This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer File: 7osnkE0RvPU2d01UFUIILPr-jqo.cer (raw, json) Hash identifier: q1iBnVD1HyRUwrj5UlW2kSc0l+sB3GNYTgOc1V1RYU4= Subject key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED339B2DAEAE040411B8C0776B5CE4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16085 IP: 193.109.229.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:33:9b:2d:ae:ae:04:04:11:b8:c0:77:6b:5c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee8b27904d11bcf536774d541542082cfafe8eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e0:a1:3c:4e:47:14:ec:22:38:f1:70:02:49: d6:17:a4:68:2a:83:1e:44:5e:33:35:70:1f:e2:56: fa:35:f5:64:94:07:33:1c:db:76:c5:a2:d0:ce:76: 49:80:a6:61:7c:b8:7d:ae:61:31:32:31:84:97:ec: 12:77:24:68:24:15:02:76:ed:ec:40:25:d9:f2:7e: 6e:97:32:2f:73:ed:f4:7f:e5:25:93:2a:b2:cf:85: 25:f1:9c:a5:ef:2f:1a:78:3b:54:72:f1:a8:b3:6e: c3:9c:7e:43:18:b3:7f:5a:03:bb:db:fe:2f:46:21: ac:c5:71:2c:54:a5:f5:37:db:59:21:b6:e6:1e:8a: 75:80:78:e8:eb:ca:42:3a:e2:92:9c:13:82:21:d3: ef:22:a1:74:ef:cc:67:4f:26:3b:86:ee:d7:fa:a5: be:47:28:2e:5c:e2:2d:c0:c4:27:64:ad:b1:dc:51: 71:12:f1:98:75:ff:7a:2e:13:50:c6:42:0b:9e:51: c1:4c:7a:87:f7:9b:f6:c4:5d:b4:6e:f9:48:67:22: 9f:8c:1a:83:82:53:fc:0f:bf:79:3f:5c:2f:b7:2a: 66:e3:e8:79:d2:7b:0e:92:64:fe:e8:1a:65:1c:ba: 94:21:c7:4b:88:0d:55:02:50:c5:fb:bd:a7:aa:22: 3b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.229.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16085 Signature Algorithm: sha256WithRSAEncryption 33:a5:4c:3e:df:96:95:d8:f9:34:c6:89:0f:b0:d1:16:51:91: c1:e0:4d:dc:54:6a:8d:18:74:85:2f:ba:84:6c:96:88:09:ba: ba:b9:54:8b:78:a9:12:e0:18:1f:a3:0e:8c:c2:cf:88:a8:9d: 8c:4e:e0:4b:4d:9c:b1:c4:a9:d7:f4:f4:dd:25:cc:b1:16:00: 60:e6:b1:a7:35:f0:92:d2:45:5d:29:f7:92:cd:0d:fa:10:8f: ec:2f:62:72:08:43:ca:5a:4d:4e:7d:cf:c2:7e:61:31:b3:ce: 5f:cb:81:65:fb:17:e4:f3:63:1c:02:90:92:ca:e9:6b:46:9f: 43:33:17:56:ea:7d:1f:7a:ec:c4:50:16:05:d3:9a:8d:3c:bf: 8d:82:1b:56:07:d2:1a:ab:3e:d4:a4:12:de:8f:d2:5e:cc:62: b7:e2:20:e6:31:9b:60:b1:90:3d:3a:67:87:38:7c:3c:0a:72: ca:6d:88:56:ce:c3:b5:6b:0a:a0:6a:f4:e0:f7:d6:a8:84:bd: 54:a9:0e:c6:c1:8c:95:48:3c:82:39:8c:8f:55:89:f1:8d:11: 10:87:f9:e9:f7:6d:f3:85:6c:5e:ba:a0:74:5d:1d:0e:cf:b7: 0c:9c:17:b4:ba:b6:b9:fa:dd:51:aa:87:a9:45:0f:ae:ec:b9: ca:44:08:a8 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt87TObLa6uBAQRuMB3a1zkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZThiMjc5MDRkMTFiY2Y1MzY3NzRkNTQxNTQyMDgyY2ZhZmU4ZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+ChPE5HFOwiOPFwAknWF6RoKoMe RF4zNXAf4lb6NfVklAczHNt2xaLQznZJgKZhfLh9rmExMjGEl+wSdyRoJBUCdu3s QCXZ8n5ulzIvc+30f+Ulkyqyz4Ul8Zyl7y8aeDtUcvGos27DnH5DGLN/WgO72/4v RiGsxXEsVKX1N9tZIbbmHop1gHjo68pCOuKSnBOCIdPvIqF078xnTyY7hu7X+qW+ RyguXOItwMQnZK2x3FFxEvGYdf96LhNQxkILnlHBTHqH95v2xF20bvlIZyKfjBqD glP8D795P1wvtypm4+h50nsOkmT+6BplHLqUIcdLiA1VAlDF+72nqiI76QIDAQAB o4ICnzCCApswHQYDVR0OBBYEFO6LJ5BNEbz1NndNVBVCCCz6/o6qMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwL2RiNGQz OC1hNTE0LTQyN2UtOGQ3Ni1jYzY0ZDEzYTYxMmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvZGI0ZDM4 LWE1MTQtNDI3ZS04ZDc2LWNjNjRkMTNhNjEyYy8xLzdvc25rRTBSdlBVMmQwMVVG VUlJTFByLWpxby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwW3lMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC Aj7VMA0GCSqGSIb3DQEBCwUAA4IBAQAzpUw+35aV2Pk0xokPsNEWUZHB4E3cVGqN GHSFL7qEbJaICbq6uVSLeKkS4Bgfow6Mws+IqJ2MTuBLTZyxxKnX9PTdJcyxFgBg 5rGnNfCS0kVdKfeSzQ36EI/sL2JyCEPKWk1Ofc/CfmExs85fy4Fl+xfk82McApCS yulrRp9DMxdW6n0feuzEUBYF05qNPL+NghtWB9Iaqz7UpBLej9JezGK34iDmMZtg sZA9OmeHOHw8CnLKbYhWzsO1awqgavTg99aohL1UqQ7GwYyVSDyCOYyPVYnxjREQ h/np923zhWxeuqB0XR0Oz7cMnBe0ura5+t1RqoepRQ+u7LnKRAio -----END CERTIFICATE-----Generated at Tue Jan 20 09:26:36 2026 by rpki-client