This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer File: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer (raw, json) Hash identifier: BTT2zIVbaOXdQaix78ULuaejrMZ3yGrtp50bvDkoJWM= Subject key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDF9BC70378E0A5CE334523C384C08 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.198.137.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f9:bc:70:37:8e:0a:5c:e3:34:52:3c:38:4c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6d:9e:fb:c5:8e:4a:62:62:a3:58:21:6f:dc: 98:dd:3b:cd:0d:9e:c1:dd:a4:5e:7b:79:29:03:36: 20:3f:68:bd:ee:bb:92:36:c5:4d:d4:b7:56:fc:c5: 35:ea:58:b1:51:35:4e:31:0a:8a:de:49:9f:54:c9: 84:f7:ed:cb:66:22:86:eb:53:3a:f5:46:8a:5f:7f: cf:38:a3:0d:8e:55:bc:33:4f:00:8b:73:26:71:f8: 7b:80:20:16:1f:05:a9:5d:0a:8a:60:e5:5f:31:2a: d1:b8:b7:c7:7c:4f:b2:a3:ea:a4:d1:ba:8d:f6:86: a2:2d:e0:78:0f:01:c2:f1:20:7c:be:3b:e6:3f:da: 9b:09:c5:78:85:a9:96:83:ab:5f:8c:a1:f6:96:c7: 8d:1c:dd:7e:4a:5c:00:c2:bc:c7:e9:53:d6:c7:8b: c2:7a:c6:1e:72:89:cb:d8:e8:56:71:16:67:09:06: ce:00:f6:6f:e9:4a:73:c1:e7:26:0e:1d:92:01:c5: a3:b5:89:60:08:ee:0a:a1:72:74:60:09:43:0c:df: 61:6c:c3:4d:84:2d:d5:cc:9b:e7:de:5c:ab:5c:cf: be:cb:65:c1:bb:16:ab:7b:06:09:29:95:10:a2:a7: 84:2e:6a:e4:4e:a9:ea:f1:60:ce:b0:e4:11:8a:f4: 18:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.137.0/24 Signature Algorithm: sha256WithRSAEncryption 44:24:e3:f5:06:18:6d:a3:c5:05:98:de:3e:8f:20:f5:7d:17: d1:db:5c:11:70:cf:fb:65:67:7f:89:03:90:8c:03:cc:a7:55: 69:ae:fb:44:b7:ce:df:e5:5d:49:db:0b:76:1f:9e:b1:17:9e: 1a:c7:2a:fd:7a:46:fb:ca:a4:76:72:24:be:03:31:6b:ed:f4: 59:32:73:cd:7f:7f:24:e0:33:cd:28:25:17:da:2d:79:4f:fd: dd:c6:e5:55:95:89:dc:32:c6:80:89:0d:ee:05:05:b4:65:80: 8b:c1:c3:41:55:4b:94:02:2f:85:cc:1d:bf:ba:af:3c:9c:e5: 2d:99:0d:40:f9:d7:84:31:fa:0e:be:2f:17:33:f5:0b:5c:b9: 13:d2:eb:48:8e:f7:52:71:2d:4e:11:dd:40:85:fa:5f:73:9c: 91:c0:bb:b3:0f:f1:2c:20:ff:a1:71:08:52:b4:1d:d5:85:2d: cb:94:60:93:b4:11:3d:71:c7:42:07:66:c6:45:23:d1:0d:21: 88:d7:e9:7f:e9:8a:22:44:ef:5e:b6:62:d6:dd:17:45:5b:79: 72:e6:22:be:03:b1:9b:99:65:0f:53:7e:0c:4a:39:3f:b8:33: 17:2b:a9:0e:4f:f6:39:a9:c1:26:91:c2:5e:df:71:23:78:4d: cb:fe:cd:63 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87fm8cDeOClzjNFI8OEwIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDk2MDhmMTViMzY3YWVlNDg2Yjg1NmQ5ZTQwNGMzZDFlMGE1ZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz22e+8WOSmJio1ghb9yY3TvNDZ7B 3aRee3kpAzYgP2i97ruSNsVN1LdW/MU16lixUTVOMQqK3kmfVMmE9+3LZiKG61M6 9UaKX3/POKMNjlW8M08Ai3Mmcfh7gCAWHwWpXQqKYOVfMSrRuLfHfE+yo+qk0bqN 9oaiLeB4DwHC8SB8vjvmP9qbCcV4hamWg6tfjKH2lseNHN1+SlwAwrzH6VPWx4vC esYeconL2OhWcRZnCQbOAPZv6UpzwecmDh2SAcWjtYlgCO4KoXJ0YAlDDN9hbMNN hC3VzJvn3lyrXM++y2XBuxarewYJKZUQoqeELmrkTqnq8WDOsOQRivQY+QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKCWCPFbNnruSGuFbZ5ATD0eCl/UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzgxMDY2 ZC0yMTIzLTRiNmQtOGJjZi1iOGVkNjZkNDI3ODIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvODEwNjZk LTIxMjMtNGI2ZC04YmNmLWI4ZWQ2NmQ0Mjc4Mi8xL29KWUk4VnMyZXU1SWE0VnRu a0JNUFI0S1g5US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8aJMA0GCSqGSIb3DQEBCwUAA4IBAQBEJOP1 Bhhto8UFmN4+jyD1fRfR21wRcM/7ZWd/iQOQjAPMp1VprvtEt87f5V1J2wt2H56x F54axyr9ekb7yqR2ciS+AzFr7fRZMnPNf38k4DPNKCUX2i15T/3dxuVVlYncMsaA iQ3uBQW0ZYCLwcNBVUuUAi+FzB2/uq88nOUtmQ1A+deEMfoOvi8XM/ULXLkT0utI jvdScS1OEd1Ahfpfc5yRwLuzD/EsIP+hcQhStB3VhS3LlGCTtBE9ccdCB2bGRSPR DSGI1+l/6YoiRO9etmLW3RdFW3ly5iK+A7GbmWUPU34MSjk/uDMXK6kOT/Y5qcEm kcJe33EjeE3L/s1j -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:32 2026 by rpki-client