This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer File: guRyorh_8WgtNi8N3kGOkxGsBGQ.cer (raw, json) Hash identifier: WYfHxj7W97SUxGqRLDw+z9ONtuZ7qIk3vCW+SJVzsGs= Subject key identifier: 82:E4:72:A2:B8:7F:F1:68:2D:36:2F:0D:DE:41:8E:93:11:AC:04:64 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C802AE0A54D459FE39CDD5991428305 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35588 IP: 193.169.146.0/23 IP: 194.213.23.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2a:e0:a5:4d:45:9f:e3:9c:dd:59:91:42:83:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82e472a2b87ff1682d362f0dde418e9311ac0464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:14:00:5b:e7:3b:01:9e:f0:cf:fc:6a:00:ea: 5b:51:9b:78:99:17:a9:19:6f:e5:5d:bc:47:1c:5a: 72:02:0b:eb:ad:af:70:59:3b:19:95:9e:34:e7:b4: f8:97:0d:bf:04:2c:be:4e:e7:3d:06:9c:e2:77:a2: 95:1e:38:22:34:41:5c:e4:cc:ac:f5:43:8c:9b:a7: 97:fc:d2:a0:09:41:bb:0f:b4:e1:74:07:cd:a2:26: 20:c4:7b:34:11:ce:9d:43:53:60:6b:6f:f1:d4:0a: 6d:36:5b:15:80:90:9b:9d:b4:82:80:65:8a:6d:f6: 89:42:b7:1c:ce:a4:a5:74:78:19:0a:93:1e:31:1e: 46:0e:d6:08:68:2e:e8:a2:bf:de:32:eb:10:3c:17: 1f:2e:e3:f7:1e:b6:23:e6:29:27:42:dc:c9:ab:5c: 66:aa:b2:78:41:73:56:ce:14:7d:ba:7a:25:f7:d8: 32:3b:0b:a0:be:6d:6f:86:99:ca:78:1e:2f:95:b7: de:8d:d9:6b:31:04:37:ef:f9:e3:ea:3a:9b:1f:cd: eb:be:a0:0f:8b:59:cb:2e:4c:a4:e4:35:e5:49:8d: bb:68:8d:c4:c5:1b:28:e7:78:e0:3d:5a:5c:69:3b: 12:98:e9:97:f9:54:9a:94:53:d8:d1:7a:09:d4:11: a2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E4:72:A2:B8:7F:F1:68:2D:36:2F:0D:DE:41:8E:93:11:AC:04:64 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.146.0/23 194.213.23.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35588 Signature Algorithm: sha256WithRSAEncryption 8c:f4:59:f4:dc:61:8b:80:70:12:bb:3d:74:48:c9:1d:4e:00: ed:dd:15:52:48:71:f6:95:23:5c:09:7d:6b:af:68:a7:12:98: 11:bf:32:b0:8e:39:52:57:bf:07:1d:04:83:ee:99:2f:ea:e8: e7:66:73:22:cf:56:82:b5:d9:f0:1b:f3:98:7e:5a:f1:4c:db: 4f:23:4d:3d:e8:0b:56:78:17:d4:d7:2f:cd:99:eb:28:d4:04: d2:8b:f7:44:e7:89:2e:4d:12:20:42:cb:32:6d:1f:db:c5:38: 15:fd:67:3b:90:2c:71:e5:f6:68:24:03:08:4b:58:31:80:2e: e2:13:61:ca:93:bc:80:90:72:d0:79:b9:b6:b2:b3:93:28:bd: c3:0f:0a:ae:38:f6:3b:3c:d0:f3:02:ac:1d:98:93:3e:e3:80: 3d:e4:e3:76:d7:26:91:f2:5a:49:56:da:45:15:ee:91:b6:bc: 3f:71:3a:74:ac:bb:5d:d2:70:69:b8:15:7d:45:44:f2:2c:c1: 62:07:d1:f8:99:d9:03:70:5d:64:c1:ca:00:17:3b:97:f3:73: 59:73:57:5b:d6:79:97:fc:77:da:2b:d2:d2:7d:77:2a:7a:93: 70:0b:56:4f:f6:11:13:f4:28:6d:3b:3e:59:fb:93:58:2c:c9: 26:0d:6a:88 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt8gCrgpU1Fn+Oc3VmRQoMFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmU0NzJhMmI4N2ZmMTY4MmQzNjJmMGRkZTQxOGU5MzExYWMwNDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxQAW+c7AZ7wz/xqAOpbUZt4mRep GW/lXbxHHFpyAgvrra9wWTsZlZ4057T4lw2/BCy+Tuc9Bpzid6KVHjgiNEFc5Mys 9UOMm6eX/NKgCUG7D7ThdAfNoiYgxHs0Ec6dQ1Nga2/x1AptNlsVgJCbnbSCgGWK bfaJQrcczqSldHgZCpMeMR5GDtYIaC7oor/eMusQPBcfLuP3HrYj5iknQtzJq1xm qrJ4QXNWzhR9unol99gyOwugvm1vhpnKeB4vlbfejdlrMQQ37/nj6jqbH83rvqAP i1nLLkyk5DXlSY27aI3ExRso53jgPVpcaTsSmOmX+VSalFPY0XoJ1BGi2QIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFILkcqK4f/FoLTYvDd5BjpMRrARkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzkyYjRk Ni1iOTI0LTRiMzEtOTRkNy0yMzYxNmM3OWFlMDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvOTJiNGQ2 LWI5MjQtNGIzMS05NGQ3LTIzNjE2Yzc5YWUwMi8xL2d1UnlvcmhfOFdndE5pOE4z a0dPa3hHc0JHUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwamSAwQAwtUXMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCLBDANBgkqhkiG9w0BAQsFAAOCAQEAjPRZ9Nxhi4BwErs9dEjJHU4A 7d0VUkhx9pUjXAl9a69opxKYEb8ysI45Ule/Bx0Eg+6ZL+ro52ZzIs9WgrXZ8Bvz mH5a8UzbTyNNPegLVngX1NcvzZnrKNQE0ov3ROeJLk0SIELLMm0f28U4Ff1nO5As ceX2aCQDCEtYMYAu4hNhypO8gJBy0Hm5trKzkyi9ww8Krjj2OzzQ8wKsHZiTPuOA PeTjdtcmkfJaSVbaRRXukba8P3E6dKy7XdJwabgVfUVE8izBYgfR+JnZA3BdZMHK ABc7l/NzWXNXW9Z5l/x32ivS0n13KnqTcAtWT/YRE/QobTs+WfuTWCzJJg1qiA== -----END CERTIFICATE-----Generated at Fri Jan 2 08:16:33 2026 by rpki-client