This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer File: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer (raw, json) Hash identifier: Od0anL9e9NGUsU+oD0xFoP8w4b+JOmXvfdXLpUiemN4= Subject key identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15617E6F93A78317395E2D23F11364 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199530 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:61:7e:6f:93:a7:83:17:39:5e:2d:23:f1:13:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1608bf900c338661dff6337ab4c6af916f84172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:21:70:aa:0a:f5:85:40:e6:6f:80:c2:ec:28: 22:6a:05:fb:3a:33:75:0d:65:1e:4f:ef:a1:bb:85: 5f:35:b3:09:f2:1b:3e:03:95:85:c2:e7:df:81:64: 91:7a:e6:e8:4e:25:a4:28:d3:3e:4f:5e:24:f9:1e: 0c:bd:dc:74:67:5c:37:82:43:8d:7b:c3:1e:41:36: 0f:70:2d:7e:a2:1d:3d:2f:69:13:5c:8a:fe:2a:1f: c0:e1:e7:c9:6c:78:7e:3c:72:f2:5e:eb:b7:db:dd: 6e:76:fc:cd:db:a9:c2:7c:6b:eb:a0:36:fe:8a:95: 9f:ce:bc:ee:eb:b9:5f:b3:4a:e4:a2:32:af:78:66: 81:55:b4:b4:d2:5b:60:44:d5:b2:33:90:bb:8a:85: d6:1b:82:17:4d:5d:fb:c6:b8:d1:c0:ac:bb:3b:00: 4b:14:32:22:6b:b6:89:57:31:ce:5d:ce:47:1b:84: 8b:71:e3:63:3e:b4:a3:d2:ee:1b:91:c4:f8:6b:74: eb:3a:85:20:34:cd:57:63:cd:1c:24:73:be:7d:44: a5:2f:c4:7d:2d:f5:b6:21:68:82:1d:97:4e:cb:6f: 8a:b5:33:a2:88:81:62:39:f1:71:bb:f5:88:83:f4: a7:93:68:0b:c8:33:43:b8:d7:02:25:32:22:e7:1d: 0f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 199530 Signature Algorithm: sha256WithRSAEncryption 4b:52:dd:12:6d:ba:4c:3d:1e:ca:f1:be:98:74:f6:4d:3c:94: e4:bc:c7:63:48:b2:be:ba:1a:e9:20:d8:4f:7d:31:fa:98:dc: d4:ab:b7:9e:53:c6:d3:10:d0:a7:19:90:d0:72:71:a6:5e:ff: 2c:38:dc:80:82:7e:64:cc:a9:0b:8a:a8:5b:c3:f0:75:5a:5d: 3a:cf:fa:50:0d:26:f6:c0:eb:da:54:12:ab:75:24:12:a9:9d: f2:7b:74:48:00:fc:1b:82:b8:8d:14:cd:9f:fc:18:33:82:d5: b0:c0:09:ff:66:ee:24:0a:a5:8d:22:99:b9:be:3e:8e:90:ab: 00:66:c7:15:a5:2e:e2:18:9c:3c:d5:9a:fa:62:31:7b:87:5f: 1b:8d:47:f1:f7:7e:cb:0d:d4:10:43:ac:30:24:64:37:d5:0c: d2:e8:ce:dd:6b:4c:bf:45:85:4d:9e:7d:28:7d:da:6e:82:cd: 94:35:22:77:d7:e7:4a:96:38:18:b7:65:2a:be:43:47:6d:9a: ed:e3:85:14:79:5a:45:c5:96:d8:c3:4f:54:62:09:2f:36:6b: df:c5:97:a0:46:25:83:b3:3a:36:29:c1:c1:99:29:c0:b8:81: e4:d3:72:b1:12:d8:bb:e7:46:a4:90:7d:8f:af:98:3e:0e:5c: 56:dd:14:42 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/FWF+b5Ongxc5Xi0j8RNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTYwOGJmOTAwYzMzODY2MWRmZjYzMzdhYjRjNmFmOTE2Zjg0MTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyFwqgr1hUDmb4DC7CgiagX7OjN1 DWUeT++hu4VfNbMJ8hs+A5WFwuffgWSReuboTiWkKNM+T14k+R4Mvdx0Z1w3gkON e8MeQTYPcC1+oh09L2kTXIr+Kh/A4efJbHh+PHLyXuu3291udvzN26nCfGvroDb+ ipWfzrzu67lfs0rkojKveGaBVbS00ltgRNWyM5C7ioXWG4IXTV37xrjRwKy7OwBL FDIia7aJVzHOXc5HG4SLceNjPrSj0u4bkcT4a3TrOoUgNM1XY80cJHO+fUSlL8R9 LfW2IWiCHZdOy2+KtTOiiIFiOfFxu/WIg/Snk2gLyDNDuNcCJTIi5x0PBQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNFgi/kAwzhmHf9jN6tMavkW+EFyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NlLzY4MWFl YS1mZmM1LTQzZWMtYWI1MS1kYmNjZTIxNDE5YjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvNjgxYWVh LWZmYzUtNDNlYy1hYjUxLWRiY2NlMjE0MTliNy8xLzBXQ0wtUURET0dZZF8yTTNx MHhxLVJiNFFYSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMLajANBgkqhkiG9w0BAQsFAAOCAQEAS1LdEm26TD0e yvG+mHT2TTyU5LzHY0iyvroa6SDYT30x+pjc1Ku3nlPG0xDQpxmQ0HJxpl7/LDjc gIJ+ZMypC4qoW8PwdVpdOs/6UA0m9sDr2lQSq3UkEqmd8nt0SAD8G4K4jRTNn/wY M4LVsMAJ/2buJAqljSKZub4+jpCrAGbHFaUu4hicPNWa+mIxe4dfG41H8fd+yw3U EEOsMCRkN9UM0ujO3WtMv0WFTZ59KH3aboLNlDUid9fnSpY4GLdlKr5DR22a7eOF FHlaRcWW2MNPVGIJLzZr38WXoEYlg7M6NinBwZkpwLiB5NNysRLYu+dGpJB9j6+Y Pg5cVt0UQg== -----END CERTIFICATE-----Generated at Mon Jan 26 09:27:32 2026 by rpki-client