This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer File: oOOBtudsuVIOjY9Wd27KD-F2zEA.cer (raw, json) Hash identifier: ZYRSOL90gPeumpNeXsEDgbhiSnPzX7p5oyTc5E/7CNg= Subject key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A53724EA7483CE8C99571EAD8D62C4F14 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 05 Nov 2025 09:56:31 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 39650 AS: 204203 IP: 185.161.36.0/22 IP: 185.164.72.0/22 IP: 185.229.28.0/22 IP: 2a06:5a40::/29 IP: 2a0a:d400::/29 IP: 2a0d:6600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:72:4e:a7:48:3c:e8:c9:95:71:ea:d8:d6:2c:4f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 5 09:56:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f0:5a:9f:aa:e9:be:e9:26:86:c3:1f:1b:a2: 03:a8:31:fb:42:36:ee:e4:fa:22:a2:0e:21:4b:0c: c5:08:f1:77:e4:15:89:fd:fb:39:af:2a:89:ce:dd: c0:e9:e8:4b:52:62:93:9d:2e:4e:54:54:6c:05:24: 18:af:00:50:d8:89:cf:48:d9:57:80:ce:14:3f:d8: d0:29:7d:b2:15:b1:af:f2:e7:d3:1d:fc:22:96:42: 2d:de:df:5a:2c:6c:fe:d8:98:42:0f:bb:c1:29:db: 84:e6:3c:39:fd:51:d6:41:b5:40:a2:f5:0a:6f:76: 37:37:1b:83:aa:84:35:2b:e8:a4:bb:0f:96:16:8f: f2:b4:7c:56:41:bb:1a:86:1b:32:ae:a6:d9:40:c5: 3c:b7:f5:b6:0a:cf:ed:52:74:10:10:84:84:93:7f: 51:b2:b0:f6:8a:5c:96:4c:fa:7e:e4:3b:1c:cc:6f: a6:e0:ca:66:7f:54:25:a7:23:36:88:d2:ba:5a:fc: c2:92:ad:04:0d:da:fc:5b:cf:dc:26:bf:0c:1d:7d: b2:31:aa:ee:6f:a4:fc:6e:22:d5:3e:f3:0d:9e:c2: 5e:bb:4c:01:d0:aa:16:6e:be:28:ad:b4:45:32:53: 4f:11:21:78:ad:28:32:6e:ca:dc:fd:db:4e:84:83: 79:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.36.0/22 185.164.72.0/22 185.229.28.0/22 IPv6: 2a06:5a40::/29 2a0a:d400::/29 2a0d:6600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39650 204203 Signature Algorithm: sha256WithRSAEncryption 9e:3a:cd:a7:dc:81:5c:ce:65:7d:cd:0f:7e:1c:36:d1:6b:a9: f5:32:84:6f:bd:23:3b:6c:16:3b:33:d3:20:00:c4:7c:4f:61: 34:0e:96:d9:8d:32:5a:88:95:49:69:ee:74:f3:8f:85:71:49: 74:ea:83:36:82:83:a3:1f:00:92:13:8c:5b:1b:6d:72:bf:9b: b8:6c:c0:9a:1f:38:4f:91:dd:0b:2c:bf:5f:41:e8:ae:8a:a7: 2d:31:62:99:94:0e:79:7c:f7:ee:80:f6:cc:de:78:5f:bb:61: 53:9f:9e:e8:38:e3:e7:bb:3b:3c:a0:f2:2e:54:fd:2c:4e:c9: eb:fb:64:b8:69:38:76:b0:c7:02:ba:65:e9:84:7d:13:fa:94: 0a:e6:00:80:7d:89:03:48:27:a9:3e:d9:e2:58:8a:05:9c:de: f6:4d:81:e3:26:71:6f:14:93:3e:cf:3c:3b:93:f6:93:3f:cf: fc:5a:0b:da:99:e3:6a:35:cb:96:c7:41:4c:b8:e8:4f:71:1f: b1:40:ae:34:96:31:1d:8e:bb:ef:1f:d4:1d:ee:e7:f1:52:23: 44:de:96:52:6d:76:9f:8b:c4:08:56:69:d8:d6:c5:0b:6e:9c: 83:ad:e8:79:6a:c5:88:e0:e9:9a:68:4a:66:e8:80:a9:34:77: 94:7a:2e:00 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZpTck6nSDzoyZVx6tjWLE8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTA1MDk1NjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGUzODFiNmU3NmNiOTUyMGU4ZDhmNTY3NzZlY2EwZmUxNzZjYzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvBan6rpvukmhsMfG6IDqDH7Qjbu 5Poiog4hSwzFCPF35BWJ/fs5ryqJzt3A6ehLUmKTnS5OVFRsBSQYrwBQ2InPSNlX gM4UP9jQKX2yFbGv8ufTHfwilkIt3t9aLGz+2JhCD7vBKduE5jw5/VHWQbVAovUK b3Y3NxuDqoQ1K+ikuw+WFo/ytHxWQbsahhsyrqbZQMU8t/W2Cs/tUnQQEISEk39R srD2ilyWTPp+5DsczG+m4Mpmf1QlpyM2iNK6WvzCkq0EDdr8W8/cJr8MHX2yMaru b6T8biLVPvMNnsJeu0wB0KoWbr4orbRFMlNPESF4rSgybsrc/dtOhIN5DQIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFKDjgbbnbLlSDo2PVnduyg/hdsxAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5LzhlNmYw OC0zMGYwLTQ2ZGQtYTdhMS1hOWMzODQxMjhkNDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvOGU2ZjA4 LTMwZjAtNDZkZC1hN2ExLWE5YzM4NDEyOGQ0Mi8xL29PT0J0dWRzdVZJT2pZOVdk MjdLRC1GMnpFQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAYBAIAATASAwQCuaEkAwQCuaRIAwQCueUcMBsEAgACMBUDBQMq BlpAAwUDKgrUAAMFAyoNZgAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAJriAgMD HaswDQYJKoZIhvcNAQELBQADggEBAJ46zafcgVzOZX3ND34cNtFrqfUyhG+9Izts Fjsz0yAAxHxPYTQOltmNMlqIlUlp7nTzj4VxSXTqgzaCg6MfAJITjFsbbXK/m7hs wJofOE+R3Qssv19B6K6Kpy0xYpmUDnl89+6A9szeeF+7YVOfnug44+e7Ozyg8i5U /SxOyev7ZLhpOHawxwK6ZemEfRP6lArmAIB9iQNIJ6k+2eJYigWc3vZNgeMmcW8U kz7PPDuT9pM/z/xaC9qZ42o1y5bHQUy46E9xH7FArjSWMR2Ou+8f1B3u5/FSI0Te llJtdp+LxAhWadjWxQtunIOt6HlqxYjg6ZpoSmbogKk0d5R6LgA= -----END CERTIFICATE-----Generated at Sat Dec 6 23:45:21 2025 by rpki-client