This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer File: aOi66pXUBANI8KiexOS9FSdfbDk.cer (raw, json) Hash identifier: rnPcnHz/WHZJAAnQ34XdkQVLScoCznCaK7t7JO2Rq20= Subject key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79105E5464021F90625A0E91B212B5C6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 147.78.32.0/22 IP: 2a09:1c40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5e:54:64:02:1f:90:62:5a:0e:91:b2:12:b5:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4e:c2:3d:ac:b8:6f:ea:8b:9c:bd:a8:b1:15: eb:32:bc:e7:83:9d:fe:ec:ff:71:86:87:79:67:6d: b1:ea:07:73:58:34:43:4b:27:ef:e0:14:08:3f:2e: 14:89:bb:31:5a:ce:e4:69:73:d2:ae:30:3a:9f:b9: 42:09:12:ac:4a:01:6c:b5:51:e8:a8:68:ba:35:29: e1:ee:5c:a7:e8:43:be:3e:ce:4d:81:28:3b:4a:50: 72:20:60:0a:98:c5:0d:33:6e:73:69:93:ce:f9:94: 48:f2:e9:a7:e1:fe:19:c6:cf:b1:10:fe:e6:a7:dd: 9e:20:36:6b:0e:bc:37:6a:27:79:15:1e:22:cc:fc: 21:df:7d:a7:bf:2b:b4:27:cc:0b:b8:ef:94:9d:78: 6d:9e:86:c9:42:d8:a3:aa:5b:fc:d3:d1:38:7d:03: 33:e9:25:c2:08:7f:1b:3b:7b:87:db:c7:40:21:0b: 09:1a:a2:05:f6:fe:14:c3:4e:e9:df:e7:0d:69:22: 08:64:c9:97:da:39:c8:22:ac:44:68:a8:d3:ca:40: 2d:cf:97:ec:3d:9c:22:b6:4d:21:1a:f8:18:3f:5d: e1:96:7f:35:67:1d:d8:b9:4a:e0:44:28:6c:f0:6b: 24:96:22:12:d0:df:7f:99:73:5b:97:6c:9a:6c:08: 7a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.32.0/22 IPv6: 2a09:1c40::/29 Signature Algorithm: sha256WithRSAEncryption 91:95:9f:6b:bf:11:e0:33:06:01:d7:a7:4b:73:c0:41:0e:2a: e2:ce:85:d5:3b:73:98:66:1d:78:f0:a2:f0:ad:8c:29:e2:a5: 39:8f:b9:bf:43:15:65:6a:17:eb:0c:78:9f:2e:bd:32:cc:02: f0:a7:2b:64:f5:cc:2f:0b:79:0f:7b:e3:25:12:be:bd:e3:dc: 8b:bb:f3:e0:dc:03:2a:70:cd:94:94:68:88:84:be:65:c2:fc: 15:d5:a5:12:b7:28:26:c7:4d:83:8e:68:47:7c:33:6b:69:a5: 35:71:36:aa:e5:3d:11:05:df:2a:95:69:71:ef:d9:70:14:c4: 9c:a2:fd:18:7c:71:12:3d:8b:11:af:5a:b8:74:cc:70:00:e9: d7:a2:df:f0:d2:d5:1c:7d:dd:36:0e:9a:0a:a8:a1:d6:b6:a1: 45:c0:be:4a:bc:4a:34:e2:07:22:8b:32:da:13:ef:9f:20:9f: 49:40:bf:21:a6:7e:39:4c:22:74:db:1c:de:e4:96:b3:32:2d: 7f:80:52:d9:e0:2a:bd:76:4c:35:80:0e:b0:e1:b2:0e:46:4e: 23:85:c5:cb:c5:22:8b:ec:64:9c:cd:72:42:e2:8e:a3:8c:f1: cb:fa:2c:dd:c2:a7:12:8a:97:bd:f8:5f:a0:c9:c0:cd:39:f6: b6:36:d0:22 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5EF5UZAIfkGJaDpGyErXGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGU4YmFlYTk1ZDQwNDAzNDhmMGE4OWVjNGU0YmQxNTI3NWY2YzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk7CPay4b+qLnL2osRXrMrzng53+ 7P9xhod5Z22x6gdzWDRDSyfv4BQIPy4UibsxWs7kaXPSrjA6n7lCCRKsSgFstVHo qGi6NSnh7lyn6EO+Ps5NgSg7SlByIGAKmMUNM25zaZPO+ZRI8umn4f4Zxs+xEP7m p92eIDZrDrw3aid5FR4izPwh332nvyu0J8wLuO+UnXhtnobJQtijqlv809E4fQMz 6SXCCH8bO3uH28dAIQsJGqIF9v4Uw07p3+cNaSIIZMmX2jnIIqxEaKjTykAtz5fs PZwitk0hGvgYP13hln81Zx3YuUrgRChs8GskliIS0N9/mXNbl2yabAh6ZQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGjouuqV1AQDSPConsTkvRUnX2w5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3Lzc2NTNl MC04YTcyLTQzNTEtYmZjZS0zNzExZmFlOGNhNzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvNzY1M2Uw LThhNzItNDM1MS1iZmNlLTM3MTFmYWU4Y2E3Ny8xL2FPaTY2cFhVQkFOSThLaWV4 T1M5RlNkZmJEay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCk04gMA0EAgACMAcDBQMqCRxAMA0GCSqGSIb3 DQEBCwUAA4IBAQCRlZ9rvxHgMwYB16dLc8BBDirizoXVO3OYZh148KLwrYwp4qU5 j7m/QxVlahfrDHifLr0yzALwpytk9cwvC3kPe+MlEr6949yLu/Pg3AMqcM2UlGiI hL5lwvwV1aUStygmx02DjmhHfDNraaU1cTaq5T0RBd8qlWlx79lwFMScov0YfHES PYsRr1q4dMxwAOnXot/w0tUcfd02DpoKqKHWtqFFwL5KvEo04gciizLaE++fIJ9J QL8hpn45TCJ02xze5JazMi1/gFLZ4Cq9dkw1gA6w4bIORk4jhcXLxSKL7GSczXJC 4o6jjPHL+izdwqcSipe9+F+gycDNOfa2NtAi -----END CERTIFICATE-----Generated at Sun Jan 25 09:05:01 2026 by rpki-client