This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer File: gsbbjg23mzF0_umfxqYFz1bfvck.cer (raw, json) Hash identifier: FVVanJq61UqfB4pA7XQISJklpcJcoExhM02QQFXKM5w= Subject key identifier: 82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A36B0FF95D84FF922B3118E2DE9D47 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.34.184.0/22 IP: 2a00:dba0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6b:0f:f9:5d:84:ff:92:2b:31:18:e2:de:9d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:17:d0:0e:52:b8:22:34:aa:12:f0:5f:b1:5d: e8:e4:10:4f:76:f2:53:10:e2:b4:60:d4:fd:f9:57: 5f:fa:aa:75:dd:77:4e:c8:0b:a3:c7:54:5d:c4:c1: ad:f0:b2:6a:0a:75:ba:fa:cd:d5:af:28:48:b1:bc: 6d:fb:af:9d:42:49:73:29:86:80:42:78:3d:27:a1: e2:1e:53:94:19:e4:d6:a2:85:07:02:9d:44:6a:b6: 1b:82:b7:57:fa:de:f3:13:2c:8c:12:f2:16:dc:11: c0:5f:ea:30:74:23:7e:43:ba:2a:e5:c6:03:1f:90: d8:dd:5c:db:f5:44:e5:20:8d:50:c1:e9:4e:f3:ef: ab:f3:5e:c8:ab:75:3f:bb:45:c3:63:7b:c6:56:13: 0b:e1:b9:ac:a1:3d:de:67:34:5c:f0:10:df:d2:2c: 77:93:69:10:69:b2:e5:51:14:8a:13:88:33:0f:36: 55:68:55:40:14:64:5a:0a:86:0f:da:2b:2a:3c:95: 19:41:c7:a6:53:34:80:54:84:e5:ea:5c:50:ce:6f: 59:70:6e:55:9e:9a:29:f4:1d:7a:59:c4:7d:b1:74: 96:c2:f8:d3:b1:50:f2:fc:92:78:67:b4:20:e0:69: 7a:1c:36:40:86:05:9a:2f:e7:c5:2f:8a:27:bc:3f: 83:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.34.184.0/22 IPv6: 2a00:dba0::/32 Signature Algorithm: sha256WithRSAEncryption 16:99:50:c6:0e:33:80:f1:2b:a2:48:5d:53:f8:a9:62:0f:04: 6e:0b:aa:86:95:ac:b3:c4:f3:5e:40:ab:02:0e:c3:aa:36:90: 16:17:db:7c:05:c1:56:18:1d:09:48:2e:5c:a8:4c:cc:d9:82: eb:1f:0f:7c:3f:cd:2a:d7:b9:64:33:88:42:63:df:89:4f:a5: da:72:e2:36:48:d8:ef:58:6f:36:76:f9:86:9f:97:df:27:a1: f9:39:ce:17:60:8b:5b:fa:18:2d:69:c7:d2:89:ce:b2:f4:f0: 5f:c1:24:06:fe:62:54:af:0c:1d:22:1f:4f:ee:55:59:72:86: 1d:a1:4d:f6:06:3f:c6:d5:78:bf:3a:4c:b5:37:bb:3e:75:c9: f6:4f:72:1b:e8:bb:9c:b8:ad:13:3c:f1:b8:68:cb:a5:66:1e: 39:a2:29:ac:58:c9:68:5a:d3:9c:c9:a0:8d:4c:40:9f:08:87: 59:f6:f2:4d:37:4e:2a:4b:34:20:a2:80:dd:28:de:16:2a:06: bf:e5:29:71:4c:c4:cb:e0:07:5f:4c:76:bc:ab:ac:d4:08:e0: f4:55:c1:4a:8a:ca:d2:32:19:ff:46:32:19:6a:31:2f:da:33: be:83:cd:14:70:37:2c:23:e3:a8:85:e3:08:0c:00:55:72:f9: 1a:ce:e9:4d -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt4o2sP+V2E/5IrMRji3p1HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmM2ZGI4ZTBkYjc5YjMxNzRmZWU5OWZjNmE2MDVjZjU2ZGZiZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBfQDlK4IjSqEvBfsV3o5BBPdvJT EOK0YNT9+Vdf+qp13XdOyAujx1RdxMGt8LJqCnW6+s3VryhIsbxt+6+dQklzKYaA Qng9J6HiHlOUGeTWooUHAp1EarYbgrdX+t7zEyyMEvIW3BHAX+owdCN+Q7oq5cYD H5DY3Vzb9UTlII1QwelO8++r817Iq3U/u0XDY3vGVhML4bmsoT3eZzRc8BDf0ix3 k2kQabLlURSKE4gzDzZVaFVAFGRaCoYP2isqPJUZQcemUzSAVITl6lxQzm9ZcG5V npop9B16WcR9sXSWwvjTsVDy/JJ4Z7Qg4Gl6HDZAhgWaL+fFL4onvD+DDQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFILG244Nt5sxdP7pn8amBc9W373JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzllNjg1 MC0zMTBjLTQyMGYtYjc1NS1iYWJhNGUzZDNjMWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvOWU2ODUw LTMxMGMtNDIwZi1iNzU1LWJhYmE0ZTNkM2MxZC8xL2dzYmJqZzIzbXpGMF91bWZ4 cVlGejFiZnZjay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSK4MA0EAgACMAcDBQAqANugMA0GCSqGSIb3 DQEBCwUAA4IBAQAWmVDGDjOA8SuiSF1T+KliDwRuC6qGlayzxPNeQKsCDsOqNpAW F9t8BcFWGB0JSC5cqEzM2YLrHw98P80q17lkM4hCY9+JT6XacuI2SNjvWG82dvmG n5ffJ6H5Oc4XYItb+hgtacfSic6y9PBfwSQG/mJUrwwdIh9P7lVZcoYdoU32Bj/G 1Xi/Oky1N7s+dcn2T3Ib6LucuK0TPPG4aMulZh45oimsWMloWtOcyaCNTECfCIdZ 9vJNN04qSzQgooDdKN4WKga/5SlxTMTL4AdfTHa8q6zUCOD0VcFKisrSMhn/RjIZ ajEv2jO+g80UcDcsI+OoheMIDABVcvkazulN -----END CERTIFICATE-----Generated at Mon Jan 26 22:34:37 2026 by rpki-client