This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer File: gvolsvyxRoEUtziSirINh2G_iDE.cer (raw, json) Hash identifier: uC9Cj3WJi/VMJYioLGL87wog9ke0YyAeyX2KzRGpT+s= Subject key identifier: 82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC95B9273951369C83C815913FE1B2F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12664 AS: 20617 AS: 25215 AS: 25289 AS: 31450 AS: 43759 AS: 56859 AS: 205860 AS: 206450 AS: 210043 IP: 79.170.56.0/21 IP: 155.140.0.0/16 IP: 159.50.0.0/16 IP: 159.95.0.0/16 IP: 185.198.236.0/22 IP: 193.8.9.0 -- 193.8.11.255 IP: 193.8.148.0 -- 193.8.163.255 IP: 193.160.103.0/24 IP: 194.5.80.0/23 IP: 194.15.145.0/24 IP: 194.124.160.0/21 IP: 194.150.80.0/22 IP: 2001:67c:2a4::/48 IP: 2a04:a80::/29 IP: 2a0a:8a40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:5b:92:73:95:13:69:c8:3c:81:59:13:fe:1b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82fa25b2fcb1468114b738928ab20d8761bf8831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:70:60:86:73:a0:80:7b:7d:2c:10:72:b8:4a: 2c:04:33:3a:15:00:1f:d0:1e:f6:96:3c:76:a6:01: 02:ae:67:d2:36:d3:d9:99:1d:1b:64:29:19:c7:44: 86:16:79:8e:c8:0b:e2:cc:8f:b3:f3:2f:d8:f7:b2: 67:18:8e:68:e1:b3:44:e3:78:31:2d:d1:c6:24:37: 9c:c9:8e:22:41:ad:80:e0:98:c2:d7:d9:15:2f:0e: 6b:a3:5d:a3:e4:dd:82:44:ef:65:c0:f4:b1:15:6f: f6:13:bc:b3:f2:a5:5e:a5:c7:f2:47:03:b0:d8:b4: 7c:07:1f:27:1b:44:5c:e2:d4:c4:ed:7c:9f:31:ed: e6:ad:ef:88:10:6e:4d:f6:01:19:6e:7e:18:00:51: 82:12:c1:b9:81:8c:f0:5d:d0:2e:09:7a:3f:5d:50: 48:2e:6c:01:f0:40:a5:47:c8:4e:6b:09:5b:00:d1: fd:5a:c7:56:29:48:0e:e3:21:4c:27:fe:25:c7:0e: 1f:1d:3a:51:c0:25:69:35:c2:02:8d:dd:a2:18:dc: fc:74:78:7c:9d:71:dc:49:b3:a6:95:7b:1e:a9:dc: 07:00:bd:b5:3c:a2:a8:7a:72:44:65:c8:50:f5:38: 12:9c:38:ed:1e:5b:e9:37:21:0c:a1:3a:e7:0d:d0: d2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.170.56.0/21 155.140.0.0/16 159.50.0.0/16 159.95.0.0/16 185.198.236.0/22 193.8.9.0-193.8.11.255 193.8.148.0-193.8.163.255 193.160.103.0/24 194.5.80.0/23 194.15.145.0/24 194.124.160.0/21 194.150.80.0/22 IPv6: 2001:67c:2a4::/48 2a04:a80::/29 2a0a:8a40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12664 20617 25215 25289 31450 43759 56859 205860 206450 210043 Signature Algorithm: sha256WithRSAEncryption 44:b7:16:2a:5b:ed:ac:b2:2e:da:bc:82:d9:3b:0f:ca:61:96: 39:49:73:a7:c9:21:81:cf:5a:13:54:00:b8:90:73:fe:7b:06: 