This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer (raw, json) Hash identifier: mpnac0LMIPBc3PUwzi1+OJwbHuN9dNHRJ2wzPqPCLhw= Subject key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910DF25C94E9F9DBA4B518D656337DF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.221.12.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:df:25:c9:4e:9f:9d:ba:4b:51:8d:65:63:37:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a5:6e:01:1a:c3:19:18:25:f4:36:d4:89:57: c3:21:38:83:7e:15:a1:c1:08:b8:1f:ad:3c:ac:3c: ec:5c:21:32:73:c6:65:ca:56:d3:f2:50:48:2a:e9: ef:85:7f:23:b4:73:f3:5f:79:33:88:d9:67:a7:f2: 01:ae:7d:cb:51:e4:29:9d:5a:5a:06:4a:d7:52:96: b6:cc:75:e9:10:7e:42:11:5a:e2:2f:16:73:14:6b: 5a:6d:84:1f:7e:c8:71:1c:d2:f2:29:e8:4f:bd:11: 7f:94:a3:be:14:f5:4f:5a:7a:c3:c2:b7:a5:19:06: 52:34:fc:2e:11:ba:40:6c:3d:5e:c7:be:c6:65:6c: c5:e4:41:d9:0e:56:b8:8a:25:f3:d2:8b:17:58:4e: f0:65:5e:54:a2:5a:fd:dd:5a:fe:4a:ee:48:fc:7d: a7:e9:5e:8a:a7:6d:e4:9c:8b:3f:78:24:9d:18:6f: a2:33:5b:87:d3:9b:5f:36:b9:c6:73:30:b1:be:ba: 1e:95:ef:7a:ee:31:fb:66:5c:d0:b3:01:f3:8e:1f: da:87:e4:d3:ac:fd:6f:83:e4:64:bb:93:a7:18:cb: 57:c4:71:b2:96:49:d1:08:6e:2e:d6:c6:b1:4e:ae: 66:84:7b:fa:bf:9a:c5:20:61:81:87:55:12:71:80: 5f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.12.0/23 Signature Algorithm: sha256WithRSAEncryption a5:ea:38:6c:90:13:92:97:c0:76:06:99:6b:39:ea:a7:a2:da: 5f:a4:c8:49:5e:7d:84:0a:8b:93:f2:0a:06:cb:8c:46:54:4a: 68:99:db:df:19:b0:85:a5:a7:f0:f7:95:3c:78:8f:5e:db:60: 06:bf:1a:5b:24:cf:f7:88:a1:c1:aa:0a:36:e8:87:f6:ed:d4: ca:c1:cc:91:4f:c4:0e:ff:16:07:58:fd:01:7a:96:ea:2f:c7: 8d:a3:a9:0a:7e:be:d3:b9:d6:d6:c2:12:5f:20:e9:ed:08:46: e9:4d:12:4b:a9:80:49:7d:0f:54:9f:08:bf:9b:26:2c:f7:0f: c1:4f:9d:ab:bb:64:cb:ed:09:20:ea:a2:a2:41:fa:88:a2:e7: 16:9b:80:32:dd:e6:08:0f:7a:58:86:f9:8a:70:3d:95:15:7e: 90:dd:13:6a:f6:12:68:cc:32:eb:11:5a:27:0b:56:63:d1:2f: 48:a4:ae:e4:30:16:14:fe:49:9a:ef:61:2f:ed:31:07:04:3d: e4:7e:18:1b:df:35:d3:f5:7e:d8:2d:ea:82:3e:14:7a:9b:5f: 98:8b:17:05:8d:f8:e3:b7:f8:48:7d:7e:08:d5:78:d9:c9:c7: ac:96:38:25:cd:ef:83:b0:68:78:35:b8:5c:d4:26:43:90:92: a9:ed:df:97 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5EN8lyU6fnbpLUY1lYzffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDBmMGUwYThlMDBmMWE2ZDhjMWMyNjZlM2Y0MzZkNDZlNzFlODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqVuARrDGRgl9DbUiVfDITiDfhWh wQi4H608rDzsXCEyc8ZlylbT8lBIKunvhX8jtHPzX3kziNlnp/IBrn3LUeQpnVpa BkrXUpa2zHXpEH5CEVriLxZzFGtabYQffshxHNLyKehPvRF/lKO+FPVPWnrDwrel GQZSNPwuEbpAbD1ex77GZWzF5EHZDla4iiXz0osXWE7wZV5Uolr93Vr+Su5I/H2n 6V6Kp23knIs/eCSdGG+iM1uH05tfNrnGczCxvroele967jH7ZlzQswHzjh/ah+TT rP1vg+Rku5OnGMtXxHGylknRCG4u1saxTq5mhHv6v5rFIGGBh1UScYBfcwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNAPDgqOAPGm2MHCZuP0NtRuceh3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0LzNkNGI0 MC1jYTdlLTQ0NzItYjc0MC02NWFiMGQzNTFmMjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvM2Q0YjQw LWNhN2UtNDQ3Mi1iNzQwLTY1YWIwZDM1MWYyNy8xLzBBOE9DbzRBOGFiWXdjSm00 X1EyMUc1eDZIYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW90MMA0GCSqGSIb3DQEBCwUAA4IBAQCl6jhs kBOSl8B2BplrOeqnotpfpMhJXn2ECouT8goGy4xGVEpomdvfGbCFpafw95U8eI9e 22AGvxpbJM/3iKHBqgo26If27dTKwcyRT8QO/xYHWP0BepbqL8eNo6kKfr7TudbW whJfIOntCEbpTRJLqYBJfQ9Unwi/myYs9w/BT52ru2TL7Qkg6qKiQfqIoucWm4Ay 3eYID3pYhvmKcD2VFX6Q3RNq9hJozDLrEVonC1Zj0S9IpK7kMBYU/kma72Ev7TEH BD3kfhgb3zXT9X7YLeqCPhR6m1+YixcFjfjjt/hIfX4I1XjZycesljglze+DsGh4 Nbhc1CZDkJKp7d+X -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:07 2026 by rpki-client