This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer File: oKbWsIdGH97GpbnVLSmDLY8pnIc.cer (raw, json) Hash identifier: DGTEXQxNDYJ5urpSlVrbM5ubV9EbpX8F0e7V75FORaw= Subject key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAB210D323A746F3314EAF0F45EEF3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25569 IP: 80.82.0.0/20 IP: 2a00:c880::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b2:10:d3:23:a7:46:f3:31:4e:af:0f:45:ee:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c2:72:f6:fa:af:da:fe:e0:5f:11:22:f6:b0: cf:63:11:13:e6:ca:22:bd:dd:5d:89:85:53:7d:be: 83:dc:69:a2:b2:f1:5d:b4:48:1e:52:67:3e:4f:52: 8e:ed:d2:8e:6e:61:af:3e:17:26:ea:e5:79:9a:fb: 52:80:b2:bb:de:79:d0:0f:1a:8d:9c:ae:3a:68:6f: 95:ae:5f:ef:12:ae:53:06:f3:a4:6d:08:00:11:d1: af:6a:73:08:25:8b:97:c7:a0:12:88:68:13:ef:3d: 0c:f8:06:d1:44:6c:8e:33:ca:88:5d:e1:d9:86:11: 9b:9c:be:ec:14:55:86:8d:79:af:a6:2f:7c:87:47: eb:5a:c5:c3:f3:1d:bb:20:ba:96:6f:27:fd:a4:85: 05:f7:68:30:70:02:53:a7:9b:81:5a:1c:99:17:d9: 60:e5:eb:1b:05:96:3f:f2:67:8b:d5:32:40:e5:d7: 7d:2d:03:04:86:e7:c3:8c:3e:83:2f:7b:3b:e8:7e: e5:b3:f7:55:19:ef:73:a3:84:88:ab:a5:9f:33:ba: 52:c7:65:32:da:51:c2:76:4e:d7:0a:88:f3:b7:bc: 30:bc:fc:72:aa:1f:68:d4:01:56:c7:68:83:32:7e: 43:7b:a7:4f:c2:a4:fc:9a:2e:58:5d:47:2c:ce:41: 2b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.82.0.0/20 IPv6: 2a00:c880::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25569 Signature Algorithm: sha256WithRSAEncryption 83:9c:38:7a:54:95:8f:66:b0:82:01:39:29:e8:e9:43:5f:78: 96:e2:5d:d3:0e:8a:dd:81:6e:f5:70:ac:fa:81:ba:f8:db:da: e7:79:c7:e4:1e:ad:66:4a:b3:3d:da:34:dc:84:01:85:8d:09: 1f:67:f0:7d:3f:f1:48:66:e9:32:14:2a:db:ca:3d:14:3c:3d: 25:7b:11:c2:f0:21:1b:ea:2b:36:f6:4e:bc:34:b5:c1:9d:85: bb:11:f2:43:1e:06:78:66:bd:17:2a:ca:4b:03:3b:fc:5f:ec: 7f:08:b7:d5:2b:37:c6:2b:51:d1:cd:8a:f5:f3:b7:d0:e1:03: 4f:3c:5e:ab:dd:48:fb:c3:18:34:c8:50:00:f2:6a:e3:8b:0d: 50:b5:93:a8:d0:50:c5:f8:3e:5e:dc:92:d4:7a:f8:cb:d1:5e: ef:98:fc:9f:7f:79:7b:6d:f5:7c:ae:5b:2c:62:4a:25:74:41: 8f:13:a4:e6:ef:60:ed:29:fb:31:c9:47:1a:93:38:85:18:9d: 57:84:58:a2:8b:af:28:16:30:d9:29:db:ad:f8:40:ef:50:dc: f6:42:af:f6:61:da:b3:0d:1a:ff:87:5b:a6:f4:0f:da:f8:0c: 2b:b5:da:c6:ff:7c:1a:76:72:8a:c0:eb:c6:75:61:83:2f:b1: 0a:01:88:66 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt9yrIQ0yOnRvMxTq8PRe7zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGE2ZDZiMDg3NDYxZmRlYzZhNWI5ZDUyZDI5ODMyZDhmMjk5Yzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMJy9vqv2v7gXxEi9rDPYxET5soi vd1diYVTfb6D3GmisvFdtEgeUmc+T1KO7dKObmGvPhcm6uV5mvtSgLK73nnQDxqN nK46aG+Vrl/vEq5TBvOkbQgAEdGvanMIJYuXx6ASiGgT7z0M+AbRRGyOM8qIXeHZ hhGbnL7sFFWGjXmvpi98h0frWsXD8x27ILqWbyf9pIUF92gwcAJTp5uBWhyZF9lg 5esbBZY/8meL1TJA5dd9LQMEhufDjD6DL3s76H7ls/dVGe9zo4SIq6WfM7pSx2Uy 2lHCdk7XCojzt7wwvPxyqh9o1AFWx2iDMn5De6dPwqT8mi5YXUcszkErIwIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFKCm1rCHRh/exqW51S0pgy2PKZyHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzJkNzYw OS0yMTQyLTRhMDMtYjExZS0xMTQ4ZmRlN2FlZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvMmQ3NjA5 LTIxNDItNGEwMy1iMTFlLTExNDhmZGU3YWVmNy8xL29LYldzSWRHSDk3R3BiblZM U21ETFk4cG5JYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQEUFIAMA0EAgACMAcDBQAqAMiAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmPhMA0GCSqGSIb3DQEBCwUAA4IBAQCDnDh6VJWPZrCC ATkp6OlDX3iW4l3TDordgW71cKz6gbr429rnecfkHq1mSrM92jTchAGFjQkfZ/B9 P/FIZukyFCrbyj0UPD0lexHC8CEb6is29k68NLXBnYW7EfJDHgZ4Zr0XKspLAzv8 X+x/CLfVKzfGK1HRzYr187fQ4QNPPF6r3Uj7wxg0yFAA8mrjiw1QtZOo0FDF+D5e 3JLUevjL0V7vmPyff3l7bfV8rlssYkoldEGPE6Tm72DtKfsxyUcakziFGJ1XhFii i68oFjDZKdut+EDvUNz2Qq/2YdqzDRr/h1um9A/a+AwrtdrG/3wadnKKwOvGdWGD L7EKAYhm -----END CERTIFICATE-----Generated at Sun Jan 25 18:11:39 2026 by rpki-client