This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer File: guItqb8KdBce67TNmPwl8wQa3S8.cer (raw, json) Hash identifier: EGhXR2m6DpmumihmoP6WdtpNDYKrbdwXzdgkfivPPDU= Subject key identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA883614EA1CA33CAC9979C8A65FA2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29445 IP: 195.149.95.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:88:36:14:ea:1c:a3:3c:ac:99:79:c8:a6:5f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:db:40:67:81:95:6a:7f:07:d4:1d:4b:b3:f7: 64:f4:2a:b7:74:ce:18:78:ac:62:b3:9c:fa:d8:75: 19:74:4f:19:00:d3:c7:58:ff:c2:87:95:d0:f3:5f: cb:e0:2e:68:72:cd:1b:57:f5:d9:cc:c0:96:72:6d: 02:b3:d5:ca:62:20:be:a5:b4:a4:76:a1:e0:1c:00: 66:01:eb:ff:16:b6:ec:87:5d:02:74:bd:9a:b6:1a: 1c:75:41:2d:63:de:7a:41:0d:67:49:ce:30:d9:ed: b2:ce:29:f4:e4:d0:38:a6:3a:0e:73:cf:83:9d:57: b3:07:1e:33:bd:8c:81:f1:c8:70:e5:1d:04:ca:52: 0d:31:68:35:87:97:d3:73:03:2f:55:84:39:14:72: ec:f9:ef:a1:df:3b:29:8f:fc:37:25:5b:65:af:79: 66:f8:51:8e:12:ba:d2:39:4f:07:73:62:25:38:02: 02:5a:45:4c:bb:e1:9e:1e:e0:ee:3e:e5:f9:a5:5a: 95:5b:22:72:8d:d4:62:51:2c:04:45:d8:fb:a8:7f: 13:bb:ca:5f:3d:76:19:63:79:c4:8f:d0:39:c9:ac: 37:87:1f:45:bb:85:c7:f5:c5:89:2c:ab:c6:bd:56: af:5a:80:cc:57:78:ab:1b:d2:1c:da:30:85:91:14: 53:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.149.95.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29445 Signature Algorithm: sha256WithRSAEncryption a6:43:e7:6c:6f:f8:bc:05:f8:bc:6d:a3:79:c9:12:26:05:a1: 74:77:14:6e:e5:d1:cf:df:22:7b:d4:31:14:e9:ef:4f:c3:e6: 73:40:4a:14:d7:af:ad:e7:41:8d:c8:be:65:ab:6d:9c:58:74: 8b:c4:4b:6c:f2:60:d4:b9:bc:4b:c8:fc:da:c4:49:3d:b8:a0: d7:dc:0d:79:a5:b1:49:05:61:8a:6d:53:b7:51:c1:42:15:cc: b7:9d:27:a3:c1:ff:50:f5:97:b9:c0:11:eb:b8:7b:69:cb:61: f5:64:4d:ce:4c:24:2b:15:66:3d:02:1c:89:ec:6d:82:34:01: a8:e6:a3:86:d8:ed:50:7f:f3:e5:f7:1d:eb:95:ad:a1:c2:37: d7:3c:60:01:b2:af:18:df:d7:e1:8a:7c:9e:b9:9b:c9:29:20: 02:0b:b6:0f:cc:5a:30:fc:ed:1e:1b:d8:10:5c:26:00:c7:4f: 23:da:89:0d:0d:be:ab:92:0c:b7:5c:ea:24:83:72:df:c5:90: cf:ff:b3:87:91:1a:f4:62:09:aa:6e:40:22:84:01:1e:fa:22: ec:e2:31:7d:7b:b9:27:9e:ff:fe:40:2b:b6:d1:00:02:f9:07: 98:56:40:06:c2:84:5d:60:c3:9c:5d:15:23:8f:fe:65:4d:64: c5:0b:db:ed -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt9yog2FOocozysmXnIpl+iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmUyMmRhOWJmMGE3NDE3MWVlYmI0Y2Q5OGZjMjVmMzA0MWFkZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqttAZ4GVan8H1B1Ls/dk9Cq3dM4Y eKxis5z62HUZdE8ZANPHWP/Ch5XQ81/L4C5ocs0bV/XZzMCWcm0Cs9XKYiC+pbSk dqHgHABmAev/Frbsh10CdL2athocdUEtY956QQ1nSc4w2e2yzin05NA4pjoOc8+D nVezBx4zvYyB8chw5R0EylINMWg1h5fTcwMvVYQ5FHLs+e+h3zspj/w3JVtlr3lm +FGOErrSOU8Hc2IlOAICWkVMu+GeHuDuPuX5pVqVWyJyjdRiUSwERdj7qH8Tu8pf PXYZY3nEj9A5yaw3hx9Fu4XH9cWJLKvGvVavWoDMV3irG9Ic2jCFkRRTFwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFILiLam/CnQXHuu0zZj8JfMEGt0vMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0L2E4OWIz Yy05NzJjLTRiZWUtODBmMi01YzI5MTlkYThkZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvYTg5YjNj LTk3MmMtNGJlZS04MGYyLTVjMjkxOWRhOGRmMy8xL2d1SXRxYjhLZEJjZTY3VE5t UHdsOHdRYTNTOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw5VfMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnMFMA0GCSqGSIb3DQEBCwUAA4IBAQCmQ+dsb/i8Bfi8baN5yRImBaF0dxRu5dHP 3yJ71DEU6e9Pw+ZzQEoU16+t50GNyL5lq22cWHSLxEts8mDUubxLyPzaxEk9uKDX 3A15pbFJBWGKbVO3UcFCFcy3nSejwf9Q9Ze5wBHruHtpy2H1ZE3OTCQrFWY9AhyJ 7G2CNAGo5qOG2O1Qf/Pl9x3rla2hwjfXPGABsq8Y39fhinyeuZvJKSACC7YPzFow /O0eG9gQXCYAx08j2okNDb6rkgy3XOokg3LfxZDP/7OHkRr0YgmqbkAihAEe+iLs 4jF9e7knnv/+QCu20QAC+QeYVkAGwoRdYMOcXRUjj/5lTWTFC9vt -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:35 2026 by rpki-client