This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer File: gMcurrwgRhwxz5QuThVfB7igPHw.cer (raw, json) Hash identifier: ooKZklBKEOkloLz1TXFicJv2/Nq7ZPG/AxUOQL2CsUg= Subject key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F2A2EC55656435A5197C3072C9C0B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39082 AS: 45035 IP: 195.60.178.0/23 IP: 195.158.234.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2a:2e:c5:56:56:43:5a:51:97:c3:07:2c:9c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c4:21:94:16:d1:65:d0:1a:e1:41:9c:c6:6b: e5:cd:fb:06:56:97:9f:2f:8a:82:06:f1:07:d1:9a: 66:59:27:6c:7c:b5:0b:cb:57:d3:4e:5c:e8:85:e1: a8:d9:43:d3:20:85:d7:0d:92:5a:8b:30:32:14:31: 66:85:30:1a:39:93:7c:32:86:74:09:c9:98:3d:f0: c4:00:dd:dc:84:58:fd:68:b7:da:4f:80:7e:31:17: fc:24:75:ba:9a:b8:82:0a:27:59:17:d0:d7:1e:fa: e3:68:bc:25:48:85:af:5f:c2:db:5d:41:62:49:e5: 49:a9:d1:91:17:9c:a1:c1:8f:8b:11:87:9e:58:16: ed:3a:2f:4a:12:47:4e:27:75:2b:16:3a:8f:f5:bd: 42:99:61:fd:89:3d:71:8f:ca:6d:fa:ea:3a:9c:9d: 21:3b:22:a2:47:4f:b6:9d:d0:c1:05:2e:7c:23:b1: c7:4f:6d:e9:b2:7c:aa:30:d6:db:46:cc:ea:3d:3b: c0:d4:1e:25:6e:b1:67:d0:df:b7:69:b4:c4:10:61: 43:41:fa:c2:76:fb:1f:99:4b:6b:3a:da:e2:e6:a7: 56:49:bb:3d:96:c6:44:13:3f:b4:4f:b6:9a:3d:ac: 07:f2:10:f8:5a:e1:63:9f:4d:18:cd:92:34:21:cb: 5a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.60.178.0/23 195.158.234.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39082 45035 Signature Algorithm: sha256WithRSAEncryption 92:3b:8c:52:d7:36:4b:a7:57:29:94:5f:2e:82:10:c7:fe:b5: c0:3c:4f:84:fd:d1:8e:2e:e5:2c:7f:05:de:49:6b:73:d4:13: a6:ad:2b:6d:8f:fa:6a:03:72:bb:80:fa:8e:c4:5c:23:c6:61: 95:ee:41:25:ab:2b:25:de:04:f9:4a:b3:10:e4:a1:1e:bc:b9: 56:86:95:d7:6f:bf:94:5f:ae:c2:07:80:f8:ea:f2:39:26:a5: 4d:41:16:bd:28:ed:0e:9f:0b:fe:a2:41:4e:0a:0c:77:97:cd: 34:0f:b7:ce:39:bf:89:03:80:21:1f:1a:30:d5:83:fd:35:d9: 3f:9e:fd:3e:b0:68:05:ce:f3:b0:2a:48:59:46:f1:86:fe:ac: 0e:be:cf:af:01:42:c8:13:d5:91:80:59:94:6e:3a:4f:df:3d: 44:6d:85:5f:4d:c2:38:28:28:48:d9:51:9d:dd:d2:f4:75:84: 35:4f:89:c4:5c:ad:eb:f4:e3:fb:8b:e6:64:12:c1:15:be:b7: c5:c2:87:99:9c:ea:96:65:ba:53:40:2d:ab:03:dc:dd:17:fc: 4a:fb:4b:a5:19:24:79:de:9a:d4:1f:dc:5a:b6:bd:81:7a:fc: 31:49:5b:76:f8:32:84:ea:d4:26:33:d1:96:32:2d:7f:8e:e8: 5a:bb:aa:58 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt5fyouxVZWQ1pRl8MHLJwLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGM3MmVhZWJjMjA0NjFjMzFjZjk0MmU0ZTE1NWYwN2I4YTAzYzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8QhlBbRZdAa4UGcxmvlzfsGVpef L4qCBvEH0ZpmWSdsfLULy1fTTlzoheGo2UPTIIXXDZJaizAyFDFmhTAaOZN8MoZ0 CcmYPfDEAN3chFj9aLfaT4B+MRf8JHW6mriCCidZF9DXHvrjaLwlSIWvX8LbXUFi SeVJqdGRF5yhwY+LEYeeWBbtOi9KEkdOJ3UrFjqP9b1CmWH9iT1xj8pt+uo6nJ0h OyKiR0+2ndDBBS58I7HHT23psnyqMNbbRszqPTvA1B4lbrFn0N+3abTEEGFDQfrC dvsfmUtrOtri5qdWSbs9lsZEEz+0T7aaPawH8hD4WuFjn00YzZI0IctavQIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFIDHLq68IEYcMc+ULk4VXwe4oDx8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliL2Y0YjFh MS1mZTg4LTQ0NTAtYmQzMi1kMGM4M2JlNDAxODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvZjRiMWEx LWZlODgtNDQ1MC1iZDMyLWQwYzgzYmU0MDE4NS8xL2dNY3VycndnUmh3eHo1UXVU aFZmQjdpZ1BIdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwzyyAwQBw57qMB8GCCsGAQUFBwEIAQH/BBAw DqAMMAoCAwCYqgIDAK/rMA0GCSqGSIb3DQEBCwUAA4IBAQCSO4xS1zZLp1cplF8u ghDH/rXAPE+E/dGOLuUsfwXeSWtz1BOmrSttj/pqA3K7gPqOxFwjxmGV7kElqysl 3gT5SrMQ5KEevLlWhpXXb7+UX67CB4D46vI5JqVNQRa9KO0Onwv+okFOCgx3l800 D7fOOb+JA4AhHxow1YP9Ndk/nv0+sGgFzvOwKkhZRvGG/qwOvs+vAULIE9WRgFmU bjpP3z1EbYVfTcI4KChI2VGd3dL0dYQ1T4nEXK3r9OP7i+ZkEsEVvrfFwoeZnOqW ZbpTQC2rA9zdF/xK+0ulGSR53prUH9xatr2BevwxSVt2+DKE6tQmM9GWMi1/juha u6pY -----END CERTIFICATE-----Generated at Mon Jan 12 10:49:28 2026 by rpki-client