This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer File: GZgd6LdyA5RZREi3oOYlwzo43GY.cer (raw, json) Hash identifier: vRfjg02xcoZiDR12idUiNLv7TWU+J4vOS3ddUXi+N9A= Subject key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77591C74A9DC5335F9794CDEB4A176F4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.190.146.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1c:74:a9:dc:53:35:f9:79:4c:de:b4:a1:76:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19981de8b7720394594448b7a0e625c33a38dc66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ea:2f:a3:3a:ee:e3:16:c1:ba:3a:40:3b:5b: 03:92:56:95:a8:31:86:0c:8e:b3:41:c3:a3:f1:60: 3b:13:9f:ae:c6:95:bd:87:34:c3:58:ac:61:95:97: 71:fe:25:99:84:80:e8:a9:48:d3:5f:e0:b8:0a:32: d9:4b:35:e9:fc:8e:77:cf:21:d3:25:5d:a5:2b:c0: 19:57:fe:93:64:d4:dd:cf:d2:ba:e5:63:e2:74:04: cf:ac:cf:c4:8a:6b:af:72:e1:83:7f:35:8b:55:a1: d4:52:d1:58:67:ec:88:18:11:1b:e5:3d:5f:09:94: 33:97:6c:b8:72:1f:24:12:5c:3b:4b:54:9a:51:1c: 9e:53:3f:d1:be:c0:08:ad:fe:7a:df:cd:45:d3:a1: 8d:ca:ea:41:dc:45:3b:5c:e0:9e:0e:b9:68:e5:ad: 44:8f:f9:3d:61:a8:94:62:be:7f:ea:74:e8:90:49: e7:ab:05:ff:76:1a:9e:50:1f:04:b5:c8:15:6e:88: b3:6e:9f:80:39:ac:3d:7a:00:d9:9c:15:bf:42:af: 2f:67:fb:5a:c0:80:22:db:6f:20:18:8c:3f:97:62: a0:9c:1b:0c:24:dc:5f:46:46:a6:cc:ea:eb:77:de: 0a:23:24:00:1f:0b:31:e1:c7:73:71:41:95:92:7c: 57:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.190.146.0/24 Signature Algorithm: sha256WithRSAEncryption 88:54:8d:da:c3:a5:94:dc:9d:85:e3:75:25:0b:53:b8:fc:56: bb:20:08:ea:2c:88:1f:34:4a:ee:97:13:e2:31:b4:a5:ce:f9: 95:9c:3c:19:73:5f:03:46:b2:e6:d0:ca:c0:0a:8b:39:08:c8: 69:b7:1f:5f:81:29:0d:04:a2:43:c7:71:01:b6:14:f6:f0:4c: c9:13:03:66:96:60:9b:0b:f2:90:49:3a:cd:eb:f4:ce:78:94: f5:b7:7e:1d:cf:45:a2:52:ad:fe:ee:0f:13:9a:ec:df:34:18: 70:db:c6:aa:37:71:64:38:d9:ae:7c:28:fb:13:84:a4:d8:42: 99:99:3e:1c:3a:86:62:ca:07:c1:e9:ef:25:ed:53:14:09:8c: b8:af:17:ac:c0:bb:9b:d8:ab:69:a0:fe:cb:fa:61:07:ef:d8: 36:f5:05:d4:2d:5c:37:6e:f3:c2:ec:c2:c1:e6:bf:95:e5:a7: 57:09:2f:45:07:5d:83:b9:68:01:9b:60:75:c9:2b:54:12:77: 9b:e1:bb:70:5c:cf:c7:76:e4:48:5f:ae:cd:1f:3b:38:20:d7: 42:5b:87:fe:4a:67:19:fc:93:fb:e1:12:a8:75:23:55:b9:1d: 01:c3:32:b9:aa:b6:ea:77:0e:6e:ca:19:dd:d6:bd:77:61:2f: 26:5e:d5:f5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3WRx0qdxTNfl5TN60oXb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTk4MWRlOGI3NzIwMzk0NTk0NDQ4YjdhMGU2MjVjMzNhMzhkYzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+ovozru4xbBujpAO1sDklaVqDGG DI6zQcOj8WA7E5+uxpW9hzTDWKxhlZdx/iWZhIDoqUjTX+C4CjLZSzXp/I53zyHT JV2lK8AZV/6TZNTdz9K65WPidATPrM/EimuvcuGDfzWLVaHUUtFYZ+yIGBEb5T1f CZQzl2y4ch8kElw7S1SaURyeUz/RvsAIrf56381F06GNyupB3EU7XOCeDrlo5a1E j/k9YaiUYr5/6nTokEnnqwX/dhqeUB8EtcgVboizbp+AOaw9egDZnBW/Qq8vZ/ta wIAi228gGIw/l2KgnBsMJNxfRkamzOrrd94KIyQAHwsx4cdzcUGVknxXUwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFBmYHei3cgOUWURIt6DmJcM6ONxmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3L2M2NWU0 OC0zMWM0LTQ5NzQtODlmNC1hYzJhZTQ4Mzk1NWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvYzY1ZTQ4 LTMxYzQtNDk3NC04OWY0LWFjMmFlNDgzOTU1ZS8xL0daZ2Q2TGR5QTVSWlJFaTNv T1lsd3pvNDNHWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw76SMA0GCSqGSIb3DQEBCwUAA4IBAQCIVI3a w6WU3J2F43UlC1O4/Fa7IAjqLIgfNErulxPiMbSlzvmVnDwZc18DRrLm0MrACos5 CMhptx9fgSkNBKJDx3EBthT28EzJEwNmlmCbC/KQSTrN6/TOeJT1t34dz0WiUq3+ 7g8TmuzfNBhw28aqN3FkONmufCj7E4Sk2EKZmT4cOoZiygfB6e8l7VMUCYy4rxes wLub2KtpoP7L+mEH79g29QXULVw3bvPC7MLB5r+V5adXCS9FB12DuWgBm2B1yStU Eneb4btwXM/HduRIX67NHzs4INdCW4f+SmcZ/JP74RKodSNVuR0BwzK5qrbqdw5u yhnd1r13YS8mXtX1 -----END CERTIFICATE-----Generated at Thu Jan 8 23:15:14 2026 by rpki-client