06:1d:20:2d:4c:a0:57:c7:03:31:8c:44:f3:be:0d:98:73:61: 8e:fc:06:77:3f:86:34:bb:8e:03:51:0d:3f:6d:c3:ec:db:5e: c3:52:70:82:76:a7:09:a2:0a:86:33:68:99:b2:d8:ca:a1:48: a2:5a:c0:d9:84:b8:34:df:0a:3f:43:5b:f7:03:cd:cb:87:82: 58:f6:67:d4:90:32:f6:68:b1:9e:8f:1f:8a:3a:ac:eb:1e:1f: 4f:2e:17:86:54:80:4f:22:94:18:09:c6:42:94:80:fb:e6:d9: 9e:56:8a:98:20:53:49:c5:b9:e7:93:40:da:f3:9f:c3:ae:1c: f2:1b:4c:5e:2e:ab:4b:34:00:70:b0:13:b8:3e:29:94:7e:e8: f4:cb:37:be:22:88:e7:d7:71:f0:a3:3b:ec:56:8d:ae:1c:5a: 81:74:22:cf:6e:73:0b:23:5b:9b:1d:c6:1d:2d:65:13:4a:cd: 75:4b:ac:d9:53:df:bf:62:26:25:38:b7:b7:59:a5:2b:c6:48: d9:cf:c0:85:41:26:ab:85:32:86:7e:dc:1d:c7:20:f8:e6:94: 4c:a2:60:b5 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgISAZt6yVuSc5UTacg8gVkT/hsvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmZhMjViMmZjYjE0NjgxMTRiNzM4OTI4YWIyMGQ4NzYxYmY4ODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknBghnOggHt9LBByuEosBDM6FQAf 0B72ljx2pgECrmfSNtPZmR0bZCkZx0SGFnmOyAvizI+z8y/Y97JnGI5o4bNE43gx LdHGJDecyY4iQa2A4JjC19kVLw5ro12j5N2CRO9lwPSxFW/2E7yz8qVepcfyRwOw 2LR8Bx8nG0Rc4tTE7XyfMe3mre+IEG5N9gEZbn4YAFGCEsG5gYzwXdAuCXo/XVBI LmwB8EClR8hOawlbANH9WsdWKUgO4yFMJ/4lxw4fHTpRwCVpNcICjd2iGNz8dHh8 nXHcSbOmlXseqdwHAL21PKKoenJEZchQ9TgSnDjtHlvpNyEMoTrnDdDSuQIDAQAB o4IDNzCCAzMwHQYDVR0OBBYEFIL6JbL8sUaBFLc4koqyDYdhv4gxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzEzNzFh Ni1mNWYzLTQzYmYtYWZmNC03Njg1Yzk2NzAwMTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvMTM3MWE2 LWY1ZjMtNDNiZi1hZmY0LTc2ODVjOTY3MDAxNy8xL2d2b2xzdnl4Um9FVXR6aVNp cklOaDJHX2lERS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGNBggrBgEF BQcBBwEB/wR+MHwwWwQCAAEwVQMEA0+qOAMDAJuMAwMAnzIDAwCfXwMEArnG7DAM AwQAwQgJAwQCwQgIMAwDBALBCJQDBALBCKADBADBoGcDBAHCBVADBADCD5EDBAPC fKADBALCllAwHQQCAAIwFwMHACABBnwCpAMFAyoECoADBQAqCopAMEIGCCsGAQUF BwEIAQH/BDMwMaAvMC0CAjF4AgJQiQICYn8CAmLJAgJ62gIDAKrvAgMA3hsCAwMk JAIDAyZyAgMDNHswDQYJKoZIhvcNAQELBQADggEBAES3Fipb7ayyLtq8gtk7D8ph ljlJc6fJIYHPWhNUALiQc/57BgYdIC1MoFfHAzGMRPO+DZhzYY78Bnc/hjS7jgNR DT9tw+zbXsNScIJ2pwmiCoYzaJmy2MqhSKJawNmEuDTfCj9DW/cDzcuHglj2Z9SQ MvZosZ6PH4o6rOseH08uF4ZUgE8ilBgJxkKUgPvm2Z5WipggU0nFueeTQNrzn8Ou HPIbTF4uq0s0AHCwE7g+KZR+6PTLN74iiOfXcfCjO+xWja4cWoF0Is9ucwsjW5sd xh0tZRNKzXVLrNlT379iJiU4t7dZpSvGSNnPwIVBJquFMoZ+3B3HIPjmlEyiYLU= -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:35 2026 by rpki-client