This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer File: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer (raw, json) Hash identifier: G652XqLRRz7Y1IbyOgX9fM9GJs69MlzNQyVrm5u/xz4= Subject key identifier: 38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F105647F79009B27AE380A6ADB50C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.253.76.0/22 IP: 2a09:53c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:10:56:47:f7:90:09:b2:7a:e3:80:a6:ad:b5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38227a96fa64ad95240f0aee0bd374646c6bbee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ba:09:c6:60:eb:17:6c:aa:10:b6:3f:e8:d5: 8a:92:df:f5:d2:d3:c5:38:1f:20:4f:61:89:3f:12: 03:a7:b9:1c:dc:cd:d7:e3:c2:de:f5:70:ed:65:b1: 8d:a7:5a:a8:28:bc:82:91:1f:96:cc:21:20:04:91: 9d:b2:e7:7f:4d:0a:b9:89:88:ad:60:fb:ab:79:ab: 03:42:98:66:ff:41:23:97:b4:b8:ff:f3:07:1d:9d: 63:b4:42:80:63:22:df:74:28:09:c5:f8:d6:f0:39: 41:db:d4:2d:df:2c:aa:c5:eb:68:95:df:d0:08:d5: db:a9:80:36:cd:39:90:88:34:c9:6c:29:5c:69:82: 44:b1:9a:1c:b6:43:e9:f7:30:85:1b:b9:46:fc:80: b0:04:6d:c3:36:f6:cc:13:b7:ed:ad:af:27:b9:d4: dc:b1:3c:de:8e:4d:c2:33:bf:4f:8f:50:09:4b:6d: 58:f8:54:8f:4d:1f:b7:a8:b1:bc:a0:15:99:cd:c1: dd:2d:a1:4d:76:63:e6:3e:8b:43:f6:c8:25:ed:2d: a7:ed:68:55:1e:2a:34:de:cb:a0:7b:2e:88:4e:f4: d5:c2:59:80:d1:4e:3f:9d:67:00:8e:94:9b:ea:71: 00:35:37:73:2c:cc:6d:d0:43:67:9d:0a:9c:0b:d3: 65:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.76.0/22 IPv6: 2a09:53c0::/29 Signature Algorithm: sha256WithRSAEncryption 08:79:9a:42:44:16:06:15:a6:4b:1b:ff:ec:c4:05:c0:5c:63: 97:be:32:0d:02:15:c6:c0:9b:80:86:88:de:fe:f5:81:52:71: 56:d2:71:13:ac:b7:e5:b5:af:71:b5:7c:7b:b5:0a:88:0c:f5: 53:1e:aa:bf:10:78:cb:89:d7:1b:7a:88:3b:ba:b8:0a:8a:bd: fd:ac:99:57:ef:75:46:6b:18:a7:7a:d1:92:e0:f1:6e:47:e0: d6:bb:56:8c:7f:07:45:4e:ff:a0:35:a2:0e:45:43:a8:d9:2e: 3d:10:e3:39:17:38:70:ea:39:fc:b2:12:61:0c:ce:85:9e:32: a5:01:ff:10:fa:ea:1b:4c:4c:e4:f3:77:6e:66:d3:c8:98:11: 26:b4:c7:e3:be:08:74:30:7f:20:21:87:99:39:44:d7:85:de: a5:c6:e9:81:0f:52:1b:2d:c4:23:9c:e9:9d:6d:39:32:6e:6b: ec:dc:ec:d7:4c:8d:b0:5a:ce:3a:2b:b6:a4:6e:6f:32:08:1e: ea:a4:9c:7c:b4:c1:59:1f:da:3e:11:05:db:fe:3b:f5:62:f1: 1f:d5:f0:bc:5d:ed:4c:61:45:0e:d1:90:d9:98:72:d9:03:f1: 6a:d8:d9:c9:4a:5f:67:9b:01:da:c0:11:82:ab:04:9d:1c:12: 5d:ac:bd:4c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8fxBWR/eQCbJ644CmrbUMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODIyN2E5NmZhNjRhZDk1MjQwZjBhZWUwYmQzNzQ2NDZjNmJiZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7oJxmDrF2yqELY/6NWKkt/10tPF OB8gT2GJPxIDp7kc3M3X48Le9XDtZbGNp1qoKLyCkR+WzCEgBJGdsud/TQq5iYit YPureasDQphm/0Ejl7S4//MHHZ1jtEKAYyLfdCgJxfjW8DlB29Qt3yyqxetold/Q CNXbqYA2zTmQiDTJbClcaYJEsZoctkPp9zCFG7lG/ICwBG3DNvbME7ftra8nudTc sTzejk3CM79Pj1AJS21Y+FSPTR+3qLG8oBWZzcHdLaFNdmPmPotD9sgl7S2n7WhV Hio03sugey6ITvTVwlmA0U4/nWcAjpSb6nEANTdzLMxt0ENnnQqcC9NlvQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDgiepb6ZK2VJA8K7gvTdGRsa77iMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzFjZjlh Yy0xMGQ0LTRhNWUtYTcwNi1kMWM5YmEwOGY1NTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMWNmOWFj LTEwZDQtNGE1ZS1hNzA2LWQxYzliYTA4ZjU1OS8xL09DSjZsdnBrclpVa0R3cnVD OU4wWkd4cnZ1SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCBf1MMA0EAgACMAcDBQMqCVPAMA0GCSqGSIb3 DQEBCwUAA4IBAQAIeZpCRBYGFaZLG//sxAXAXGOXvjINAhXGwJuAhoje/vWBUnFW 0nETrLflta9xtXx7tQqIDPVTHqq/EHjLidcbeog7urgKir39rJlX73VGaxinetGS 4PFuR+DWu1aMfwdFTv+gNaIORUOo2S49EOM5Fzhw6jn8shJhDM6FnjKlAf8Q+uob TEzk83duZtPImBEmtMfjvgh0MH8gIYeZOUTXhd6lxumBD1IbLcQjnOmdbTkybmvs 3OzXTI2wWs46K7akbm8yCB7qpJx8tMFZH9o+EQXb/jv1YvEf1fC8Xe1MYUUO0ZDZ mHLZA/Fq2NnJSl9nmwHawBGCqwSdHBJdrL1M -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:38 2026 by rpki-client