This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer File: OS9u5u40bDGRK3Yw2rFM5TxODJk.cer (raw, json) Hash identifier: vHl5OaCsPEzpGUl2ZR6jO/9gyEmkIbfiQo1M5tjvwts= Subject key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA86208204F66BCBC7B9921AEA296D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 164.138.48.0/21 IP: 193.168.52.0/23 IP: 193.168.56.0/23 IP: 2a0c:f840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:86:20:82:04:f6:6b:cb:c7:b9:92:1a:ea:29:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:25:49:bc:65:e5:7b:57:55:9e:79:6c:93:6e: 25:a0:de:cb:5d:da:40:3a:6e:85:1f:1f:6c:ee:39: dd:8e:2f:58:b3:fe:c2:a4:5e:18:3e:8e:74:81:a8: a5:cc:3c:13:0b:c0:ec:77:93:93:44:7b:92:c4:77: 51:ab:0d:29:a9:1e:d9:b3:9b:ee:a7:3c:f1:e3:17: 46:a2:b9:c4:39:06:32:45:a8:9a:74:ae:94:aa:8c: e4:9a:92:05:7a:ab:d0:38:80:13:53:90:9a:c2:a4: 15:bd:cd:51:c8:94:8f:99:89:93:89:e8:10:90:b0: 84:e1:cf:50:0e:00:d7:f6:c3:11:fa:7d:68:30:ce: 29:19:38:fe:ec:e0:ce:81:6c:97:16:d2:97:6e:0a: 79:a7:e6:8b:e6:d1:47:cc:c9:bd:e5:03:78:87:a0: ec:86:d7:55:f4:aa:4f:4b:7b:31:8b:86:97:99:6c: a1:52:56:7d:c2:6a:d5:3d:88:55:3e:6e:1d:1a:3e: 7d:0c:88:47:07:4c:86:95:73:fc:cb:4a:e2:92:f6: 22:54:0e:2f:24:ee:7e:0c:4d:db:cb:f8:bc:c9:39: 68:3c:f7:bb:2b:93:69:ab:ae:19:d6:f7:f3:bb:98: a6:25:60:cb:e7:fc:ba:df:c0:30:73:6b:ce:d5:a0: 8b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.138.48.0/21 193.168.52.0/23 193.168.56.0/23 IPv6: 2a0c:f840::/29 Signature Algorithm: sha256WithRSAEncryption 9c:5e:76:19:96:f5:17:58:6e:b9:89:f2:c4:0b:a6:7b:5d:c9: bb:94:40:11:67:24:8a:cf:a6:41:65:6d:49:7f:6b:3d:f0:ef: 13:bf:1a:bf:88:77:e9:d7:75:6b:e5:06:aa:67:bf:8e:a9:52: e5:05:49:56:92:b7:c4:66:bf:2e:19:98:51:c4:70:d6:b2:cd: 64:6a:5f:97:ae:f5:6b:17:01:a9:f7:10:51:90:ef:d4:0b:51: 5b:4f:33:e4:b9:68:06:31:83:47:ea:2a:28:85:40:f9:ff:ba: d8:73:00:4a:40:a5:58:fc:88:06:34:a5:c6:ae:82:83:3d:f3: bd:00:c2:68:fb:8b:74:44:1e:a2:cc:f3:c2:ca:80:2d:db:4a: cb:ae:7b:1a:df:8f:12:9a:22:de:fb:db:92:c3:c6:95:77:ff: ff:28:20:63:24:65:00:96:bc:8a:99:fc:df:9d:74:a3:c3:e1: f3:44:84:cd:4c:53:05:c4:6a:85:a0:5e:ee:d7:20:a3:42:d4: db:b1:2b:d1:f8:e1:7d:c5:1f:81:de:c8:1b:6e:d4:da:e1:d3: dc:ac:f3:a5:62:b5:04:7a:e6:b5:0e:2d:64:38:bb:5a:87:85: ca:41:bb:74:2b:10:39:f1:52:89:e9:3d:e9:40:0e:97:4d:48: e2:79:c1:ce -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt9yoYgggT2a8vHuZIa6iltMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTJmNmVlNmVlMzQ2YzMxOTEyYjc2MzBkYWIxNGNlNTNjNGUwYzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyVJvGXle1dVnnlsk24loN7LXdpA Om6FHx9s7jndji9Ys/7CpF4YPo50gailzDwTC8Dsd5OTRHuSxHdRqw0pqR7Zs5vu pzzx4xdGornEOQYyRaiadK6UqozkmpIFeqvQOIATU5CawqQVvc1RyJSPmYmTiegQ kLCE4c9QDgDX9sMR+n1oMM4pGTj+7ODOgWyXFtKXbgp5p+aL5tFHzMm95QN4h6Ds htdV9KpPS3sxi4aXmWyhUlZ9wmrVPYhVPm4dGj59DIhHB0yGlXP8y0rikvYiVA4v JO5+DE3by/i8yTloPPe7K5Npq64Z1vfzu5imJWDL5/y638Awc2vO1aCLyQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFDkvbubuNGwxkSt2MNqxTOU8TgyZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmLzQ1ZDk3 ZS00MGZlLTQ3ZTAtYjJlNi04YTcyYTFiNmFmODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvNDVkOTdl LTQwZmUtNDdlMC1iMmU2LThhNzJhMWI2YWY4NS8xL09TOXU1dTQwYkRHUkszWXcy ckZNNVR4T0RKay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDpIowAwQBwag0AwQBwag4MA0EAgACMAcDBQMq DPhAMA0GCSqGSIb3DQEBCwUAA4IBAQCcXnYZlvUXWG65ifLEC6Z7Xcm7lEARZySK z6ZBZW1Jf2s98O8Tvxq/iHfp13Vr5QaqZ7+OqVLlBUlWkrfEZr8uGZhRxHDWss1k al+XrvVrFwGp9xBRkO/UC1FbTzPkuWgGMYNH6ioohUD5/7rYcwBKQKVY/IgGNKXG roKDPfO9AMJo+4t0RB6izPPCyoAt20rLrnsa348SmiLe+9uSw8aVd///KCBjJGUA lryKmfzfnXSjw+HzRITNTFMFxGqFoF7u1yCjQtTbsSvR+OF9xR+B3sgbbtTa4dPc rPOlYrUEeua1Di1kOLtah4XKQbt0KxA58VKJ6T3pQA6XTUjiecHO -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:41 2026 by rpki-client