This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer File: glHn-2uWDUBrIjbSXk4g4kU1nbI.cer (raw, json) Hash identifier: i0bwJeuVKHKB2ohzEqMyJaXRy9X0KFnKhQuKcQDw81E= Subject key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC71BA51E5A9A711C0BF1EBAA8AC80 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208804 IP: 45.13.152.0/22 IP: 2a0e:f100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 15:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:71:ba:51:e5:a9:a7:11:c0:bf:1e:ba:a8:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8251e7fb6b960d406b2236d25e4e20e245359db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:ee:9c:2a:ad:de:52:86:7d:6c:91:27:36: 03:bc:0f:80:1e:bc:39:6b:a4:f3:d3:4b:1b:f0:dd: 5a:b7:3c:b5:52:6b:d4:b6:fc:30:d3:09:79:a9:3e: 97:3f:e8:cf:df:d0:bb:21:47:db:88:60:cf:02:f7: 30:25:50:2d:b1:29:cb:3a:44:6a:da:bc:68:9c:6c: 77:60:cc:3d:f1:bf:95:54:d3:ed:e5:f6:41:31:18: 30:5a:37:38:92:bc:f8:16:f2:7d:9f:b7:86:7a:ad: 4f:25:e7:35:bc:94:77:2c:c8:84:09:31:34:13:15: b1:f3:f1:f8:c8:f4:5e:0d:ad:7c:ac:4b:2b:cb:01: 3b:51:37:e6:5a:6e:16:54:61:56:f6:c7:94:4c:68: d1:6f:48:d3:4b:c3:d0:fb:5b:d6:ab:46:ba:d1:59: 7a:b2:03:41:bd:da:35:10:c1:25:73:51:c6:ca:fe: 26:d5:14:bf:cf:97:35:32:c1:f2:31:0c:af:36:4f: 50:cd:60:33:44:d5:71:e2:4f:98:6e:89:ad:1c:72: 77:cf:2a:dc:a1:72:46:d3:a7:6c:05:0c:4e:1d:ac: f6:87:b1:c1:82:f0:1d:3d:07:02:c9:c5:22:ed:fb: 84:d3:98:48:d7:1a:f7:12:1e:45:d0:bc:17:b1:e7: 32:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.152.0/22 IPv6: 2a0e:f100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208804 Signature Algorithm: sha256WithRSAEncryption 29:7e:ee:d1:d7:ea:a6:4f:77:bd:7b:ec:f3:dc:51:94:c6:0d: 29:83:48:af:67:de:24:21:9f:1a:b5:a9:ff:b5:fb:d7:b9:60: 1e:4f:0b:d8:bb:e3:5f:1a:d9:04:fc:ca:77:a0:bb:82:07:ba: c2:85:23:1e:a5:8b:03:0a:e7:fa:2c:5f:70:a0:de:7b:68:46: 0a:46:f7:c0:13:24:f3:53:4d:06:1c:9a:9b:62:23:c0:46:c1: d9:f6:e1:f2:53:aa:c7:76:d2:88:0a:bd:0d:24:a6:22:27:63: b4:03:16:6a:f3:98:e7:ec:96:af:92:7f:70:d2:59:4d:53:a4: bb:f4:32:f4:a3:70:61:ae:46:48:d3:c2:21:00:f8:17:78:3d: 90:2e:cf:1f:82:1d:d9:1f:65:57:68:59:36:f2:50:5a:48:2b: c5:00:22:62:b6:28:4a:00:1c:be:a9:60:bb:d0:6a:bc:96:36: 21:58:1b:d5:30:02:db:ad:f4:a5:d7:e8:b2:ee:86:76:94:8e: 59:91:de:b5:ed:24:96:d9:59:6f:16:89:71:85:74:8a:6d:62: bf:3e:0f:31:8d:db:75:fe:13:a4:68:95:27:0c:b0:b7:c6:02: ee:7a:3d:7e:c9:d7:8f:da:c9:45:8e:2a:d7:2c:39:57:fc:68: f3:bd:71:e4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57HG6UeWppxHAvx66qKyAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjUxZTdmYjZiOTYwZDQwNmIyMjM2ZDI1ZTRlMjBlMjQ1MzU5ZGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC3unCqt3lKGfWyRJzYDvA+AHrw5 a6Tz00sb8N1atzy1UmvUtvww0wl5qT6XP+jP39C7IUfbiGDPAvcwJVAtsSnLOkRq 2rxonGx3YMw98b+VVNPt5fZBMRgwWjc4krz4FvJ9n7eGeq1PJec1vJR3LMiECTE0 ExWx8/H4yPReDa18rEsrywE7UTfmWm4WVGFW9seUTGjRb0jTS8PQ+1vWq0a60Vl6 sgNBvdo1EMElc1HGyv4m1RS/z5c1MsHyMQyvNk9QzWAzRNVx4k+YbomtHHJ3zyrc oXJG06dsBQxOHaz2h7HBgvAdPQcCycUi7fuE05hI1xr3Eh5F0LwXsecyvQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIJR5/trlg1AayI20l5OIOJFNZ2yMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0L2ZmMGU2 MS0xYzkyLTQxOGMtOTI2Ny1kM2E0ODcyOTU0OTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvZmYwZTYx LTFjOTItNDE4Yy05MjY3LWQzYTQ4NzI5NTQ5MS8xL2dsSG4tMnVXRFVCcklqYlNY azRnNGtVMW5iSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLQ2YMA0EAgACMAcDBQMqDvEAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMvpDANBgkqhkiG9w0BAQsFAAOCAQEAKX7u0dfqpk93 vXvs89xRlMYNKYNIr2feJCGfGrWp/7X717lgHk8L2LvjXxrZBPzKd6C7gge6woUj HqWLAwrn+ixfcKDee2hGCkb3wBMk81NNBhyam2IjwEbB2fbh8lOqx3bSiAq9DSSm IidjtAMWavOY5+yWr5J/cNJZTVOku/Qy9KNwYa5GSNPCIQD4F3g9kC7PH4Id2R9l V2hZNvJQWkgrxQAiYrYoSgAcvqlgu9BqvJY2IVgb1TAC2630pdfosu6GdpSOWZHe te0kltlZbxaJcYV0im1ivz4PMY3bdf4TpGiVJwywt8YC7no9fsnXj9rJRY4q1yw5 V/xo871x5A== -----END CERTIFICATE-----Generated at Mon Jan 12 17:18:48 2026 by rpki-client