This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.cer (raw, json) Hash identifier: eXarA7xzOjZ6UlnE/qak5vAmIGGyAxlDjpLg+xUdsbA= Subject key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15741ABF953FFB9EA1CBF18BC2265B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.158.164.0/22 IP: 2a07:ae80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:74:1a:bf:95:3f:fb:9e:a1:cb:f1:8b:c2:26:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d103af197645a4941c6cdb08669af008b79102be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:80:f5:03:cf:81:09:a3:0a:3d:92:99:44:3e: 8e:1e:f9:b2:12:7e:cc:0b:9e:19:d3:48:79:08:cb: 8b:f4:a3:e2:9d:8c:74:43:3e:96:ed:6a:0f:72:15: 86:78:39:54:eb:ca:5c:bc:05:a0:b9:e1:e2:a6:e6: 2b:3f:87:b5:0a:64:88:ba:74:b8:dc:44:e0:60:17: a2:86:29:e9:c5:4a:11:9d:13:76:46:57:57:c6:76: 67:40:20:eb:33:a9:e2:40:3a:d0:c9:e1:58:bd:bc: 0d:f2:ab:a8:7b:1a:22:58:d1:fa:ce:49:1a:f1:b2: 80:af:fd:83:d4:f6:5f:6d:df:ca:0e:5e:bc:0b:49: d1:fc:80:ca:0b:7b:3e:d6:bf:2f:5e:5c:fa:12:c9: 03:78:b8:16:7d:3b:4a:2e:6f:a3:c7:e3:f0:09:5c: ea:fd:46:a0:d0:20:1e:11:72:e4:8d:d6:f5:09:b1: 89:27:d3:82:7e:59:b4:32:04:cb:a5:d5:ea:53:95: f9:bf:c3:f0:80:20:c4:62:1d:e0:5a:fc:92:29:9b: 3d:cb:10:53:8a:95:d9:55:4c:7b:f5:a4:a8:89:e7: 2d:cf:bc:f0:79:c3:bb:83:bf:55:5d:d3:e7:19:53: 9f:b3:dd:5b:18:e3:dc:ab:5a:cf:62:bc:47:23:ef: 30:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.158.164.0/22 IPv6: 2a07:ae80::/29 Signature Algorithm: sha256WithRSAEncryption 2f:6e:2a:7b:55:db:5f:31:eb:47:a0:70:cd:23:58:de:0a:2f: 64:e4:a5:c0:80:b7:cb:10:80:08:ac:16:46:76:7b:10:d3:1b: 60:64:4b:7c:a7:84:de:36:b6:6e:43:67:6f:b5:68:ad:a2:e3: 44:b5:c3:47:be:7f:66:7f:43:aa:f6:44:ce:6c:53:72:31:85: 0c:b4:97:7a:26:f6:da:fa:88:c0:72:ff:42:26:63:6f:2e:fc: 29:5d:f2:45:4d:85:16:d4:8e:ab:6c:6b:0c:5b:7c:4c:0b:62: 8e:55:31:07:0a:45:e6:37:3d:37:05:3d:6c:2b:5c:99:55:67: 78:07:c8:c8:43:0d:0d:91:a5:30:dc:e2:f7:75:e4:c6:ff:dd: 36:f9:bb:80:a1:7f:9a:66:fe:9e:64:d1:04:55:9d:47:8f:fc: 03:0c:bd:e7:cd:df:b9:9f:0c:7a:9a:d2:4c:29:3d:54:d5:ae: c6:c3:d2:73:91:42:ea:76:48:9a:d7:3f:66:32:03:f5:b1:29: 4b:74:d2:19:c9:c4:29:d7:30:45:64:b0:c5:13:d5:1e:c5:3e: 4a:c2:1e:53:76:3b:77:d5:a2:3f:94:6b:39:c4:de:b8:ff:43: 12:9f:1b:2c:bd:5d:ed:21:7b:6a:64:e8:53:8f:df:86:bb:da: 84:ec:02:9c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/FXQav5U/+56hy/GLwiZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTAzYWYxOTc2NDVhNDk0MWM2Y2RiMDg2NjlhZjAwOGI3OTEwMmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoD1A8+BCaMKPZKZRD6OHvmyEn7M C54Z00h5CMuL9KPinYx0Qz6W7WoPchWGeDlU68pcvAWgueHipuYrP4e1CmSIunS4 3ETgYBeihinpxUoRnRN2RldXxnZnQCDrM6niQDrQyeFYvbwN8quoexoiWNH6zkka 8bKAr/2D1PZfbd/KDl68C0nR/IDKC3s+1r8vXlz6EskDeLgWfTtKLm+jx+PwCVzq /Uag0CAeEXLkjdb1CbGJJ9OCflm0MgTLpdXqU5X5v8PwgCDEYh3gWvySKZs9yxBT ipXZVUx79aSoiectz7zwecO7g79VXdPnGVOfs91bGOPcq1rPYrxHI+8wswIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNEDrxl2RaSUHGzbCGaa8Ai3kQK+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzL2VjMjNj Yy1kYTVhLTRkMmItOTVkOS03ZGIzZWM2ZmEzMDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZWMyM2Nj LWRhNWEtNGQyYi05NWQ5LTdkYjNlYzZmYTMwMi8xLzBRT3ZHWFpGcEpRY2JOc0la cHJ3Q0xlUkFyNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZ6kMA0EAgACMAcDBQMqB66AMA0GCSqGSIb3 DQEBCwUAA4IBAQAvbip7VdtfMetHoHDNI1jeCi9k5KXAgLfLEIAIrBZGdnsQ0xtg ZEt8p4TeNrZuQ2dvtWitouNEtcNHvn9mf0Oq9kTObFNyMYUMtJd6Jvba+ojAcv9C JmNvLvwpXfJFTYUW1I6rbGsMW3xMC2KOVTEHCkXmNz03BT1sK1yZVWd4B8jIQw0N kaUw3OL3deTG/902+buAoX+aZv6eZNEEVZ1Hj/wDDL3nzd+5nwx6mtJMKT1U1a7G w9JzkULqdkia1z9mMgP1sSlLdNIZycQp1zBFZLDFE9UexT5Kwh5Tdjt31aI/lGs5 xN64/0MSnxssvV3tIXtqZOhTj9+Gu9qE7AKc -----END CERTIFICATE-----Generated at Mon Jan 26 12:24:34 2026 by rpki-client