This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer File: o-zqyBJVNKV5R5YtsokD-tesOvk.cer (raw, json) Hash identifier: IBqlWvSFvXZTLPbR7qumlSs7wIknvMjg9czUUwbyPN0= Subject key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF11A73A42C50B7DD065E5EB9830CB6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199520 IP: 91.224.246.0/23 IP: 91.226.40.0/23 IP: 2a0c:9e80::/31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:1a:73:a4:2c:50:b7:dd:06:5e:5e:b9:83:0c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3eceac8125534a57947962db28903fad7ac3af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c9:31:18:de:98:3c:63:f2:3b:0e:d1:60:85: 33:dd:fa:93:e9:e7:cc:49:bc:37:ca:0f:ab:45:c8: e2:37:7c:35:fe:de:c5:d7:0b:92:fa:4a:29:5b:e9: fd:57:be:67:34:ae:9a:34:bc:26:44:cf:47:4c:1c: 5e:b7:38:b7:a4:91:93:e7:cf:b9:11:3f:3d:cd:36: 66:9e:be:6a:02:1b:8e:15:e1:e4:21:4b:db:2b:39: a7:02:c6:3f:f3:c5:30:af:f2:11:98:71:d8:8e:47: 6f:f4:b9:52:79:13:19:49:75:a2:82:7c:92:75:c0: f4:65:e4:4f:5b:1f:df:60:81:39:55:9a:b2:1f:1a: 17:11:77:86:45:f1:04:9c:0d:ae:cc:dc:cc:cf:07: 43:58:d5:2f:85:b3:e1:cf:4c:c1:54:56:f1:27:7c: 27:62:14:db:ef:45:c3:2c:f4:82:24:85:de:6f:d3: aa:56:de:ee:a8:47:51:6c:e9:fe:a5:32:32:da:8b: 05:b0:fa:fd:29:fc:d6:b2:91:20:af:1e:aa:15:5e: cc:88:44:cc:4c:cc:99:f8:48:19:9e:c9:0d:10:86: 6d:83:29:24:93:12:a9:65:e3:ef:e8:8c:c1:93:c4: 0d:3a:9f:35:87:6e:18:4b:23:54:f8:8b:08:ec:e3: d9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.246.0/23 91.226.40.0/23 IPv6: 2a0c:9e80::/31 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199520 Signature Algorithm: sha256WithRSAEncryption 73:2c:ee:10:10:7a:68:12:ba:18:47:83:fd:ad:38:18:80:e2: 4e:bb:f5:f7:98:70:c2:5e:ad:c8:a1:d9:a2:32:57:86:16:20: 3b:f7:c5:47:95:bc:33:81:da:e5:bf:83:7e:4d:9d:b9:35:87: 8c:05:10:1a:f8:d5:62:5f:c5:d2:ee:29:f2:f0:6b:7c:9b:b5: a2:df:d7:95:e4:06:19:bb:36:ad:6d:29:6c:28:26:54:1c:34: 9a:66:b9:19:be:96:3b:58:5e:d1:f9:7a:14:a6:77:9d:8a:c1: ef:da:9c:77:5d:46:a3:79:31:8a:eb:66:2f:73:35:a1:f5:11: 49:d4:d8:81:24:30:d5:35:95:a4:97:31:95:20:18:ee:8d:9d: d3:1e:3d:1f:1e:07:db:3a:14:f0:93:dc:7d:c0:96:76:3f:56: 85:f2:e5:fe:95:29:ba:54:e4:90:00:74:e7:e6:e1:96:f9:8f: f6:12:ff:c8:a6:75:6d:48:1e:27:59:d5:9f:ee:f6:a7:8b:c2: 87:52:6a:b2:83:87:58:50:05:51:a5:21:e8:d8:e6:54:8e:55: 19:2e:6c:a3:93:85:72:01:b0:3a:b4:c7:a7:94:7b:a3:cb:55: cb:ce:43:f0:5d:41:f0:d4:9e:5e:03:d0:01:17:71:f8:de:50: 0f:d8:02:ef -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/8RpzpCxQt90GXl65gwy2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2VjZWFjODEyNTUzNGE1Nzk0Nzk2MmRiMjg5MDNmYWQ3YWMzYWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgskxGN6YPGPyOw7RYIUz3fqT6efM Sbw3yg+rRcjiN3w1/t7F1wuS+kopW+n9V75nNK6aNLwmRM9HTBxetzi3pJGT58+5 ET89zTZmnr5qAhuOFeHkIUvbKzmnAsY/88Uwr/IRmHHYjkdv9LlSeRMZSXWignyS dcD0ZeRPWx/fYIE5VZqyHxoXEXeGRfEEnA2uzNzMzwdDWNUvhbPhz0zBVFbxJ3wn YhTb70XDLPSCJIXeb9OqVt7uqEdRbOn+pTIy2osFsPr9KfzWspEgrx6qFV7MiETM TMyZ+EgZnskNEIZtgykkkxKpZePv6IzBk8QNOp81h24YSyNU+IsI7OPZ7wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFKPs6sgSVTSleUeWLbKJA/rXrDr5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA0L2Q5MTE4 Ny03NTQ1LTQxZTctOTg5NC1hOWJkNWU0MTBhZWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvZDkxMTg3 LTc1NDUtNDFlNy05ODk0LWE5YmQ1ZTQxMGFlZC8xL28tenF5QkpWTktWNVI1WXRz b2tELXRlc092ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBW+D2AwQBW+IoMA0EAgACMAcDBQEqDJ6AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMLYDANBgkqhkiG9w0BAQsFAAOCAQEAcyzu EBB6aBK6GEeD/a04GIDiTrv195hwwl6tyKHZojJXhhYgO/fFR5W8M4Ha5b+Dfk2d uTWHjAUQGvjVYl/F0u4p8vBrfJu1ot/XleQGGbs2rW0pbCgmVBw0mma5Gb6WO1he 0fl6FKZ3nYrB79qcd11Go3kxiutmL3M1ofURSdTYgSQw1TWVpJcxlSAY7o2d0x49 Hx4H2zoU8JPcfcCWdj9WhfLl/pUpulTkkAB05+bhlvmP9hL/yKZ1bUgeJ1nVn+72 p4vCh1JqsoOHWFAFUaUh6NjmVI5VGS5so5OFcgGwOrTHp5R7o8tVy85D8F1B8NSe XgPQARdx+N5QD9gC7w== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:45 2026 by rpki-client