This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer File: gzdbQ66KU9SMiIZx5n_Be_J_K34.cer (raw, json) Hash identifier: BMSiAAqryaM4qX8dIEZR/FbBVZo/urZOVPQyjU/pQVc= Subject key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F845A13D317AF53905551D4415BEE96 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8395 IP: 185.109.112.0/22 IP: 195.170.32.0/19 IP: 2a04:dbc0::/30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:5a:13:d3:17:af:53:90:55:51:d4:41:5b:ee:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:32:bb:80:94:e7:34:70:67:15:4a:91:d5:38: 39:db:01:19:4c:e4:90:ef:af:d6:32:17:0d:27:14: ad:0a:24:c1:73:75:9c:67:58:36:e4:d7:26:48:a5: f2:b5:bf:97:5b:32:8e:8a:0c:a2:24:76:a3:57:ad: 36:f8:c2:21:c9:1c:03:38:4f:c1:54:5e:b5:10:f3: a2:06:15:c1:0b:26:f3:a1:b3:66:54:b2:41:9a:c3: 5e:d5:54:29:18:2b:e4:aa:0c:07:e7:5a:91:3b:36: 84:17:fe:7c:fc:de:03:5a:26:90:c5:47:12:38:45: e0:70:a2:f9:77:7b:d9:18:74:03:bc:40:96:d2:33: 97:02:5a:ec:c4:2d:40:12:cc:b8:30:6d:01:eb:6f: d1:2e:11:b4:08:30:47:a9:b0:10:f6:ec:a7:c8:57: 3a:32:17:7f:f0:2a:d4:29:d9:f1:dc:a2:90:4c:9a: 2e:7a:d5:2c:c2:dc:76:0a:06:d7:f0:27:51:ca:63: 7d:3f:f5:df:93:a3:9e:53:a2:4b:b5:6e:6d:84:bd: 8d:51:ab:0f:ca:e9:a5:d6:51:a8:f1:a5:0e:e8:48: 54:39:6b:ac:1e:48:5a:55:42:5c:0e:4f:73:23:fb: f5:41:91:68:a0:b6:51:c6:a3:1b:af:08:47:2f:a9: ee:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.109.112.0/22 195.170.32.0/19 IPv6: 2a04:dbc0::/30 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8395 Signature Algorithm: sha256WithRSAEncryption 0f:5d:e8:53:6f:84:69:c2:93:b7:08:4a:03:e5:a0:0e:5b:8c: bf:76:a7:64:dd:2f:3e:5b:7c:93:75:f2:e5:3f:7b:c0:fa:0c: 63:60:55:0b:20:5c:98:b2:b4:d0:90:1e:aa:ff:d8:41:84:28: af:37:cb:8e:b3:ae:74:7f:dd:d6:7c:66:b9:63:2b:2d:99:2a: 29:9e:9d:25:f7:4e:a1:ec:78:0f:d1:de:f3:3b:7f:68:c8:c7: d6:35:19:d1:49:5a:a0:f1:76:cb:49:1e:e5:e1:be:d7:71:36: 85:84:1e:52:c8:fe:ab:e7:eb:72:79:12:0c:4a:1e:da:92:6d: c1:38:46:dc:57:51:6d:ee:7e:03:65:8a:39:94:98:44:7d:79: 76:f5:e9:b2:53:3e:d6:1f:65:6f:cb:34:d1:06:1b:41:a7:5b: 3b:69:98:a6:6b:bd:03:f2:42:c0:b8:ec:3a:38:d3:61:10:d1: af:81:77:86:40:fe:b7:5a:c1:d7:f1:17:82:86:67:46:45:0f: 59:8d:40:a4:d8:44:29:f8:4e:d7:fe:56:49:4c:b1:3d:92:b8: 88:3a:df:5e:e7:c7:b5:16:37:2b:dd:fb:27:8d:33:3e:8a:79: 12:e9:b1:3d:36:53:c4:81:34:02:53:ff:ac:32:cd:09:52:3d: 6a:dc:64:99 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt/hFoT0xevU5BVUdRBW+6WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzM3NWI0M2FlOGE1M2Q0OGM4ODg2NzFlNjdmYzE3YmYyN2YyYjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjK7gJTnNHBnFUqR1Tg52wEZTOSQ 76/WMhcNJxStCiTBc3WcZ1g25NcmSKXytb+XWzKOigyiJHajV602+MIhyRwDOE/B VF61EPOiBhXBCybzobNmVLJBmsNe1VQpGCvkqgwH51qROzaEF/58/N4DWiaQxUcS OEXgcKL5d3vZGHQDvECW0jOXAlrsxC1AEsy4MG0B62/RLhG0CDBHqbAQ9uynyFc6 Mhd/8CrUKdnx3KKQTJouetUswtx2CgbX8CdRymN9P/Xfk6OeU6JLtW5thL2NUasP yuml1lGo8aUO6EhUOWusHkhaVUJcDk9zI/v1QZFooLZRxqMbrwhHL6nuywIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFIM3W0OuilPUjIiGceZ/wXvyfyt+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0LzE5MmJi YS0xYTc0LTRiYTQtOTBkNi03MmM0YzRiODA0YTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvMTkyYmJh LTFhNzQtNGJhNC05MGQ2LTcyYzRjNGI4MDRhNy8xL2d6ZGJRNjZLVTlTTWlJWng1 bl9CZV9KX0szNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuW1wAwQFw6ogMA0EAgACMAcDBQIqBNvAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAiDLMA0GCSqGSIb3DQEBCwUAA4IBAQAPXehT b4RpwpO3CEoD5aAOW4y/dqdk3S8+W3yTdfLlP3vA+gxjYFULIFyYsrTQkB6q/9hB hCivN8uOs650f93WfGa5YystmSopnp0l906h7HgP0d7zO39oyMfWNRnRSVqg8XbL SR7l4b7XcTaFhB5SyP6r5+tyeRIMSh7akm3BOEbcV1Ft7n4DZYo5lJhEfXl29emy Uz7WH2VvyzTRBhtBp1s7aZima70D8kLAuOw6ONNhENGvgXeGQP63WsHX8ReChmdG RQ9ZjUCk2EQp+E7X/lZJTLE9kriIOt9e58e1Fjcr3fsnjTM+inkS6bE9NlPEgTQC U/+sMs0JUj1q3GSZ -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:42 2026 by rpki-client