This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer File: gynJE4dY3-i6EjXuDsfZtlifSyc.cer (raw, json) Hash identifier: Yb6JdLrZFq3v6F8PjDkDTuYU54dkeyFVwm/IM6um700= Subject key identifier: 83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B367687952D4445BDD5D8E8C1A09DC0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209567 IP: 185.69.3.0/24 IP: 194.2.75.0/24 IP: 2a10:edc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:76:87:95:2d:44:45:bd:d5:d8:e8:c1:a0:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:73:06:0b:cc:10:ec:16:7d:ec:bc:53:a0:10: 61:8a:0d:cd:12:4d:c7:df:53:e6:3f:13:33:0b:be: 34:c9:61:f0:15:aa:dc:d8:0f:77:61:34:43:a7:5b: c7:2a:fc:e0:8c:c7:fa:73:43:40:77:44:3e:48:95: 1d:15:c0:b6:a1:4b:14:27:55:eb:1f:db:6e:6b:5f: f5:b5:7b:bc:c3:c6:34:7b:a3:c0:fc:8c:76:c1:09: 99:10:2d:ea:12:60:66:49:34:b3:0a:3a:ed:10:cc: 61:e3:c0:fc:76:a3:9d:8d:3f:0b:d6:97:3d:1f:f3: ca:d3:a2:2c:eb:65:65:e5:89:b8:73:27:d4:7c:9a: d2:32:05:03:cc:d4:64:2d:e8:32:59:57:dd:54:a0: 6d:f1:fe:b5:f7:28:7d:8f:da:d1:32:61:7c:2e:70: 3a:40:05:c3:cc:9a:de:4e:aa:be:1b:35:82:92:ac: 30:90:77:83:03:a8:2b:d9:15:44:b0:b2:95:92:9b: c2:c6:4f:48:d1:6b:b2:e6:b5:c4:89:99:24:ca:3a: 4f:39:60:af:bb:95:c6:89:20:76:8f:99:a6:97:bd: 45:01:dc:8a:73:f2:7b:bf:96:b2:d9:63:54:2d:e9: b8:91:4e:42:92:95:73:a8:96:fd:8e:e6:6b:5a:55: ff:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.3.0/24 194.2.75.0/24 IPv6: 2a10:edc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209567 Signature Algorithm: sha256WithRSAEncryption 24:0f:0e:af:2e:48:59:b6:fa:8e:e3:0d:21:55:2e:53:91:bd: b0:5b:06:44:09:42:29:74:d9:52:e3:d9:34:da:fd:7d:bb:10: 15:7d:34:a8:6b:66:df:f3:1e:6a:f5:69:64:25:23:bb:12:f1: 84:64:66:b9:21:e2:2a:ca:88:d3:39:41:ee:ed:53:a7:2e:78: 0c:9d:93:48:b6:c3:1f:5a:49:1d:b9:f4:13:fa:c8:0c:a9:a7: 36:0b:bf:04:76:e7:d7:ff:a2:2a:ce:bc:95:26:8a:95:05:24: 17:27:81:d8:c6:4f:59:4b:0a:d3:92:ca:91:95:86:7f:74:4e: c7:f9:0e:16:ab:e2:21:46:df:2b:39:2d:97:95:18:3a:10:67: 8f:0e:51:75:2e:06:29:23:e1:85:65:06:ab:f3:7d:c0:50:25: 74:71:b4:d6:b2:43:3a:83:d4:aa:3b:54:13:5a:80:c7:23:6f: e2:c6:c5:b5:ee:79:b2:aa:62:09:ba:3a:da:b4:24:24:30:0b: 3e:cb:c5:20:aa:b6:39:55:93:c4:ed:bb:82:85:ea:3f:91:a2: 0f:2d:97:7d:59:a8:64:33:61:7b:2b:f8:d6:16:72:18:1b:c9: 74:a6:23:e9:8a:65:6b:02:e6:3b:b7:39:37:0f:19:05:37:54: 5f:95:98:22 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7NnaHlS1ERb3V2OjBoJ3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzI5YzkxMzg3NThkZmU4YmExMjM1ZWUwZWM3ZDliNjU4OWY0YjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHMGC8wQ7BZ97LxToBBhig3NEk3H 31PmPxMzC740yWHwFarc2A93YTRDp1vHKvzgjMf6c0NAd0Q+SJUdFcC2oUsUJ1Xr H9tua1/1tXu8w8Y0e6PA/Ix2wQmZEC3qEmBmSTSzCjrtEMxh48D8dqOdjT8L1pc9 H/PK06Is62Vl5Ym4cyfUfJrSMgUDzNRkLegyWVfdVKBt8f619yh9j9rRMmF8LnA6 QAXDzJreTqq+GzWCkqwwkHeDA6gr2RVEsLKVkpvCxk9I0Wuy5rXEiZkkyjpPOWCv u5XGiSB2j5mml71FAdyKc/J7v5ay2WNULem4kU5CkpVzqJb9juZrWlX/RQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIMpyROHWN/ouhI17g7H2bZYn0snMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk2Lzc4Zjgy ZC0wYmI5LTQzZGUtOTgxMC0xY2E3YTBiNmFjOWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvNzhmODJk LTBiYjktNDNkZS05ODEwLTFjYTdhMGI2YWM5YS8xL2d5bkpFNGRZMy1pNkVqWHVE c2ZadGxpZlN5Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuUUDAwQAwgJLMA0EAgACMAcDBQMqEO3AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMynzANBgkqhkiG9w0BAQsFAAOCAQEAJA8O ry5IWbb6juMNIVUuU5G9sFsGRAlCKXTZUuPZNNr9fbsQFX00qGtm3/MeavVpZCUj uxLxhGRmuSHiKsqI0zlB7u1Tpy54DJ2TSLbDH1pJHbn0E/rIDKmnNgu/BHbn1/+i Ks68lSaKlQUkFyeB2MZPWUsK05LKkZWGf3ROx/kOFqviIUbfKzktl5UYOhBnjw5R dS4GKSPhhWUGq/N9wFAldHG01rJDOoPUqjtUE1qAxyNv4sbFte55sqpiCbo62rQk JDALPsvFIKq2OVWTxO27goXqP5GiDy2XfVmoZDNheyv41hZyGBvJdKYj6YplawLm O7c5Nw8ZBTdUX5WYIg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:26 2026 by rpki-client