This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer File: Oexx3D1ozej5B3069mdRwp_O6kw.cer (raw, json) Hash identifier: eJmZFZl1aCE+blaSaAM6/agkpN5XMETpPMmWgGhlEJw= Subject key identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38BF5240B561639CBA81006B4E38F6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 178.213.152.0/21 IP: 2001:67c:134c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:bf:52:40:b5:61:63:9c:ba:81:00:6b:4e:38:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:47:11:fc:16:64:15:f5:ba:a3:67:9c:7e: a6:b2:27:d1:c2:e7:1b:32:bf:ce:4a:b9:c7:75:ec: a4:51:da:77:9d:a4:61:63:ad:76:78:6f:2e:ec:52: fb:db:6e:17:f2:4a:80:1d:9d:79:1a:f1:04:1f:af: c0:2d:19:34:cf:6e:70:b2:74:a2:28:14:f0:0c:91: 5f:9d:d4:c5:79:f1:5d:55:36:30:d7:fb:e5:df:f9: 22:36:68:47:31:14:fd:03:7a:c2:9b:1c:35:02:45: 0b:7c:da:26:e4:14:5f:4e:a4:f2:c5:80:e1:72:19: fd:a1:c9:49:4f:4b:ac:7a:04:06:7d:66:44:40:aa: 82:3a:a4:f4:42:75:4d:62:39:22:e0:e8:f0:e3:d0: c4:e4:92:01:5f:e3:0e:75:a7:f3:53:ec:3d:6d:c7: 47:3a:2c:d5:5a:2c:a7:40:ca:0e:98:a0:c0:21:3d: c0:8d:29:52:ed:8d:1c:c5:88:12:4d:e8:0f:58:7b: 68:59:fe:51:fb:2f:97:6f:64:c7:16:e8:15:d5:52: c5:dc:a7:91:46:1c:dd:17:62:68:08:eb:e3:d5:8e: 97:1f:55:6f:16:4e:ec:0f:a0:ae:04:3a:76:29:74: 6b:c2:03:1c:22:18:15:e8:f5:a9:27:4c:21:d1:39: d8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.213.152.0/21 IPv6: 2001:67c:134c::/48 Signature Algorithm: sha256WithRSAEncryption 8b:bc:c6:59:cd:24:51:a1:05:3c:c1:6a:e6:cf:ff:62:31:fd: b9:c0:0b:f1:e9:4f:f9:f9:e3:d2:f7:bf:a3:44:5d:23:1e:0a: f0:2a:f7:4c:05:95:4c:19:61:bc:a8:37:c0:6e:87:fd:98:f3: 2f:84:2c:7b:f7:5e:1f:af:4e:45:c4:48:b3:57:19:24:df:8f: 29:1a:1c:30:39:91:8d:a0:74:2a:63:3f:01:ec:04:80:50:d3: e2:58:e4:46:c7:a5:c9:8c:37:f6:af:d7:71:42:e1:3b:89:2c: 59:34:39:39:32:4d:b3:a7:48:81:10:5b:01:c5:a5:18:d4:07: 9f:db:0a:53:3a:d5:de:42:df:f1:55:49:46:77:ea:d3:45:07: 76:34:5a:d2:09:81:52:c5:97:32:95:e0:fa:24:24:36:8a:16: 5d:39:7f:8a:fb:0a:d5:65:74:45:9c:28:a2:5b:dd:43:38:d6: 7f:a8:a3:f9:61:81:56:b6:82:8c:94:aa:77:80:d5:cb:c2:37: 8b:45:7a:23:10:25:bf:02:ab:6b:98:af:5f:0a:46:a2:ab:40: 20:e1:77:f4:2c:4a:f3:d0:95:e3:f0:28:e5:a9:5a:94:10:c2: a3:73:49:46:2e:6d:ab:c6:70:ce:22:eb:dd:47:57:22:9e:4b: a4:5a:82:8e -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt+OL9SQLVhY5y6gQBrTjj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWVjNzFkYzNkNjhjZGU4ZjkwNzdkM2FmNjY3NTFjMjlmY2VlYTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtChHEfwWZBX1uqNnnH6msifRwucb Mr/OSrnHdeykUdp3naRhY612eG8u7FL7224X8kqAHZ15GvEEH6/ALRk0z25wsnSi KBTwDJFfndTFefFdVTYw1/vl3/kiNmhHMRT9A3rCmxw1AkULfNom5BRfTqTyxYDh chn9oclJT0usegQGfWZEQKqCOqT0QnVNYjki4Ojw49DE5JIBX+MOdafzU+w9bcdH OizVWiynQMoOmKDAIT3AjSlS7Y0cxYgSTegPWHtoWf5R+y+Xb2THFugV1VLF3KeR RhzdF2JoCOvj1Y6XH1VvFk7sD6CuBDp2KXRrwgMcIhgV6PWpJ0wh0TnYVwIDAQAB o4IClTCCApEwHQYDVR0OBBYEFDnscdw9aM3o+Qd9OvZnUcKfzupMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3LzFiZmRm Ny1hMTlmLTQxOGUtODljNy1kYjNmMjI3MDVkZDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvMWJmZGY3 LWExOWYtNDE4ZS04OWM3LWRiM2YyMjcwNWRkNi8xL09leHgzRDFvemVqNUIzMDY5 bWRSd3BfTzZrdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQDstWYMA8EAgACMAkDBwAgAQZ8E0wwDQYJKoZI hvcNAQELBQADggEBAIu8xlnNJFGhBTzBaubP/2Ix/bnAC/HpT/n549L3v6NEXSMe CvAq90wFlUwZYbyoN8Buh/2Y8y+ELHv3Xh+vTkXESLNXGSTfjykaHDA5kY2gdCpj PwHsBIBQ0+JY5EbHpcmMN/av13FC4TuJLFk0OTkyTbOnSIEQWwHFpRjUB5/bClM6 1d5C3/FVSUZ36tNFB3Y0WtIJgVLFlzKV4PokJDaKFl05f4r7CtVldEWcKKJb3UM4 1n+oo/lhgVa2goyUqneA1cvCN4tFeiMQJb8Cq2uYr18KRqKrQCDhd/QsSvPQlePw KOWpWpQQwqNzSUYubavGcM4i691HVyKeS6Rago4= -----END CERTIFICATE-----Generated at Mon Jan 26 00:17:54 2026 by rpki-client