This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OdAejKCv5BTBV-H7-1OUhnzlHts.cer File: OdAejKCv5BTBV-H7-1OUhnzlHts.cer (raw, json) Hash identifier: f76A2SG4SX0mnUM/s/QD8OHKnac1V7pq1loLgYQLpfw= Subject key identifier: 39:D0:1E:8C:A0:AF:E4:14:C1:57:E1:FB:FB:53:94:86:7C:E5:1E:DB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AA678ECADB1030610495CFC8BA48AB30C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 21 Nov 2025 12:52:14 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203529 IP: 194.140.195.0/24 IP: 2a11:6740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:78:ec:ad:b1:03:06:10:49:5c:fc:8b:a4:8a:b3:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 21 12:52:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=39d01e8ca0afe414c157e1fbfb5394867ce51edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dc:d5:d8:40:db:51:3b:3f:92:3e:01:be:e4: ca:39:22:05:b3:04:07:d2:8d:8d:f5:5d:b5:72:ac: 1a:73:93:e9:2a:bf:ae:d5:7c:40:2a:f8:fb:42:cc: da:63:13:4e:3f:64:2d:04:4a:30:93:f0:41:d7:d6: ed:bf:35:4f:6d:5b:96:a2:43:d8:1b:7b:df:23:7d: 9b:fb:a0:0f:e9:f8:dd:d7:e6:42:96:90:00:6a:ef: 77:a9:e0:22:a6:3b:c2:ee:e6:06:f9:69:4e:15:39: d9:7b:b2:36:55:d4:98:4a:34:ca:08:45:c9:4c:24: bd:b6:fc:e4:db:7d:c3:e3:00:63:5c:a8:2c:dc:c9: bf:4b:44:05:7b:b8:4b:e7:2c:54:f3:c9:f5:ec:13: 8a:02:b0:30:36:fe:61:f7:81:ce:75:26:ff:28:d0: 0a:8d:39:b7:e7:3f:32:63:42:97:80:6c:01:4f:ce: 0a:55:cc:db:da:2b:4e:4f:2d:27:5e:e7:66:12:3a: 8f:bd:65:2e:c6:77:63:57:2c:90:0b:bc:0c:d0:8b: 64:a0:fb:6b:5c:6f:e0:f0:2e:84:5a:7a:a1:7e:07: 3c:0e:02:49:a6:d2:f7:93:d8:78:1d:b9:3a:ea:ee: 5a:58:e1:bc:67:af:4a:d3:6b:6c:3c:d4:f7:f8:13: 0a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D0:1E:8C:A0:AF:E4:14:C1:57:E1:FB:FB:53:94:86:7C:E5:1E:DB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.140.195.0/24 IPv6: 2a11:6740::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203529 Signature Algorithm: sha256WithRSAEncryption 0e:7a:4e:16:e5:7f:9a:7d:db:ea:63:51:8d:4a:35:5f:be:4f: 30:cb:ee:6d:81:b2:c0:00:ff:38:49:5b:9e:63:01:eb:35:02: 9a:25:35:3e:40:b8:ed:40:28:3d:3d:7d:81:48:0c:19:f2:c6: 28:6f:4a:16:40:a8:aa:56:89:3e:3b:e8:d2:39:ba:07:99:ea: 78:53:06:21:41:3d:42:03:76:86:40:b7:55:aa:e0:36:e6:53: 31:67:56:e9:9b:eb:16:c6:6e:6b:f1:1d:e4:e1:b7:49:f5:d3: 15:4a:fa:45:b1:74:07:4e:0c:d6:fc:c5:07:b2:ec:e5:fa:ac: 2c:e8:eb:d1:b2:2a:48:98:b9:24:9b:29:ff:bb:a6:c7:3e:57: 64:a8:e9:d7:5a:ba:15:3e:27:0d:43:b2:30:ed:b7:46:af:9c: e4:ef:9f:ee:b5:6e:aa:69:9e:bc:c3:5b:66:59:1e:93:76:41: 70:a9:f6:e3:11:fc:76:63:ea:68:d3:83:7f:38:74:b2:6c:7c: 84:c3:10:9b:9c:4c:80:6c:5c:8a:d1:8e:40:36:96:7b:32:13: 2b:bf:d4:c6:d8:b6:8a:51:46:fd:71:ba:0a:71:35:38:0c:4d: 18:5f:69:b6:19:07:96:26:0b:75:95:6e:e1:54:c2:0b:9a:07: b6:4b:7a:a7 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZqmeOytsQMGEElc/IukirMMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIxMTI1MjE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWQwMWU4Y2EwYWZlNDE0YzE1N2UxZmJmYjUzOTQ4NjdjZTUxZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9zV2EDbUTs/kj4BvuTKOSIFswQH 0o2N9V21cqwac5PpKr+u1XxAKvj7QszaYxNOP2QtBEowk/BB19btvzVPbVuWokPY G3vfI32b+6AP6fjd1+ZClpAAau93qeAipjvC7uYG+WlOFTnZe7I2VdSYSjTKCEXJ TCS9tvzk233D4wBjXKgs3Mm/S0QFe7hL5yxU88n17BOKArAwNv5h94HOdSb/KNAK jTm35z8yY0KXgGwBT84KVczb2itOTy0nXudmEjqPvWUuxndjVyyQC7wM0ItkoPtr XG/g8C6EWnqhfgc8DgJJptL3k9h4Hbk66u5aWOG8Z69K02tsPNT3+BMKbwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDnQHoygr+QUwVfh+/tTlIZ85R7bMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyL2E5N2M3 ZC1iY2M3LTRmYjUtODZlMi0yZTYyNDZjMjE5ZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvYTk3Yzdk LWJjYzctNGZiNS04NmUyLTJlNjI0NmMyMTlmNy8xL09kQWVqS0N2NUJUQlYtSDct MU9VaG56bEh0cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwozDMA0EAgACMAcDBQMqEWdAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMbCTANBgkqhkiG9w0BAQsFAAOCAQEADnpOFuV/mn3b 6mNRjUo1X75PMMvubYGywAD/OElbnmMB6zUCmiU1PkC47UAoPT19gUgMGfLGKG9K FkCoqlaJPjvo0jm6B5nqeFMGIUE9QgN2hkC3VargNuZTMWdW6ZvrFsZua/Ed5OG3 SfXTFUr6RbF0B04M1vzFB7Ls5fqsLOjr0bIqSJi5JJsp/7umxz5XZKjp11q6FT4n DUOyMO23Rq+c5O+f7rVuqmmevMNbZlkek3ZBcKn24xH8dmPqaNODfzh0smx8hMMQ m5xMgGxcitGOQDaWezITK7/Uxti2ilFG/XG6CnE1OAxNGF9pthkHliYLdZVu4VTC C5oHtkt6pw== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:30 2025 by rpki-client