This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer File: OpNtLymObP1WYEVz0e-eDoKZtSk.cer (raw, json) Hash identifier: LWWaFpN2pbPv4+vcMf8A3iu2Yvf7M1r/1X9khU4GGHc= Subject key identifier: 3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79103B4A3E4D612C8950117AB488DDB4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 164.131.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3b:4a:3e:4d:61:2c:89:50:11:7a:b4:88:dd:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:36:c8:95:c5:c8:cb:41:51:cf:42:3d:26:c9: 44:fe:6a:2f:a4:c1:a4:bc:b2:6e:1a:7e:ad:6a:ab: 26:66:9b:38:78:11:26:49:b3:c0:49:f1:12:b3:7e: f4:fc:3a:23:69:d2:7b:a6:42:83:33:a3:65:c7:24: 0d:e0:ac:ec:4f:7d:e4:48:7b:e6:d9:08:c4:fe:33: 9b:a9:30:c3:80:7e:ae:84:8e:3b:b0:59:cb:37:49: 52:a0:fb:cd:72:5a:e8:40:3e:80:88:bc:b4:2a:79: 79:45:bd:50:4d:35:2f:5c:e0:1d:d4:ef:4c:ac:a4: 43:7d:c6:32:9d:c2:63:32:ee:e4:5b:9b:6e:31:0c: d7:e1:c3:2d:c9:c6:83:2a:eb:76:61:4f:86:f0:8a: 66:45:3f:83:71:66:1f:3b:fa:68:2f:b6:c0:da:b0: d3:87:5d:cc:e6:80:ac:55:bd:e9:5f:51:dc:19:a0: 18:0f:22:27:6b:82:46:13:5b:c9:12:16:67:54:9f: a3:05:aa:7e:9f:5f:dd:0b:d8:3a:08:06:6e:34:5c: ce:40:83:b8:3b:e0:dd:6a:26:ec:b4:3d:7b:fb:c3: 7c:d5:6e:7c:2f:b8:56:a0:07:e7:16:fe:4c:74:74: fa:6e:83:f4:51:1c:80:9d:ff:94:15:aa:f1:f5:b0: c2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.131.0.0/16 Signature Algorithm: sha256WithRSAEncryption 57:6b:58:6e:63:45:1c:a1:8e:03:b5:b2:00:b9:ab:f5:ba:71: 7f:ee:5b:52:b3:a3:a2:27:93:f7:3d:ca:bb:78:b4:bd:7a:8f: 8d:cf:a9:9f:78:b3:78:5a:f1:da:1e:09:47:27:5f:11:4e:02: 06:bc:07:6c:cd:e4:59:27:ff:42:2d:f9:d4:42:9c:f9:ac:e0: f7:03:aa:58:d1:00:76:58:e4:a1:1c:57:2a:37:e9:08:31:a4: 29:b9:26:74:4f:39:4f:91:a9:e3:0e:2c:dd:40:c4:39:32:03: df:8a:d3:c0:06:30:3d:e3:f2:ec:09:0e:35:85:bf:f1:07:72: 1d:d8:86:17:dc:e1:c2:65:32:63:70:0d:3d:8a:f1:73:0c:ff: b2:f1:cb:2a:23:a9:d7:f7:71:59:f3:47:ba:9f:76:d2:19:14: 2b:0a:96:41:15:d0:9b:a3:83:37:a9:e5:e7:f5:e2:0c:cb:cb: 97:f6:84:ed:cf:ae:15:fe:0f:e2:77:a4:af:69:b6:37:d5:de: ad:e8:d4:a3:2c:17:c0:a2:ac:f0:b2:db:86:ff:61:b3:88:ea: 6c:4d:95:82:6d:0b:fb:fb:f7:ce:d8:62:fe:44:eb:86:3c:dd: 3b:8b:53:fb:a7:ff:66:bc:af:29:d9:2d:07:93:88:43:03:66: 87:21:a8:ac -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt5EDtKPk1hLIlQEXq0iN20MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTkzNmQyZjI5OGU2Y2ZkNTY2MDQ1NzNkMWVmOWUwZTgyOTliNTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDbIlcXIy0FRz0I9JslE/movpMGk vLJuGn6taqsmZps4eBEmSbPASfESs370/DojadJ7pkKDM6NlxyQN4KzsT33kSHvm 2QjE/jObqTDDgH6uhI47sFnLN0lSoPvNclroQD6AiLy0Knl5Rb1QTTUvXOAd1O9M rKRDfcYyncJjMu7kW5tuMQzX4cMtycaDKut2YU+G8IpmRT+DcWYfO/poL7bA2rDT h13M5oCsVb3pX1HcGaAYDyIna4JGE1vJEhZnVJ+jBap+n1/dC9g6CAZuNFzOQIO4 O+DdaibstD17+8N81W58L7hWoAfnFv5MdHT6boP0URyAnf+UFarx9bDC1wIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFDqTbS8pjmz9VmBFc9Hvng6CmbUpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzLzcwNDk3 My0xODY2LTQwZDEtOWExZC1iNWY4ZWMwYWFkN2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvNzA0OTcz LTE4NjYtNDBkMS05YTFkLWI1ZjhlYzBhYWQ3Yy8xL09wTnRMeW1PYlAxV1lFVnow ZS1lRG9LWnRTay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMApIMwDQYJKoZIhvcNAQELBQADggEBAFdrWG5j RRyhjgO1sgC5q/W6cX/uW1Kzo6Ink/c9yrt4tL16j43PqZ94s3ha8doeCUcnXxFO Aga8B2zN5Fkn/0It+dRCnPms4PcDqljRAHZY5KEcVyo36QgxpCm5JnRPOU+RqeMO LN1AxDkyA9+K08AGMD3j8uwJDjWFv/EHch3Yhhfc4cJlMmNwDT2K8XMM/7Lxyyoj qdf3cVnzR7qfdtIZFCsKlkEV0Jujgzep5ef14gzLy5f2hO3PrhX+D+J3pK9ptjfV 3q3o1KMsF8CirPCy24b/YbOI6mxNlYJtC/v7987YYv5E64Y83TuLU/un/2a8rynZ LQeTiEMDZochqKw= -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:35 2026 by rpki-client