This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer File: OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer (raw, json) Hash identifier: pwq4fGzKEOSir/9kDw2GCsjmANzK5qxPd4SY8jhy00w= Subject key identifier: 3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F4D55E87CE6A2BBD64B188E675B9C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.172.4.0/22 IP: 193.105.36.0/24 IP: 2a0a:f900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:4d:55:e8:7c:e6:a2:bb:d6:4b:18:8e:67:5b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a07318a1314233f5623c0f835fae18f9126412f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d2:2b:8f:5e:e5:4d:e9:a9:cb:30:10:e5:f4: 14:c0:dd:3f:b2:c0:46:a5:79:da:3d:4c:d2:41:61: e3:0c:1b:a1:5a:f2:ea:81:5a:64:84:35:76:13:32: 4c:32:68:5a:86:b4:e2:f4:09:5f:b5:da:0c:b3:24: 0c:d2:88:3c:4d:aa:fe:60:8e:70:76:7f:5e:06:1e: 97:4c:eb:0e:c8:1c:89:75:e8:85:7a:18:02:cd:5f: c9:f2:96:fb:fc:55:8a:77:8d:8e:05:45:9d:c4:74: 38:86:e9:4f:23:00:58:9f:7a:a0:55:37:fb:77:28: 32:16:78:9e:70:76:7d:de:66:39:37:45:7a:74:5c: 27:cd:09:41:6e:7d:7b:e9:c5:65:a1:dc:f3:19:6f: 7a:a3:0b:d9:98:1e:2d:30:bd:5b:80:57:f2:d3:c5: 2e:d5:59:70:f3:ec:9d:70:49:3e:c7:ac:9d:7d:05: 07:cf:8c:4d:75:34:74:02:78:4b:7f:27:a2:5a:91: 7a:80:bb:a9:5c:2a:1b:50:b7:fb:c4:1a:7f:49:17: 27:95:f9:fe:b2:e2:70:1e:32:47:b1:7a:7e:aa:2b: 80:74:9a:37:64:82:b4:c5:03:d8:a7:90:b8:01:8b: cd:14:a1:7c:06:11:59:a1:b2:2d:51:d3:e4:c3:ec: c8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.4.0/22 193.105.36.0/24 IPv6: 2a0a:f900::/29 Signature Algorithm: sha256WithRSAEncryption 26:7a:c9:02:63:83:46:21:a0:00:b1:d7:ce:9a:dd:1a:08:6f: e8:0b:05:87:f0:80:dc:ab:80:05:06:a4:58:a1:00:ca:37:56: 7c:b6:e8:2d:c3:37:57:35:88:46:a0:da:5d:35:d6:97:7c:42: 3f:68:53:aa:95:d1:0e:7b:0e:9e:dc:f1:4b:9b:e5:e8:17:0d: b0:c8:02:15:2d:ae:45:72:7b:72:ce:7d:87:62:ba:5a:3d:d2: 6f:eb:dc:cd:29:ff:d0:ce:c5:59:c1:77:26:6b:f5:a4:b5:98: 45:a8:a1:52:f4:f5:2b:94:df:3b:ab:3e:81:40:e5:20:85:9b: 89:a4:32:c5:2e:7c:fb:dd:22:20:31:3e:70:38:0b:9d:4d:f3: c6:53:b8:53:37:05:1c:c0:9e:1a:9f:d4:da:fa:40:5f:ab:ef: 3a:8e:d9:e3:6d:a3:eb:4c:00:8c:d3:0e:c1:df:b1:26:28:d7: 19:dd:e8:d4:c1:a9:ba:08:75:db:ab:b5:1d:b9:0c:52:3d:57: 7a:c6:55:c1:39:d8:23:3c:1d:42:a9:ad:ec:9f:11:39:65:7e: 6d:24:af:53:2d:5b:41:d1:5d:c6:a8:34:61:60:2f:ec:b2:a4: b7:6e:4a:95:12:f1:9f:bf:37:0c:8b:47:f9:f2:d3:0a:38:45: 21:52:97:2c -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt5f01V6HzmorvWSxiOZ1ucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTA3MzE4YTEzMTQyMzNmNTYyM2MwZjgzNWZhZTE4ZjkxMjY0MTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNIrj17lTempyzAQ5fQUwN0/ssBG pXnaPUzSQWHjDBuhWvLqgVpkhDV2EzJMMmhahrTi9AlftdoMsyQM0og8Tar+YI5w dn9eBh6XTOsOyByJdeiFehgCzV/J8pb7/FWKd42OBUWdxHQ4hulPIwBYn3qgVTf7 dygyFniecHZ93mY5N0V6dFwnzQlBbn176cVlodzzGW96owvZmB4tML1bgFfy08Uu 1Vlw8+ydcEk+x6ydfQUHz4xNdTR0AnhLfyeiWpF6gLupXCobULf7xBp/SRcnlfn+ suJwHjJHsXp+qiuAdJo3ZIK0xQPYp5C4AYvNFKF8BhFZobItUdPkw+zIBwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFDoHMYoTFCM/ViPA+DX64Y+RJkEvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzJiNTM3 NC1kNDA1LTRmZjEtODU2My0wMjZhN2I2NTRmODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMmI1Mzc0 LWQ0MDUtNGZmMS04NTYzLTAyNmE3YjY1NGY4OC8xL09nY3hpaE1VSXo5V0k4RDRO ZnJoajVFbVFTOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuawEAwQAwWkkMA0EAgACMAcDBQMqCvkAMA0G CSqGSIb3DQEBCwUAA4IBAQAmeskCY4NGIaAAsdfOmt0aCG/oCwWH8IDcq4AFBqRY oQDKN1Z8tugtwzdXNYhGoNpdNdaXfEI/aFOqldEOew6e3PFLm+XoFw2wyAIVLa5F cntyzn2HYrpaPdJv69zNKf/QzsVZwXcma/WktZhFqKFS9PUrlN87qz6BQOUghZuJ pDLFLnz73SIgMT5wOAudTfPGU7hTNwUcwJ4an9Ta+kBfq+86jtnjbaPrTACM0w7B 37EmKNcZ3ejUwam6CHXbq7UduQxSPVd6xlXBOdgjPB1Cqa3snxE5ZX5tJK9TLVtB 0V3GqDRhYC/ssqS3bkqVEvGfvzcMi0f58tMKOEUhUpcs -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:22 2026 by rpki-client