This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer File: oCN2bGLetRKXFVcI7MtCHIsEeAo.cer (raw, json) Hash identifier: 4KD+4tMXLnT4w4ZW53lwclssVfVxSlquiBfkNizHHWw= Subject key identifier: A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9F00BC99B43D5AA1BC93151A3772B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207784 IP: 195.144.27.0/24 IP: 195.149.67.0/24 IP: 195.149.73.0/24 IP: 195.149.90.0/24 IP: 2a0f:bb40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f0:0b:c9:9b:43:d5:aa:1b:c9:31:51:a3:77:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a023766c62deb51297155708eccb421c8b04780a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a7:56:20:12:f1:f6:63:fe:c7:e6:66:18:38: 40:73:49:98:c3:a5:70:6f:aa:c3:ce:70:4e:26:ae: ff:89:29:84:52:cd:67:40:d1:a8:74:77:54:59:81: 64:c6:ce:eb:18:64:d6:ba:26:30:dc:15:57:26:a9: 24:3e:3b:68:0d:f0:ed:3f:d7:f4:dc:c8:11:24:90: af:36:02:dd:eb:00:9c:09:10:0a:9b:9c:5b:83:2a: 82:b1:c6:d0:70:e6:4a:00:f6:f8:d9:2f:59:4e:51: 27:f1:bf:e2:4f:23:cb:ee:79:ce:c8:f5:e9:3a:e7: 85:55:16:30:4d:69:95:01:b0:9a:c6:fe:53:ee:e1: 40:5d:04:2c:40:60:4e:68:43:2b:3c:0a:96:15:20: 5a:43:58:fb:cc:4f:c7:eb:ef:e9:c5:98:0b:e1:19: 84:fe:fd:d6:bd:d7:68:9b:82:37:01:cb:c9:46:8c: 5e:6d:c9:5f:03:af:3b:04:a2:8c:60:33:2b:df:58: b7:2e:f8:0c:4d:4f:16:d9:a5:64:15:2c:d7:b2:b2: c5:fe:39:d3:54:e5:17:60:f3:a0:bc:b9:32:b4:f9: bb:d2:78:e3:cc:89:cc:4f:05:63:ab:b8:23:7f:da: d8:15:eb:da:f5:c1:ca:76:df:d6:e3:75:6f:16:9c: 9b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.144.27.0/24 195.149.67.0/24 195.149.73.0/24 195.149.90.0/24 IPv6: 2a0f:bb40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207784 Signature Algorithm: sha256WithRSAEncryption 2e:cf:8c:66:4f:d3:63:b6:04:b9:8e:fa:63:bf:54:57:63:76: 7d:13:b5:b0:79:ec:a6:2d:e5:a8:be:c9:13:b9:96:d6:dc:ac: c2:7e:4d:cf:33:56:7c:54:96:bb:66:6f:1b:ee:bb:f1:9f:bf: dd:f1:22:8d:1e:53:3a:9f:95:c4:6a:d4:97:b7:74:32:0b:21: 39:b4:fd:3f:22:1f:32:a5:23:b1:65:6b:df:53:98:06:eb:ea: ef:45:a8:86:bd:7e:8e:56:c9:3d:6f:16:e2:44:e0:bc:3c:9f: 62:20:be:9c:bd:cd:13:5b:5c:08:d0:e5:5d:ce:20:4d:2e:83: e3:21:8f:35:00:33:19:19:65:02:05:7e:f1:12:6d:50:bf:ee: 44:3d:16:ea:ca:e9:cf:12:03:72:59:9d:ed:05:cc:fc:84:d1: c8:bf:87:e8:fe:81:4d:20:37:70:95:e2:8f:db:32:ab:9b:c2: f6:ce:4a:97:a1:f0:38:06:d8:39:f6:db:78:6d:76:6a:f6:04: 6c:4f:e5:31:df:4c:04:72:20:db:3f:3f:19:84:a9:f3:b1:0e: 77:f2:cd:cc:75:1f:a8:80:3d:14:34:5a:e7:34:29:64:06:b4: 7a:a4:45:63:43:05:07:3c:79:23:f4:6b:d8:a6:8c:3e:49:c2: 63:35:99:f0 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt9yfALyZtD1aobyTFRo3crMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDIzNzY2YzYyZGViNTEyOTcxNTU3MDhlY2NiNDIxYzhiMDQ3ODBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqdWIBLx9mP+x+ZmGDhAc0mYw6Vw b6rDznBOJq7/iSmEUs1nQNGodHdUWYFkxs7rGGTWuiYw3BVXJqkkPjtoDfDtP9f0 3MgRJJCvNgLd6wCcCRAKm5xbgyqCscbQcOZKAPb42S9ZTlEn8b/iTyPL7nnOyPXp OueFVRYwTWmVAbCaxv5T7uFAXQQsQGBOaEMrPAqWFSBaQ1j7zE/H6+/pxZgL4RmE /v3Wvddom4I3AcvJRoxebclfA687BKKMYDMr31i3LvgMTU8W2aVkFSzXsrLF/jnT VOUXYPOgvLkytPm70njjzInMTwVjq7gjf9rYFeva9cHKdt/W43VvFpybYwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFKAjdmxi3rUSlxVXCOzLQhyLBHgKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjL2RmOTA5 Ni0zNmM5LTQzOWEtYTBhMC1hM2ExMDBlZjg2ZGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvZGY5MDk2 LTM2YzktNDM5YS1hMGEwLWEzYTEwMGVmODZkZS8xL29DTjJiR0xldFJLWEZWY0k3 TXRDSElzRWVBby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQAw5AbAwQAw5VDAwQAw5VJAwQAw5VaMA0EAgAC MAcDBQMqD7tAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMrqDANBgkqhkiG9w0B AQsFAAOCAQEALs+MZk/TY7YEuY76Y79UV2N2fRO1sHnspi3lqL7JE7mW1tyswn5N zzNWfFSWu2ZvG+678Z+/3fEijR5TOp+VxGrUl7d0MgshObT9PyIfMqUjsWVr31OY Buvq70Wohr1+jlbJPW8W4kTgvDyfYiC+nL3NE1tcCNDlXc4gTS6D4yGPNQAzGRll AgV+8RJtUL/uRD0W6srpzxIDclmd7QXM/ITRyL+H6P6BTSA3cJXij9syq5vC9s5K l6HwOAbYOfbbeG12avYEbE/lMd9MBHIg2z8/GYSp87EOd/LNzHUfqIA9FDRa5zQp ZAa0eqRFY0MFBzx5I/Rr2KaMPknCYzWZ8A== -----END CERTIFICATE-----Generated at Mon Jan 26 06:57:34 2026 by rpki-client