This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer File: o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer (raw, json) Hash identifier: wCY7s6moZ3qr28zhzj9DnmmUsJrbrpf+bPFUqBfJom4= Subject key identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB496AA71BB97BE000D72CE0458766 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35511 AS: 35807 AS: 43693 AS: 60470 IP: 87.248.224.0/19 IP: 88.201.128.0/17 IP: 91.197.212.0/22 IP: 93.100.0.0/16 IP: 94.19.0.0/16 IP: 185.37.128.0/22 IP: 185.84.32.0/22 IP: 185.88.156.0/22 IP: 185.123.64.0/22 IP: 188.242.0.0/15 IP: 2a05:3580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:49:6a:a7:1b:b9:7b:e0:00:d7:2c:e0:45:87:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3679bf4c627d85fee2ce13a53c44851b9df0563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d3:ef:45:4d:f1:e0:c3:f4:1e:98:1b:e1:de: 30:4d:b3:d5:50:0b:b8:20:48:6e:6d:ff:9b:94:59: 76:77:45:12:49:28:ef:b1:10:90:7f:bb:ca:52:f0: ca:77:5c:6e:d7:d2:7d:43:f2:54:e0:4c:c0:cd:83: ac:7f:fb:e8:93:30:bd:2f:ad:25:5a:56:e3:ff:1e: d4:e5:b4:25:49:d2:b5:4a:ac:01:74:c9:dd:4c:28: 1c:84:11:8a:d8:db:84:55:19:e5:47:6d:ae:e6:06: 90:46:7e:aa:18:0f:a2:0e:15:31:98:ac:a2:28:d4: 3f:69:45:86:8f:c9:c5:56:c1:c8:f5:3a:77:38:dc: 16:20:5a:86:58:97:66:69:88:0d:5d:79:2f:d8:fb: 5b:56:cf:df:d8:54:b3:8a:92:f3:b7:99:ec:05:a1: 74:44:f4:10:d6:1c:b7:5c:e0:d1:28:91:d3:85:a6: 14:06:a1:a7:fe:e7:60:70:0c:67:ca:6f:bd:23:f1: af:86:73:2f:95:aa:61:30:e9:68:8c:e2:49:47:d7: 5d:3a:24:4d:ca:04:00:03:39:4d:70:c5:56:f9:e3: b2:72:07:e6:44:cc:4f:e7:05:b7:19:28:a6:65:6e: ea:2a:5f:52:9e:0b:25:7c:90:b2:7a:e7:39:f4:9a: 3b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.248.224.0/19 88.201.128.0/17 91.197.212.0/22 93.100.0.0/16 94.19.0.0/16 185.37.128.0/22 185.84.32.0/22 185.88.156.0/22 185.123.64.0/22 188.242.0.0/15 IPv6: 2a05:3580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35511 35807 43693 60470 Signature Algorithm: sha256WithRSAEncryption 06:4e:80:1f:06:42:27:f3:d1:a9:41:34:df:2f:17:98:89:81: 95:fa:0c:c7:94:22:50:f1:90:75:8f:9d:44:5c:6b:4a:28:b3: 68:f7:e8:a4:e2:d3:38:79:81:31:45:90:28:25:d8:b3:ff:b6: bd:81:8e:1f:fa:52:d9:c6:ae:cc:ca:82:c9:3a:2a:18:d6:89: f8:64:ec:73:1b:19:4b:a7:71:a2:98:67:9f:46:3d:a7:be:56: 4a:14:9b:e1:89:13:5c:a7:df:48:a8:1e:78:66:37:2f:66:d7: 3b:ce:e5:a3:2f:e1:3f:f0:c3:23:a1:5a:54:b8:19:2f:34:cd: 2b:79:89:3b:06:b1:52:df:ab:0e:7a:69:79:81:ea:a9:0b:94: 06:ea:ba:d4:78:ca:54:a1:e2:d5:e9:f6:61:94:ed:5d:f9:80: 56:0f:ac:9f:91:c6:13:1a:97:03:b9:ed:0e:32:ea:76:5f:c1: 75:46:13:9f:63:41:4b:59:d1:b6:7a:14:1f:aa:08:7b:fc:d8: 79:65:57:ca:a0:8e:7b:d9:f1:bf:1a:8b:14:cf:82:7d:fd:4c: e3:6e:36:83:c2:c5:1e:16:ca:d0:c7:60:9e:3b:a3:ba:83:98: ad:ff:30:df:2f:68:ec:4e:61:d3:6c:65:44:c1:2f:73:a4:bb: 45:c2:87:cf -----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgISAZt9y0lqpxu5e+AA1yzgRYdmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzY3OWJmNGM2MjdkODVmZWUyY2UxM2E1M2M0NDg1MWI5ZGYwNTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdPvRU3x4MP0Hpgb4d4wTbPVUAu4 IEhubf+blFl2d0USSSjvsRCQf7vKUvDKd1xu19J9Q/JU4EzAzYOsf/vokzC9L60l Wlbj/x7U5bQlSdK1SqwBdMndTCgchBGK2NuEVRnlR22u5gaQRn6qGA+iDhUxmKyi KNQ/aUWGj8nFVsHI9Tp3ONwWIFqGWJdmaYgNXXkv2PtbVs/f2FSzipLzt5nsBaF0 RPQQ1hy3XODRKJHThaYUBqGn/udgcAxnym+9I/GvhnMvlaphMOlojOJJR9ddOiRN ygQAAzlNcMVW+eOycgfmRMxP5wW3GSimZW7qKl9SngslfJCyeuc59Jo7YwIDAQAB o4IC8TCCAu0wHQYDVR0OBBYEFKNnm/TGJ9hf7izhOlPESFG53wVjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0L2I2MmU1 OS1lMmM1LTRhNzYtOGI2Ny01NTY3MjYzNGNiYzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvYjYyZTU5 LWUyYzUtNGE3Ni04YjY3LTU1NjcyNjM0Y2JjMS8xL28yZWI5TVluMkZfdUxPRTZV OFJJVWJuZkJXTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGEGCCsGAQUF BwEHAQH/BFIwUDA/BAIAATA5AwQFV/jgAwQHWMmAAwQCW8XUAwMAXWQDAwBeEwME ArklgAMEArlUIAMEArlYnAMEArl7QAMDAbzyMA0EAgACMAcDBQMqBTWAMCkGCCsG AQUFBwEIAQH/BBowGKAWMBQCAwCKtwIDAIvfAgMAqq0CAwDsNjANBgkqhkiG9w0B AQsFAAOCAQEABk6AHwZCJ/PRqUE03y8XmImBlfoMx5QiUPGQdY+dRFxrSiizaPfo pOLTOHmBMUWQKCXYs/+2vYGOH/pS2cauzMqCyToqGNaJ+GTscxsZS6dxophnn0Y9 p75WShSb4YkTXKffSKgeeGY3L2bXO87loy/hP/DDI6FaVLgZLzTNK3mJOwaxUt+r DnppeYHqqQuUBuq61HjKVKHi1en2YZTtXfmAVg+sn5HGExqXA7ntDjLqdl/BdUYT n2NBS1nRtnoUH6oIe/zYeWVXyqCOe9nxvxqLFM+Cff1M4242g8LFHhbK0Mdgnjuj uoOYrf8w3y9o7E5h02xlRMEvc6S7RcKHzw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:36 2026 by rpki-client