This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer File: O618kdgYkaWUfX4UpmhJEgY6Xdk.cer (raw, json) Hash identifier: //sz59dmaxAINhfINJ6fn9za7sNpRnWXOElztIK4+FM= Subject key identifier: 3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A59F2BE2AA7EB2C261D46ED0DE32019 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215674 IP: 198.52.247.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:f2:be:2a:a7:eb:2c:26:1d:46:ed:0d:e3:20:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bad7c91d81891a5947d7e14a6684912063a5dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:97:7e:9e:a3:82:0d:f9:9d:9a:9c:0e:32:d1: b8:06:0c:ce:28:02:f3:7b:6b:01:80:e7:74:8e:91: 53:88:a1:20:c8:22:7f:25:b6:af:15:d7:79:6b:b3: 90:b9:5b:de:1a:24:c4:e0:0b:d2:a8:f7:af:a3:c8: 7a:77:83:92:10:fc:98:b0:01:f7:bb:4a:10:13:7c: 20:5b:45:dd:28:53:a2:21:67:a0:d9:0f:d4:48:d2: 36:f4:35:79:03:b4:cc:5c:7d:13:3d:59:1d:05:a0: 28:78:83:1a:7d:c5:84:16:4c:a9:b9:c7:af:ba:62: 84:68:29:64:64:ec:04:f0:ae:b1:fa:f8:a7:04:b7: 6e:5a:f1:1f:6d:2a:d2:c9:87:7c:4a:19:2e:b4:f9: 48:78:d8:08:68:9e:5a:91:8e:28:4a:e9:e0:74:5e: 46:bf:96:c6:2a:e3:cc:56:81:31:0b:18:29:ed:80: 13:d3:63:00:ee:c7:8e:ab:36:32:6e:b6:9e:03:1f: 63:43:e5:0e:d9:85:50:95:05:3f:9a:f8:bf:a2:0b: e5:a7:84:37:8f:e8:b3:9f:db:17:d1:a0:ba:42:c5: c5:7e:42:6a:5d:a9:c9:7e:0f:1b:71:09:8a:ac:9e: 1e:24:b9:f4:e0:d6:87:5b:1e:96:e9:fc:93:00:a1: 7e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.52.247.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215674 Signature Algorithm: sha256WithRSAEncryption 34:3b:98:5d:2b:b4:8e:86:ac:fe:f6:0f:4e:dd:69:cb:0c:6d: fb:ed:de:a6:e4:36:42:30:2e:e8:ed:96:c4:0a:a2:4f:a4:e0: ff:ad:a2:3b:66:7a:aa:ec:b1:17:cc:5c:f2:9e:34:d0:59:8a: b8:44:2c:9f:a8:e4:54:14:ec:43:82:2b:21:f4:a0:83:ef:c5: c1:4e:4a:46:4a:2f:5f:81:d2:51:79:65:ba:ac:e4:15:51:e9: af:c7:f8:69:33:b4:9f:53:31:a5:e7:1c:67:41:51:79:21:1e: b2:dd:53:51:d6:a0:9b:d7:eb:5f:71:08:e7:18:4d:a1:1c:b6: a6:97:2f:49:a6:9c:37:46:f5:10:d8:4e:7c:bd:a4:44:6c:a3: 5f:44:90:da:b6:ad:9b:ef:78:ea:c0:64:07:ac:aa:e8:51:06: a8:58:0c:8a:ce:4d:b3:ac:e5:d8:4c:de:34:ea:b6:b7:cc:1b: 19:d2:68:6d:c8:c1:a9:b6:f9:ab:11:4b:62:e1:08:c8:53:a7: a7:f4:fe:e2:41:3f:ba:b5:fc:74:f2:93:fc:58:87:4d:17:7a: 29:91:37:f0:23:ba:54:9a:f8:0d:10:39:88:06:ed:51:4a:cb: 6a:19:0c:95:81:4d:24:fb:75:54:50:54:9d:c8:fb:5a:a4:f3: c5:1a:d3:87 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6WfK+KqfrLCYdRu0N4yAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmFkN2M5MWQ4MTg5MWE1OTQ3ZDdlMTRhNjY4NDkxMjA2M2E1ZGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Jd+nqOCDfmdmpwOMtG4BgzOKALz e2sBgOd0jpFTiKEgyCJ/JbavFdd5a7OQuVveGiTE4AvSqPevo8h6d4OSEPyYsAH3 u0oQE3wgW0XdKFOiIWeg2Q/USNI29DV5A7TMXH0TPVkdBaAoeIMafcWEFkypucev umKEaClkZOwE8K6x+vinBLduWvEfbSrSyYd8ShkutPlIeNgIaJ5akY4oSungdF5G v5bGKuPMVoExCxgp7YAT02MA7seOqzYybraeAx9jQ+UO2YVQlQU/mvi/ogvlp4Q3 j+izn9sX0aC6QsXFfkJqXanJfg8bcQmKrJ4eJLn04NaHWx6W6fyTAKF+5QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDutfJHYGJGllH1+FKZoSRIGOl3ZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0Lzk0OTNl ZS03YTA1LTQxZWYtYmNmNi00MjIwMjI0OTlhY2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvOTQ5M2Vl LTdhMDUtNDFlZi1iY2Y2LTQyMjAyMjQ5OWFjYS8xL082MThrZGdZa2FXVWZYNFVw bWhKRWdZNlhkay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAxjT3MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNKejANBgkqhkiG9w0BAQsFAAOCAQEANDuYXSu0joas/vYPTt1pywxt++3epuQ2 QjAu6O2WxAqiT6Tg/62iO2Z6quyxF8xc8p400FmKuEQsn6jkVBTsQ4IrIfSgg+/F wU5KRkovX4HSUXlluqzkFVHpr8f4aTO0n1MxpeccZ0FReSEest1TUdagm9frX3EI 5xhNoRy2ppcvSaacN0b1ENhOfL2kRGyjX0SQ2ratm+946sBkB6yq6FEGqFgMis5N s6zl2EzeNOq2t8wbGdJobcjBqbb5qxFLYuEIyFOnp/T+4kE/urX8dPKT/FiHTRd6 KZE38CO6VJr4DRA5iAbtUUrLahkMlYFNJPt1VFBUncj7WqTzxRrThw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:04:54 2026 by rpki-client