This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer File: 0bS-sKan4ShKv0OFNIz0hhALn4A.cer (raw, json) Hash identifier: RJHUB+BOFDQjH0xhLh+gAXlo8iFJF56kMrVOCqScmag= Subject key identifier: D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A36D907D9A2947E77518ED394B1D81 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41358 AS: 41907 IP: 194.34.198.0/24 IP: 195.74.92.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6d:90:7d:9a:29:47:e7:75:18:ed:39:4b:1d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:39:cd:13:25:1e:65:ff:b0:06:4d:9d:21:89: 2e:80:b9:50:71:4d:2f:34:8d:f4:b2:22:2b:8f:fc: 10:f8:fb:a8:0e:c9:c8:c5:e9:29:4c:2d:e8:61:e0: 06:c0:2d:9d:07:76:9e:a5:e0:71:5a:6c:69:2e:68: 4e:8a:78:68:e1:2d:0a:7e:94:2f:c1:17:b2:e6:e2: c7:cc:4e:05:61:67:9d:d1:0a:b1:6d:db:38:17:fe: 25:a0:32:5c:fb:e5:7b:7c:c5:bf:af:57:9f:0d:0e: dd:1d:26:ed:02:d2:e5:e2:51:64:ef:d0:7c:1e:43: 6b:a3:1a:76:82:19:b6:1d:9d:ef:ac:eb:fc:2c:b6: 02:fd:7d:6f:62:7d:6f:46:be:33:b1:11:53:f5:90: fa:f9:9d:7c:98:83:f8:3c:47:8f:22:ce:3e:34:8d: 04:1b:df:4a:c3:10:34:81:9c:0b:3e:32:5c:a5:22: de:a5:d2:0c:26:cf:71:64:65:c1:82:3a:59:d4:c9: 18:39:04:18:5b:34:21:7d:4b:1c:da:62:cd:f1:90: ba:61:3b:2f:54:22:f2:02:2f:a3:46:5d:5a:54:a8: aa:2d:ec:cb:87:ce:bf:70:4f:23:09:12:a4:23:9e: c5:21:08:40:2b:5e:28:cd:f3:9d:91:57:fe:4d:d9: 7b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.34.198.0/24 195.74.92.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41358 41907 Signature Algorithm: sha256WithRSAEncryption 09:a3:03:49:eb:77:ac:d4:e9:3e:6b:94:55:17:46:f2:0f:d4: 7d:af:8b:82:0a:bd:b2:e1:66:74:d4:8e:6e:aa:34:5d:14:57: ee:67:6f:7c:4e:54:a4:5e:80:83:53:55:b2:38:69:1f:d3:03: a5:cd:35:98:bb:e8:b2:20:9f:f5:43:a3:88:e4:68:5d:6e:22: 70:fb:4b:c2:64:53:dd:95:55:81:57:71:55:2f:2c:b4:9e:f1: 10:02:af:4f:dd:14:17:f4:ef:aa:41:66:78:74:92:4a:55:01: 4d:d8:eb:da:f3:0a:f2:db:7a:a1:8c:e3:06:c4:e1:03:fe:17: e5:a7:6f:5c:8a:eb:d9:8e:e4:a1:71:e7:22:29:17:6b:15:ce: c8:31:30:a5:8a:36:32:fc:75:81:29:3a:aa:e3:08:c2:81:99: 55:a3:e4:18:25:5d:df:e3:83:05:de:af:38:03:39:b9:37:82: 9e:3c:28:26:96:f8:22:db:1c:1b:28:67:78:de:79:60:4d:1b: 75:2d:fd:34:24:56:5c:06:f5:f7:1a:99:30:a2:09:99:ad:8a: ae:0d:94:89:22:1d:9a:f1:42:37:87:54:80:30:94:fc:d0:2d: 9c:29:7f:18:7d:e3:9a:b7:e1:87:1d:7e:d3:77:a8:d8:82:b0: 1f:79:e6:76 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt4o22QfZopR+d1GO05Sx2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWI0YmViMGE2YTdlMTI4NGFiZjQzODUzNDhjZjQ4NjEwMGI5ZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DnNEyUeZf+wBk2dIYkugLlQcU0v NI30siIrj/wQ+PuoDsnIxekpTC3oYeAGwC2dB3aepeBxWmxpLmhOinho4S0KfpQv wRey5uLHzE4FYWed0Qqxbds4F/4loDJc++V7fMW/r1efDQ7dHSbtAtLl4lFk79B8 HkNroxp2ghm2HZ3vrOv8LLYC/X1vYn1vRr4zsRFT9ZD6+Z18mIP4PEePIs4+NI0E G99KwxA0gZwLPjJcpSLepdIMJs9xZGXBgjpZ1MkYOQQYWzQhfUsc2mLN8ZC6YTsv VCLyAi+jRl1aVKiqLezLh86/cE8jCRKkI57FIQhAK14ozfOdkVf+Tdl7mwIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFNG0vrCmp+EoSr9DhTSM9IYQC5+AMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzL2Y4ZDk4 ZC0xZmZlLTQ2MzktYjM3My05YmExMTcyYTY4YzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvZjhkOThk LTFmZmUtNDYzOS1iMzczLTliYTExNzJhNjhjMC8xLzBiUy1zS2FuNFNoS3YwT0ZO SXowaGhBTG40QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwiLGAwQAw0pcMB8GCCsGAQUFBwEIAQH/BBAw DqAMMAoCAwChjgIDAKOzMA0GCSqGSIb3DQEBCwUAA4IBAQAJowNJ63es1Ok+a5RV F0byD9R9r4uCCr2y4WZ01I5uqjRdFFfuZ298TlSkXoCDU1WyOGkf0wOlzTWYu+iy IJ/1Q6OI5GhdbiJw+0vCZFPdlVWBV3FVLyy0nvEQAq9P3RQX9O+qQWZ4dJJKVQFN 2Ova8wry23qhjOMGxOED/hflp29ciuvZjuShceciKRdrFc7IMTClijYy/HWBKTqq 4wjCgZlVo+QYJV3f44MF3q84Azm5N4KePCgmlvgi2xwbKGd43nlgTRt1Lf00JFZc BvX3GpkwogmZrYquDZSJIh2a8UI3h1SAMJT80C2cKX8YfeOat+GHHX7Td6jYgrAf eeZ2 -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:57 2026 by rpki-client