This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer File: o2n0t4zE2TX7Hzm73syKQTsPr50.cer (raw, json) Hash identifier: UCdmVYyqlQgfbeL+6Sp11dYcdkROzwr6kPqXLibr1Oo= Subject key identifier: A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F1F1F6935AC582672754B62573470 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215132 IP: 194.117.75.0/24 IP: 2a14:3840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1f:1f:69:35:ac:58:26:72:75:4b:62:57:34:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e4:39:9b:d0:e8:bc:0e:ad:39:c7:18:bc:d3: e6:ff:a8:dd:23:ea:31:87:b7:ae:80:0a:a3:cb:33: ba:90:45:59:4b:5f:cc:96:23:6e:ba:56:00:39:15: e9:1b:f1:15:28:9d:b8:4f:d6:fd:d5:9b:03:eb:9d: ec:aa:56:e5:ca:6f:ae:40:80:90:ea:88:38:1f:f4: 8b:43:bb:2c:f3:4f:5a:cc:58:3e:97:ec:df:06:01: d2:86:05:b1:05:7b:cd:3a:a9:56:0c:ad:d0:ec:e1: a1:05:ee:77:7a:55:c9:01:89:b1:62:2e:a5:16:e9: c7:d1:e4:41:bc:eb:72:60:34:98:95:0b:f4:f7:a9: fe:d4:fe:5c:09:af:40:53:dc:e4:40:73:cc:81:74: 0f:51:65:42:36:6a:ee:d6:ea:86:d2:bd:b9:ff:9e: 6f:df:9c:85:17:1b:c8:d6:d8:cc:aa:f7:31:e2:cb: 16:4a:2f:8c:59:8c:02:18:3d:b2:c0:5b:b6:4a:86: a7:06:b7:ea:8c:7b:e5:1d:b7:86:a0:f4:0d:95:35: 08:0c:64:55:0d:9e:01:be:e5:ac:84:49:65:8a:2a: 8e:29:8f:ae:ed:de:69:c8:15:20:21:fe:7b:77:10: 27:82:45:cd:7e:c8:41:da:ab:9c:89:1c:05:2c:fa: bd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.117.75.0/24 IPv6: 2a14:3840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215132 Signature Algorithm: sha256WithRSAEncryption a3:e6:0b:cb:4b:ae:f7:53:1c:78:69:e6:16:0b:59:6b:3b:50: 37:26:90:35:0c:74:a3:c1:33:72:c9:6a:5c:00:b5:4f:f2:7a: a5:71:a9:1c:a7:b8:4c:0f:56:68:8f:87:57:84:40:3d:0f:c4: b5:97:27:54:c1:ce:31:ea:2e:98:01:17:2d:73:be:6d:e7:24: 84:fc:16:98:c2:be:72:ff:d8:cc:5f:ca:71:63:b1:ce:e5:11: a7:5e:14:21:91:dd:c5:ab:50:12:9d:bf:c1:94:86:82:ac:bb: ba:03:d2:ee:af:a6:14:b6:b8:cd:e9:22:72:e6:d9:8d:a6:b7: 56:85:c8:42:74:3f:28:57:2f:cb:83:52:18:52:51:19:02:51: 9d:06:7d:0a:42:54:fd:b1:8b:bd:84:66:7b:36:15:30:e6:21: 61:99:a4:98:1c:bb:7c:48:1f:bd:d6:53:5b:91:aa:16:58:64: 3b:e1:89:79:55:ed:d2:ad:87:bc:8e:10:08:ae:76:fb:64:80: c5:50:72:41:9f:bb:05:aa:a3:1e:82:08:26:28:e2:64:4d:ff: a5:d8:ff:40:1b:69:f3:ba:aa:39:f6:b1:c4:51:b2:51:47:4a: ee:dc:ea:91:fc:5a:b6:6e:d1:bf:a1:2c:13:99:b6:df:27:cf: 2b:ac:df:0a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fx8faTWsWCZydUtiVzRwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzY5ZjRiNzhjYzRkOTM1ZmIxZjM5YmJkZWNjOGE0MTNiMGZhZjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+Q5m9DovA6tOccYvNPm/6jdI+ox h7eugAqjyzO6kEVZS1/MliNuulYAORXpG/EVKJ24T9b91ZsD653sqlblym+uQICQ 6og4H/SLQ7ss809azFg+l+zfBgHShgWxBXvNOqlWDK3Q7OGhBe53elXJAYmxYi6l FunH0eRBvOtyYDSYlQv096n+1P5cCa9AU9zkQHPMgXQPUWVCNmru1uqG0r25/55v 35yFFxvI1tjMqvcx4ssWSi+MWYwCGD2ywFu2SoanBrfqjHvlHbeGoPQNlTUIDGRV DZ4BvuWshElliiqOKY+u7d5pyBUgIf57dxAngkXNfshB2quciRwFLPq9NQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKNp9LeMxNk1+x85u97MikE7D6+dMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyL2QwMzk4 Mi1lNzUzLTRlNTYtYWIzNS1iMGFkZWM5MzQ2NzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvZDAzOTgy LWU3NTMtNGU1Ni1hYjM1LWIwYWRlYzkzNDY3MS8xL28ybjB0NHpFMlRYN0h6bTcz c3lLUVRzUHI1MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwnVLMA0EAgACMAcDBQMqFDhAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNIXDANBgkqhkiG9w0BAQsFAAOCAQEAo+YLy0uu91Mc eGnmFgtZaztQNyaQNQx0o8EzcslqXAC1T/J6pXGpHKe4TA9WaI+HV4RAPQ/EtZcn VMHOMeoumAEXLXO+beckhPwWmMK+cv/YzF/KcWOxzuURp14UIZHdxatQEp2/wZSG gqy7ugPS7q+mFLa4zekicubZjaa3VoXIQnQ/KFcvy4NSGFJRGQJRnQZ9CkJU/bGL vYRmezYVMOYhYZmkmBy7fEgfvdZTW5GqFlhkO+GJeVXt0q2HvI4QCK52+2SAxVBy QZ+7BaqjHoIIJijiZE3/pdj/QBtp87qqOfaxxFGyUUdK7tzqkfxatm7Rv6EsE5m2 3yfPK6zfCg== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:44 2026 by rpki-client