This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer File: o6tnDoFG71J0rkXrMNKelwBluiw.cer (raw, json) Hash identifier: aZc9u1SJ6Jx/wK18Fqe6j54e0RlQ4wnhH0YeqXk0GAA= Subject key identifier: A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12C67796C3D89DA1900C47A15B1AF6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2a14:f680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c6:77:96:c3:d8:9d:a1:90:0c:47:a1:5b:1a:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:61:f4:93:a5:4c:80:07:a1:33:b4:cd:94:e7: ea:57:03:8c:4c:d9:1d:90:2d:e8:1a:4e:1f:c5:3c: 22:6b:ec:49:5c:9b:72:07:2f:c0:67:5e:e9:37:96: 25:af:0b:f9:11:98:d0:1d:ac:bd:53:b9:f5:ef:34: 47:05:a9:10:8d:cd:66:78:d9:da:b8:70:c5:17:31: a9:09:14:95:7b:38:13:78:63:ea:b4:fe:9f:91:63: 91:0c:28:86:bf:07:c3:68:bf:65:fc:94:7a:67:bc: 3f:fa:b2:13:fc:6e:ca:95:47:51:e2:de:43:db:04: b2:a1:31:a3:12:4d:1b:36:03:3d:20:cf:b9:22:f7: 83:20:79:38:aa:96:eb:ac:77:8b:de:75:03:82:e2: 79:63:8d:91:5b:bc:c9:5d:e1:fb:7a:b3:3c:f8:9c: 87:e4:b8:50:91:db:f2:bf:9d:3b:4e:a9:7f:43:b6: 70:40:36:35:e9:dd:b3:f4:db:b8:56:b1:32:bb:6c: 0a:ed:ff:fe:07:95:35:23:bf:2b:87:9d:be:55:c0: 2a:14:b7:6c:03:78:ff:ac:a4:9b:ed:1d:c4:d3:bf: 3a:59:bf:b4:c0:bf:5f:15:22:ed:cc:53:20:ba:c1: b2:a5:e5:5f:a5:e0:fb:5a:9a:80:fd:fb:d2:f4:c5: fd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:f680::/29 Signature Algorithm: sha256WithRSAEncryption 89:2d:01:f0:fc:72:ce:29:89:a5:47:49:c3:51:e6:1c:8e:2c: b0:be:ef:cb:14:59:86:59:53:e2:5c:5b:3b:5a:5c:55:95:fb: 73:fb:93:35:2c:9d:ca:af:27:8c:28:77:47:65:3f:94:ec:57: 37:bc:18:b3:94:49:1a:aa:21:38:4d:20:1b:12:38:cc:c8:af: 41:cf:7a:86:44:f2:ab:1c:9e:a5:42:df:a2:e2:a0:a7:b4:a0: cc:9a:2d:f9:8f:4f:b7:c8:91:ca:19:7a:43:25:f1:50:b6:83: da:0d:32:b3:a3:2c:58:d7:6e:63:66:6e:50:14:4c:fb:26:6d: 91:3c:39:8f:42:28:a3:81:16:13:d7:a3:18:57:bf:96:77:e4: 1e:dc:40:20:c8:43:21:53:51:0a:ca:a0:16:66:2d:5e:ad:ae: 69:d8:61:f9:1a:4d:91:49:9e:d1:12:d4:60:04:20:42:aa:bb: 03:48:48:55:5a:3a:68:65:17:bf:46:90:a8:d6:20:ae:7f:6a: f7:e0:b3:09:b8:de:5b:e4:c8:e5:f4:8d:3e:a4:e7:0c:cc:6b: 2b:bd:d5:dd:f9:1c:64:b8:ac:f4:03:72:59:18:0f:0b:33:00: 42:6e:0c:11:d0:6e:31:f2:c4:32:96:41:5e:2a:31:c3:21:a8: a4:05:96:1a -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt8EsZ3lsPYnaGQDEehWxr2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2FiNjcwZTgxNDZlZjUyNzRhZTQ1ZWIzMGQyOWU5NzAwNjViYTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGH0k6VMgAehM7TNlOfqVwOMTNkd kC3oGk4fxTwia+xJXJtyBy/AZ17pN5Ylrwv5EZjQHay9U7n17zRHBakQjc1meNna uHDFFzGpCRSVezgTeGPqtP6fkWORDCiGvwfDaL9l/JR6Z7w/+rIT/G7KlUdR4t5D 2wSyoTGjEk0bNgM9IM+5IveDIHk4qpbrrHeL3nUDguJ5Y42RW7zJXeH7erM8+JyH 5LhQkdvyv507Tql/Q7ZwQDY16d2z9Nu4VrEyu2wK7f/+B5U1I78rh52+VcAqFLds A3j/rKSb7R3E0786Wb+0wL9fFSLtzFMgusGypeVfpeD7WpqA/fvS9MX9jwIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFKOrZw6BRu9SdK5F6zDSnpcAZbosMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2MwMTU3 Ni1hNDEzLTQ3MTItOWYzMi02MGQ1YmUxYjdkYTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvYzAxNTc2 LWE0MTMtNDcxMi05ZjMyLTYwZDViZTFiN2RhOS8xL282dG5Eb0ZHNzFKMHJrWHJN TktlbHdCbHVpdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKhT2gDANBgkqhkiG9w0BAQsFAAOCAQEAiS0B 8PxyzimJpUdJw1HmHI4ssL7vyxRZhllT4lxbO1pcVZX7c/uTNSydyq8njCh3R2U/ lOxXN7wYs5RJGqohOE0gGxI4zMivQc96hkTyqxyepULfouKgp7SgzJot+Y9Pt8iR yhl6QyXxULaD2g0ys6MsWNduY2ZuUBRM+yZtkTw5j0Ioo4EWE9ejGFe/lnfkHtxA IMhDIVNRCsqgFmYtXq2uadhh+RpNkUme0RLUYAQgQqq7A0hIVVo6aGUXv0aQqNYg rn9q9+CzCbjeW+TI5fSNPqTnDMxrK73V3fkcZLis9ANyWRgPCzMAQm4MEdBuMfLE MpZBXioxwyGopAWWGg== -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:50 2026 by rpki-client