This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer File: O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer (raw, json) Hash identifier: /kNJDzqBumCyQ539zhYbYZcXfSYfYO0E5cuiTNF6ghw= Subject key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECC1AE60BA3143C53023968B3BAF57 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 77.247.196.0/24 IP: 185.31.70.0/23 IP: 2a12:b440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:c1:ae:60:ba:31:43:c5:30:23:96:8b:3b:af:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b80edd425050865eafba8089db9da3f3519b334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c2:21:8a:a5:4d:bb:bb:e6:2b:61:f3:75:fd: 1a:6d:e3:01:da:8a:ee:b9:94:70:69:f9:0f:06:2f: a2:10:3d:96:56:e1:f1:21:ca:7e:81:44:4b:7b:5d: b4:13:31:ad:72:af:01:24:bd:2f:21:42:18:72:70: 13:23:e0:81:87:f4:a8:b8:d3:fd:6f:e6:08:ed:b1: bd:eb:c3:f9:9e:74:60:d6:84:d6:2e:fe:8f:66:58: 1c:e6:e2:ad:76:3b:4d:40:8f:ab:d4:55:b2:b3:14: 5e:c5:05:c2:35:71:f8:c0:1c:43:cb:19:d6:2f:25: 2e:8d:99:60:0d:c3:21:81:4e:73:9d:6b:ad:a1:3c: fa:c2:9e:cd:62:e8:10:99:70:3d:ea:ee:8d:1e:d0: d0:25:47:33:a5:fd:c1:55:dc:03:5c:4e:79:0c:66: e9:84:bc:f0:eb:92:46:8c:41:33:8a:33:c1:3f:f3: d6:f5:1a:71:21:28:64:a8:85:ca:10:ba:c8:95:55: 8e:28:71:00:b5:a2:20:f5:11:37:85:05:13:e0:8a: bd:32:1a:61:6f:3b:dc:ba:70:36:89:8f:b0:d0:8f: 37:09:9a:d1:1d:9f:3e:a2:43:eb:4d:35:8e:9a:ee: cf:c8:20:89:1e:ec:31:f6:c4:4b:8a:24:8a:f3:2c: ee:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.247.196.0/24 185.31.70.0/23 IPv6: 2a12:b440::/29 Signature Algorithm: sha256WithRSAEncryption 6a:e8:35:f0:f8:c5:34:eb:1d:37:15:93:d5:c8:ff:25:74:0f: a2:f0:d5:cb:b6:10:1c:d8:74:42:23:c6:50:ed:4e:ec:ab:26: e5:5f:78:a9:e9:62:ed:a5:49:20:27:0a:9e:16:02:cb:5a:a0: 44:45:69:d1:ea:25:56:dd:19:d6:65:0e:29:62:b9:10:b8:44: 3c:f2:be:92:ae:e0:0b:a4:9c:10:fb:33:32:9c:d4:33:eb:b8: ee:13:f3:77:28:a5:be:c3:2b:2f:4b:15:c9:e3:33:c3:cc:52: e1:49:1f:a1:9b:9c:e0:a6:02:49:c5:86:bc:26:46:39:e7:1f: e2:41:08:48:37:89:6d:8f:fe:b4:dc:81:8f:96:08:57:fa:4a: 88:7f:4a:3e:22:84:41:6f:e4:36:04:99:94:07:5b:93:bc:e4: ae:c9:37:e6:76:2d:70:23:05:1a:f5:e5:3b:68:61:e1:04:65: 93:64:d8:64:de:0f:52:29:1c:35:ae:63:50:38:fa:2b:8f:4d: 3b:52:d5:53:54:4c:5c:39:dd:79:76:d6:60:cf:d4:c9:2f:78: 6d:89:da:da:e8:57:d6:24:32:7a:9c:cf:35:5b:a4:1c:d2:6f: 29:ea:e6:8f:6a:f5:1f:72:10:83:b0:ca:dd:c5:37:cc:63:fc: ba:4c:6c:9c -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt87MGuYLoxQ8UwI5aLO69XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjgwZWRkNDI1MDUwODY1ZWFmYmE4MDg5ZGI5ZGEzZjM1MTliMzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscIhiqVNu7vmK2Hzdf0abeMB2oru uZRwafkPBi+iED2WVuHxIcp+gURLe120EzGtcq8BJL0vIUIYcnATI+CBh/SouNP9 b+YI7bG968P5nnRg1oTWLv6PZlgc5uKtdjtNQI+r1FWysxRexQXCNXH4wBxDyxnW LyUujZlgDcMhgU5znWutoTz6wp7NYugQmXA96u6NHtDQJUczpf3BVdwDXE55DGbp hLzw65JGjEEzijPBP/PW9RpxIShkqIXKELrIlVWOKHEAtaIg9RE3hQUT4Iq9Mhph bzvcunA2iY+w0I83CZrRHZ8+okPrTTWOmu7PyCCJHuwx9sRLiiSK8yzuJQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFDuA7dQlBQhl6vuoCJ252j81GbM0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiLzdmMTNh OS03Mjg5LTRlMWUtYmI0My1jNzE2MWRjNWMwODcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvN2YxM2E5 LTcyODktNGUxZS1iYjQzLWM3MTYxZGM1YzA4Ny8xL080RHQxQ1VGQ0dYcS02Z0lu Ym5hUHpVWnN6US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQATffEAwQBuR9GMA0EAgACMAcDBQMqErRAMA0G CSqGSIb3DQEBCwUAA4IBAQBq6DXw+MU06x03FZPVyP8ldA+i8NXLthAc2HRCI8ZQ 7U7sqyblX3ip6WLtpUkgJwqeFgLLWqBERWnR6iVW3RnWZQ4pYrkQuEQ88r6SruAL pJwQ+zMynNQz67juE/N3KKW+wysvSxXJ4zPDzFLhSR+hm5zgpgJJxYa8JkY55x/i QQhIN4ltj/603IGPlghX+kqIf0o+IoRBb+Q2BJmUB1uTvOSuyTfmdi1wIwUa9eU7 aGHhBGWTZNhk3g9SKRw1rmNQOPorj007UtVTVExcOd15dtZgz9TJL3htidra6FfW JDJ6nM81W6Qc0m8p6uaPavUfchCDsMrdxTfMY/y6TGyc -----END CERTIFICATE-----Generated at Mon Jan 26 01:45:33 2026 by rpki-client