This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer File: gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer (raw, json) Hash identifier: DaJ8pOYs6HWFsO6N29YbMvhHjb+5136sdZRpcj3N9XM= Subject key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CCCBE38081E95671E11D4022C3316 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48837 IP: 91.212.66.0/24 IP: 91.236.58.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cc:be:38:08:1e:95:67:1e:11:d4:02:2c:33:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cd:ae:7a:32:2d:4b:b3:16:76:bb:a4:c8:8f: c6:1f:bb:0f:46:40:ec:05:60:78:b8:d3:14:d8:9f: 06:7b:49:61:81:3f:94:5a:9d:1a:0b:6c:64:76:af: cb:d9:57:56:51:3e:80:2b:21:ae:b3:7c:07:4d:87: 14:4f:f5:3c:a8:a7:23:b3:75:19:96:88:04:4b:4b: 74:63:7f:f0:68:ed:2c:88:b4:4c:be:83:b1:8c:fb: 6c:1b:e2:66:40:c5:d9:ec:3a:8a:31:4d:93:af:54: 4f:a0:a2:02:5f:6a:6f:5a:a2:59:52:1c:60:ff:c6: ff:77:70:04:eb:6c:c2:b3:1b:0d:ac:6e:24:c8:1d: c9:07:a5:1e:d8:8b:f4:af:9c:8a:96:07:11:09:6b: aa:09:d1:3f:ee:25:60:36:fd:c4:20:47:d3:52:a6: 10:32:23:e9:3a:77:2d:e4:78:3a:44:2d:6b:81:18: 4c:1b:ed:d7:ea:99:b9:4f:4f:3d:47:6a:0a:08:07: 35:5d:90:ba:8e:21:80:cf:98:9b:a4:82:9a:74:80: f2:3b:eb:f1:28:62:5c:00:94:35:12:9a:19:f4:31: 21:b6:f2:17:21:b5:49:29:5b:3b:ab:27:40:8e:08: 6f:57:32:19:91:fa:a0:50:21:fd:11:b7:9c:67:68: ed:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.66.0/24 91.236.58.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48837 Signature Algorithm: sha256WithRSAEncryption 28:d9:76:6f:94:4d:ad:ce:78:a8:e4:c7:10:8e:74:bc:8b:c8: cf:84:72:03:b4:fe:b3:ab:7c:70:31:05:9e:71:b3:80:1a:87: 3d:76:8c:11:ef:94:7a:6a:5e:8f:b0:22:14:d3:a6:07:6b:37: 84:1e:de:8d:49:c3:20:f8:12:46:39:9c:fa:0f:e8:21:c5:45: 79:4a:df:60:be:34:d2:bb:cf:46:b5:bd:dd:27:1b:21:88:8a: 5d:cd:01:82:be:5c:d4:e6:47:42:7a:b0:75:2d:82:69:17:9b: a9:e3:50:42:fa:48:1a:11:79:a4:0b:d1:b1:74:ff:bb:28:92: f9:27:a6:f4:6d:32:98:c2:cf:1d:7a:b6:b1:57:5b:ba:a5:92: 59:22:b6:4d:62:db:af:4f:b4:66:03:d9:ee:02:3e:27:48:ae: 74:fa:0a:53:0c:4f:0c:e0:c9:6e:d7:4c:e4:e4:b2:90:70:d9: d7:f4:d6:47:15:f6:c2:7b:92:8a:89:c7:61:00:6c:e9:d3:1f: fd:54:71:13:fb:f9:e4:ed:b0:d1:93:f9:7c:e7:eb:e3:f5:06: 4a:68:8b:03:13:48:b5:21:bb:8e:52:d6:2f:02:02:25:12:50: 09:e3:d9:12:39:c1:ca:0d:8d:7b:45:d8:44:41:04:a7:0d:ba: a8:aa:d4:bc -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt9XMy+OAgelWceEdQCLDMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDdiZDYyZmQ4ZDM1MzA4ZGJjOGIxZmQ1ZjE3MjdhZjU3YWJkMjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA182uejItS7MWdrukyI/GH7sPRkDs BWB4uNMU2J8Ge0lhgT+UWp0aC2xkdq/L2VdWUT6AKyGus3wHTYcUT/U8qKcjs3UZ logES0t0Y3/waO0siLRMvoOxjPtsG+JmQMXZ7DqKMU2Tr1RPoKICX2pvWqJZUhxg /8b/d3AE62zCsxsNrG4kyB3JB6Ue2Iv0r5yKlgcRCWuqCdE/7iVgNv3EIEfTUqYQ MiPpOnct5Hg6RC1rgRhMG+3X6pm5T089R2oKCAc1XZC6jiGAz5ibpIKadIDyO+vx KGJcAJQ1EpoZ9DEhtvIXIbVJKVs7qydAjghvVzIZkfqgUCH9EbecZ2jtrwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFIB71i/Y01MI28ix/V8XJ69Xq9IgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E1L2EwYWI1 MS05ZGFlLTQxMGQtOGZkOS0wOGZhZGViMmRiZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUvYTBhYjUx LTlkYWUtNDEwZC04ZmQ5LTA4ZmFkZWIyZGJlNy8xL2dIdldMOWpUVXdqYnlMSDlY eGNucjFlcjBpQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW9RCAwQAW+w6MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwC+xTANBgkqhkiG9w0BAQsFAAOCAQEAKNl2b5RNrc54qOTHEI50vIvI z4RyA7T+s6t8cDEFnnGzgBqHPXaMEe+Uempej7AiFNOmB2s3hB7ejUnDIPgSRjmc +g/oIcVFeUrfYL400rvPRrW93ScbIYiKXc0Bgr5c1OZHQnqwdS2CaRebqeNQQvpI GhF5pAvRsXT/uyiS+Sem9G0ymMLPHXq2sVdbuqWSWSK2TWLbr0+0ZgPZ7gI+J0iu dPoKUwxPDODJbtdM5OSykHDZ1/TWRxX2wnuSionHYQBs6dMf/VRxE/v55O2w0ZP5 fOfr4/UGSmiLAxNItSG7jlLWLwICJRJQCePZEjnByg2Ne0XYREEEpw26qKrUvA== -----END CERTIFICATE-----Generated at Mon Jan 12 14:58:04 2026 by rpki-client