This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer File: o8-bZGUWkotdBsKoGestvA_pkgo.cer (raw, json) Hash identifier: 9i8ETE3WVDssV7WokIJpBDRlrijRRjhKLLvv4wwXvEg= Subject key identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6F71D591036D11361471FD739F48B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:67c:21dc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f7:1d:59:10:36:d1:13:61:47:1f:d7:39:f4:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:56:04:e7:25:87:7e:e6:1f:79:18:01:32:47: b8:3b:35:92:70:8a:aa:a7:9d:54:0a:43:13:fe:b1: f8:cb:73:63:af:b2:b5:1b:6c:f7:ae:6d:03:78:25: 93:c6:02:11:e6:c3:d6:f9:70:cb:7b:c5:9e:80:98: bc:71:fb:4e:73:02:e8:a5:1b:88:ad:de:80:a4:6f: 3c:ce:44:c5:61:2f:99:b1:d7:3f:ac:a8:13:f9:88: 9a:56:66:ac:28:ea:e6:12:bd:fe:62:55:5a:01:e0: 29:42:55:5c:00:f5:5d:e5:0d:ff:5f:1f:aa:73:a2: d6:5a:1f:43:44:9f:1c:03:13:71:91:1d:92:09:4c: a8:bd:a6:96:4b:3d:00:f9:0c:f6:76:88:22:38:cb: 0d:1c:1b:4a:9b:25:1d:a9:10:80:c0:6c:6b:0f:03: 2b:b0:2b:58:89:c0:6e:45:36:0f:4c:78:d5:2b:dc: eb:fc:98:83:94:63:48:9a:e8:a9:df:6f:89:9a:b3: a7:58:dd:ae:94:d3:a5:a6:be:12:48:fc:e8:28:7d: 12:4a:95:97:f0:2a:f7:25:2c:09:ef:67:47:a4:16: 1a:d2:e8:1f:67:d8:87:96:31:85:45:30:46:0d:df: c1:ce:64:13:e0:2d:b6:25:6f:83:fd:5b:8d:6a:ef: 66:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:21dc::/48 Signature Algorithm: sha256WithRSAEncryption 5d:cb:b9:54:7e:f4:60:4a:77:e1:8f:72:f9:bb:80:9b:d5:19: 5b:85:48:89:74:bc:f8:a4:ff:8a:06:bf:da:65:6e:e5:87:80: ef:ae:c4:92:45:83:4a:d7:ad:49:bd:88:2b:f7:cf:6d:d7:79: 39:b3:66:80:59:e3:7a:3b:f2:87:0a:b2:b0:14:f2:f1:c4:8c: 29:18:7b:ad:97:7b:1b:12:61:22:5b:6d:b0:b3:19:7b:3c:cd: 1c:a9:c8:18:18:ad:7f:33:a4:98:87:41:4a:85:e4:66:fb:b0: ce:e5:55:a9:2a:fb:58:34:d9:f8:10:49:3e:e9:56:43:e9:f6: ee:6b:72:c2:e9:f3:5d:1d:8c:a6:b8:7a:d1:71:b3:ab:32:36: c9:fa:34:1d:b3:cd:26:6f:8e:20:6c:7a:63:a4:96:56:7c:ee: bb:62:4a:62:bf:b1:f6:8b:e8:09:29:b9:46:20:fa:63:51:c9: 13:65:5c:53:a1:c9:28:22:f4:a1:c2:32:9d:d0:db:8e:b7:30: a7:91:e6:5a:4a:5e:11:8d:c5:02:c5:01:89:f5:6a:17:16:86: 22:8f:e4:fc:b8:0c:e9:1c:1d:cc:82:0d:ef:50:cc:39:0d:c3: b3:76:a6:bb:ba:2e:35:61:ac:53:79:50:3d:47:6a:b6:6a:a4: ce:13:ea:95 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt3xvcdWRA20RNhRx/XOfSLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2NmOWI2NDY1MTY5MjhiNWQwNmMyYTgxOWViMmRiYzBmZTk5MjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVYE5yWHfuYfeRgBMke4OzWScIqq p51UCkMT/rH4y3Njr7K1G2z3rm0DeCWTxgIR5sPW+XDLe8WegJi8cftOcwLopRuI rd6ApG88zkTFYS+Zsdc/rKgT+YiaVmasKOrmEr3+YlVaAeApQlVcAPVd5Q3/Xx+q c6LWWh9DRJ8cAxNxkR2SCUyovaaWSz0A+Qz2dogiOMsNHBtKmyUdqRCAwGxrDwMr sCtYicBuRTYPTHjVK9zr/JiDlGNImuip32+JmrOnWN2ulNOlpr4SSPzoKH0SSpWX 8Cr3JSwJ72dHpBYa0ugfZ9iHljGFRTBGDd/BzmQT4C22JW+D/VuNau9mzwIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFKPPm2RlFpKLXQbCqBnrLbwP6ZIKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkLzM5NGQw Ny0wNWNjLTRmNzItYmQ0Ni0yODk2OTZjYzk5YjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvMzk0ZDA3 LTA1Y2MtNGY3Mi1iZDQ2LTI4OTY5NmNjOTliOS8xL284LWJaR1VXa290ZEJzS29H ZXN0dkFfcGtnby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCHcMA0GCSqGSIb3DQEBCwUAA4IBAQBd y7lUfvRgSnfhj3L5u4Cb1RlbhUiJdLz4pP+KBr/aZW7lh4DvrsSSRYNK161JvYgr 989t13k5s2aAWeN6O/KHCrKwFPLxxIwpGHutl3sbEmEiW22wsxl7PM0cqcgYGK1/ M6SYh0FKheRm+7DO5VWpKvtYNNn4EEk+6VZD6fbua3LC6fNdHYymuHrRcbOrMjbJ +jQds80mb44gbHpjpJZWfO67Ykpiv7H2i+gJKblGIPpjUckTZVxTockoIvShwjKd 0NuOtzCnkeZaSl4RjcUCxQGJ9WoXFoYij+T8uAzpHB3Mgg3vUMw5DcOzdqa7ui41 YaxTeVA9R2q2aqTOE+qV -----END CERTIFICATE-----Generated at Mon Jan 26 00:17:57 2026 by rpki-client