This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer File: OBbhmySn6M_xifq6wohSzYdIo4A.cer (raw, json) Hash identifier: LDfFfhQJCQmlnwKXR2J+Fwyh4uyetGMa2Vk+ybYMBjg= Subject key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB491C74172F6298BDAD01CB9ACFA9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199826 IP: 85.194.248.0/22 IP: 185.33.45.0 -- 185.33.47.255 IP: 2a00:c860::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:49:1c:74:17:2f:62:98:bd:ad:01:cb:9a:cf:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3816e19b24a7e8cff189fabac28852cd8748a380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:66:6d:ab:74:a2:53:0f:6c:4e:35:11:52:5f: 67:fc:a4:85:74:fa:09:5f:79:18:1b:3d:a1:17:35: 6d:4d:19:e4:0b:f2:ca:65:b7:36:10:49:e5:1d:46: a5:a9:5e:3a:6d:3d:2b:60:65:bf:5b:0c:57:7d:09: 5d:a8:0b:1e:48:65:5b:3e:e4:ce:7d:4a:fa:a7:1e: d5:f7:e4:e7:ec:bb:fc:b5:83:f0:ef:be:35:71:0c: 6a:77:3d:1c:f3:66:44:40:16:63:2e:b7:69:01:73: f6:01:a8:89:c8:20:c2:60:f0:71:2e:92:f1:dd:b2: c1:4f:d5:34:69:2a:ef:68:d2:60:d4:54:bc:54:cb: 68:17:f1:08:f4:4c:a9:37:74:f6:68:5e:f6:c0:64: bd:fa:ac:3d:0a:84:0d:43:eb:a5:fd:57:00:bb:c2: f8:c9:da:9e:be:75:a3:06:14:de:cd:7e:d6:5f:62: 0f:90:e6:19:e9:41:24:f1:f3:d9:e8:24:13:e7:0a: e6:8f:70:88:46:d1:dc:ae:16:1d:80:a8:bc:67:ef: 74:93:3d:42:4c:a5:a3:2c:3b:cb:42:51:2b:23:98: 52:5f:4b:21:6c:7d:8b:57:19:15:72:d9:b2:6c:f1: 74:b5:bf:cf:47:5e:a0:46:4d:3a:e7:fa:25:e3:7b: d4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.194.248.0/22 185.33.45.0-185.33.47.255 IPv6: 2a00:c860::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199826 Signature Algorithm: sha256WithRSAEncryption 98:fa:9e:fd:5d:d1:a8:ec:f1:5b:35:ea:d3:ff:ea:3b:b8:b3: a9:d6:b0:8a:a9:e4:3d:5d:9a:e5:1c:94:94:62:6b:ac:66:b8: 43:ef:41:00:d7:d4:19:3b:d4:c1:20:2c:d9:af:3e:91:17:d8: 0a:f0:47:ca:b9:c4:d2:d8:ff:08:f6:5d:ea:ad:69:ca:24:6d: ca:53:53:59:54:eb:80:1a:38:3a:73:1f:a0:aa:a7:e5:c3:4d: 72:0a:18:fe:c1:19:82:91:d4:82:47:2c:19:4f:4b:d2:50:98: e9:bb:f2:8c:1b:7a:a7:e8:5e:f0:66:78:46:3c:fe:0c:3b:67: fb:a5:92:16:b3:59:60:a0:4a:ef:c2:05:37:25:61:0c:e2:f3: 15:1f:7c:08:79:42:b8:5b:eb:24:1c:70:38:0b:31:d7:b7:c4: 3f:cf:6f:0d:d2:66:b9:83:f1:6f:d7:f1:4d:1b:a6:01:61:09: e5:de:21:f6:84:0f:7b:9d:07:f7:95:9e:15:16:98:50:91:17: 69:e7:9e:0f:37:ae:c5:19:7b:1d:5d:71:d3:11:0e:86:83:39: 16:d3:80:aa:22:b4:92:c1:24:ad:16:45:17:44:81:f5:b7:e2: ea:92:41:ce:fc:7f:7f:c5:1e:97:8e:cb:14:df:d8:6a:82:aa: a4:93:08:33 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt9y0kcdBcvYpi9rQHLms+pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODE2ZTE5YjI0YTdlOGNmZjE4OWZhYmFjMjg4NTJjZDg3NDhhMzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGZtq3SiUw9sTjURUl9n/KSFdPoJ X3kYGz2hFzVtTRnkC/LKZbc2EEnlHUalqV46bT0rYGW/WwxXfQldqAseSGVbPuTO fUr6px7V9+Tn7Lv8tYPw7741cQxqdz0c82ZEQBZjLrdpAXP2AaiJyCDCYPBxLpLx 3bLBT9U0aSrvaNJg1FS8VMtoF/EI9EypN3T2aF72wGS9+qw9CoQNQ+ul/VcAu8L4 ydqevnWjBhTezX7WX2IPkOYZ6UEk8fPZ6CQT5wrmj3CIRtHcrhYdgKi8Z+90kz1C TKWjLDvLQlErI5hSX0shbH2LVxkVctmybPF0tb/PR16gRk065/ol43vU3wIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFDgW4Zskp+jP8Yn6usKIUs2HSKOAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhL2Q2MTI3 NS1lMDBhLTRiZmItYmU4YS0xNmIzNmQwODAxZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvZDYxMjc1 LWUwMGEtNGJmYi1iZThhLTE2YjM2ZDA4MDFlOS8xL09CYmhteVNuNk1feGlmcTZ3 b2hTellkSW80QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUAwQCVcL4MAwDBAC5IS0DBAS5ISAwDQQCAAIwBwMF ACoAyGAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAwySMA0GCSqGSIb3DQEBCwUA A4IBAQCY+p79XdGo7PFbNerT/+o7uLOp1rCKqeQ9XZrlHJSUYmusZrhD70EA19QZ O9TBICzZrz6RF9gK8EfKucTS2P8I9l3qrWnKJG3KU1NZVOuAGjg6cx+gqqflw01y Chj+wRmCkdSCRywZT0vSUJjpu/KMG3qn6F7wZnhGPP4MO2f7pZIWs1lgoErvwgU3 JWEM4vMVH3wIeUK4W+skHHA4CzHXt8Q/z28N0ma5g/Fv1/FNG6YBYQnl3iH2hA97 nQf3lZ4VFphQkRdp554PN67FGXsdXXHTEQ6GgzkW04CqIrSSwSStFkUXRIH1t+Lq kkHO/H9/xR6XjssU39hqgqqkkwgz -----END CERTIFICATE-----Generated at Sun Jan 25 23:08:10 2026 by rpki-client