This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer File: o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer (raw, json) Hash identifier: /mcL08FDx/pSOX1O3t3IP4WdpNtAdcm78aorFXFJmQY= Subject key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C134F78857E746842A871DDF68E2389 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.23.132.0/22 IP: 2a03:f640::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4f:78:85:7e:74:68:42:a8:71:dd:f6:8e:23:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3a82ee9aa1106ed720d63c3844e666440e34438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9b:85:82:2e:04:35:a9:f4:ed:79:8a:f3:8f: 42:ae:e8:c1:4a:ab:ff:83:60:f5:90:ec:e3:63:33: 0d:1e:a4:d3:f1:d5:df:29:db:43:9d:04:11:c4:22: 23:ac:25:51:00:9a:77:0e:3f:8a:b6:d6:00:14:7d: 4c:b0:4e:64:c3:63:19:17:48:37:aa:e6:8f:c4:f3: 19:b4:d2:ef:31:49:5e:b9:fd:11:d0:e5:b4:78:5f: 55:5d:5c:5b:5a:9b:70:1a:df:cf:54:c5:8c:0f:4d: fb:46:35:fc:49:0e:1b:e3:d2:8e:f6:14:8f:c7:d0: e2:66:f0:9b:57:f4:22:75:e6:a5:55:9e:0f:73:13: f2:5d:0a:ba:e6:f4:b9:74:92:fe:51:cf:22:09:94: 88:07:86:d2:d5:91:08:e5:07:f4:5c:4e:2d:65:20: a2:f3:9a:d7:74:f7:ba:7c:7b:62:cd:d4:63:f2:5d: 03:4c:d5:0b:f6:20:fc:ac:58:5b:99:64:bb:d2:8e: 22:1f:c5:11:3e:31:b3:bb:50:fc:61:3b:e1:2f:55: 0d:bf:a1:18:65:84:80:65:b6:2b:76:eb:84:a7:dc: b6:3b:36:c8:21:e6:01:07:34:21:f8:0d:44:f9:28: 86:57:24:d4:fb:c0:a7:02:dc:08:4f:ef:39:6f:64: 70:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.132.0/22 IPv6: 2a03:f640::/32 Signature Algorithm: sha256WithRSAEncryption 43:d9:17:b3:06:d3:de:99:ef:ec:f2:8c:bd:d1:35:6a:8e:cd: b1:23:01:0c:02:54:c5:3a:5f:09:28:ea:98:55:b1:2e:48:a3: 98:14:b8:89:e0:59:b2:ea:db:31:ca:0c:1c:76:6d:fd:6c:6c: 04:cc:8a:85:68:d0:8b:27:8c:42:87:7f:5d:28:47:b1:26:45: 56:c0:59:d3:16:fb:53:7a:af:d2:98:40:1d:85:18:b6:73:85: d2:81:2d:da:2f:5c:fc:44:ef:89:6a:27:cd:d7:39:64:c1:66: bc:3c:4b:15:15:bd:c0:1f:b9:a7:05:94:aa:c0:b4:2a:25:ce: 9b:fa:01:66:de:fb:bf:bc:50:f2:54:75:35:52:52:02:01:3f: 33:3d:cf:eb:56:80:1a:16:cd:c5:5a:34:04:2c:ae:7a:05:33: aa:c5:f9:eb:a2:ec:7c:29:3c:ff:75:61:4b:81:7a:e6:87:ea: 05:c7:de:1a:2c:f1:c4:76:89:c1:d0:5d:a0:30:f5:f0:32:6e: 40:08:e2:dc:2b:7c:08:ab:c0:a4:3a:38:79:6c:b1:8f:fc:04: 2d:27:0c:bb:77:05:72:6b:cc:2d:06:40:f3:02:89:0f:6f:17: fa:ec:5a:a0:8b:ea:33:55:b1:0f:c5:90:c0:9f:e8:58:6a:6f: cf:eb:01:ff -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8E094hX50aEKocd32jiOJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2E4MmVlOWFhMTEwNmVkNzIwZDYzYzM4NDRlNjY2NDQwZTM0NDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZuFgi4ENan07XmK849CrujBSqv/ g2D1kOzjYzMNHqTT8dXfKdtDnQQRxCIjrCVRAJp3Dj+KttYAFH1MsE5kw2MZF0g3 quaPxPMZtNLvMUleuf0R0OW0eF9VXVxbWptwGt/PVMWMD037RjX8SQ4b49KO9hSP x9DiZvCbV/QidealVZ4PcxPyXQq65vS5dJL+Uc8iCZSIB4bS1ZEI5Qf0XE4tZSCi 85rXdPe6fHtizdRj8l0DTNUL9iD8rFhbmWS70o4iH8URPjGzu1D8YTvhL1UNv6EY ZYSAZbYrduuEp9y2OzbIIeYBBzQh+A1E+SiGVyTU+8CnAtwIT+85b2RwbQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFKOoLumqEQbtcg1jw4ROZmRA40Q4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkL2M3MjBi NC0xYWNiLTQ3MDMtYmMyNC00NjdlMDA5ZGFlZDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvYzcyMGI0 LTFhY2ItNDcwMy1iYzI0LTQ2N2UwMDlkYWVkMC8xL282Z3U2YW9SQnUxeURXUERo RTVtWkVEalJEZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuReEMA0EAgACMAcDBQAqA/ZAMA0GCSqGSIb3 DQEBCwUAA4IBAQBD2RezBtPeme/s8oy90TVqjs2xIwEMAlTFOl8JKOqYVbEuSKOY FLiJ4Fmy6tsxygwcdm39bGwEzIqFaNCLJ4xCh39dKEexJkVWwFnTFvtTeq/SmEAd hRi2c4XSgS3aL1z8RO+JaifN1zlkwWa8PEsVFb3AH7mnBZSqwLQqJc6b+gFm3vu/ vFDyVHU1UlICAT8zPc/rVoAaFs3FWjQELK56BTOqxfnroux8KTz/dWFLgXrmh+oF x94aLPHEdonB0F2gMPXwMm5ACOLcK3wIq8CkOjh5bLGP/AQtJwy7dwVya8wtBkDz AokPbxf67Fqgi+ozVbEPxZDAn+hYam/P6wH/ -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:31 2026 by rpki-client