This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer File: _OoI6EId8vJFx8szPudqFKiILUo.cer (raw, json) Hash identifier: L0uUTdDd2kubHezqMpHDjqjDOve85q3YWJMfgBHWPKg= Subject key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E376AA3CCB26B4995E68615AC8308F5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208662 IP: 45.86.104.0/22 IP: 2a0f:95c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:6a:a3:cc:b2:6b:49:95:e6:86:15:ac:83:08:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:27:3e:2a:14:c2:e4:24:e3:1c:41:f7:48:24: 84:ab:3f:de:bd:86:ce:b9:66:30:48:eb:64:9c:3d: 50:2d:3a:d5:37:4b:fc:5a:bb:64:5b:74:36:df:f3: 2c:66:33:60:77:a1:48:09:ea:90:c9:7b:de:86:0b: 56:71:00:2a:9e:8f:3e:55:b1:0a:46:c2:fb:5f:d4: aa:04:89:0a:70:e9:30:02:7f:ba:bf:8a:02:51:e6: 1a:db:c1:1c:1d:e8:4b:90:25:2a:24:ae:83:31:55: b9:0d:08:f5:38:d4:d9:28:a3:28:a6:91:45:db:b1: 48:34:34:fa:70:50:81:3c:8d:b2:93:0c:6a:24:de: 7e:d2:f1:af:08:3d:fa:2b:f2:32:a7:ff:66:8c:29: ee:4d:a6:f4:6b:33:43:dd:71:24:31:33:13:12:32: 84:d2:3d:a7:ec:9e:54:57:6f:6f:dd:16:8e:1e:f4: 02:dd:93:60:21:fb:dc:b9:2f:2e:e1:7a:71:ad:3e: c4:6a:30:05:af:ba:d7:3f:b9:48:7e:2b:c2:23:db: 81:46:05:e5:3b:bd:f0:63:23:e6:4f:a0:c0:bd:d4: 42:5f:c7:f5:58:ed:e0:d6:1d:80:41:8c:fe:1c:00: 13:c7:03:2a:5d:4b:ab:0e:2d:e5:46:14:2e:77:05: ca:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.104.0/22 IPv6: 2a0f:95c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208662 Signature Algorithm: sha256WithRSAEncryption 78:25:e3:de:09:5d:d6:9b:4a:c3:64:23:66:37:6d:b3:ff:ff: 7f:eb:b8:5e:25:d6:57:87:38:49:98:13:37:b4:22:40:6f:ac: a4:7b:94:cf:44:41:bc:e5:5d:b1:ee:df:a5:7c:fb:19:11:28: 02:94:17:e5:6d:ec:07:44:d9:11:f9:d4:88:96:0d:81:80:1f: 16:ec:c7:06:72:54:05:fd:cb:15:56:9b:c4:e2:28:c7:d4:fb: 32:d2:2d:96:2a:9e:35:35:39:d3:e9:7c:bc:18:bb:3a:8a:b0: 90:1d:9c:3d:91:08:02:ab:cb:2c:15:34:d9:4e:1e:fb:cb:47: 3a:f0:ae:b3:7a:ed:13:a8:dc:78:9b:67:5a:d2:82:11:3e:64: 71:25:b7:b4:48:ba:9f:54:8d:1e:54:9d:7d:7e:11:f1:4a:71: a6:f7:80:f2:65:be:5a:c5:ca:b7:ee:4c:84:7f:f6:9e:2d:09: 28:4d:63:e3:84:a0:94:54:48:fd:7c:85:6c:31:bc:a6:5d:64: f1:e8:f6:d3:76:ce:9f:45:7b:b3:b2:f0:14:7c:49:c2:11:3c: dc:7d:f0:bc:e9:69:25:a1:67:fd:e7:fc:17:28:25:86:f7:b9: e8:b5:03:8b:f4:fc:0f:73:b9:92:2e:7e:fd:c3:de:b8:03:81: cd:d0:14:c4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+N2qjzLJrSZXmhhWsgwj1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2VhMDhlODQyMWRmMmYyNDVjN2NiMzMzZWU3NmExNGE4ODgyZDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ic+KhTC5CTjHEH3SCSEqz/evYbO uWYwSOtknD1QLTrVN0v8WrtkW3Q23/MsZjNgd6FICeqQyXvehgtWcQAqno8+VbEK RsL7X9SqBIkKcOkwAn+6v4oCUeYa28EcHehLkCUqJK6DMVW5DQj1ONTZKKMoppFF 27FINDT6cFCBPI2ykwxqJN5+0vGvCD36K/Iyp/9mjCnuTab0azND3XEkMTMTEjKE 0j2n7J5UV29v3RaOHvQC3ZNgIfvcuS8u4XpxrT7EajAFr7rXP7lIfivCI9uBRgXl O73wYyPmT6DAvdRCX8f1WO3g1h2AQYz+HAATxwMqXUurDi3lRhQudwXKxwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFPzqCOhCHfLyRcfLMz7nahSoiC1KMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1L2VhN2U2 MS05OGIzLTQxMjAtODNjZS1jMDc3ZTE3MDJiYzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvZWE3ZTYx LTk4YjMtNDEyMC04M2NlLWMwNzdlMTcwMmJjNy8xL19Pb0k2RUlkOHZKRng4c3pQ dWRxRktpSUxVby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLVZoMA0EAgACMAcDBQAqD5XAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMvFjANBgkqhkiG9w0BAQsFAAOCAQEAeCXj3gld1ptK w2QjZjdts///f+u4XiXWV4c4SZgTN7QiQG+spHuUz0RBvOVdse7fpXz7GREoApQX 5W3sB0TZEfnUiJYNgYAfFuzHBnJUBf3LFVabxOIox9T7MtItliqeNTU50+l8vBi7 OoqwkB2cPZEIAqvLLBU02U4e+8tHOvCus3rtE6jceJtnWtKCET5kcSW3tEi6n1SN HlSdfX4R8UpxpveA8mW+WsXKt+5MhH/2ni0JKE1j44SglFRI/XyFbDG8pl1k8ej2 03bOn0V7s7LwFHxJwhE83H3wvOlpJaFn/ef8Fyglhve56LUDi/T8D3O5ki5+/cPe uAOBzdAUxA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:25:59 2026 by rpki-client