This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer File: PubOz_2bi7oY1HTns5k-Ch0U27M.cer (raw, json) Hash identifier: 5l9vC4U8nRFwQ468XBC4TfHyGUx32R0hDEVYmb4Lp3I= Subject key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3FE47CA41CF8B956876E928B99BF7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59453 IP: 194.246.0.0/19 IP: 2a01:8d40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:fe:47:ca:41:cf:8b:95:68:76:e9:28:b9:9b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:fa:69:fd:67:77:2b:60:02:50:44:c7:a3:08: d2:ae:11:83:34:c8:62:06:6e:8b:18:a2:9d:53:64: 1e:a2:14:fe:2a:ac:82:db:0f:70:b3:cc:e5:c8:16: 13:e5:78:18:d0:3e:2d:eb:19:e6:e1:4e:3f:ef:ac: 45:7b:4f:bc:ff:df:3d:5d:aa:fe:ca:97:ba:5d:14: e3:31:cd:0e:7b:21:3a:27:46:0e:96:62:b3:17:d1: 29:35:06:db:6a:72:47:16:c9:e5:76:93:6a:a5:b7: 5d:4b:13:ab:4a:73:f3:a0:d5:7d:2d:eb:a1:e1:90: ed:02:e2:8a:df:0f:bd:40:e5:a5:4f:8d:a5:d9:ca: 84:48:29:d9:38:40:03:9c:e9:c1:bb:3d:36:a2:58: 39:fd:30:01:01:13:bc:53:f7:20:b7:07:9e:9a:33: a1:09:7d:90:25:00:37:d2:03:67:11:69:53:50:d3: 62:e2:bd:23:10:40:05:c2:c4:38:33:b8:89:b9:db: 8f:8a:57:95:cf:d8:10:ef:47:ca:f7:54:c0:9c:23: 54:58:82:e5:04:a6:cd:4b:35:09:22:34:2a:9f:05: 99:c0:56:ff:46:9c:e7:1e:72:a3:b7:f1:ea:b5:d3: 0a:be:c3:1c:fe:f8:5c:d7:3a:db:32:0e:26:9a:d7: 00:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.246.0.0/19 IPv6: 2a01:8d40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59453 Signature Algorithm: sha256WithRSAEncryption 65:44:e6:66:f9:78:eb:ce:0c:eb:a0:a3:4a:ac:57:3b:54:01: aa:b7:a2:09:54:ea:f1:32:3c:2c:1d:b2:85:c5:b4:91:29:e5: 4f:fd:0a:a9:b7:9c:44:f6:4f:e4:7a:8f:4e:1e:e8:ce:9e:da: 83:9a:7e:db:3d:71:e6:47:b3:a2:31:1e:8c:15:ab:70:10:51: c8:3b:0f:43:c0:cc:24:9c:08:48:f3:2f:a3:45:4d:d9:f0:f6: 87:ec:90:f5:d4:28:e5:d5:77:71:5e:5b:95:9f:ab:09:56:41: 89:e5:fe:dd:dc:14:06:f0:3f:49:98:d5:2b:e5:32:9a:fc:61: fe:c9:f4:bb:f8:77:c7:89:e2:b6:0f:5d:c0:c8:36:a4:b5:cf: 16:b1:3a:4e:42:44:14:f0:35:8f:1e:0a:82:63:bc:2c:d7:71: 4b:c4:87:c3:fe:79:f0:ae:61:b0:c8:aa:75:e8:66:f9:36:90: 7e:7e:5a:a6:95:c0:e1:e1:5c:11:57:35:69:6f:22:06:8a:2e: 26:b4:1c:82:3c:ed:95:04:93:08:27:0d:fc:be:e7:3d:eb:23: 07:de:ec:49:7b:45:6b:cc:58:97:64:a7:71:f3:e6:7d:3b:d1: 75:f7:bb:62:2f:e4:f2:1b:72:8c:b6:32:6d:5e:89:48:a2:eb: a5:7b:2b:27 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7o/5HykHPi5VodukouZv3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWU2Y2VjZmZkOWI4YmJhMThkNDc0ZTdiMzk5M2UwYTFkMTRkYmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ppp/Wd3K2ACUETHowjSrhGDNMhi Bm6LGKKdU2QeohT+KqyC2w9ws8zlyBYT5XgY0D4t6xnm4U4/76xFe0+8/989Xar+ ype6XRTjMc0OeyE6J0YOlmKzF9EpNQbbanJHFsnldpNqpbddSxOrSnPzoNV9Leuh 4ZDtAuKK3w+9QOWlT42l2cqESCnZOEADnOnBuz02olg5/TABARO8U/cgtweemjOh CX2QJQA30gNnEWlTUNNi4r0jEEAFwsQ4M7iJuduPileVz9gQ70fK91TAnCNUWILl BKbNSzUJIjQqnwWZwFb/RpznHnKjt/HqtdMKvsMc/vhc1zrbMg4mmtcA5QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFD7mzs/9m4u6GNR057OZPgodFNuzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5L2U2MWNh YS0yNTAwLTQzODgtYTlmYS03MzI0OTEzOTc1ZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvZTYxY2Fh LTI1MDAtNDM4OC1hOWZhLTczMjQ5MTM5NzVkNS8xL1B1Yk96XzJiaTdvWTFIVG5z NWstQ2gwVTI3TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQFwvYAMA0EAgACMAcDBQMqAY1AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDoPTANBgkqhkiG9w0BAQsFAAOCAQEAZUTmZvl4684M 66CjSqxXO1QBqreiCVTq8TI8LB2yhcW0kSnlT/0KqbecRPZP5HqPTh7ozp7ag5p+ 2z1x5kezojEejBWrcBBRyDsPQ8DMJJwISPMvo0VN2fD2h+yQ9dQo5dV3cV5blZ+r CVZBieX+3dwUBvA/SZjVK+Uymvxh/sn0u/h3x4nitg9dwMg2pLXPFrE6TkJEFPA1 jx4KgmO8LNdxS8SHw/558K5hsMiqdehm+TaQfn5appXA4eFcEVc1aW8iBoouJrQc gjztlQSTCCcN/L7nPesjB97sSXtFa8xYl2SncfPmfTvRdfe7Yi/k8htyjLYybV6J SKLrpXsrJw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:42:04 2026 by rpki-client