2DYgUJK8ahXTZsx k7EPPBHqL+H7btE4UnzfgMaVVDeotJrYYkJXbAp3LJ0CQrNu9JbUr/sBZ3ir2d34 84aG/tBdiw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:08 2026 by rpki-client