This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer File: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer (raw, json) Hash identifier: +ZBWpzkJYJfPq3mk8aow8g3rNX5BLxrHuJjAbG3IIdA= Subject key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834F6C0B5142CE9596BB060495A7B2C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48356 IP: 45.142.188.0/22 IP: 185.141.36.0/22 IP: 2a0b:9580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f6:c0:b5:14:2c:e9:59:6b:b0:60:49:5a:7b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9d:96:de:e5:01:71:06:be:cf:53:69:5b:9b: 22:4d:9d:f5:57:69:47:4e:03:89:c5:c0:b5:c8:88: e6:41:17:c0:34:94:b7:4d:51:65:30:80:32:be:30: b3:20:27:03:7f:6b:c2:f2:60:d6:1f:e4:f0:11:01: f8:22:76:a7:6a:03:17:83:46:74:65:3d:e5:80:fb: 56:60:47:17:97:91:b5:0e:d2:42:9e:2a:fd:f3:ec: e7:c4:e1:c9:66:6e:6f:95:19:62:29:52:d7:d8:74: fd:c9:1b:16:f9:0b:55:da:23:16:8a:41:2e:7d:05: 76:c2:51:1a:66:27:4f:ac:66:20:a3:84:14:28:6e: ef:fb:d2:57:02:64:3e:5d:3a:18:59:68:57:df:f4: 29:6f:81:b3:70:cd:f4:f7:ba:fd:a1:b4:50:7d:f5: 47:a4:bf:65:ec:bb:3e:eb:72:92:f2:5e:d8:70:b1: 3c:4f:88:3a:17:67:1f:08:1f:f3:fb:ca:fb:39:b5: 90:67:28:58:81:5a:5a:e3:50:ec:ae:44:87:d6:b2: ee:a8:ae:23:37:b1:83:2a:f9:0e:52:85:ff:07:e4: a0:65:02:58:07:73:b9:61:d9:1a:36:e2:5a:7f:71: d8:79:70:13:27:73:91:5b:a3:18:3b:92:3e:5d:45: 72:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.188.0/22 185.141.36.0/22 IPv6: 2a0b:9580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48356 Signature Algorithm: sha256WithRSAEncryption 30:a8:0e:d2:bc:7b:22:a3:7f:f2:62:b6:27:ce:26:2c:b4:b7: 08:71:03:ee:41:ba:9e:0e:61:11:ec:7e:ff:cf:1b:28:58:f1: 90:33:1b:c8:d8:3c:2c:92:6c:40:c6:7c:d8:76:18:b4:5b:62: e7:50:ad:1f:69:59:56:b8:d8:c5:ad:30:d9:4e:eb:71:9c:99: d9:9b:ee:2e:a3:04:8a:73:9a:21:2e:8e:26:2e:17:71:79:ad: 84:f5:98:b1:a5:f0:a6:51:ce:69:7b:cc:63:5c:d8:dd:cc:62: 78:b6:60:f8:6c:6c:ab:19:d6:ee:72:41:27:21:2e:7e:39:d1: eb:82:65:e5:b9:dd:02:9d:31:0b:69:76:54:4f:7e:22:13:70: 3d:00:31:46:cd:2a:de:c1:67:bc:28:72:d8:ac:11:cd:2a:77: b6:69:1c:99:2b:bc:1d:1c:19:67:bb:16:34:f7:fb:6b:15:e5: 93:ec:68:0b:6f:ed:ac:96:6f:3b:27:cf:42:c6:a8:ec:bb:b4: 16:e5:b0:7e:59:42:ed:4d:a8:71:c9:08:18:28:3a:2d:48:93: 32:ff:5e:a1:cd:f7:f6:b5:5c:94:b3:1d:ed:b7:14:7f:e3:8d: b2:db:ce:6d:ec:b9:78:f8:9a:b7:ef:f9:e1:81:05:6b:31:0b: 16:d4:c9:b0 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4NPbAtRQs6VlrsGBJWnssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGFkOGM1MjBiYjk2Nzc0NjFkZGM0ZWMwOWI3NmQ3MzNiN2Q4MzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp2W3uUBcQa+z1NpW5siTZ31V2lH TgOJxcC1yIjmQRfANJS3TVFlMIAyvjCzICcDf2vC8mDWH+TwEQH4InanagMXg0Z0 ZT3lgPtWYEcXl5G1DtJCnir98+znxOHJZm5vlRliKVLX2HT9yRsW+QtV2iMWikEu fQV2wlEaZidPrGYgo4QUKG7v+9JXAmQ+XToYWWhX3/Qpb4GzcM3097r9obRQffVH pL9l7Ls+63KS8l7YcLE8T4g6F2cfCB/z+8r7ObWQZyhYgVpa41DsrkSH1rLuqK4j N7GDKvkOUoX/B+SgZQJYB3O5YdkaNuJaf3HYeXATJ3ORW6MYO5I+XUVyDwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFICtjFILuWd0Yd3E7Am3bXM7fYNwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzIyNWVj My0wMzg3LTRiNWQtODhjMS1jNjE3NTFjNmIxOTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvMjI1ZWMz LTAzODctNGI1ZC04OGMxLWM2MTc1MWM2YjE5NS8xL2dLMk1VZ3U1WjNSaDNjVHND YmR0Y3p0OWczQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLY68AwQCuY0kMA0EAgACMAcDBQMqC5WAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC85DANBgkqhkiG9w0BAQsFAAOCAQEAMKgO 0rx7IqN/8mK2J84mLLS3CHED7kG6ng5hEex+/88bKFjxkDMbyNg8LJJsQMZ82HYY tFti51CtH2lZVrjYxa0w2U7rcZyZ2ZvuLqMEinOaIS6OJi4XcXmthPWYsaXwplHO aXvMY1zY3cxieLZg+GxsqxnW7nJBJyEufjnR64Jl5bndAp0xC2l2VE9+IhNwPQAx Rs0q3sFnvChy2KwRzSp3tmkcmSu8HRwZZ7sWNPf7axXlk+xoC2/trJZvOyfPQsao 7Lu0FuWwfllC7U2occkIGCg6LUiTMv9eoc339rVclLMd7bcUf+ONstvObey5ePia t+/54YEFazELFtTJsA== -----END CERTIFICATE-----Generated at Fri Jan 2 23:24:50 2026 by rpki-client