This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer File: o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer (raw, json) Hash identifier: JtYMKoB+SWHXP0gy/0I9K4fkMv0prSRzx/PuRzH6Dy0= Subject key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA792222D3077EDCC4AB3B207CA9D4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.183.172.0/24 IP: 2a10:3f40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:79:22:22:d3:07:7e:dc:c4:ab:3b:20:7c:a9:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3688305fed5c99760aec7c894c6ba21e4ead675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a5:fe:da:f9:36:8b:58:d4:d9:c4:cc:e9:b8: d3:cd:64:92:19:e0:f3:c2:a8:43:3c:79:9a:4d:87: 8f:d1:25:2d:92:f4:d3:6d:ab:45:d0:13:03:fd:e4: 62:15:bb:f6:dc:76:49:48:53:13:22:5b:78:05:80: 2b:db:3e:bf:79:cf:a2:09:c8:3b:94:35:45:94:47: dc:f2:95:37:fd:35:fe:cc:06:a5:68:b8:b2:ca:61: b8:e0:8a:90:a0:03:3d:64:83:e2:db:9b:c5:b7:9e: 31:96:71:77:c0:f9:67:d3:c5:86:56:a8:0a:bd:23: 9a:71:05:d7:d3:31:28:3d:34:c5:a4:f1:5b:7a:31: 9f:c2:76:02:d3:ff:7b:d9:a7:d0:67:7c:37:cb:4c: 2d:d7:99:9f:c2:56:09:9a:c3:5e:3a:fa:5a:6a:d6: 13:eb:ba:72:ea:67:0a:1b:74:53:70:6c:d2:f5:e9: 8b:ae:fe:31:a0:cf:c7:fc:78:30:86:9c:64:66:bd: 86:3e:8c:94:5a:87:df:f0:09:34:eb:6c:4a:95:66: 26:b7:4b:8f:78:0e:7b:00:99:cd:5f:bc:38:f2:e9: 76:54:8a:a5:91:26:24:38:e3:f8:4b:3d:91:42:5b: c9:a7:80:0c:69:d8:3b:34:06:eb:2c:3d:cc:cd:d7: 87:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.172.0/24 IPv6: 2a10:3f40::/29 Signature Algorithm: sha256WithRSAEncryption 50:db:c3:43:ed:53:30:af:0e:b0:12:a2:43:ba:fa:b1:0f:f7: 48:86:75:14:41:3b:3a:7c:97:38:50:09:36:ba:62:f2:b2:09: 6a:ca:a5:3b:ea:99:e8:53:cb:a8:27:c9:0d:7c:2e:5d:2a:bc: 45:57:3c:5c:31:79:af:08:66:78:71:cf:36:18:f4:d9:e0:3c: 96:04:a3:ff:ef:ad:de:9a:88:ba:14:db:0d:cb:81:7c:a7:b8: c8:7a:94:d5:01:1d:6f:79:31:33:ae:54:ac:64:45:cd:af:ce: 3e:4f:10:e3:b0:80:3c:a5:ef:0a:fa:da:fd:d0:06:76:71:05: 28:6b:7c:0d:4d:d7:4e:ec:9c:9c:f6:09:18:c2:a4:de:5f:41: c7:64:20:83:ec:e1:d8:b0:94:3d:11:17:63:d9:e5:41:11:cc: a4:8e:7b:75:fe:de:ef:c0:11:35:c1:d1:75:8b:f5:ff:b6:89: 4a:27:31:d6:8a:fc:e6:e4:1e:8e:44:32:55:3b:63:bd:36:46: a1:67:f2:a4:4b:0e:a0:72:bc:76:f0:27:e6:fa:7a:f9:62:77: 2d:bc:c1:04:47:46:38:f8:e1:f9:1b:6b:1a:fd:30:1b:3e:6f: 21:a4:11:00:9d:6d:71:57:e0:25:84:d8:aa:e3:52:f9:4a:a3: f7:e1:4a:ca -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9ynkiItMHftzEqzsgfKnUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzY4ODMwNWZlZDVjOTk3NjBhZWM3Yzg5NGM2YmEyMWU0ZWFkNjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqX+2vk2i1jU2cTM6bjTzWSSGeDz wqhDPHmaTYeP0SUtkvTTbatF0BMD/eRiFbv23HZJSFMTIlt4BYAr2z6/ec+iCcg7 lDVFlEfc8pU3/TX+zAalaLiyymG44IqQoAM9ZIPi25vFt54xlnF3wPln08WGVqgK vSOacQXX0zEoPTTFpPFbejGfwnYC0/972afQZ3w3y0wt15mfwlYJmsNeOvpaatYT 67py6mcKG3RTcGzS9emLrv4xoM/H/HgwhpxkZr2GPoyUWoff8Ak062xKlWYmt0uP eA57AJnNX7w48ul2VIqlkSYkOOP4Sz2RQlvJp4AMadg7NAbrLD3MzdeHcQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFKNogwX+1cmXYK7HyJTGuiHk6tZ1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmL2Y5ZTI1 Ny0wMTYyLTRkZWYtOTZhZC1kZWM5Nzk2ZjYyMjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvZjllMjU3 LTAxNjItNGRlZi05NmFkLWRlYzk3OTZmNjIyMy8xL28yaURCZjdWeVpkZ3JzZkls TWE2SWVUcTFuVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQABbesMA0EAgACMAcDBQMqED9AMA0GCSqGSIb3 DQEBCwUAA4IBAQBQ28ND7VMwrw6wEqJDuvqxD/dIhnUUQTs6fJc4UAk2umLysglq yqU76pnoU8uoJ8kNfC5dKrxFVzxcMXmvCGZ4cc82GPTZ4DyWBKP/763emoi6FNsN y4F8p7jIepTVAR1veTEzrlSsZEXNr84+TxDjsIA8pe8K+tr90AZ2cQUoa3wNTddO 7Jyc9gkYwqTeX0HHZCCD7OHYsJQ9ERdj2eVBEcykjnt1/t7vwBE1wdF1i/X/tolK JzHWivzm5B6ORDJVO2O9NkahZ/KkSw6gcrx28Cfm+nr5YnctvMEER0Y4+OH5G2sa /TAbPm8hpBEAnW1xV+AlhNiq41L5SqP34UrK -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:15 2026 by rpki-client