This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer File: ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer (raw, json) Hash identifier: PswNjSP2hu9g9nsbH5bGeu/5dpqyTLzoZsGHTklthQg= Subject key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8026B67589FF307FFE37C1BE206CC6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216306 IP: 50.21.28.0/22 IP: 91.208.118.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:26:b6:75:89:ff:30:7f:fe:37:c1:be:20:6c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a20cc67154b403145d139469886127ab629eb928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f3:cc:11:39:f8:d5:af:40:16:ed:e4:98:90: 6d:44:bb:85:8d:fb:87:cc:9b:26:07:58:31:f8:3d: 4a:27:c7:dd:d2:ce:41:be:30:97:bf:5b:47:3b:33: 35:ac:70:d5:9a:78:87:2d:4a:a4:09:ed:e9:3b:96: 6e:0c:7d:93:89:6b:f1:58:0d:11:da:53:20:d1:05: 19:bf:2d:a7:63:b0:ff:18:48:fa:d4:43:31:7c:55: 8a:6c:1a:8a:e3:fd:dd:20:a4:57:4b:d0:d3:c2:5f: e2:db:6e:40:e9:79:44:5a:d9:91:8b:57:6c:ad:91: f1:f8:9b:42:c3:dd:1a:dd:c4:e8:2b:d5:7d:44:62: ac:02:43:10:fc:c4:5e:5d:ca:d0:99:f9:91:34:83: db:17:85:a4:6a:6c:f4:52:d3:fc:6e:9b:9f:1a:bb: fd:a7:5d:ed:bf:2b:4b:90:e2:38:83:a8:4a:7c:93: e1:a4:9d:cc:60:29:fa:10:cb:60:52:0b:91:e5:76: 12:86:fd:9b:c4:2f:75:f2:85:48:55:63:ab:48:52: 42:6e:21:a1:d0:87:c7:a8:4b:b3:b5:0b:50:f6:a1: 28:d8:b1:32:3f:a9:74:2f:0c:70:89:4a:77:ce:7b: 02:a7:81:60:0b:d2:a3:4d:cb:e7:48:7d:a4:c6:eb: d8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.21.28.0/22 91.208.118.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216306 Signature Algorithm: sha256WithRSAEncryption 77:df:fc:9c:d4:4f:f3:2b:6d:6e:20:44:c6:8a:e7:7c:fc:4d: 2d:54:cb:83:1a:f3:52:a9:69:d9:a6:c5:51:df:45:09:34:76: 06:63:3e:06:e9:c1:9f:13:a6:25:12:ec:32:25:47:63:75:33: 9d:c3:a7:71:2d:ce:5e:62:67:af:54:ef:5e:38:90:0e:89:f0: c8:9e:eb:c1:f1:da:14:88:a5:7d:df:04:44:1c:4e:ae:c6:32: c4:13:a4:fa:f7:56:81:ad:58:5a:2d:91:3e:32:8b:32:b7:c6: 76:5f:84:fe:6a:93:22:52:64:4c:19:70:6f:6d:00:ee:32:f7: ee:15:34:c3:75:3b:2f:87:1c:7a:8a:78:2a:9a:b0:f4:be:3b: e1:69:97:b1:92:d7:ef:4c:b0:82:d0:9e:65:02:8f:87:44:72: 5f:17:e2:c2:7c:3b:71:35:e6:77:7a:10:ea:d5:05:7d:52:02: 92:85:51:97:a7:14:d4:ff:a6:d3:3d:0f:9f:5b:07:4e:28:cc: e4:a8:ae:d5:ae:34:92:3f:45:dd:57:26:20:4b:65:a1:aa:ac: 8a:cd:04:01:54:6f:29:de:dd:3f:78:77:4f:3c:14:fc:d2:30: 34:39:d6:08:13:c5:32:11:8d:06:5e:fa:32:86:23:1e:3b:bf: 9d:7e:0c:69 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt8gCa2dYn/MH/+N8G+IGzGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjBjYzY3MTU0YjQwMzE0NWQxMzk0Njk4ODYxMjdhYjYyOWViOTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfPMETn41a9AFu3kmJBtRLuFjfuH zJsmB1gx+D1KJ8fd0s5BvjCXv1tHOzM1rHDVmniHLUqkCe3pO5ZuDH2TiWvxWA0R 2lMg0QUZvy2nY7D/GEj61EMxfFWKbBqK4/3dIKRXS9DTwl/i225A6XlEWtmRi1ds rZHx+JtCw90a3cToK9V9RGKsAkMQ/MReXcrQmfmRNIPbF4Wkamz0UtP8bpufGrv9 p13tvytLkOI4g6hKfJPhpJ3MYCn6EMtgUguR5XYShv2bxC918oVIVWOrSFJCbiGh 0IfHqEuztQtQ9qEo2LEyP6l0LwxwiUp3znsCp4FgC9KjTcvnSH2kxuvYhwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFKIMxnFUtAMUXROUaYhhJ6tinrkoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1L2RkODg3 OC0yOTQxLTRjMTUtYjIwNC04ZmMzMzczN2NlYWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvZGQ4ODc4 LTI5NDEtNGMxNS1iMjA0LThmYzMzNzM3Y2VhYi8xL29nekdjVlMwQXhSZEU1UnBp R0VucTJLZXVTZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCMhUcAwQAW9B2MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwNM8jANBgkqhkiG9w0BAQsFAAOCAQEAd9/8nNRP8yttbiBExornfPxN LVTLgxrzUqlp2abFUd9FCTR2BmM+BunBnxOmJRLsMiVHY3UzncOncS3OXmJnr1Tv XjiQDonwyJ7rwfHaFIilfd8ERBxOrsYyxBOk+vdWga1YWi2RPjKLMrfGdl+E/mqT IlJkTBlwb20A7jL37hU0w3U7L4cceop4Kpqw9L474WmXsZLX70ywgtCeZQKPh0Ry Xxfiwnw7cTXmd3oQ6tUFfVICkoVRl6cU1P+m0z0Pn1sHTijM5Kiu1a40kj9F3Vcm IEtloaqsis0EAVRvKd7dP3h3TzwU/NIwNDnWCBPFMhGNBl76MoYjHju/nX4MaQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:41:59 2026 by rpki-client