This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer File: o1xUQ64gP2R-4wa573LaxQtd9RQ.cer (raw, json) Hash identifier: g+gpne4tKQgTlJQE/hn+KPpRoA73wCi/xGPlzr8xv3M= Subject key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AFF9FAD51B576BBB5DE2B8FA752D6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39729 AS: 203461 IP: 81.88.48.0/20 IP: 185.2.4.0/22 IP: 2a01:8100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ff:9f:ad:51:b5:76:bb:b5:de:2b:8f:a7:52:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a35c5443ae203f647ee306b9ef72dac50b5df514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7f:33:8d:83:33:e6:f8:53:d1:3c:4c:67:46: ad:4e:17:60:38:c3:ae:0c:b5:4e:78:1c:73:3e:34: cb:c0:46:88:6b:94:dd:b6:66:6b:ad:1a:af:5e:bd: e8:4f:3d:7f:78:81:8b:e4:2c:7f:e4:f8:cb:ff:fe: 35:e9:14:ca:09:e7:e2:75:04:7d:f6:da:8c:13:68: d9:05:48:71:e4:1b:f1:44:c4:57:6c:65:a0:98:22: 38:f9:34:7e:9d:29:d1:5a:81:b9:66:a2:a9:66:34: 9d:e5:24:bb:b6:44:e2:fb:34:7a:e8:64:8f:fc:3f: 2a:0f:a6:80:3c:56:26:83:54:1a:75:13:64:00:b3: ee:08:60:c6:70:f4:30:9a:0a:47:66:2d:31:9d:35: 76:a4:55:0c:e3:c2:77:bc:88:d3:41:cd:8b:c4:fe: 03:02:dc:42:71:16:00:98:5b:0f:a0:3b:2e:2d:c1: 10:3f:75:34:6c:10:3e:a9:91:d8:27:42:8b:aa:6b: 4a:36:3a:7b:bc:fc:4f:cf:b6:5e:53:25:15:f6:73: 4a:0f:a6:b2:f2:ab:0b:67:48:38:57:03:a7:40:f8: ef:21:34:14:60:49:ed:cb:c0:64:bb:92:4a:8c:f2: a1:e7:97:f4:dc:b5:e9:e9:9d:24:45:a2:cb:b8:c7: de:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.88.48.0/20 185.2.4.0/22 IPv6: 2a01:8100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39729 203461 Signature Algorithm: sha256WithRSAEncryption 6c:02:26:e1:71:3f:64:00:c5:76:3a:a1:6c:cf:7f:88:8f:d7: 25:ed:f0:54:3e:07:f3:e3:b8:8c:50:6b:10:91:cf:ae:da:05: 4d:89:89:27:d5:44:76:27:e9:89:e8:cf:57:a1:17:f5:cc:a1: 49:48:e7:36:9a:1e:26:db:34:11:2d:75:eb:02:22:51:2b:41: 6f:28:96:c9:f8:57:4f:20:b7:21:51:26:00:4f:7b:a4:95:39: 59:69:02:61:e8:d6:71:e7:a4:b3:29:4e:a5:7e:45:e7:28:9b: 18:e2:ff:e2:04:e3:49:c5:b5:75:fe:3a:3c:5f:eb:1d:79:8a: c8:cc:21:27:01:7a:e8:df:b9:f1:ec:2c:5d:da:a9:ca:bc:6d: 6b:8c:1a:fe:7b:d0:13:25:c0:68:3c:4a:5e:51:27:f0:b0:1f: 52:3d:ae:b9:0f:55:68:c1:8f:24:bc:30:1f:66:8e:09:83:26: 91:e9:eb:fd:58:2f:2b:cd:d7:4a:50:d7:e7:eb:cc:b4:50:ed: 97:9e:c6:2b:a9:cf:96:b6:2b:28:05:84:5d:a3:7e:8b:28:49: 8c:81:82:38:52:bc:79:92:da:fc:01:7b:51:d1:2e:27:e1:6e: 43:1c:cb:97:21:c8:c6:3f:bf:31:70:14:59:e0:ca:27:01:12: 0f:16:a8:85 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt6Wv+frVG1dru13iuPp1LWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzVjNTQ0M2FlMjAzZjY0N2VlMzA2YjllZjcyZGFjNTBiNWRmNTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3H8zjYMz5vhT0TxMZ0atThdgOMOu DLVOeBxzPjTLwEaIa5TdtmZrrRqvXr3oTz1/eIGL5Cx/5PjL//416RTKCefidQR9 9tqME2jZBUhx5BvxRMRXbGWgmCI4+TR+nSnRWoG5ZqKpZjSd5SS7tkTi+zR66GSP /D8qD6aAPFYmg1QadRNkALPuCGDGcPQwmgpHZi0xnTV2pFUM48J3vIjTQc2LxP4D AtxCcRYAmFsPoDsuLcEQP3U0bBA+qZHYJ0KLqmtKNjp7vPxPz7ZeUyUV9nNKD6ay 8qsLZ0g4VwOnQPjvITQUYEnty8Bku5JKjPKh55f03LXp6Z0kRaLLuMfe3wIDAQAB o4ICujCCArYwHQYDVR0OBBYEFKNcVEOuID9kfuMGue9y2sULXfUUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2L2Y2NTFj MS0wMmQ2LTQ0OGEtYWNhZC0xNGM1OTBmZWM3ZTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvZjY1MWMx LTAyZDYtNDQ4YS1hY2FkLTE0YzU5MGZlYzdlMy8xL28xeFVRNjRnUDJSLTR3YTU3 M0xheFF0ZDlSUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEUVgwAwQCuQIEMA0EAgACMAcDBQMqAYEAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCbMQIDAxrFMA0GCSqGSIb3DQEBCwUAA4IB AQBsAibhcT9kAMV2OqFsz3+Ij9cl7fBUPgfz47iMUGsQkc+u2gVNiYkn1UR2J+mJ 6M9XoRf1zKFJSOc2mh4m2zQRLXXrAiJRK0FvKJbJ+FdPILchUSYAT3uklTlZaQJh 6NZx56SzKU6lfkXnKJsY4v/iBONJxbV1/jo8X+sdeYrIzCEnAXro37nx7Cxd2qnK vG1rjBr+e9ATJcBoPEpeUSfwsB9SPa65D1VowY8kvDAfZo4JgyaR6ev9WC8rzddK UNfn68y0UO2XnsYrqc+WtisoBYRdo36LKEmMgYI4Urx5ktr8AXtR0S4n4W5DHMuX IcjGP78xcBRZ4MonARIPFqiF -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:51 2026 by rpki-client