This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer File: oJfWos9CiA2-v0KjJRkHohyRpKU.cer (raw, json) Hash identifier: cKi2rl8VKWJOfDzOzmSKwbD9NCoIg9hKpjTW8+sI/mU= Subject key identifier: A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA567EABA3542DEBA8144C670A3A122 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.8.76.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:67:ea:ba:35:42:de:ba:81:44:c6:70:a3:a1:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3f:f0:89:f3:de:d4:10:39:bb:8c:a9:54:69: 2b:3f:f0:b4:c3:73:e9:78:2b:2b:80:68:b7:b1:cc: 36:28:75:c2:ce:b2:44:f0:30:31:31:ec:88:4f:c1: a2:d1:91:bf:03:69:c3:6c:37:93:60:4a:76:fa:66: 89:58:7b:28:21:2d:20:3c:b9:9f:9a:64:61:11:0f: 21:20:83:02:d2:e1:4c:7a:68:de:88:95:3b:ac:6a: 69:ce:9b:41:76:2f:0b:f2:c3:5c:32:e0:01:bd:9f: 48:99:48:e4:71:53:a5:f4:de:88:4c:3c:b0:ff:74: c2:ad:e1:63:bf:a1:7f:fd:e4:dc:8f:03:16:25:de: e0:59:79:c4:d6:ca:05:57:6d:68:e3:5c:ee:21:d9: 7f:39:4f:ce:ab:66:8e:23:29:52:49:a4:96:55:3e: 45:f9:a1:64:b2:3b:55:fb:ca:44:7b:43:51:ae:08: 28:43:6e:fc:bf:77:60:b6:5f:98:25:c6:d5:00:c2: 66:0a:30:ae:3c:19:49:47:a6:ba:97:e3:b1:cb:28: 26:b9:ef:b9:94:51:97:3f:5c:db:fb:43:89:0f:d2: 83:a6:64:54:4f:97:11:0f:4e:18:ed:69:ec:1e:0b: 91:8f:22:a9:3b:ee:32:83:7b:07:d4:1b:df:1e:bd: 98:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.76.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:09:03:b5:52:4f:9a:96:ff:50:7e:7a:1e:66:1f:30:00:c9: 92:9e:c2:0c:e3:23:59:0f:17:40:78:36:78:0c:b1:0c:df:9a: 66:4b:aa:fe:69:74:57:c7:f1:94:c0:d5:ef:cf:c3:09:a6:6e: ad:4e:3e:95:22:c9:cd:73:d9:e0:b8:19:1f:09:df:97:7f:30: cd:e2:9f:d9:47:93:3e:a5:31:5c:0e:8a:a9:eb:96:0c:fc:bb: a4:4b:88:12:d8:fe:bb:20:b4:9b:37:14:52:0f:1c:73:66:d5: 08:d5:b3:42:74:e4:e3:eb:76:cb:7c:1d:cb:bd:fb:d1:d1:f4: a9:21:92:5d:e2:b5:e1:7e:9d:a3:b9:fc:f8:43:83:ca:53:94: ef:d5:72:9d:6a:53:0a:73:d2:4b:c6:93:80:67:94:cb:47:85: e8:4a:ba:cd:5e:f8:45:f8:47:c7:db:b0:5c:37:93:4c:c5:57: 31:a3:e9:2c:95:28:04:ee:c8:28:15:e8:54:1b:a0:0d:5f:49: 49:97:b8:31:61:88:e3:92:2f:c2:aa:c6:3d:a9:cc:7a:fc:cc: 03:02:97:0e:aa:7b:66:43:d4:d4:61:76:08:e6:ff:a2:4d:e0: 61:0b:96:8b:1e:21:64:35:5a:7e:40:54:28:a9:06:35:1d:6f: e0:9c:e1:3e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+pWfqujVC3rqBRMZwo6EiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDk3ZDZhMmNmNDI4ODBkYmViZjQyYTMyNTE5MDdhMjFjOTFhNGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T/wifPe1BA5u4ypVGkrP/C0w3Pp eCsrgGi3scw2KHXCzrJE8DAxMeyIT8Gi0ZG/A2nDbDeTYEp2+maJWHsoIS0gPLmf mmRhEQ8hIIMC0uFMemjeiJU7rGppzptBdi8L8sNcMuABvZ9ImUjkcVOl9N6ITDyw /3TCreFjv6F//eTcjwMWJd7gWXnE1soFV21o41zuIdl/OU/Oq2aOIylSSaSWVT5F +aFksjtV+8pEe0NRrggoQ278v3dgtl+YJcbVAMJmCjCuPBlJR6a6l+Oxyygmue+5 lFGXP1zb+0OJD9KDpmRUT5cRD04Y7WnsHguRjyKpO+4yg3sH1BvfHr2YowIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKCX1qLPQogNvr9CoyUZB6IckaSlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhLzRjMmI2 OC04MThiLTQ5MDItYjQyZi02ZmNhZjI3MjliZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvNGMyYjY4 LTgxOGItNDkwMi1iNDJmLTZmY2FmMjcyOWJlNS8xL29KZldvczlDaUEyLXYwS2pK UmtIb2h5UnBLVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLQhMMA0GCSqGSIb3DQEBCwUAA4IBAQAfCQO1 Uk+alv9QfnoeZh8wAMmSnsIM4yNZDxdAeDZ4DLEM35pmS6r+aXRXx/GUwNXvz8MJ pm6tTj6VIsnNc9nguBkfCd+XfzDN4p/ZR5M+pTFcDoqp65YM/LukS4gS2P67ILSb NxRSDxxzZtUI1bNCdOTj63bLfB3LvfvR0fSpIZJd4rXhfp2jufz4Q4PKU5Tv1XKd alMKc9JLxpOAZ5TLR4XoSrrNXvhF+EfH27BcN5NMxVcxo+kslSgE7sgoFehUG6AN X0lJl7gxYYjjki/CqsY9qcx6/MwDApcOqntmQ9TUYXYI5v+iTeBhC5aLHiFkNVp+ QFQoqQY1HW/gnOE+ -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:06 2026 by rpki-client