This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer File: O8zbDbfPRmTsx9vdGAHIfODYR88.cer (raw, json) Hash identifier: a9I72aRhFvRPcJkkbyguCsGSQZJRsQeGlDsx3hVrNJE= Subject key identifier: 3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11861DD934AC5DB8B0FEF24C56C810 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.101.168.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:86:1d:d9:34:ac:5d:b8:b0:fe:f2:4c:56:c8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7a:cb:31:91:57:42:16:19:45:81:b4:29:d4: 39:40:17:d2:26:32:8b:10:6e:dc:18:9f:56:b5:61: 82:79:24:82:c3:af:14:fb:5c:d8:36:f3:ab:9e:de: 19:05:8d:36:f3:04:ba:e3:93:fe:d0:31:13:be:a5: bf:ad:b3:1d:a1:81:ff:f2:fb:8d:37:a4:48:3e:64: 28:d9:dd:f0:2d:80:13:35:66:57:0f:fa:71:5e:7f: 32:a3:76:b0:18:59:6c:61:a7:63:28:1a:2e:6f:da: 61:87:ff:7b:1c:e3:2b:98:d7:4e:03:d1:5b:82:aa: ba:78:bd:3a:f1:ed:26:8a:dc:be:ed:73:e3:f8:7d: 3c:c6:80:64:30:90:e7:af:f8:99:cd:7b:4c:45:d4: d5:d7:75:10:e7:ab:49:4c:2d:6d:76:3a:f9:63:6b: f9:c0:9d:9b:5e:17:cb:da:94:dc:49:9f:ef:5b:f5: b8:b7:8c:3b:0b:f3:46:2b:6a:76:79:c8:b6:dc:39: 95:16:3b:4a:0b:2a:89:12:14:83:54:68:35:2b:e3: 8a:5f:e6:1d:6c:63:5f:b1:54:c6:87:e6:17:5b:a3: c9:86:f2:2e:87:4b:92:75:cb:10:53:21:12:c0:18: f4:2d:59:50:09:ca:f5:9b:a2:30:73:a3:36:df:e9: 9d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.101.168.0/21 Signature Algorithm: sha256WithRSAEncryption 5a:c1:bf:bf:5d:70:51:32:29:d0:eb:81:98:39:f8:91:cd:66: 5a:52:8a:a4:a7:4d:11:30:66:84:7d:da:dd:bc:42:7a:d9:ec: 53:ba:75:08:d5:bf:6b:60:9b:40:a7:f1:79:94:22:ef:9a:5e: 32:30:16:c0:15:99:f6:a4:bd:73:b8:e0:c3:12:b8:96:d9:4c: 62:56:30:89:05:52:3d:37:e0:5f:f2:4d:55:5e:cb:d5:af:30: 2d:b8:46:d6:7c:4b:25:ce:9a:43:75:46:94:44:ce:d3:53:5f: 96:b1:8e:b5:8d:28:01:5c:e5:9f:40:c7:42:10:44:3a:59:09: c4:2b:fa:fe:30:c2:58:5c:76:4b:d0:0b:4c:a4:09:9c:dd:b7: 52:82:7a:a8:d9:51:1a:80:53:48:cd:7f:a9:9e:74:55:6d:6d: a1:78:33:7c:f4:63:3d:eb:3e:53:71:f1:bf:4a:f4:26:96:ee: b4:c2:2c:a1:4c:fe:0a:02:c4:3a:0d:41:3f:39:86:b9:0f:7e: af:6a:4e:e4:9a:59:cb:93:36:f7:82:9f:7d:11:92:d0:31:e0: c7:fb:19:c0:08:c3:98:2a:ef:f4:61:d8:3f:46:e4:74:6a:f2: 0d:ef:ba:69:be:00:46:40:4b:30:3f:d1:0b:04:91:f1:bf:c5: 5a:f3:3b:ad -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8EYYd2TSsXbiw/vJMVsgQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmNjZGIwZGI3Y2Y0NjY0ZWNjN2RiZGQxODAxYzg3Y2UwZDg0N2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnrLMZFXQhYZRYG0KdQ5QBfSJjKL EG7cGJ9WtWGCeSSCw68U+1zYNvOrnt4ZBY028wS645P+0DETvqW/rbMdoYH/8vuN N6RIPmQo2d3wLYATNWZXD/pxXn8yo3awGFlsYadjKBoub9phh/97HOMrmNdOA9Fb gqq6eL068e0mity+7XPj+H08xoBkMJDnr/iZzXtMRdTV13UQ56tJTC1tdjr5Y2v5 wJ2bXhfL2pTcSZ/vW/W4t4w7C/NGK2p2eci23DmVFjtKCyqJEhSDVGg1K+OKX+Yd bGNfsVTGh+YXW6PJhvIuh0uSdcsQUyESwBj0LVlQCcr1m6Iwc6M23+mdwQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFDvM2w23z0Zk7Mfb3RgByHzg2EfPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkLzFjY2Y4 MC0wOTI1LTQwZTAtODcxNC1jNGQ5YmUxMzdlZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvMWNjZjgw LTA5MjUtNDBlMC04NzE0LWM0ZDliZTEzN2VlYS8xL084emJEYmZQUm1Uc3g5dmRH QUhJZk9EWVI4OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDwWWoMA0GCSqGSIb3DQEBCwUAA4IBAQBawb+/ XXBRMinQ64GYOfiRzWZaUoqkp00RMGaEfdrdvEJ62exTunUI1b9rYJtAp/F5lCLv ml4yMBbAFZn2pL1zuODDEriW2UxiVjCJBVI9N+Bf8k1VXsvVrzAtuEbWfEslzppD dUaURM7TU1+WsY61jSgBXOWfQMdCEEQ6WQnEK/r+MMJYXHZL0AtMpAmc3bdSgnqo 2VEagFNIzX+pnnRVbW2heDN89GM96z5TcfG/SvQmlu60wiyhTP4KAsQ6DUE/OYa5 D36vak7kmlnLkzb3gp99EZLQMeDH+xnACMOYKu/0Ydg/RuR0avIN77ppvgBGQEsw P9ELBJHxv8Va8zut -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:21 2026 by rpki-client