This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer File: O-_lCkD7FzJUHoqXRQq13ndHcdg.cer (raw, json) Hash identifier: LHHxRAEGoqCFf/WFG5nf61blf31r73qAzYxsN6D55G4= Subject key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F156F076C096AEF8DEA01D6593B97F3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214293 IP: 91.238.194.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6f:07:6c:09:6a:ef:8d:ea:01:d6:59:3b:97:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3befe50a40fb1732541e8a97450ab5de774771d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ec:be:71:3b:73:86:ee:35:10:d6:8a:52:65: 36:66:a9:f0:7b:66:9a:f8:e7:26:c2:a1:1e:38:91: 72:c8:5f:7c:23:32:5e:e0:97:8f:e8:85:a4:0b:9f: 61:d5:c8:51:6d:1d:f6:11:dc:09:8a:f0:09:e8:00: 36:fe:f8:2b:23:e3:98:dd:54:97:ca:b7:45:e8:2e: a7:d6:35:b3:39:37:7f:c0:61:cf:06:bd:4c:e8:fe: 30:35:d7:80:aa:68:88:ee:91:c5:29:53:26:9c:0c: 88:53:4d:bf:1c:20:f7:80:ca:b4:ea:06:a7:20:c1: 6e:23:3e:8a:64:4b:1f:88:3d:ca:09:44:2f:e7:09: 1a:45:32:8f:7c:8f:38:64:33:aa:ac:5c:0a:62:27: 51:68:5c:5f:00:f9:5b:3b:5e:9a:0d:db:6b:da:7a: 12:7e:bc:d2:1f:a9:29:8e:9a:bf:94:ff:21:2b:fd: b5:87:3f:61:d7:3a:c2:86:14:2d:b9:1a:93:c6:55: 19:1b:b8:a6:c8:0f:ec:e8:a7:54:a6:44:e7:6b:36: 1f:59:03:4c:b2:7b:3b:c5:24:f1:d7:75:07:27:2a: 4f:31:8b:62:c2:ef:f4:a8:28:cd:94:fc:e7:a9:47: 49:d1:26:1c:d4:c3:73:c0:cb:0f:74:b3:fd:dc:20: b0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.194.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214293 Signature Algorithm: sha256WithRSAEncryption ac:95:bf:a6:18:1d:20:da:d5:7f:55:7f:9f:0d:c3:4a:50:03: 9a:52:88:e0:64:2b:fb:fd:09:a4:f0:ce:75:b2:70:1d:ee:90: cd:02:e7:c2:2f:55:f6:dd:ae:bc:ee:c4:4e:74:1d:fd:ce:09: 3f:15:7c:a6:ae:1a:8c:7e:9a:66:ed:bc:1e:2f:5d:a9:65:48: fa:1a:3c:6a:52:36:97:6f:68:25:75:ec:c2:74:94:38:2e:11: 6c:60:c0:65:3e:61:97:04:47:e2:fb:94:af:ef:18:07:d3:1d: 0a:b1:b7:3c:92:2e:7d:54:79:91:93:8f:cc:3c:f0:f2:c5:a0: d9:82:58:1f:f2:0e:c5:2a:4b:36:d7:07:94:94:5a:74:46:cc: df:e8:0b:d1:c4:fd:7e:48:1a:47:78:e8:42:3f:cd:05:01:90: f6:e8:61:46:d3:13:f1:8e:d9:0f:87:37:a8:9b:48:af:86:e6: d1:12:c7:57:50:86:bb:f5:9e:99:0a:95:19:28:4a:da:d3:ff: b4:df:ab:c5:92:10:fb:a4:2f:7d:4f:70:4c:f9:2b:43:b0:a6: 71:86:c8:64:00:67:4e:d9:be:16:1a:97:b6:6e:34:ac:3c:6d: 73:8e:44:22:57:d7:4e:cd:d4:36:24:01:6e:e9:0a:02:05:32: 19:ca:37:43 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/FW8HbAlq743qAdZZO5fzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmVmZTUwYTQwZmIxNzMyNTQxZThhOTc0NTBhYjVkZTc3NDc3MWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+y+cTtzhu41ENaKUmU2Zqnwe2aa +OcmwqEeOJFyyF98IzJe4JeP6IWkC59h1chRbR32EdwJivAJ6AA2/vgrI+OY3VSX yrdF6C6n1jWzOTd/wGHPBr1M6P4wNdeAqmiI7pHFKVMmnAyIU02/HCD3gMq06gan IMFuIz6KZEsfiD3KCUQv5wkaRTKPfI84ZDOqrFwKYidRaFxfAPlbO16aDdtr2noS frzSH6kpjpq/lP8hK/21hz9h1zrChhQtuRqTxlUZG7imyA/s6KdUpkTnazYfWQNM sns7xSTx13UHJypPMYtiwu/0qCjNlPznqUdJ0SYc1MNzwMsPdLP93CCwHwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDvv5QpA+xcyVB6Kl0UKtd53R3HYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyLzhlZjc0 MC0xMDUyLTQ5ZWMtYTQwOS1lNjE1NDkzMTE3ZDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvOGVmNzQw LTEwNTItNDllYy1hNDA5LWU2MTU0OTMxMTdkMi8xL08tX2xDa0Q3RnpKVUhvcVhS UXExM25kSGNkZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+7CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNFFTANBgkqhkiG9w0BAQsFAAOCAQEArJW/phgdINrVf1V/nw3DSlADmlKI4GQr +/0JpPDOdbJwHe6QzQLnwi9V9t2uvO7ETnQd/c4JPxV8pq4ajH6aZu28Hi9dqWVI +ho8alI2l29oJXXswnSUOC4RbGDAZT5hlwRH4vuUr+8YB9MdCrG3PJIufVR5kZOP zDzw8sWg2YJYH/IOxSpLNtcHlJRadEbM3+gL0cT9fkgaR3joQj/NBQGQ9uhhRtMT 8Y7ZD4c3qJtIr4bm0RLHV1CGu/WemQqVGShK2tP/tN+rxZIQ+6QvfU9wTPkrQ7Cm cYbIZABnTtm+FhqXtm40rDxtc45EIlfXTs3UNiQBbukKAgUyGco3Qw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:46:06 2026 by rpki-client