This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer File: 1OKXHl2BaclArwINsCe-2tiZFZA.cer (raw, json) Hash identifier: AbAPB2nrJdVM/c1Tft95kR9B3f1sCALfkYbW/kwPvfA= Subject key identifier: D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECC777CCCE8322F8E2F5C75F4FA40A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.86.222.0/23 IP: 45.91.36.0/22 IP: 84.252.104.0/24 IP: 85.9.224.0/19 IP: 91.132.128.0/22 IP: 185.70.32.0/22 IP: 185.124.0.0/22 IP: 185.126.160.0/22 IP: 2a05:2680::/29 IP: 2a0b:cb40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c7:77:cc:ce:83:22:f8:e2:f5:c7:5f:4f:a4:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4e2971e5d8169c940af020db027bedad8991590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:69:7b:45:59:8b:53:93:fc:4e:c9:0b:a9:0f: 42:de:f4:95:70:c8:f1:d0:9c:bb:40:ba:9d:68:ab: 3c:0e:9c:63:cf:39:03:a1:5c:9f:23:11:a9:03:12: e0:57:fc:0d:66:f3:55:b4:38:86:fc:a2:c4:a2:a4: 8c:de:43:46:7e:3e:76:5a:c7:c7:b0:f8:c6:a0:f4: 3a:9d:db:95:db:d7:62:28:9f:2d:dd:96:e7:4f:2f: 78:a4:6c:a7:29:cf:e3:a0:c2:c9:f0:f3:65:8a:b5: 5a:49:e9:3a:48:4c:7a:66:e2:6b:6f:07:dd:13:7b: 48:d1:bb:74:52:b2:47:ad:04:3d:55:2b:25:2f:d3: 96:c5:6b:80:b2:c4:82:c0:25:ed:b0:78:a1:be:99: 04:71:a1:71:9f:d6:83:5f:61:7c:79:8d:f8:e4:ef: 36:5f:59:32:aa:99:a4:8f:1c:08:84:f1:f9:cd:a8: 31:35:41:77:37:8f:32:67:a8:6f:b6:b2:ce:65:b8: 92:aa:0d:52:11:1a:12:e0:17:77:25:92:e4:9f:05: 45:4f:75:81:c8:7d:0c:95:22:b4:4a:5b:fd:75:3b: 3c:8e:80:6e:5a:c0:63:69:4e:87:fb:4e:88:06:9f: 65:58:22:65:1d:6f:2f:16:2b:69:ea:96:50:56:dd: 52:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.222.0/23 45.91.36.0/22 84.252.104.0/24 85.9.224.0/19 91.132.128.0/22 185.70.32.0/22 185.124.0.0/22 185.126.160.0/22 IPv6: 2a05:2680::/29 2a0b:cb40::/29 Signature Algorithm: sha256WithRSAEncryption 82:54:45:2f:3b:dd:64:e9:cc:9c:cc:7e:45:97:6a:4e:01:ee: d3:7e:86:86:0a:89:ff:fc:fa:1f:c4:48:72:3b:1e:06:36:43: b9:c9:d5:32:53:cc:08:69:32:7e:e7:8b:ee:d4:5a:60:9f:92: e8:90:62:9e:8c:99:48:88:25:24:d2:5e:e5:ef:ec:ab:8f:20: 99:26:ca:15:35:78:26:68:42:25:39:d3:34:b6:18:2c:2e:0a: e7:2c:21:17:a2:1d:72:11:8f:12:d6:8a:b8:75:3a:b5:1d:e6: a3:59:b4:40:32:c4:26:cf:e7:cc:ba:4c:c3:1a:8f:f4:43:b4: 47:4c:1a:b8:ad:fb:c4:2f:79:3e:40:e5:1c:8e:25:cf:2a:72: 07:79:fd:6b:43:25:97:cd:4f:de:28:98:0c:10:93:e4:d3:0b: 60:3e:e2:0b:82:b8:f8:b0:2c:c3:07:7e:65:d3:09:ac:c0:d5: de:2a:94:7a:8c:3c:2d:dd:fa:c3:9e:0e:73:cc:07:ac:44:de: 6b:a9:d7:a3:7b:43:98:ec:3a:ea:be:7d:1e:5c:ce:be:ba:06: 7d:80:27:58:d1:ec:6a:35:c9:ae:bb:99:b4:7a:93:75:4a:62: 7a:47:f7:ab:5b:77:d4:77:cf:36:e0:06:46:10:97:c2:13:c1: 5e:b0:45:c9 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZt57Md3zM6DIvji9cdfT6QKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGUyOTcxZTVkODE2OWM5NDBhZjAyMGRiMDI3YmVkYWQ4OTkxNTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2l7RVmLU5P8TskLqQ9C3vSVcMjx 0Jy7QLqdaKs8DpxjzzkDoVyfIxGpAxLgV/wNZvNVtDiG/KLEoqSM3kNGfj52WsfH sPjGoPQ6nduV29diKJ8t3ZbnTy94pGynKc/joMLJ8PNlirVaSek6SEx6ZuJrbwfd E3tI0bt0UrJHrQQ9VSslL9OWxWuAssSCwCXtsHihvpkEcaFxn9aDX2F8eY345O82 X1kyqpmkjxwIhPH5zagxNUF3N48yZ6hvtrLOZbiSqg1SERoS4Bd3JZLknwVFT3WB yH0MlSK0Slv9dTs8joBuWsBjaU6H+06IBp9lWCJlHW8vFitp6pZQVt1SJwIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFNTilx5dgWnJQK8CDbAnvtrYmRWQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwLzQ3OGFl YS02Yjk0LTQ5YTMtYWE3Zi0xODk0OTBkNjBlYTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvNDc4YWVh LTZiOTQtNDlhMy1hYTdmLTE4OTQ5MGQ2MGVhNi8xLzFPS1hIbDJCYWNsQXJ3SU5z Q2UtMnRpWkZaQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF BwEHAQH/BFAwTjA2BAIAATAwAwQBLVbeAwQCLVskAwQAVPxoAwQFVQngAwQCW4SA AwQCuUYgAwQCuXwAAwQCuX6gMBQEAgACMA4DBQMqBSaAAwUDKgvLQDANBgkqhkiG 9w0BAQsFAAOCAQEAglRFLzvdZOnMnMx+RZdqTgHu036GhgqJ//z6H8RIcjseBjZD ucnVMlPMCGkyfueL7tRaYJ+S6JBinoyZSIglJNJe5e/sq48gmSbKFTV4JmhCJTnT NLYYLC4K5ywhF6IdchGPEtaKuHU6tR3mo1m0QDLEJs/nzLpMwxqP9EO0R0wauK37 xC95PkDlHI4lzypyB3n9a0Mll81P3iiYDBCT5NMLYD7iC4K4+LAswwd+ZdMJrMDV 3iqUeow8Ld36w54Oc8wHrETea6nXo3tDmOw66r59HlzOvroGfYAnWNHsajXJrruZ tHqTdUpiekf3q1t31HfPNuAGRhCXwhPBXrBFyQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:48 2026 by rpki-client