This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer File: AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer (raw, json) Hash identifier: YhhFWqN460pqQ7PZKOUQfW2/bF7W/jc6x/MmPJSv0mY= Subject key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6847E47A3ABF501B9FBC5A47F1EB0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42440 IP: 46.167.128.0/19 IP: 77.77.64.0/18 IP: 185.120.168.0/22 IP: 2a02:16c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:84:7e:47:a3:ab:f5:01:b9:fb:c5:a4:7f:1e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e6:a5:7b:42:fa:d6:b5:68:23:e7:8f:f0:a3: 70:55:b4:9d:88:be:78:5b:9a:09:a0:8a:49:e2:79: e0:46:35:bf:c6:58:64:b3:a9:77:83:3d:f3:5b:7b: 97:ec:42:13:bb:99:f7:39:7b:ca:a3:98:44:16:14: 90:20:52:39:13:21:e0:9e:34:14:30:97:60:d8:d7: 52:97:8a:1a:c6:d9:34:08:de:80:73:20:4b:38:82: 04:89:e4:73:10:24:c3:6e:39:d5:1b:90:3f:17:30: cb:20:64:31:98:9a:45:95:56:5e:11:a4:91:46:7a: 4d:bd:5e:03:9a:da:0e:ee:df:70:38:61:bd:9a:56: 2c:70:42:96:95:7e:40:02:b6:88:25:e2:b8:ac:4c: 2e:a4:da:39:01:57:9f:23:df:bf:7b:2f:b4:c6:74: 63:bd:48:d5:76:d4:61:82:50:13:56:34:14:8a:fd: 1e:5c:2a:95:39:4d:8d:47:65:bf:20:76:b1:85:44: 88:d4:51:84:7d:a1:fe:b7:93:a0:31:72:e1:2a:2b: a8:7c:ef:2a:44:e8:ef:37:c4:aa:53:a6:2b:cb:6e: 0a:86:f5:0f:16:46:25:99:d5:39:06:b0:13:bd:90: be:cb:cc:d4:cc:b7:6f:68:8b:4a:60:aa:99:73:91: ef:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.167.128.0/19 77.77.64.0/18 185.120.168.0/22 IPv6: 2a02:16c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42440 Signature Algorithm: sha256WithRSAEncryption 83:ea:dd:51:3e:51:db:bd:5a:63:04:f6:84:b8:2f:50:f0:20: fe:27:65:99:c5:c1:09:eb:5f:cf:c0:a8:dd:54:e9:1c:c9:48: d6:65:08:b1:6c:d8:bb:de:bd:4f:df:f5:f8:6c:cb:a0:17:76: 53:34:be:94:58:b2:11:3e:62:f6:51:20:86:19:39:c9:61:9c: 1c:66:87:a8:c5:c3:6a:ac:50:d7:65:87:f1:4d:ac:94:28:52: 84:f2:d0:38:c7:27:37:a4:f8:c6:29:ef:76:74:3d:93:6b:41: 79:81:b1:42:31:7d:f1:e1:74:ba:b5:7f:83:48:60:48:1d:ea: 77:61:57:4e:65:9e:67:83:d6:96:76:8a:84:53:e0:8d:55:6a: a2:5b:f2:1c:c2:5a:2f:50:a1:a6:49:ef:c6:0d:bf:3c:75:03: 1c:8b:23:66:ab:a2:e2:fe:8a:1a:5e:ab:d1:6d:75:d2:ac:a9: a3:25:7b:96:bb:ab:d3:b2:ac:06:70:40:e9:4a:6b:b3:df:e4: 8a:c6:f0:ff:3b:39:40:d4:1a:69:f0:b7:c6:c4:56:b9:5c:f5: 90:c7:b6:f4:29:ce:88:dd:e1:89:3a:79:6f:f3:58:12:a2:30: e1:14:06:97:1e:ec:72:ce:ee:99:0c:14:3f:75:0a:b9:ef:8b: 10:2b:d1:98 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt3xoR+R6Or9QG5+8Wkfx6wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjgzYThjNjlhMjYzMGNkOGY2ZmE3MGFmMmE1M2ZlMDE5ZjJjYzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuale0L61rVoI+eP8KNwVbSdiL54 W5oJoIpJ4nngRjW/xlhks6l3gz3zW3uX7EITu5n3OXvKo5hEFhSQIFI5EyHgnjQU MJdg2NdSl4oaxtk0CN6AcyBLOIIEieRzECTDbjnVG5A/FzDLIGQxmJpFlVZeEaSR RnpNvV4DmtoO7t9wOGG9mlYscEKWlX5AAraIJeK4rEwupNo5AVefI9+/ey+0xnRj vUjVdtRhglATVjQUiv0eXCqVOU2NR2W/IHaxhUSI1FGEfaH+t5OgMXLhKiuofO8q ROjvN8SqU6Yry24KhvUPFkYlmdU5BrATvZC+y8zUzLdvaItKYKqZc5HvewIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFAKDqMaaJjDNj2+nCvKlP+AZ8swHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzFjMjRh ZC0yNGI0LTRjOTgtYTY1OS01OTJjMGRjZGFmNzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvMWMyNGFk LTI0YjQtNGM5OC1hNjU5LTU5MmMwZGNkYWY3OS8xL0FvT294cG9tTU0yUGI2Y0s4 cVVfNEJueXpBYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQFLqeAAwQGTU1AAwQCuXioMA0EAgACMAcDBQMq AhbAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwClyDANBgkqhkiG9w0BAQsFAAOC AQEAg+rdUT5R271aYwT2hLgvUPAg/idlmcXBCetfz8Co3VTpHMlI1mUIsWzYu969 T9/1+GzLoBd2UzS+lFiyET5i9lEghhk5yWGcHGaHqMXDaqxQ12WH8U2slChShPLQ OMcnN6T4xinvdnQ9k2tBeYGxQjF98eF0urV/g0hgSB3qd2FXTmWeZ4PWlnaKhFPg jVVqolvyHMJaL1Chpknvxg2/PHUDHIsjZqui4v6KGl6r0W110qypoyV7lrur07Ks BnBA6Uprs9/kisbw/zs5QNQaafC3xsRWuVz1kMe29CnOiN3hiTp5b/NYEqIw4RQG lx7scs7umQwUP3UKue+LECvRmA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:51 2026 by rpki-client