This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer File: gxJNBBGiD9K7VGlw6oARbvJ226s.cer (raw, json) Hash identifier: /fRAKEnS43bMVnte22TzrL7dYzkm6dPRy0RTgBOVITE= Subject key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C665296EFB8FC4A25552273FE80DB0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8839 IP: 212.95.64.0/19 IP: 213.225.160.0/19 IP: 2001:810::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:65:29:6e:fb:8f:c4:a2:55:52:27:3f:e8:0d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83124d0411a20fd2bb546970ea80116ef276dbab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:ec:19:d4:50:d5:a8:17:88:9b:8d:1d:92: ba:e2:25:65:62:99:55:d0:0d:3c:13:78:aa:e8:c0: 55:ab:19:98:c3:26:14:c2:33:86:9b:7c:53:80:4b: 81:80:f5:4a:dd:cb:a4:b1:ae:1a:ec:2d:84:20:90: 00:dd:97:fe:7e:39:de:9c:5b:26:71:7f:e1:6a:ca: 99:c6:99:e8:9b:e7:a1:ef:97:f8:05:72:a8:c7:8e: c6:5a:75:38:45:e9:35:96:0e:03:d0:c1:23:37:72: 7b:7f:36:aa:64:2e:3e:25:00:b3:d4:d2:92:ff:2c: 34:5e:71:90:d5:d2:ae:3d:79:72:e5:50:8d:5d:6e: 6d:8e:f0:c2:16:21:c8:c8:c3:1e:77:b1:5e:6e:ff: d8:96:5b:36:3f:a0:97:72:5d:87:a3:12:57:44:00: a8:c7:75:37:4e:28:e9:e0:5b:0c:99:02:11:0e:31: d8:af:0f:28:64:88:0e:21:27:05:68:30:ab:84:c6: 1f:ab:3c:df:15:84:52:3c:7e:09:6d:b2:2f:d5:ad: 06:bd:2f:b7:5e:86:d5:9f:b7:8b:79:dd:78:77:b2: 0e:69:35:fd:38:16:1e:8c:9a:61:a9:59:34:6d:fb: 03:eb:30:64:13:2a:30:8e:08:c4:96:54:cf:58:a7: 6f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.95.64.0/19 213.225.160.0/19 IPv6: 2001:810::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8839 Signature Algorithm: sha256WithRSAEncryption 45:db:12:18:41:89:72:63:5b:8d:6f:9f:00:5b:dc:e2:81:2e: 73:5c:be:43:1d:63:45:ed:20:17:7d:a8:e8:42:1e:05:e3:3f: 67:f5:a1:20:24:d8:ca:55:d5:3d:ee:4d:75:6b:ee:9f:c8:88: af:a1:9f:f2:4b:62:07:5f:a1:99:86:67:5a:81:38:b3:1d:75: cb:09:7a:a2:07:83:40:56:35:f5:a1:f8:ef:17:32:7c:37:2e: 09:d3:ae:3f:af:0c:ec:28:ae:ff:21:a8:95:d6:c2:73:9a:cc: 4f:2c:7f:37:36:10:71:4e:5b:be:87:9e:b1:ac:0b:ac:d1:25: 41:7c:36:e3:8a:d2:0f:ef:fc:95:48:d5:c9:f8:40:e4:ca:14: d1:d2:2e:fe:51:13:a8:df:22:f9:67:b3:57:ab:fb:5e:db:56: 69:44:53:d4:30:9b:ee:a3:79:b1:2c:58:22:5d:b3:e5:f9:d7: 24:13:fe:c7:bd:ff:66:79:12:f1:4a:f1:ab:e6:23:53:6d:13: e9:74:5c:c4:11:0c:08:54:de:eb:58:86:65:26:d5:70:bc:f4: c8:a1:2e:73:58:4c:58:6a:d3:76:7d:53:60:41:2c:64:3a:8a: 0d:33:4b:5a:7c:b1:61:de:ba:5c:d6:8b:88:c1:54:b6:25:0d: b1:2b:cc:6b -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt3xmUpbvuPxKJVUic/6A2wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzEyNGQwNDExYTIwZmQyYmI1NDY5NzBlYTgwMTE2ZWYyNzZkYmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBjsGdRQ1agXiJuNHZK64iVlYplV 0A08E3iq6MBVqxmYwyYUwjOGm3xTgEuBgPVK3cuksa4a7C2EIJAA3Zf+fjnenFsm cX/hasqZxpnom+eh75f4BXKox47GWnU4Rek1lg4D0MEjN3J7fzaqZC4+JQCz1NKS /yw0XnGQ1dKuPXly5VCNXW5tjvDCFiHIyMMed7Febv/Ylls2P6CXcl2HoxJXRACo x3U3Tijp4FsMmQIRDjHYrw8oZIgOIScFaDCrhMYfqzzfFYRSPH4JbbIv1a0GvS+3 XobVn7eLed14d7IOaTX9OBYejJphqVk0bfsD6zBkEyowjgjEllTPWKdvawIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFIMSTQQRog/Su1RpcOqAEW7ydturMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzJjN2Iy ZS0yNDJhLTQzMzYtYjBmYi1mY2YwZjE1OTRkMmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvMmM3YjJl LTI0MmEtNDMzNi1iMGZiLWZjZjBmMTU5NGQyZi8xL2d4Sk5CQkdpRDlLN1ZHbHc2 b0FSYnZKMjI2cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQF1F9AAwQF1eGgMA0EAgACMAcDBQAgAQgQMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAiKHMA0GCSqGSIb3DQEBCwUAA4IBAQBF2xIY QYlyY1uNb58AW9zigS5zXL5DHWNF7SAXfajoQh4F4z9n9aEgJNjKVdU97k11a+6f yIivoZ/yS2IHX6GZhmdagTizHXXLCXqiB4NAVjX1ofjvFzJ8Ny4J064/rwzsKK7/ IaiV1sJzmsxPLH83NhBxTlu+h56xrAus0SVBfDbjitIP7/yVSNXJ+EDkyhTR0i7+ UROo3yL5Z7NXq/te21ZpRFPUMJvuo3mxLFgiXbPl+dckE/7Hvf9meRLxSvGr5iNT bRPpdFzEEQwIVN7rWIZlJtVwvPTIoS5zWExYatN2fVNgQSxkOooNM0tafLFh3rpc 1ouIwVS2JQ2xK8xr -----END CERTIFICATE-----Generated at Thu Jan 1 14:24:09 2026 by rpki-client