This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer (raw, json) Hash identifier: N0y2Z+U4QqkwHGb/0+aPu5EC7RFgN/AhyTKbqHa8a68= Subject key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35A1E4F31D27E3FF6CE7A1872DB806 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.5.186.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a1:e4:f3:1d:27:e3:ff:6c:e7:a1:87:2d:b8:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:10:77:aa:7a:7c:68:61:77:3e:84:a7:6e:10: f6:8f:75:b1:a4:19:82:bf:34:1d:67:3f:18:34:82: e5:fb:50:f8:49:bf:3e:e5:ff:f2:c5:6c:f8:0b:0e: 79:bb:08:15:f8:f8:6a:2a:13:5c:4d:5e:bd:62:8c: 72:99:d0:d3:a4:ed:db:fd:e8:12:c4:15:42:1d:e4: 93:ea:86:eb:01:0e:64:d4:ae:c5:9b:67:c0:83:53: f5:36:48:26:8a:76:ed:cd:f6:7f:93:42:65:84:2a: 16:c0:b6:5a:c8:37:cb:05:80:35:41:72:1e:d9:ee: a6:d2:e0:2b:d7:e4:60:c8:7e:e0:5b:1f:5b:4c:aa: 13:a5:e8:ae:cc:15:98:d0:77:51:8a:8e:32:d5:2c: ff:8e:09:99:62:ba:e7:11:b0:1b:a3:25:b0:39:63: bc:28:73:b4:f0:ae:9c:f7:68:c7:2b:b9:ef:79:67: 28:86:cb:22:65:8b:c9:d0:e8:aa:88:ee:0b:57:fb: 6b:16:63:1f:e9:d5:4b:7f:e4:b7:3d:09:59:10:79: e9:9e:dd:6d:e3:d0:54:ed:42:f8:64:94:be:02:7a: 5c:a6:9d:ad:a5:d5:7a:72:a6:7f:58:22:3c:10:dd: 8f:d7:61:11:87:91:3b:f1:a7:91:7f:dc:55:9b:3b: 20:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.5.186.0/24 Signature Algorithm: sha256WithRSAEncryption 80:63:2c:f5:ee:96:06:f6:de:6e:a4:35:db:bc:45:4d:99:67: 7a:31:81:4f:51:31:8a:1d:32:1c:ad:40:45:1a:03:3c:a1:cb: aa:a9:49:5f:5d:29:7e:8e:e1:de:08:0b:c7:0f:99:1f:18:48: 6e:91:53:bf:48:7d:00:1f:d2:4a:19:7f:94:6e:0f:9b:31:d9: 02:a5:73:12:02:c7:85:c4:83:26:99:53:ee:11:3c:c2:68:c3: b9:cd:e1:8f:66:60:1f:93:fd:2f:a5:ce:ec:df:f7:ce:fc:69: 58:67:86:6e:ba:4f:87:51:59:73:e2:72:9b:40:04:31:3f:60: 6c:e5:68:3b:ea:25:8e:54:4c:b8:a2:36:d4:63:be:77:70:68: 74:28:6d:ba:58:48:9e:f3:95:85:6e:80:7a:f2:db:bc:1b:42: 68:95:31:06:01:7d:49:78:a1:6e:a0:69:3d:fd:cb:f9:12:ac: 78:54:fa:87:61:38:94:d1:7b:1c:71:21:d7:0e:4a:68:2b:71: d2:82:ad:bf:db:9d:69:d5:0c:aa:b2:c4:9c:c1:36:3d:99:3c: a4:60:65:0b:b4:07:67:71:ae:7c:7b:32:0d:2e:bf:f3:db:3a: e8:08:ab:9a:5c:9c:3d:02:c1:9f:32:66:3a:dd:7d:90:01:24: 34:01:93:f6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7NaHk8x0n4/9s56GHLbgGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmY1MTZiZjQyMjE0MDg2ZGIzOTg0N2Y5ZjU2M2I0Y2Y0YTBmZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hB3qnp8aGF3PoSnbhD2j3WxpBmC vzQdZz8YNILl+1D4Sb8+5f/yxWz4Cw55uwgV+PhqKhNcTV69YoxymdDTpO3b/egS xBVCHeST6obrAQ5k1K7Fm2fAg1P1NkgminbtzfZ/k0JlhCoWwLZayDfLBYA1QXIe 2e6m0uAr1+RgyH7gWx9bTKoTpeiuzBWY0HdRio4y1Sz/jgmZYrrnEbAboyWwOWO8 KHO08K6c92jHK7nveWcohssiZYvJ0OiqiO4LV/trFmMf6dVLf+S3PQlZEHnpnt1t 49BU7UL4ZJS+Anpcpp2tpdV6cqZ/WCI8EN2P12ERh5E78aeRf9xVmzsgvwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKL1Fr9CIUCG2zmEf59WO0z0oP9DMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0L2QxZGZk Ni1jY2RmLTQ2MjEtYjQ1NC02ZTNmYTYyY2QyZGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvZDFkZmQ2 LWNjZGYtNDYyMS1iNDU0LTZlM2ZhNjJjZDJkZi8xL292VVd2MEloUUliYk9ZUl9u MVk3VFBTZ18wTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwwW6MA0GCSqGSIb3DQEBCwUAA4IBAQCAYyz1 7pYG9t5upDXbvEVNmWd6MYFPUTGKHTIcrUBFGgM8ocuqqUlfXSl+juHeCAvHD5kf GEhukVO/SH0AH9JKGX+Ubg+bMdkCpXMSAseFxIMmmVPuETzCaMO5zeGPZmAfk/0v pc7s3/fO/GlYZ4Zuuk+HUVlz4nKbQAQxP2Bs5Wg76iWOVEy4ojbUY753cGh0KG26 WEie85WFboB68tu8G0JolTEGAX1JeKFuoGk9/cv5Eqx4VPqHYTiU0XsccSHXDkpo K3HSgq2/251p1QyqssScwTY9mTykYGULtAdnca58ezINLr/z2zroCKuaXJw9AsGf MmY63X2QASQ0AZP2 -----END CERTIFICATE-----Generated at Mon Jan 26 02:47:51 2026 by rpki-client