This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer File: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer (raw, json) Hash identifier: hNJ/h+vSm41h0vnuHhXnTicj4+XKq4udlzD27VWUN1o= Subject key identifier: D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8B514E5199107CB69E9637D89C2C2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211024 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b5:14:e5:19:91:07:cb:69:e9:63:7d:89:c2:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4e883b5b923678fa07321f25c18ff3a26c250fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:c7:40:6c:bf:ee:a8:25:76:06:39:46:37: a9:84:38:d5:43:f1:f4:ab:5c:de:57:92:62:4e:5f: 7b:dc:0d:c6:21:fa:bc:56:e1:1f:18:e6:41:a5:6f: 4b:a0:2e:7a:ab:c7:3d:7f:83:eb:60:ea:36:a9:67: 24:99:fc:a3:85:c9:91:9a:a4:b4:55:fa:a4:ba:07: 4d:8b:35:3a:99:52:ce:c1:41:dd:bc:d4:c3:8f:34: 52:f2:3f:ca:01:68:3d:38:6a:9f:9b:8f:de:cc:2a: 8e:6f:81:3f:90:6a:82:70:f6:06:cc:9f:be:8f:b4: f5:98:95:3f:37:96:1f:f3:aa:7d:b9:90:a2:c6:34: 33:23:7b:21:ce:60:ad:7f:a2:a1:fe:75:c6:6f:e4: 08:09:d6:43:45:2e:1d:7f:03:49:2c:01:8b:d9:64: 93:90:bd:be:d9:94:01:00:ce:b3:6e:92:74:2c:ef: ea:b6:f7:49:ad:bb:44:61:68:71:82:0e:bc:88:9a: 0c:e2:9b:a1:63:cf:b9:e2:2b:89:31:a0:13:b7:f5: b2:3e:f8:e5:41:4f:0f:62:f1:d9:2e:5b:f9:75:79: 66:5e:6b:6c:a7:1e:ed:15:f8:19:32:d1:f7:b2:22: ab:b0:c8:f6:ac:c3:05:f1:28:7b:bb:c9:a9:9e:56: b3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211024 Signature Algorithm: sha256WithRSAEncryption a7:19:ed:b7:dc:5c:c9:02:a8:da:64:9a:13:65:88:e5:71:db: a7:c0:81:8e:fe:5b:e6:02:63:0d:d7:d6:79:fb:22:af:1a:f9: 63:3b:43:0d:86:c0:4b:2f:1e:d4:f4:b2:b7:cf:45:12:05:0c: f5:9b:38:88:bb:2d:82:0a:c2:3e:09:70:f5:db:fd:49:e1:0c: 58:b3:5e:80:e0:e3:4f:f7:cf:fb:24:8d:55:45:6a:73:6c:04: 02:74:d9:b3:96:29:ba:b0:f2:20:e3:24:eb:77:cb:9c:15:90: 1f:39:02:69:33:7d:e6:7b:f1:1f:7a:2d:3d:42:d9:08:bb:67: a1:2d:14:5f:3b:fa:42:ce:de:20:7e:b9:5b:0c:3e:64:4c:13: 6c:80:74:4d:42:c3:91:ad:8b:0d:55:41:3b:f8:00:bc:2b:92: 08:87:bd:bb:e3:65:2d:5d:b4:e0:4e:a4:38:48:03:f8:e3:4e: 34:ca:e8:57:69:fa:a0:fe:65:75:31:fe:ac:a5:99:74:b1:62: d0:91:98:8a:1d:52:f7:4b:e2:0a:0a:42:5c:5c:ba:da:ef:3f: ae:09:93:87:9a:0b:04:51:7e:b1:6c:65:4c:dd:6a:21:42:f8: cd:37:21:2f:cb:f9:d5:a8:d1:9d:5a:e6:ae:67:ef:43:20:37: 94:81:2f:d3 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6yLUU5RmRB8tp6WN9icLCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGU4ODNiNWI5MjM2NzhmYTA3MzIxZjI1YzE4ZmYzYTI2YzI1MGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq7HQGy/7qgldgY5RjephDjVQ/H0 q1zeV5JiTl973A3GIfq8VuEfGOZBpW9LoC56q8c9f4PrYOo2qWckmfyjhcmRmqS0 VfqkugdNizU6mVLOwUHdvNTDjzRS8j/KAWg9OGqfm4/ezCqOb4E/kGqCcPYGzJ++ j7T1mJU/N5Yf86p9uZCixjQzI3shzmCtf6Kh/nXGb+QICdZDRS4dfwNJLAGL2WST kL2+2ZQBAM6zbpJ0LO/qtvdJrbtEYWhxgg68iJoM4puhY8+54iuJMaATt/WyPvjl QU8PYvHZLlv5dXlmXmtspx7tFfgZMtH3siKrsMj2rMMF8Sh7u8mpnlazAwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNTog7W5I2ePoHMh8lwY/zomwlD7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2L2ExYjU4 YS1jYzFjLTQ4NjUtOTNkZS0yZDNlZjliMGFkMjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvYTFiNThh LWNjMWMtNDg2NS05M2RlLTJkM2VmOWIwYWQyMy8xLzFPaUR0YmtqWjQtZ2N5SHlY QmpfT2liQ1VQcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM4UDANBgkqhkiG9w0BAQsFAAOCAQEApxntt9xcyQKo 2mSaE2WI5XHbp8CBjv5b5gJjDdfWefsirxr5YztDDYbASy8e1PSyt89FEgUM9Zs4 iLstggrCPglw9dv9SeEMWLNegODjT/fP+ySNVUVqc2wEAnTZs5YpurDyIOMk63fL nBWQHzkCaTN95nvxH3otPULZCLtnoS0UXzv6Qs7eIH65Www+ZEwTbIB0TULDka2L DVVBO/gAvCuSCIe9u+NlLV204E6kOEgD+ONONMroV2n6oP5ldTH+rKWZdLFi0JGY ih1S90viCgpCXFy62u8/rgmTh5oLBFF+sWxlTN1qIUL4zTchL8v51ajRnVrmrmfv QyA3lIEv0w== -----END CERTIFICATE-----Generated at Mon Feb 2 08:13:26 2026 by rpki-client