This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer File: rpSIkT1zR5eD2nv1axZOXITU_Go.cer (raw, json) Hash identifier: yqOC6CYIgXuAhpu/K3nRMMwk4b1o4SIeUQdQDilTGgg= Subject key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6462A52FA4B8E08BE059189F230C1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48387 IP: 195.88.60.0/23 IP: 2001:67c:10a8::/47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:46:2a:52:fa:4b:8e:08:be:05:91:89:f2:30:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1d:17:22:aa:cc:f4:66:15:e8:a0:6a:33:d3: a3:9e:af:74:0f:37:6d:fa:e5:8b:3d:87:5e:d8:0e: 56:db:31:cf:1d:80:dd:b6:34:25:60:16:f6:64:36: 01:45:63:24:c7:2b:89:ec:dc:48:84:ec:97:61:18: 38:4b:28:82:d2:57:2d:a7:e1:8c:c0:45:f2:8f:8e: 2f:a1:33:77:83:f8:97:65:18:00:ea:b3:d6:e3:9b: 00:3d:84:53:9c:a4:06:c1:1f:03:8f:a6:5b:70:47: 18:4f:0b:db:b8:98:b1:56:44:1a:88:c8:f3:f0:64: 86:fc:d3:e7:b3:bf:34:80:8d:e3:20:40:5e:d1:c4: ae:02:b3:11:a1:f8:38:3b:9b:bb:14:95:d7:35:f7: e1:93:15:f3:1d:e0:44:18:d9:11:5f:84:ec:2e:1b: c5:f2:d1:c2:48:75:40:20:be:0f:c1:10:7a:43:5c: db:33:c9:21:57:43:d4:93:0f:b3:8f:b9:a1:20:0e: ce:27:f3:8c:f0:23:d5:53:1f:52:fc:ca:52:af:1a: a5:76:9c:82:6e:c5:59:ed:03:a9:50:63:03:de:4e: 11:0e:02:51:d8:4f:2e:51:32:b6:9d:a2:75:30:a9: 02:84:67:44:64:4c:2a:2c:4f:93:9c:f2:71:67:54: 45:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.60.0/23 IPv6: 2001:67c:10a8::/47 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48387 Signature Algorithm: sha256WithRSAEncryption 3f:93:a0:e6:d8:67:c8:90:77:05:24:6a:d3:53:b3:ef:c3:35: 04:34:00:3c:8a:c7:6b:4a:17:88:6e:dc:d0:35:68:ae:e1:30: d3:15:2b:b9:7d:b6:f4:8c:bd:86:63:79:c8:4c:72:85:47:86: d0:d1:b4:fc:84:f9:96:d3:29:2c:94:bc:66:61:31:d2:61:bd: ee:0c:4e:5a:ae:cc:87:2b:ef:f9:91:28:38:3e:44:5a:8c:e2: 1b:4d:77:6b:79:d3:61:19:eb:e4:0f:f9:e4:33:86:7d:8b:33: 14:53:60:ad:84:82:a2:99:94:8c:dc:2f:61:76:cc:06:8c:da: dd:01:44:8c:b6:52:f2:4a:07:2f:9a:86:04:f7:ce:50:76:e6: 9a:33:8e:96:59:04:8d:36:90:f5:55:1a:b2:a4:a2:7b:c3:fa: 65:87:bc:f2:f6:e3:04:67:1b:26:54:56:d1:5e:5c:f1:5b:46: d3:57:b3:bb:85:2f:ce:46:f0:af:a8:71:d6:b7:30:60:57:12: 8d:42:47:79:73:6a:03:7f:33:32:fd:13:59:0e:cd:be:cf:c9: e4:07:89:14:60:22:e5:5a:6f:58:c6:33:3a:43:74:da:04:83: 36:e8:8d:dc:1c:56:9b:1a:3c:6f:f1:9b:93:6d:ab:0b:0d:a4: 04:83:79:34 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt+pkYqUvpLjgi+BZGJ8jDBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTk0ODg5MTNkNzM0Nzk3ODNkYTdiZjU2YjE2NGU1Yzg0ZDRmYzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x0XIqrM9GYV6KBqM9Ojnq90Dzdt +uWLPYde2A5W2zHPHYDdtjQlYBb2ZDYBRWMkxyuJ7NxIhOyXYRg4SyiC0lctp+GM wEXyj44voTN3g/iXZRgA6rPW45sAPYRTnKQGwR8Dj6ZbcEcYTwvbuJixVkQaiMjz 8GSG/NPns780gI3jIEBe0cSuArMRofg4O5u7FJXXNffhkxXzHeBEGNkRX4TsLhvF 8tHCSHVAIL4PwRB6Q1zbM8khV0PUkw+zj7mhIA7OJ/OM8CPVUx9S/MpSrxqldpyC bsVZ7QOpUGMD3k4RDgJR2E8uUTK2naJ1MKkChGdEZEwqLE+TnPJxZ1RFyQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFK6UiJE9c0eXg9p79WsWTlyE1PxqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkLzcwNWQw MC0yNWExLTRiYWItOWJhNC00MzUzY2Q4MmQ1N2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvNzA1ZDAw LTI1YTEtNGJhYi05YmE0LTQzNTNjZDgyZDU3Yi8xL3JwU0lrVDF6UjVlRDJudjFh eFpPWElUVV9Hby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBw1g8MA8EAgACMAkDBwEgAQZ8EKgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAL0DMA0GCSqGSIb3DQEBCwUAA4IBAQA/k6Dm2GfI kHcFJGrTU7PvwzUENAA8isdrSheIbtzQNWiu4TDTFSu5fbb0jL2GY3nITHKFR4bQ 0bT8hPmW0ykslLxmYTHSYb3uDE5arsyHK+/5kSg4PkRajOIbTXdredNhGevkD/nk M4Z9izMUU2CthIKimZSM3C9hdswGjNrdAUSMtlLySgcvmoYE985QduaaM46WWQSN NpD1VRqypKJ7w/plh7zy9uMEZxsmVFbRXlzxW0bTV7O7hS/ORvCvqHHWtzBgVxKN Qkd5c2oDfzMy/RNZDs2+z8nkB4kUYCLlWm9YxjM6Q3TaBIM26I3cHFabGjxv8ZuT basLDaQEg3k0 -----END CERTIFICATE-----Generated at Mon Feb 2 08:12:43 2026 by rpki-client