This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer File: ozzWJ5463BmcztFEj4CIGEKVnbs.cer (raw, json) Hash identifier: 1jPg9L/85wGiXDdlnzO60f4AGB0yjUMYZIVnDh7GI6o= Subject key identifier: A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12AF4CE85A4F3773233ADCB4AFE677 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49650 IP: 37.130.208.0/21 IP: 91.215.64.0/22 IP: 188.65.20.0/22 IP: 195.49.176.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:af:4c:e8:5a:4f:37:73:23:3a:dc:b4:af:e6:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a33cd6279e3adc199cced1448f80881842959dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:df:39:00:cb:b6:89:8f:41:1e:79:2f:2b:79: 00:0f:36:f1:6a:46:4e:54:62:24:9a:68:48:61:8e: d0:95:52:d5:11:9e:76:a1:09:51:64:2a:ef:85:cb: 01:2d:5e:24:1b:55:c2:11:80:cd:e5:26:45:2d:e7: 69:db:3d:a5:5c:57:11:db:0e:ad:0e:c6:27:63:f2: c1:c7:d0:eb:aa:fd:fa:c4:52:f3:ed:6f:03:e3:d0: 33:bf:e2:46:6a:10:be:b3:1e:47:d3:ce:9d:f3:35: 5e:92:0c:89:5f:f4:3d:e2:60:1d:30:a1:30:e9:4f: ad:a9:11:23:ea:98:8a:02:85:24:3a:75:c1:d7:f2: 99:da:0d:09:68:d3:b8:e1:07:86:a8:21:cc:6a:2e: aa:99:68:93:8a:97:a9:0c:65:29:cc:78:4a:91:a3: 06:97:a9:d1:f8:3a:0d:52:54:fa:f2:71:51:b2:b7: 4b:52:8b:62:a1:a0:4e:18:12:4b:53:92:f0:3f:f5: d4:94:21:89:12:5a:6a:8c:23:42:f1:ec:24:41:4f: 15:60:02:ac:79:58:0e:c1:25:80:f3:f5:d3:04:b3: 2d:88:8b:d5:74:6c:e6:4c:f9:8e:d4:da:61:8f:62: fb:94:21:52:b3:5b:10:9f:48:d4:78:ee:b3:25:9a: ee:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.130.208.0/21 91.215.64.0/22 188.65.20.0/22 195.49.176.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49650 Signature Algorithm: sha256WithRSAEncryption 2f:d8:9a:ea:80:e9:43:72:c2:61:8d:ec:74:d3:58:55:2b:43: 32:9d:28:5f:fd:17:76:49:89:e1:96:bc:a0:bb:69:c0:88:3c: 18:1d:9e:32:8a:92:c5:f4:d5:8e:d5:7e:27:04:d7:11:d4:be: 5c:9e:ac:c7:7f:45:40:ca:04:75:d1:e5:e7:d8:45:d3:bf:af: d2:aa:29:84:b3:4c:47:13:9a:f9:53:7a:8d:9b:a4:62:ab:f7: af:6e:ee:15:a0:76:0e:70:14:76:ef:44:2b:40:cb:ee:49:21: 71:61:67:c2:af:fc:ec:d7:74:6b:47:ea:65:04:0c:59:44:b3: 37:bb:7b:9f:68:3b:b3:7c:37:5d:8d:d0:c3:a6:ee:df:62:86: 0e:9a:bf:dc:1e:d8:dc:c2:88:e3:3a:38:06:18:66:eb:ca:08: fb:87:d9:62:ab:ff:a7:35:61:84:32:f4:72:54:f0:d3:e4:90: c6:63:20:a3:3d:31:a8:fd:c5:97:d9:01:06:36:a8:5e:0e:6d: 43:63:0e:c7:81:a8:58:ae:45:e2:8c:bf:20:11:3d:65:f2:a3: a6:de:d3:45:0e:d2:c0:c7:5d:8d:2c:3e:6b:f7:72:93:4c:96: 97:47:4f:23:67:14:55:b5:a6:db:0a:7f:6e:26:80:3a:58:8c: 2c:7b:27:42 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZt8Eq9M6FpPN3MjOty0r+Z3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzNjZDYyNzllM2FkYzE5OWNjZWQxNDQ4ZjgwODgxODQyOTU5ZGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t85AMu2iY9BHnkvK3kADzbxakZO VGIkmmhIYY7QlVLVEZ52oQlRZCrvhcsBLV4kG1XCEYDN5SZFLedp2z2lXFcR2w6t DsYnY/LBx9Drqv36xFLz7W8D49Azv+JGahC+sx5H086d8zVekgyJX/Q94mAdMKEw 6U+tqREj6piKAoUkOnXB1/KZ2g0JaNO44QeGqCHMai6qmWiTipepDGUpzHhKkaMG l6nR+DoNUlT68nFRsrdLUotioaBOGBJLU5LwP/XUlCGJElpqjCNC8ewkQU8VYAKs eVgOwSWA8/XTBLMtiIvVdGzmTPmO1Nphj2L7lCFSs1sQn0jUeO6zJZruwwIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFKM81ieeOtwZnM7RRI+AiBhClZ27MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3LzZjZTA3 Ni0xMjZlLTRlNDgtYTc1OS1hYTViYjBhYmFjMjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvNmNlMDc2 LTEyNmUtNGU0OC1hNzU5LWFhNWJiMGFiYWMyMy8xL296eldKNTQ2M0JtY3p0RkVq NENJR0VLVm5icy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQDJYLQAwQCW9dAAwQCvEEUAwQCwzGwMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDB8jANBgkqhkiG9w0BAQsFAAOCAQEAL9ia6oDp Q3LCYY3sdNNYVStDMp0oX/0XdkmJ4Za8oLtpwIg8GB2eMoqSxfTVjtV+JwTXEdS+ XJ6sx39FQMoEddHl59hF07+v0qophLNMRxOa+VN6jZukYqv3r27uFaB2DnAUdu9E K0DL7kkhcWFnwq/87Nd0a0fqZQQMWUSzN7t7n2g7s3w3XY3Qw6bu32KGDpq/3B7Y 3MKI4zo4Bhhm68oI+4fZYqv/pzVhhDL0clTw0+SQxmMgoz0xqP3Fl9kBBjaoXg5t Q2MOx4GoWK5F4oy/IBE9ZfKjpt7TRQ7SwMddjSw+a/dyk0yWl0dPI2cUVbWm2wp/ biaAOliMLHsnQg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:25:31 2026 by rpki-client