This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer File: gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer (raw, json) Hash identifier: n/XSwQwGXYXTN4g0MLobyjfGQIQPWD4s44t6ORrU6SE= Subject key identifier: 83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C10FC54185C160DA1D055D675D6F3EB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210790 IP: 193.3.0.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:10:fc:54:18:5c:16:0d:a1:d0:55:d6:75:d6:f3:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3e:2d:fa:d8:6c:d8:3e:e5:72:24:62:20:30: 35:82:ae:c3:aa:5c:c3:2f:85:9d:bc:28:ea:2a:c7: 67:9b:5d:2c:fc:56:d6:96:3c:99:2c:d0:ee:30:d9: c5:fd:60:8f:cf:ed:a7:64:bd:c3:f3:71:99:85:dc: f1:3c:95:ba:79:20:02:33:c3:a2:01:a0:14:b1:f8: b2:c0:fd:06:9f:93:23:5d:09:ef:ed:67:d1:5a:8f: 10:bf:32:38:6d:4f:07:68:83:e5:f2:4b:a8:bd:34: 14:3b:df:9d:41:06:c6:fc:8e:c2:96:e2:8e:26:c9: 3d:a2:be:cd:4a:39:37:6e:a2:c0:29:03:26:50:46: 3b:f9:ad:60:c6:73:3c:46:e1:f4:68:d0:e3:91:d4: 4b:35:56:09:57:bf:ed:43:bc:47:69:32:46:ec:aa: 5c:6d:01:4c:0f:3e:bf:3c:59:13:c3:35:fb:82:5d: 80:4f:f7:c8:ea:6d:83:79:f2:2a:92:de:20:d0:6a: f2:e9:ec:68:58:db:c7:5c:63:59:db:64:f3:f2:a1: a4:8f:ae:b6:fb:df:9f:04:c3:ed:e7:34:14:9f:cc: ff:c9:ae:eb:ac:6c:44:91:52:50:1d:9c:9a:58:89: 8e:e2:ce:ad:60:5b:24:f8:cc:7b:77:d0:18:30:0c: eb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.0.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210790 Signature Algorithm: sha256WithRSAEncryption 5a:a8:de:46:90:e6:35:2d:dd:c4:95:22:7d:82:23:5b:c1:78: 9c:04:ff:61:7f:7b:58:09:bc:53:c6:0f:47:0f:dc:dd:39:ad: 64:5c:20:7e:be:fa:a2:1e:9a:49:1d:d9:2f:e4:e5:34:a0:a3: 7a:99:ca:75:4e:d2:4e:e2:a1:50:2e:80:44:c1:b5:7f:3b:2a: f1:c0:4d:52:0d:91:a4:5d:ca:04:4a:e7:58:cd:3b:89:9c:c1: e4:3c:9d:ae:c4:b5:9e:6e:e8:ae:20:8a:78:a0:e4:6d:ec:1e: b4:b0:a0:02:eb:e8:fc:3e:fd:93:ed:86:88:35:e3:ef:0c:0e: 25:f5:92:2c:9e:25:b6:a8:d3:3b:39:8b:d5:e3:42:d6:da:2f: 9a:d1:af:e9:e4:13:e4:25:c1:e6:bd:ea:a3:93:1e:75:db:9f: 5c:70:66:b6:04:e3:cf:7d:74:c3:32:e4:b4:20:04:77:ca:ba: df:0c:c6:c0:a5:67:69:5f:11:d2:c8:84:36:40:5c:54:86:56: 77:74:83:23:5c:04:c4:8a:73:7e:45:b5:4c:d3:3d:48:8e:75: 4f:c4:f9:42:a3:3a:3c:9d:23:3a:ce:e7:2d:d3:80:8b:f3:83: c5:be:8d:21:65:24:08:b7:d7:cb:0e:d8:f7:48:d4:aa:77:dd: 84:71:26:2e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8EPxUGFwWDaHQVdZ11vPrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzM2Y2ExNTFlZDRjMzIzZDQ5OGYwNmRkN2M1YWUzOTRjZWFjNTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD4t+ths2D7lciRiIDA1gq7DqlzD L4WdvCjqKsdnm10s/FbWljyZLNDuMNnF/WCPz+2nZL3D83GZhdzxPJW6eSACM8Oi AaAUsfiywP0Gn5MjXQnv7WfRWo8QvzI4bU8HaIPl8kuovTQUO9+dQQbG/I7CluKO Jsk9or7NSjk3bqLAKQMmUEY7+a1gxnM8RuH0aNDjkdRLNVYJV7/tQ7xHaTJG7Kpc bQFMDz6/PFkTwzX7gl2AT/fI6m2DefIqkt4g0Gry6exoWNvHXGNZ22Tz8qGkj662 +9+fBMPt5zQUn8z/ya7rrGxEkVJQHZyaWImO4s6tYFsk+Mx7d9AYMAzrdwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIM2yhUe1MMj1JjwbdfFrjlM6sWfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1LzFmYWNl MS05ZTI4LTRkODktYmY1Mi05MTc5NTMxOTg0NWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvMWZhY2Ux LTllMjgtNGQ4OS1iZjUyLTkxNzk1MzE5ODQ1Yy8xL2d6YktGUjdVd3lQVW1QQnQx OFd1T1V6cXhaOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwQMAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM3ZjANBgkqhkiG9w0BAQsFAAOCAQEAWqjeRpDmNS3dxJUifYIjW8F4nAT/YX97 WAm8U8YPRw/c3TmtZFwgfr76oh6aSR3ZL+TlNKCjepnKdU7STuKhUC6ARMG1fzsq 8cBNUg2RpF3KBErnWM07iZzB5DydrsS1nm7oriCKeKDkbewetLCgAuvo/D79k+2G iDXj7wwOJfWSLJ4ltqjTOzmL1eNC1tovmtGv6eQT5CXB5r3qo5MeddufXHBmtgTj z310wzLktCAEd8q63wzGwKVnaV8R0siENkBcVIZWd3SDI1wExIpzfkW1TNM9SI51 T8T5QqM6PJ0jOs7nLdOAi/ODxb6NIWUkCLfXyw7Y90jUqnfdhHEmLg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:44 2026 by rpki-client