This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer File: onxkG1MKfGuiNAIuMyckYjI2cQA.cer (raw, json) Hash identifier: wT9BNHuD9yQgy0EICASnXDDc81oWAENFy8X6FpxPjG0= Subject key identifier: A2:7C:64:1B:53:0A:7C:6B:A2:34:02:2E:33:27:24:62:32:36:71:00 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15C20330809E6836F2AE73410EC590 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.239.200.0/22 IP: 2001:67c:e94::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c2:03:30:80:9e:68:36:f2:ae:73:41:0e:c5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a27c641b530a7c6ba234022e3327246232367100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d7:b1:34:8a:b7:d9:46:e6:53:55:0f:aa:e0: 2c:ea:fc:55:2f:4b:0f:4b:dc:11:9a:cb:2a:d1:2c: d5:9b:df:3d:9e:ab:7d:fb:e7:3f:17:1f:7f:ee:6f: 4e:88:dc:db:72:3b:60:0f:64:37:d9:04:ea:4d:13: 29:40:e0:39:75:71:0e:d9:13:c0:f8:23:7b:c9:2a: a5:a3:cb:92:c2:57:0d:b8:a9:df:73:b8:28:04:48: 79:c3:2d:be:6b:18:a5:8e:69:ea:5a:9a:b3:0b:57: 2f:80:7c:6f:92:4b:50:5d:a8:49:e5:ef:a4:33:e4: cc:77:83:ea:69:1e:42:78:52:48:5f:2d:e8:39:e3: 88:8a:2d:ba:7e:31:45:e6:07:f0:65:ae:06:cf:d4: a5:74:c1:db:ae:23:0d:e5:be:3a:c8:5b:f3:07:80: 84:60:dd:9d:5f:dd:56:0c:70:06:7f:7d:71:15:48: 57:08:82:37:fc:7d:9f:da:d4:fd:74:56:08:5f:b9: 9e:9a:22:9d:ea:aa:38:1f:59:6c:7a:8e:5b:91:14: cd:31:e9:a1:8e:4b:2d:05:8e:fa:57:72:12:42:be: 6c:47:60:a2:e6:38:c2:0d:cb:47:63:83:07:68:e8: 57:8a:b8:6d:06:ea:66:64:6d:13:ec:01:77:33:9f: 52:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7C:64:1B:53:0A:7C:6B:A2:34:02:2E:33:27:24:62:32:36:71:00 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.200.0/22 IPv6: 2001:67c:e94::/48 Signature Algorithm: sha256WithRSAEncryption 92:c8:55:5b:ea:a1:ab:16:6d:31:b4:36:78:82:cc:04:ca:66: ae:5d:31:6f:71:75:9c:62:7e:5e:8d:b3:75:69:ba:d5:e7:cf: 74:f0:20:44:09:f8:2b:74:ea:91:88:18:60:fc:5b:8a:4d:21: c8:c0:51:9d:6c:7d:9d:0d:15:86:82:26:dc:74:5e:83:45:be: 8e:c2:3b:ad:d2:b3:12:9c:d2:5b:05:03:e6:91:27:6d:54:75: 86:71:e4:bc:4a:f2:dd:a7:7f:9a:e8:b6:aa:a3:37:3d:03:39: e9:55:45:12:80:2d:62:98:38:a9:2b:71:4b:6e:bc:37:8f:4e: 72:96:4d:a8:70:fb:71:45:5c:fe:55:d8:f5:99:9b:d1:b7:27: 2f:9e:73:b3:6b:02:4e:08:f0:6a:8f:42:35:22:c2:8c:7f:03: 10:bb:18:5d:37:b8:49:77:2f:7b:19:fd:d8:e6:4d:11:e7:93: 53:e7:0f:3e:ad:7c:4f:dc:2c:3a:83:36:58:68:74:01:11:e9: 38:19:36:18:42:14:1a:bf:71:65:a0:fd:21:f4:01:82:e5:0a: a0:74:58:61:25:52:e6:9e:08:47:f4:c4:46:b4:5d:c7:97:32: cc:21:d6:c4:69:bb:af:f2:4d:8b:27:7d:53:9c:1c:01:29:2a: 0b:d2:3c:d9 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt/FcIDMICeaDbyrnNBDsWQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjdjNjQxYjUzMGE3YzZiYTIzNDAyMmUzMzI3MjQ2MjMyMzY3MTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9exNIq32UbmU1UPquAs6vxVL0sP S9wRmssq0SzVm989nqt9++c/Fx9/7m9OiNzbcjtgD2Q32QTqTRMpQOA5dXEO2RPA +CN7ySqlo8uSwlcNuKnfc7goBEh5wy2+axiljmnqWpqzC1cvgHxvkktQXahJ5e+k M+TMd4PqaR5CeFJIXy3oOeOIii26fjFF5gfwZa4Gz9SldMHbriMN5b46yFvzB4CE YN2dX91WDHAGf31xFUhXCII3/H2f2tT9dFYIX7memiKd6qo4H1lseo5bkRTNMemh jkstBY76V3ISQr5sR2Ci5jjCDctHY4MHaOhXirhtBupmZG0T7AF3M59ShQIDAQAB o4IClTCCApEwHQYDVR0OBBYEFKJ8ZBtTCnxrojQCLjMnJGIyNnEAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5LzAwNmY1 Ni0xZDhlLTQ1Y2MtODY5NC0xZjE4OGZjY2U4NTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvMDA2ZjU2 LTFkOGUtNDVjYy04Njk0LTFmMTg4ZmNjZTg1NS8xL29ueGtHMU1LZkd1aU5BSXVN eWNrWWpJMmNRQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQCW+/IMA8EAgACMAkDBwAgAQZ8DpQwDQYJKoZI hvcNAQELBQADggEBAJLIVVvqoasWbTG0NniCzATKZq5dMW9xdZxifl6Ns3VputXn z3TwIEQJ+Ct06pGIGGD8W4pNIcjAUZ1sfZ0NFYaCJtx0XoNFvo7CO63SsxKc0lsF A+aRJ21UdYZx5LxK8t2nf5rotqqjNz0DOelVRRKALWKYOKkrcUtuvDePTnKWTahw +3FFXP5V2PWZm9G3Jy+ec7NrAk4I8GqPQjUiwox/AxC7GF03uEl3L3sZ/djmTRHn k1PnDz6tfE/cLDqDNlhodAER6TgZNhhCFBq/cWWg/SH0AYLlCqB0WGElUuaeCEf0 xEa0XceXMswh1sRpu6/yTYsnfVOcHAEpKgvSPNk= -----END CERTIFICATE-----Generated at Mon Jan 26 09:00:49 2026 by rpki-client