This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer File: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer (raw, json) Hash identifier: 5sUSW6mzmSxViUA7PTB/P6K4s1cxIXATRe4BSWs6IrE= Subject key identifier: D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B9EDE31CCCD001AEECE983A36620D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.19.248.0/22 IP: 2a03:9a80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9e:de:31:cc:cd:00:1a:ee:ce:98:3a:36:62:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fa:84:78:61:9c:f2:24:5a:c3:f1:c9:0c:ac: 22:ad:9e:d5:fd:9d:0e:e3:ee:47:23:83:a5:38:7c: 98:7a:4a:60:3b:7f:3a:73:ac:07:f2:e3:61:65:31: a8:49:fe:9c:53:fa:ca:01:7c:74:a3:77:14:9b:a8: 23:ac:71:52:95:2d:d4:9e:b9:50:32:96:7b:b5:3c: c9:17:50:54:59:7e:c0:da:50:63:fd:3d:12:05:8b: 42:94:ca:3f:7a:03:ae:4f:1d:ad:70:1a:76:40:af: f9:01:e9:d1:96:75:1e:22:76:89:e0:b6:07:3c:c3: 45:66:a3:f3:1d:5b:37:04:b8:2c:fc:05:6c:38:c7: 5c:1a:dc:a2:1a:90:6a:35:5d:46:c3:87:7f:84:cd: 47:b8:3a:5e:6d:cb:55:c2:6a:38:13:10:4a:ed:30: 09:7d:9b:39:c7:cb:80:3d:95:68:f1:05:91:cd:9a: f4:fd:1f:4d:96:84:e3:28:1d:1a:b2:80:ad:8f:af: 01:ac:bf:72:09:25:73:31:2a:e5:8c:bd:20:bf:18: e1:2f:cb:2a:5d:78:bb:ec:a7:47:74:8e:f2:e3:66: 34:53:a7:a3:85:34:2a:e3:5b:9a:4d:2d:52:2d:45: d2:5e:0b:ec:36:55:8b:23:cc:da:f1:11:ea:23:cb: 2e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.19.248.0/22 IPv6: 2a03:9a80::/32 Signature Algorithm: sha256WithRSAEncryption 75:39:ca:94:08:57:a9:2a:b8:37:e6:d5:c1:6e:97:e8:2b:4e: c3:ab:4e:0c:e9:5b:8b:2c:13:ee:dd:14:2e:db:87:10:06:8c: 67:08:dd:80:62:1a:b2:d4:37:0d:9d:c7:a8:55:4b:0b:d2:bd: 37:2c:ed:28:2f:44:34:a5:12:24:a4:4b:98:aa:3a:a1:58:44: c4:12:89:67:89:f2:c2:8b:49:76:49:f5:d2:54:a1:13:c8:fa: 0d:fd:81:ef:06:eb:d7:9f:68:2d:60:a7:10:3e:20:5a:4d:47: 3f:46:56:b2:8d:1a:8c:ee:c7:bf:bc:b2:39:4a:6c:b6:91:f8: 07:52:5d:11:7e:54:f7:24:67:8d:a8:94:5b:88:86:f4:ce:56: 9a:39:33:6a:0a:2c:96:f9:09:7f:ee:b5:21:e8:8f:96:d2:18: 2d:0b:0c:0b:13:7f:c2:58:cc:eb:26:fa:a1:fe:a9:4a:8a:ad: 32:7a:93:c1:46:5d:89:46:4f:b2:6d:7d:c3:cd:0e:86:be:a4: 28:6c:55:92:ae:b7:77:5b:d2:fa:e9:8a:1b:f4:be:b7:76:8c: 35:09:7c:6b:7d:f0:0f:cf:30:0f:9f:35:19:1f:a7:91:79:0a: c1:be:f7:34:ca:9d:9a:0b:5a:88:54:04:f1:53:56:1e:dc:7f: 4f:62:8b:7a -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6W57eMczNABruzpg6NmINMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzA5OGU1ZTIwZDc4Zjk0ZTY5NmMxMzcyYjU2MjNmZmE3MWQ5NGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfqEeGGc8iRaw/HJDKwirZ7V/Z0O 4+5HI4OlOHyYekpgO386c6wH8uNhZTGoSf6cU/rKAXx0o3cUm6gjrHFSlS3UnrlQ MpZ7tTzJF1BUWX7A2lBj/T0SBYtClMo/egOuTx2tcBp2QK/5AenRlnUeInaJ4LYH PMNFZqPzHVs3BLgs/AVsOMdcGtyiGpBqNV1Gw4d/hM1HuDpebctVwmo4ExBK7TAJ fZs5x8uAPZVo8QWRzZr0/R9NloTjKB0asoCtj68BrL9yCSVzMSrljL0gvxjhL8sq XXi77KdHdI7y42Y0U6ejhTQq41uaTS1SLUXSXgvsNlWLI8za8RHqI8subQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNMJjl4g14+U5pbBNytWI/+nHZTQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzUzNjFj Yy1iMDRkLTQ0NjUtOTM4ZC02MTdhMjYzMjdlOTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvNTM2MWNj LWIwNGQtNDQ2NS05MzhkLTYxN2EyNjMyN2U5OC8xLzB3bU9YaURYajVUbWxzRTNL MVlqXzZjZGxOQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuRP4MA0EAgACMAcDBQAqA5qAMA0GCSqGSIb3 DQEBCwUAA4IBAQB1OcqUCFepKrg35tXBbpfoK07Dq04M6VuLLBPu3RQu24cQBoxn CN2AYhqy1DcNnceoVUsL0r03LO0oL0Q0pRIkpEuYqjqhWETEEolnifLCi0l2SfXS VKETyPoN/YHvBuvXn2gtYKcQPiBaTUc/RlayjRqM7se/vLI5Smy2kfgHUl0RflT3 JGeNqJRbiIb0zlaaOTNqCiyW+Ql/7rUh6I+W0hgtCwwLE3/CWMzrJvqh/qlKiq0y epPBRl2JRk+ybX3DzQ6GvqQobFWSrrd3W9L66Yob9L63dow1CXxrffAPzzAPnzUZ H6eReQrBvvc0yp2aC1qIVATxU1Ye3H9PYot6 -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:06 2026 by rpki-client