This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer File: pS_GDTbii7jfFFyErKsZz6U7Alo.cer (raw, json) Hash identifier: NJ2NXugMWlphdNtlNt0N4gWJuITSnNhqyCo3dSKF3IA= Subject key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E12CC4FEE23CD0CB1A7BDBA7A43A4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 1921 AS: 207021 IP: 176.97.158.0/24 IP: 192.174.68.0/24 IP: 2001:67c:10b8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:12:cc:4f:ee:23:cd:0c:b1:a7:bd:ba:7a:43:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:fa:a9:41:78:58:07:12:fc:18:ba:7a:3d: e0:f4:88:d2:39:93:d7:89:a6:67:b9:e6:b8:e7:b4: ba:72:e2:ef:75:f0:d6:57:79:98:ea:a6:6e:21:a7: ea:18:21:6a:2d:a3:6a:0e:15:51:4a:04:83:c0:21: 51:79:c0:16:03:25:12:3c:04:c3:ef:8c:d4:44:eb: 59:3b:a5:6b:ac:4f:5a:91:ad:d1:bf:f1:30:10:91: 33:2e:b9:f4:b2:94:1a:5f:b7:46:32:7c:57:ff:39: cd:e0:22:4e:73:3f:ea:86:f9:69:24:1c:e3:3f:f4: 34:72:c1:cc:b4:b5:4e:fe:6b:ed:6e:cf:56:2d:44: 2e:e9:e0:27:6a:e0:a6:2c:a7:ce:d5:21:bc:ed:b6: 0c:cc:65:04:54:39:41:65:78:de:ef:c1:fa:31:23: 80:1f:8c:6b:da:1e:0f:88:6a:e7:e0:e6:70:3c:35: 63:99:f1:59:c7:c0:1a:38:ce:ed:96:48:ab:b4:8f: dd:1f:d6:be:8b:42:4c:74:d7:07:bd:6d:40:ce:43: cb:52:ea:b4:e4:e1:95:1d:a2:c6:1a:21:85:8e:8c: 36:50:14:4a:a8:1e:76:9e:af:8f:fa:e8:4f:3e:c6: 8b:eb:79:5d:ad:36:1a:d8:8f:1a:d2:7d:ce:2b:ea: 90:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.97.158.0/24 192.174.68.0/24 IPv6: 2001:67c:10b8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1921 207021 Signature Algorithm: sha256WithRSAEncryption 90:0b:8b:c8:32:5e:80:52:4d:bd:ed:d5:42:81:2a:4a:2d:f5: ce:be:53:bf:39:dd:1d:72:7c:04:4a:7d:2d:bb:9d:d6:11:15: 5e:97:c8:04:64:3c:be:5c:41:68:c8:89:12:53:26:48:47:db: 09:e1:02:ce:4e:83:14:e2:c3:eb:52:22:6c:be:16:b0:be:96: e0:2e:f5:31:62:54:b6:49:69:82:ad:37:d2:13:85:55:6b:83: c1:47:b2:18:61:5b:1e:9d:65:f0:e8:43:c2:67:49:6f:5d:c9: 7a:ca:5f:3f:ef:bd:ca:fe:1e:d3:17:c7:93:86:25:4c:92:3b: 06:6b:0d:44:f8:ef:b6:2b:c1:77:dc:07:32:c8:22:ce:40:8e: ca:07:d9:70:6e:3f:27:b5:9e:e8:7f:53:92:cd:97:00:ca:12: 3b:13:22:e4:05:6b:cd:e1:1c:03:67:37:85:48:43:ff:f1:89: 28:99:f9:20:7e:72:d3:b2:82:87:2a:3c:66:f6:4d:71:12:0c: 79:89:64:bd:e8:ef:85:d0:49:11:20:4f:33:bf:8a:eb:38:7f: 88:fb:b2:3e:9c:2c:8b:cb:d6:4b:24:f3:6b:46:5c:8d:d4:cf: 9c:dc:21:91:50:a9:a3:26:ce:62:19:3d:36:c8:5d:f0:9c:0d: a0:71:b3:88 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt5fhLMT+4jzQyxp726ekOkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTJmYzYwZDM2ZTI4YmI4ZGYxNDVjODRhY2FiMTljZmE1M2IwMjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrH6qUF4WAcS/Bi6ej3g9IjSOZPX iaZnuea457S6cuLvdfDWV3mY6qZuIafqGCFqLaNqDhVRSgSDwCFRecAWAyUSPATD 74zUROtZO6VrrE9aka3Rv/EwEJEzLrn0spQaX7dGMnxX/znN4CJOcz/qhvlpJBzj P/Q0csHMtLVO/mvtbs9WLUQu6eAnauCmLKfO1SG87bYMzGUEVDlBZXje78H6MSOA H4xr2h4PiGrn4OZwPDVjmfFZx8AaOM7tlkirtI/dH9a+i0JMdNcHvW1AzkPLUuq0 5OGVHaLGGiGFjow2UBRKqB52nq+P+uhPPsaL63ldrTYa2I8a0n3OK+qQYQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFKUvxg024ou43xRchKyrGc+lOwJaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2L2YwYjk2 MC04NmQ4LTQwNjItYTU5Ny05YjRhMmQ1ZjNhNzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvZjBiOTYw LTg2ZDgtNDA2Mi1hNTk3LTliNGEyZDVmM2E3Ni8xL3BTX0dEVGJpaTdqZkZGeUVy S3NaejZVN0Fsby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQAsGGeAwQAwK5EMA8EAgACMAkDBwAgAQZ8ELgw HgYIKwYBBQUHAQgBAf8EDzANoAswCQICB4ECAwMorTANBgkqhkiG9w0BAQsFAAOC AQEAkAuLyDJegFJNve3VQoEqSi31zr5TvzndHXJ8BEp9Lbud1hEVXpfIBGQ8vlxB aMiJElMmSEfbCeECzk6DFOLD61IibL4WsL6W4C71MWJUtklpgq030hOFVWuDwUey GGFbHp1l8OhDwmdJb13JespfP++9yv4e0xfHk4YlTJI7BmsNRPjvtivBd9wHMsgi zkCOygfZcG4/J7We6H9Tks2XAMoSOxMi5AVrzeEcA2c3hUhD//GJKJn5IH5y07KC hyo8ZvZNcRIMeYlkvejvhdBJESBPM7+K6zh/iPuyPpwsi8vWSyTza0ZcjdTPnNwh kVCpoybOYhk9Nshd8JwNoHGziA== -----END CERTIFICATE-----Generated at Thu Jan 8 23:59:44 2026 by rpki-client