This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer File: 0OZTSNwTyFSZx3dNFWYUwSARirU.cer (raw, json) Hash identifier: ejrvbfd1wxXmbqvWvhYJDpw67fj9doQN6jg1wQ0Ph1M= Subject key identifier: D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC323B3C507F013D3725154750866D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:678:4b0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:32:3b:3c:50:7f:01:3d:37:25:15:47:50:86:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0e65348dc13c85499c7774d156614c120118ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d2:ee:f9:2f:d3:fa:10:ee:0f:02:3a:a9:14: 67:31:c0:a2:88:02:99:cb:00:26:79:42:28:66:52: cc:d0:9f:06:51:3f:5d:94:be:ad:4c:bb:8d:ad:4f: 62:12:0d:51:97:49:90:da:77:09:4e:6f:ec:6a:14: e5:b4:99:ad:e4:6b:47:eb:29:b5:f9:c7:af:0c:b2: ce:c9:3c:d0:91:f2:4a:31:34:3b:7c:aa:3b:5c:33: 3a:31:b8:df:b1:6d:c5:7f:12:a5:ca:f7:29:41:3d: 8b:27:35:c4:43:43:bd:d7:d2:a7:4c:be:17:bf:99: d6:d7:a2:a0:bb:ed:90:d8:bb:15:b9:e3:c3:c8:d9: 61:e4:2f:82:6e:aa:8d:92:84:da:fe:c1:b5:a9:32: de:81:5c:c5:dc:c1:28:92:99:eb:73:fb:f4:30:46: 07:4a:90:e5:5b:19:4a:da:a4:79:c1:6b:d3:0d:36: 1d:58:90:ec:64:39:0c:7b:b3:2a:13:f0:95:4c:f9: 15:a0:91:90:b7:1a:1f:a1:2c:3b:85:26:c2:d9:94: aa:80:85:4c:28:93:83:07:71:54:90:99:b7:26:d3: 12:01:b0:c5:18:14:e2:01:11:1a:f2:3c:f2:be:3a: ca:6f:1c:a4:c7:fc:de:71:a8:19:59:c3:25:00:85: 90:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:4b0::/48 Signature Algorithm: sha256WithRSAEncryption 8a:48:ff:e9:ee:3e:02:4e:c9:f4:cc:16:7d:e5:41:97:3d:55: f1:87:89:f1:11:91:1b:99:92:95:a0:17:82:21:de:eb:ca:f3: d3:28:ee:df:bd:9b:44:37:74:a1:10:72:d0:e9:57:ca:e1:fb: 0b:5f:2f:7a:a5:5f:c5:19:b8:5b:0c:42:14:b7:d9:03:e3:b4: 2b:5d:80:ed:8e:61:49:a7:5a:b2:ed:e7:75:24:7d:6e:41:c0: d0:82:23:d2:0a:57:a2:de:31:be:11:8f:1d:b2:1f:5a:69:fe: 23:dd:d6:ad:0f:92:2c:bf:e9:5c:ba:dc:89:f4:26:3c:77:fc: 7f:10:97:48:87:f8:06:d7:ce:20:ef:63:1a:ae:35:c2:e2:16: 95:89:70:1d:51:31:08:2e:7b:02:a7:98:2f:8a:81:87:47:c3: 8b:7c:8d:a8:e6:19:1f:92:69:1d:eb:5d:01:c9:d9:4c:72:55: b3:4c:40:b7:d3:b5:7e:e4:3b:ff:43:5a:b4:1e:e5:5c:da:e0: a7:40:9f:ec:33:00:87:a6:ba:eb:d0:49:75:d7:a1:42:7b:90: c4:82:91:cc:03:ee:bb:89:f0:65:0a:aa:3a:64:d0:90:d0:01: c5:b1:37:57:df:7a:c8:44:7f:9d:c5:3d:2c:e9:3f:30:dd:5b: 89:a7:3a:67 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt57DI7PFB/AT03JRVHUIZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGU2NTM0OGRjMTNjODU0OTljNzc3NGQxNTY2MTRjMTIwMTE4YWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNLu+S/T+hDuDwI6qRRnMcCiiAKZ ywAmeUIoZlLM0J8GUT9dlL6tTLuNrU9iEg1Rl0mQ2ncJTm/sahTltJmt5GtH6ym1 +cevDLLOyTzQkfJKMTQ7fKo7XDM6MbjfsW3FfxKlyvcpQT2LJzXEQ0O919KnTL4X v5nW16Kgu+2Q2LsVuePDyNlh5C+CbqqNkoTa/sG1qTLegVzF3MEokpnrc/v0MEYH SpDlWxlK2qR5wWvTDTYdWJDsZDkMe7MqE/CVTPkVoJGQtxofoSw7hSbC2ZSqgIVM KJODB3FUkJm3JtMSAbDFGBTiAREa8jzyvjrKbxykx/zecagZWcMlAIWQiwIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFNDmU0jcE8hUmcd3TRVmFMEgEYq1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhL2Q3YTRh Ny0wN2UyLTQ4YWQtYmE1Ni0wZGIwZWMxZTk0NWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvZDdhNGE3 LTA3ZTItNDhhZC1iYTU2LTBkYjBlYzFlOTQ1Yy8xLzBPWlRTTndUeUZTWngzZE5G V1lVd1NBUmlyVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeASwMA0GCSqGSIb3DQEBCwUAA4IBAQCK SP/p7j4CTsn0zBZ95UGXPVXxh4nxEZEbmZKVoBeCId7ryvPTKO7fvZtEN3ShEHLQ 6VfK4fsLXy96pV/FGbhbDEIUt9kD47QrXYDtjmFJp1qy7ed1JH1uQcDQgiPSClei 3jG+EY8dsh9aaf4j3datD5Isv+lcutyJ9CY8d/x/EJdIh/gG184g72MarjXC4haV iXAdUTEILnsCp5gvioGHR8OLfI2o5hkfkmkd610BydlMclWzTEC307V+5Dv/Q1q0 HuVc2uCnQJ/sMwCHprrr0El116FCe5DEgpHMA+67ifBlCqo6ZNCQ0AHFsTdX33rI RH+dxT0s6T8w3VuJpzpn -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:00 2026 by rpki-client