This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer File: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer (raw, json) Hash identifier: aMjVPZz6w4yGzwN4YyhRV3ElRvDV4ThQ2B7b7IpMmMw= Subject key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C7280F8710EEBD0DC1B29CF5156106 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.88.238.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:28:0f:87:10:ee:bd:0d:c1:b2:9c:f5:15:61:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dc:70:0a:62:55:a1:1e:bf:82:22:56:ff:ce: 8e:b0:ae:3c:e5:36:0a:46:77:fa:4d:3d:e9:66:2e: de:8f:90:db:7b:87:15:32:bc:2b:19:0b:bd:6e:4c: 62:21:91:b4:89:e2:52:23:bb:79:70:d7:c6:61:2e: c0:c8:4a:83:99:3c:d5:5d:95:2e:4f:db:42:ae:5a: a2:fb:a1:f6:6d:7e:85:94:a6:c4:9a:b4:76:ed:fd: f9:fa:db:54:5b:45:29:bb:5d:9c:52:fa:9a:50:6b: 4a:24:2e:13:51:2d:a6:00:0d:de:31:63:c8:94:79: c7:50:6b:b9:27:94:ce:47:2f:80:25:78:d1:12:c4: 82:a0:7c:15:67:8a:19:d7:31:0b:49:dd:5a:ff:f1: b1:e9:72:56:b8:44:40:05:5a:6a:7c:3d:51:d6:7c: 95:4c:f2:7f:62:4e:5f:63:02:9c:ee:5c:67:e1:35: 97:ec:64:2b:ab:53:2c:62:60:2c:d4:7d:58:48:69: 52:18:cf:42:7c:2a:18:a9:c5:8a:50:83:04:59:ec: d3:b4:dc:26:6f:af:10:e4:2f:4c:35:78:70:16:2c: b5:69:75:a2:c5:60:8c:f9:bf:8a:39:a7:d1:77:8f: 01:01:2b:7b:11:24:c4:c9:4c:20:be:90:f4:f1:b5: b5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.238.0/23 Signature Algorithm: sha256WithRSAEncryption 66:0b:14:8a:0f:c2:a8:30:6a:c4:0b:5a:b9:4f:6e:a6:10:c9: d1:75:c0:66:0d:00:31:d5:82:7f:e3:10:e5:9a:4d:1c:dd:b3: 3a:f4:bb:f3:45:f2:c2:f2:61:c5:56:fa:02:05:6a:67:f6:d7: ea:49:df:fd:15:67:74:28:d1:13:6e:05:7c:8b:14:74:37:b3: 3e:b8:0a:cf:dc:30:c9:4e:e9:05:1b:60:69:dc:2b:bc:8e:79: 97:25:80:39:c0:47:ce:ff:35:00:42:38:38:5f:cb:b4:84:15: 8c:7f:3a:48:3b:ad:66:31:93:b2:7c:32:2b:76:7e:89:f9:17: 33:37:e0:d8:13:89:c1:3d:b9:1e:33:9e:f7:e2:00:fe:61:7e: 53:c2:ce:b2:7f:a7:9b:03:d6:92:23:24:be:a2:92:0e:3d:eb: ad:6e:22:7d:49:b9:7b:bd:85:98:f6:1e:3b:06:83:61:69:cf: 5a:bf:03:2e:4d:0a:39:2a:44:0a:92:57:e4:05:ce:a4:d9:61: 4b:ac:9a:7b:9f:2b:ee:c2:54:69:be:94:0a:89:c9:5b:55:96: 8c:95:d5:95:c4:18:31:d9:68:bb:5d:df:42:86:14:aa:c8:93: 7b:6d:3c:e5:4e:e5:e8:3c:75:5a:34:d8:bb:b9:f0:5e:b8:2e: 5d:c0:95:eb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3xygPhxDuvQ3Bspz1FWEGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDQ4NTBmODA2OWRmNjJkYzUxNTVjMDJlZDFlNjJiZjUxY2VkYmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNxwCmJVoR6/giJW/86OsK485TYK Rnf6TT3pZi7ej5Dbe4cVMrwrGQu9bkxiIZG0ieJSI7t5cNfGYS7AyEqDmTzVXZUu T9tCrlqi+6H2bX6FlKbEmrR27f35+ttUW0Upu12cUvqaUGtKJC4TUS2mAA3eMWPI lHnHUGu5J5TORy+AJXjREsSCoHwVZ4oZ1zELSd1a//Gx6XJWuERABVpqfD1R1nyV TPJ/Yk5fYwKc7lxn4TWX7GQrq1MsYmAs1H1YSGlSGM9CfCoYqcWKUIMEWezTtNwm b68Q5C9MNXhwFiy1aXWixWCM+b+KOafRd48BASt7ESTEyUwgvpD08bW1mQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNBIUPgGnfYtxRVcAu0eYr9RztvIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2QwOTdk My1kNGJhLTQxMzAtOGU5Ni1hZDk1ZWJmYWFhZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvZDA5N2Qz LWQ0YmEtNDEzMC04ZTk2LWFkOTVlYmZhYWFlMi8xLzBFaFEtQWFkOWkzRkZWd0M3 UjVpdjFITzI4Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw1juMA0GCSqGSIb3DQEBCwUAA4IBAQBmCxSK D8KoMGrEC1q5T26mEMnRdcBmDQAx1YJ/4xDlmk0c3bM69LvzRfLC8mHFVvoCBWpn 9tfqSd/9FWd0KNETbgV8ixR0N7M+uArP3DDJTukFG2Bp3Cu8jnmXJYA5wEfO/zUA Qjg4X8u0hBWMfzpIO61mMZOyfDIrdn6J+RczN+DYE4nBPbkeM5734gD+YX5Tws6y f6ebA9aSIyS+opIOPeutbiJ9Sbl7vYWY9h47BoNhac9avwMuTQo5KkQKklfkBc6k 2WFLrJp7nyvuwlRpvpQKiclbVZaMldWVxBgx2Wi7Xd9ChhSqyJN7bTzlTuXoPHVa NNi7ufBeuC5dwJXr -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:47 2026 by rpki-client