This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer File: 0KOFQs_bHubgdermsQHnu1sUxDY.cer (raw, json) Hash identifier: 281g2G0DiWXfe+uqlF98RKrpLaTTP8/SWBES1syI4ck= Subject key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C743EE4660848204AA728B0E548467 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 145.34.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:43:ee:46:60:84:82:04:aa:72:8b:0e:54:84:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:17:c0:c9:04:8a:93:76:d0:c4:6d:2d:88:ae: 9c:51:5e:db:9e:18:52:e7:31:76:aa:81:ba:ef:e9: dc:94:50:43:a6:eb:17:d0:c5:58:be:f0:68:fe:7f: 0e:56:f6:28:0a:0f:9f:ab:4a:9a:57:01:18:76:6d: 81:00:4c:28:55:85:cc:aa:43:d5:6b:8b:c0:8d:65: c9:dd:06:84:01:a3:a7:7e:3d:38:3b:2b:99:e5:74: a6:45:bb:f4:77:93:b7:af:e4:8c:a5:49:f4:fb:40: d9:cb:c9:19:08:89:62:29:be:0e:9e:2c:18:23:4c: 9a:62:84:08:37:da:2c:cd:b4:9c:5b:88:5a:36:55: 29:48:de:74:37:0c:b4:f7:79:e9:9e:45:39:86:6a: 01:10:75:94:38:4d:3d:00:a2:4b:18:cb:41:9c:b8: 9a:85:1b:7c:85:5d:3e:88:13:57:37:b5:ed:9e:9d: 7d:34:8c:dd:21:95:9a:d5:08:89:93:f9:18:ec:dd: 77:02:8c:80:d3:f8:8d:dc:1e:08:a1:1c:40:0a:16: 68:02:4a:3f:57:c6:55:f1:a6:a3:8b:bb:13:7d:1a: 60:83:05:a3:a0:a3:6d:07:48:b9:7e:75:b3:86:30: b3:40:2c:b9:d3:f0:ba:b4:e5:cf:34:54:f9:f3:8b: 06:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.34.0.0/16 Signature Algorithm: sha256WithRSAEncryption 21:86:cd:c4:92:d7:a3:af:64:0f:0d:25:0b:51:97:b3:69:71: 8e:98:61:89:b5:07:98:c7:0e:5e:8c:dc:90:2c:68:af:1d:35: 4b:2e:46:34:e6:d7:cf:69:4d:ca:b6:78:15:6c:e6:e4:49:0a: 7b:f3:9f:7b:2e:ef:ed:a0:86:57:89:e8:da:b9:44:c7:25:74: 65:cf:89:4c:52:13:2a:97:df:55:b6:cd:4a:f7:12:68:45:40: be:b4:25:50:3b:0a:79:83:4d:ee:a6:dd:87:a1:03:49:44:d2: 97:b3:17:b9:64:fb:fb:05:11:1d:99:71:9b:9f:73:6f:39:8a: 2e:f6:05:04:f4:22:e7:7a:8d:36:8b:23:3d:d5:ee:32:b7:da: 83:33:a4:6d:d2:a6:40:fd:3b:2b:32:da:0a:70:dd:b8:7d:e8: a0:ab:d5:d2:3e:fb:f4:b1:90:b4:19:8a:0e:47:2f:c8:d7:19: 6c:4c:3c:87:06:e8:6d:41:c0:36:b6:7c:fe:a6:4f:1b:62:ad: 97:02:1f:57:ad:24:ad:4a:7f:37:66:12:51:19:76:7f:41:06: 11:93:da:45:2a:95:99:55:e8:89:c4:c4:10:49:63:d9:41:1d: c1:f3:bd:47:95:54:c1:25:22:15:97:80:d4:d7:6e:e3:59:11: 2f:57:49:a7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt3x0PuRmCEggSqcosOVIRnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGEzODU0MmNmZGIxZWU2ZTA3NWVhZTZiMTAxZTdiYjViMTRjNDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBfAyQSKk3bQxG0tiK6cUV7bnhhS 5zF2qoG67+nclFBDpusX0MVYvvBo/n8OVvYoCg+fq0qaVwEYdm2BAEwoVYXMqkPV a4vAjWXJ3QaEAaOnfj04OyuZ5XSmRbv0d5O3r+SMpUn0+0DZy8kZCIliKb4OniwY I0yaYoQIN9oszbScW4haNlUpSN50Nwy093npnkU5hmoBEHWUOE09AKJLGMtBnLia hRt8hV0+iBNXN7Xtnp19NIzdIZWa1QiJk/kY7N13AoyA0/iN3B4IoRxAChZoAko/ V8ZV8aaji7sTfRpggwWjoKNtB0i5fnWzhjCzQCy50/C6tOXPNFT584sGwwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFNCjhULP2x7m4HXq5rEB57tbFMQ2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzNmMDRj OS1lNmUxLTQ1MDYtYjhmYS00MGQxOTExZmE3ZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvM2YwNGM5 LWU2ZTEtNDUwNi1iOGZhLTQwZDE5MTFmYTdmMy8xLzBLT0ZRc19iSHViZ2Rlcm1z UUhudTFzVXhEWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAkSIwDQYJKoZIhvcNAQELBQADggEBACGGzcSS 16OvZA8NJQtRl7NpcY6YYYm1B5jHDl6M3JAsaK8dNUsuRjTm189pTcq2eBVs5uRJ Cnvzn3su7+2ghleJ6Nq5RMcldGXPiUxSEyqX31W2zUr3EmhFQL60JVA7CnmDTe6m 3YehA0lE0pezF7lk+/sFER2ZcZufc285ii72BQT0Iud6jTaLIz3V7jK32oMzpG3S pkD9Oysy2gpw3bh96KCr1dI++/SxkLQZig5HL8jXGWxMPIcG6G1BwDa2fP6mTxti rZcCH1etJK1KfzdmElEZdn9BBhGT2kUqlZlV6InExBBJY9lBHcHzvUeVVMElIhWX gNTXbuNZES9XSac= -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:49 2026 by rpki-client