This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer File: OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer (raw, json) Hash identifier: V7bn33uTEvqd8k8eE7TOw7md5zaQneLPYJnQySFdIS8= Subject key identifier: 39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834B9579F318CEDE4C89FE2B1F487BB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.134.97.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b9:57:9f:31:8c:ed:e4:c8:9f:e2:b1:f4:87:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3925df798706f90e6d8fd42049555024b73ed369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:51:39:59:5b:23:d2:f9:af:48:d9:6a:96:51: 5f:89:43:43:dd:ba:38:13:f5:2e:83:f8:b4:b9:f3: 15:09:dc:ee:a2:e3:f6:99:50:53:6e:fd:bc:99:05: c7:88:f3:66:87:5a:5e:7d:35:6c:7f:e9:5f:5d:82: 5a:a2:53:a6:89:47:10:08:8d:a6:5e:af:0c:3c:72: 49:d0:7d:06:02:76:36:ce:6a:5e:fc:64:e6:70:81: 4d:5d:5c:d1:75:17:27:79:31:68:1f:41:99:46:a0: e7:85:8c:18:d2:b9:80:09:fa:c5:4e:ee:c3:71:fb: 12:7b:51:8c:38:5a:42:7d:5f:4b:fb:45:74:ed:c5: 1f:52:9f:56:1f:ac:0f:99:0f:66:6d:08:e0:83:64: bf:1a:cd:2d:e0:ef:0b:47:ff:bf:73:0c:f6:76:b1: 0f:08:e8:21:8d:9f:d7:04:af:b5:e4:01:d9:5a:4c: 06:c8:40:be:81:15:e2:aa:3d:e1:0e:b9:1e:fd:a8: cc:35:0e:d4:2b:47:3d:0e:12:90:d7:ea:f7:e8:e8: d6:99:72:3f:2a:d9:21:85:e2:d5:a3:d3:ab:ef:65: bd:29:d4:d1:53:f8:7c:b2:27:13:a2:f1:7e:32:87: 43:15:35:c0:22:44:ae:ef:59:83:01:75:a3:f0:d6: be:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.97.0/24 Signature Algorithm: sha256WithRSAEncryption 36:dd:e3:7f:cc:e7:28:8c:7e:73:d6:99:82:18:57:93:4b:84: 34:85:59:1b:b3:1f:84:70:52:65:bf:d1:1f:3a:1e:a7:7a:dc: 88:89:a5:7f:45:93:3a:2b:9f:3f:2c:16:33:29:8d:57:fa:db: 53:b0:f6:f8:bb:b5:c6:bb:d3:12:68:ba:ae:bc:f7:e4:58:41: 0e:49:9f:27:35:90:52:7a:b2:40:15:cf:51:1d:96:02:63:01: cb:6a:00:15:2b:3b:1a:80:d3:86:46:17:f8:86:7b:c7:ea:7d: 03:ca:20:22:b0:8e:b9:20:ff:65:f7:2e:28:22:aa:09:ad:90: 9c:35:b5:f4:42:d7:e3:db:29:f1:b2:26:67:46:3f:f1:4a:5e: 49:0f:18:6a:5a:44:d0:9f:12:d0:ba:0d:64:c5:5f:da:49:2e: a0:f5:fb:04:29:3f:6a:02:51:e3:f5:1a:5d:83:38:61:f4:d4: c8:b6:9e:1a:35:e9:85:3f:b4:53:af:fb:8d:1b:86:d6:9f:7e: 23:b6:46:0b:bb:f4:d8:85:c4:3f:e6:05:b5:b0:08:0b:b2:a7: 52:76:f5:9c:c8:f8:21:a1:20:af:06:bb:ea:69:b5:1e:7f:f3: 72:c0:02:fb:a8:f4:10:f6:f2:67:6d:53:9e:cd:84:37:65:df: d6:ac:05:bd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4NLlXnzGM7eTIn+Kx9Ie7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTI1ZGY3OTg3MDZmOTBlNmQ4ZmQ0MjA0OTU1NTAyNGI3M2VkMzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFE5WVsj0vmvSNlqllFfiUND3bo4 E/Uug/i0ufMVCdzuouP2mVBTbv28mQXHiPNmh1pefTVsf+lfXYJaolOmiUcQCI2m Xq8MPHJJ0H0GAnY2zmpe/GTmcIFNXVzRdRcneTFoH0GZRqDnhYwY0rmACfrFTu7D cfsSe1GMOFpCfV9L+0V07cUfUp9WH6wPmQ9mbQjgg2S/Gs0t4O8LR/+/cwz2drEP COghjZ/XBK+15AHZWkwGyEC+gRXiqj3hDrke/ajMNQ7UK0c9DhKQ1+r36OjWmXI/ KtkhheLVo9Or72W9KdTRU/h8sicTovF+ModDFTXAIkSu71mDAXWj8Na+HQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFDkl33mHBvkObY/UIElVUCS3PtNpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3LzFjN2Ni Mi03NjljLTQ3YWUtYjVjNS0wODk0MmI0NTQ5OTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvMWM3Y2Iy LTc2OWMtNDdhZS1iNWM1LTA4OTQyYjQ1NDk5OC8xL09TWGZlWWNHLVE1dGo5UWdT VlZRSkxjLTAyay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQALYZhMA0GCSqGSIb3DQEBCwUAA4IBAQA23eN/ zOcojH5z1pmCGFeTS4Q0hVkbsx+EcFJlv9EfOh6netyIiaV/RZM6K58/LBYzKY1X +ttTsPb4u7XGu9MSaLquvPfkWEEOSZ8nNZBSerJAFc9RHZYCYwHLagAVKzsagNOG Rhf4hnvH6n0DyiAisI65IP9l9y4oIqoJrZCcNbX0Qtfj2ynxsiZnRj/xSl5JDxhq WkTQnxLQug1kxV/aSS6g9fsEKT9qAlHj9Rpdgzhh9NTItp4aNemFP7RTr/uNG4bW n34jtkYLu/TYhcQ/5gW1sAgLsqdSdvWcyPghoSCvBrvqabUef/NywAL7qPQQ9vJn bVOezYQ3Zd/WrAW9 -----END CERTIFICATE-----Generated at Mon Jan 26 09:00:19 2026 by rpki-client