This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer File: OACZqBs0b5q8ryYFb1t3CU0c8RM.cer (raw, json) Hash identifier: XRUBRBct3iXcoVcmwcpCIj59JP8k6pQQ9Hc5kDMHb8w= Subject key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E392DA735D424DD40C508D55D24371C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43966 IP: 79.173.64.0/18 IP: 94.243.192.0/18 IP: 185.159.172.0/22 IP: 185.181.200.0/22 IP: 2a0b:d600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2d:a7:35:d4:24:dd:40:c5:08:d5:5d:24:37:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=380099a81b346f9abcaf26056f5b77094d1cf113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2f:7f:0f:31:13:de:02:57:7d:4f:48:20:75: 43:42:51:72:b9:77:b9:f5:f6:57:fe:b1:2d:a7:ab: 97:04:b4:36:77:c7:91:a0:46:b8:72:e0:93:90:0b: 52:62:a8:aa:00:03:4b:d6:3b:e2:fd:44:f3:d6:45: 4c:6d:e4:b6:9d:f0:0d:ca:7f:81:bf:17:a6:5f:8a: 60:ea:bb:c4:9c:fe:c3:a8:8d:95:a2:50:40:04:be: be:12:94:45:c7:d8:51:cd:19:ea:e0:34:b7:23:e6: 2f:c9:7e:0d:5a:11:0f:23:6d:0a:21:45:9c:87:e6: e4:75:74:42:32:eb:05:91:23:47:27:3e:03:9f:e6: 1e:3f:08:46:5f:dc:6f:0d:65:c7:df:18:31:5f:65: 53:69:a9:4a:f4:3b:3c:50:69:6a:d3:21:4a:1d:09: 37:84:a6:34:15:48:80:e4:63:66:f8:4f:86:82:49: ea:39:2a:35:7f:c0:88:a6:c8:9d:57:08:16:57:f8: a6:5e:2e:f4:71:7e:91:f1:05:d9:23:85:15:00:f2: 23:0a:f4:52:39:73:25:e7:a5:91:83:4f:6e:f1:99: 06:66:93:9f:77:58:35:f3:77:b8:27:af:ba:9b:4b: 09:b4:66:ed:4e:46:20:12:58:6d:12:2c:b6:f6:04: 8e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.173.64.0/18 94.243.192.0/18 185.159.172.0/22 185.181.200.0/22 IPv6: 2a0b:d600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43966 Signature Algorithm: sha256WithRSAEncryption aa:72:cd:bd:71:8e:04:40:21:d5:68:12:e1:83:3c:9f:3a:e1: e4:20:93:e7:6d:ac:62:08:c9:18:ed:c0:1d:c2:03:e0:92:65: f9:32:95:91:6e:7a:10:0f:bd:03:66:4d:f8:ec:fb:b3:76:a4: 83:ad:0c:55:b0:a9:4c:57:7b:ca:93:29:9a:fe:c0:24:27:78: a2:8e:8f:41:4c:7d:5a:50:7d:de:eb:15:49:1b:65:65:75:f8: 3f:6c:3e:7d:e5:4b:47:42:89:04:a8:dc:81:b4:07:e5:99:aa: 52:6d:3d:e0:f4:8f:97:0b:e2:96:92:4b:3e:f6:39:a5:64:5a: 3b:1c:fa:44:47:a1:46:20:8f:c9:68:7e:4c:16:c1:e4:3c:84: cc:82:84:01:9e:0a:28:28:14:5a:f9:55:be:37:e6:66:df:dc: ce:91:68:d1:38:f9:85:75:f8:8b:24:d7:2f:76:23:3b:5b:45: fb:cb:f6:c5:b3:e0:eb:d0:6d:f0:cf:f8:85:63:e4:41:78:04: 27:03:0f:27:c1:98:e0:b9:67:80:ef:ac:b3:35:7f:9c:50:d2: 30:88:03:f5:e6:16:65:96:0d:bf:3f:6b:4a:9a:03:ff:25:36: 3e:9c:37:49:20:25:bb:6f:08:16:78:1e:6b:74:c4:e2:42:e2: 5d:55:c1:a7 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt+OS2nNdQk3UDFCNVdJDccMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODAwOTlhODFiMzQ2ZjlhYmNhZjI2MDU2ZjViNzcwOTRkMWNmMTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC9/DzET3gJXfU9IIHVDQlFyuXe5 9fZX/rEtp6uXBLQ2d8eRoEa4cuCTkAtSYqiqAANL1jvi/UTz1kVMbeS2nfANyn+B vxemX4pg6rvEnP7DqI2VolBABL6+EpRFx9hRzRnq4DS3I+YvyX4NWhEPI20KIUWc h+bkdXRCMusFkSNHJz4Dn+YePwhGX9xvDWXH3xgxX2VTaalK9Ds8UGlq0yFKHQk3 hKY0FUiA5GNm+E+GgknqOSo1f8CIpsidVwgWV/imXi70cX6R8QXZI4UVAPIjCvRS OXMl56WRg09u8ZkGZpOfd1g183e4J6+6m0sJtGbtTkYgElhtEiy29gSO3wIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFDgAmagbNG+avK8mBW9bdwlNHPETMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczLzhlNTAx ZC1jMDg4LTQ4OTUtYWVlMy00NTBmZTMzNTk1ZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvOGU1MDFk LWMwODgtNDg5NS1hZWUzLTQ1MGZlMzM1OTVkMS8xL09BQ1pxQnMwYjVxOHJ5WUZi MXQzQ1UwYzhSTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQGT61AAwQGXvPAAwQCuZ+sAwQCubXIMA0EAgAC MAcDBQMqC9YAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCrvjANBgkqhkiG9w0B AQsFAAOCAQEAqnLNvXGOBEAh1WgS4YM8nzrh5CCT522sYgjJGO3AHcID4JJl+TKV kW56EA+9A2ZN+Oz7s3akg60MVbCpTFd7ypMpmv7AJCd4oo6PQUx9WlB93usVSRtl ZXX4P2w+feVLR0KJBKjcgbQH5ZmqUm094PSPlwvilpJLPvY5pWRaOxz6REehRiCP yWh+TBbB5DyEzIKEAZ4KKCgUWvlVvjfmZt/czpFo0Tj5hXX4iyTXL3YjO1tF+8v2 xbPg69Bt8M/4hWPkQXgEJwMPJ8GY4LlngO+sszV/nFDSMIgD9eYWZZYNvz9rSpoD /yU2Ppw3SSAlu28IFngea3TE4kLiXVXBpw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:59 2026 by rpki-client