This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer File: O9mhd7td-26r5MrXne-PiwBd9lY.cer (raw, json) Hash identifier: JP6C5TVRwf4FDt8Q0UltvAo4EgTxtPhoL9zaZWh3ejg= Subject key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAFA7F2558C1DE866070F8EE4BAAA9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50758 IP: 46.31.160.0/21 IP: 140.94.0.0/16 IP: 213.190.12.0/22 IP: 2a0a:2a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fa:7f:25:58:c1:de:86:60:70:f8:ee:4b:aa:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:77:b2:61:23:8c:82:42:11:48:1e:ca:6c:e4: 4c:4c:fe:39:cf:1c:9e:d6:cb:c5:5c:46:bb:c4:43: 33:7d:9d:bb:f9:f1:42:41:e4:85:91:70:b1:a6:8d: e7:32:9e:0f:d0:cb:fd:12:fe:b1:67:d6:b5:0b:c7: c2:84:76:c1:15:0f:1b:ff:02:8c:f8:b4:a4:cf:22: fd:e2:42:71:f4:44:cb:c5:c5:12:cb:75:80:e2:82: 7e:a7:91:f4:66:11:30:f5:7c:a4:49:8e:21:76:d3: ce:1a:57:b2:3e:b7:65:b1:86:97:b9:f1:b3:c2:ad: 71:c9:85:1f:fb:01:dc:f7:3c:aa:b4:d3:e8:25:32: b5:c3:ab:53:0c:94:0c:71:ae:5a:50:1f:0a:93:ba: 56:75:22:a9:b3:f9:94:75:f1:54:70:31:c4:6c:a7: 14:dd:ed:af:b4:9f:62:c9:21:ce:e3:57:46:57:cb: 3e:45:a1:35:e0:56:bb:f6:0e:99:c2:4e:23:a6:11: 50:31:d1:d0:74:2d:ad:7b:0d:11:04:0d:b9:29:bb: 41:63:0f:87:03:fd:f4:cf:f4:ad:29:ed:cf:4e:87: ae:97:b2:4a:55:78:63:ad:ba:27:b4:3f:51:28:c2: 81:c4:e0:07:b2:57:2f:e4:6d:dd:d7:45:b2:90:9b: b1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.160.0/21 140.94.0.0/16 213.190.12.0/22 IPv6: 2a0a:2a40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50758 Signature Algorithm: sha256WithRSAEncryption 1b:a8:77:cf:00:92:f2:71:47:4a:07:bf:a0:e5:46:2a:45:fd: d9:93:0a:28:ab:7d:d6:d2:59:2f:b9:6a:c9:ab:bc:5b:42:12: 48:ce:7f:e7:5f:a6:67:b0:d1:8d:19:56:07:7c:0b:5d:37:df: 98:b8:e8:f6:79:94:40:12:60:31:6e:43:af:87:54:e3:97:1d: c4:7d:8a:a4:c2:7e:bf:83:c1:2c:31:ee:7f:ae:45:88:bc:a5: 27:06:e3:40:b6:0a:5a:a1:dc:73:3c:2c:46:04:87:d8:db:2b: 88:49:ae:e0:c2:81:eb:cc:21:f5:ae:5d:49:a4:ab:3f:8c:09: 46:fd:61:fa:f6:53:09:11:d4:8a:d2:55:4f:d2:51:c6:fc:d3: 90:e1:f0:b0:55:3e:90:2f:54:b1:97:64:3b:6b:d1:1d:31:79: 2b:48:19:fa:fe:ef:d6:ae:c7:4d:dd:cf:d0:89:44:30:32:f3: 9d:70:33:39:98:c4:49:d3:25:00:64:66:7c:ab:9d:a9:b2:04: 8b:7d:20:8a:8d:b9:eb:d0:d8:4b:0a:5c:27:8c:aa:cf:33:6b: 93:3f:21:ff:ba:d7:2a:0d:fe:1e:9c:20:68:82:06:6c:a2:7b: 57:d5:26:f7:c5:ed:91:fa:97:3e:f7:17:26:a3:ae:d2:14:a8: 8c:3e:67:62 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt26vp/JVjB3oZgcPjuS6qpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmQ5YTE3N2JiNWRmYjZlYWJlNGNhZDc5ZGVmOGY4YjAwNWRmNjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHeyYSOMgkIRSB7KbORMTP45zxye 1svFXEa7xEMzfZ27+fFCQeSFkXCxpo3nMp4P0Mv9Ev6xZ9a1C8fChHbBFQ8b/wKM +LSkzyL94kJx9ETLxcUSy3WA4oJ+p5H0ZhEw9XykSY4hdtPOGleyPrdlsYaXufGz wq1xyYUf+wHc9zyqtNPoJTK1w6tTDJQMca5aUB8Kk7pWdSKps/mUdfFUcDHEbKcU 3e2vtJ9iySHO41dGV8s+RaE14Fa79g6Zwk4jphFQMdHQdC2tew0RBA25KbtBYw+H A/30z/StKe3PToeul7JKVXhjrbontD9RKMKBxOAHslcv5G3d10WykJuxMQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFDvZoXe7Xftuq+TK153vj4sAXfZWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2L2MwZDQ2 Ny1mNjJhLTQxOWMtYmU4NS1lMzgwMzBiNjlkNWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvYzBkNDY3 LWY2MmEtNDE5Yy1iZTg1LWUzODAzMGI2OWQ1YS8xL085bWhkN3RkLTI2cjVNclhu ZS1QaXdCZDlsWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF BwEHAQH/BCowKDAXBAIAATARAwQDLh+gAwMAjF4DBALVvgwwDQQCAAIwBwMFAyoK KkAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAMZGMA0GCSqGSIb3DQEBCwUAA4IB AQAbqHfPAJLycUdKB7+g5UYqRf3Zkwooq33W0lkvuWrJq7xbQhJIzn/nX6ZnsNGN GVYHfAtdN9+YuOj2eZRAEmAxbkOvh1Tjlx3EfYqkwn6/g8EsMe5/rkWIvKUnBuNA tgpaodxzPCxGBIfY2yuISa7gwoHrzCH1rl1JpKs/jAlG/WH69lMJEdSK0lVP0lHG /NOQ4fCwVT6QL1Sxl2Q7a9EdMXkrSBn6/u/WrsdN3c/QiUQwMvOdcDM5mMRJ0yUA ZGZ8q52psgSLfSCKjbnr0NhLClwnjKrPM2uTPyH/utcqDf4enCBoggZsontX1Sb3 xe2R+pc+9xcmo67SFKiMPmdi -----END CERTIFICATE-----Generated at Mon Jan 26 10:56:37 2026 by rpki-client