This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer File: O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer (raw, json) Hash identifier: MaqxARY4axtGMrs25G8ftigaEo3iBkV2UxINe1CQniI= Subject key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38A1A38EE3D4356FB5244376417458 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201821 IP: 185.63.72.0/22 IP: 2a03:9a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a1:a3:8e:e3:d4:35:6f:b5:24:43:76:41:74:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b637ccf393f52e0b56fb58ee35af54411daf644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ee:72:8b:e3:ef:2f:c8:84:dc:29:20:e1:a3: be:49:2c:b4:d9:a9:b7:ee:0a:d8:bc:06:9d:9c:85: a0:ac:d1:86:51:bc:bf:88:d7:0f:e3:56:49:f5:01: f4:78:00:24:4c:07:d9:ce:25:47:ce:b6:0e:8e:48: 7d:4d:93:e0:30:67:88:75:83:a2:b0:26:ef:8d:b2: df:49:93:d9:37:89:74:c8:ed:de:85:0b:19:34:91: 5c:61:09:e8:ad:bb:e4:e4:4f:ef:f1:f7:cb:6f:57: 2e:b5:4d:3f:b7:f4:90:f6:e4:49:64:80:54:f5:be: c6:cf:10:44:6d:ec:29:7b:1a:fe:5b:08:a6:d2:95: c3:01:43:b0:42:17:5c:ce:76:d0:e4:c7:5d:1c:31: 5f:5d:cb:6f:5b:d8:11:18:b1:e1:5e:2c:03:6e:1c: f9:e8:b4:29:c7:f4:e2:df:54:9b:f0:00:25:a0:4e: 6a:b1:66:0b:ee:0a:22:8b:c5:17:4b:f5:85:03:0a: 32:a2:e6:84:d5:18:fd:54:e3:2c:e5:0e:c7:47:35: f4:d1:7c:b3:41:e6:c6:d2:72:da:f8:1b:b1:68:17: 8f:f4:17:6b:92:d0:17:cd:64:67:6f:30:07:cc:87: f7:fd:a8:cd:49:37:f6:89:19:c7:a3:d2:13:fc:4e: 3e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.72.0/22 IPv6: 2a03:9a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201821 Signature Algorithm: sha256WithRSAEncryption 93:69:5d:19:07:bf:8b:d8:1c:9c:75:de:3b:c2:12:0a:94:0b: be:00:61:33:3b:5f:05:60:3a:8b:c8:81:87:80:aa:fb:de:17: 43:c3:31:e9:6e:10:ab:73:8f:94:67:3e:8e:6d:be:69:13:af: f3:c1:3e:f5:b2:15:94:e4:6d:fb:7c:0c:ba:25:6c:13:ef:75: 94:c2:ac:c2:78:31:4e:4f:61:0e:f7:55:30:ba:94:fc:6f:0d: 9b:92:46:01:21:91:16:b8:16:d5:ad:9b:20:15:1c:dd:14:96: 61:fb:46:01:7e:a2:b6:21:76:ef:50:6e:32:3d:9d:cd:29:79: 4c:81:e6:bf:bf:d8:42:04:17:50:38:49:b6:65:92:c4:71:c6: d4:3e:83:c3:0c:3c:50:69:cc:3c:5f:65:af:04:c2:3a:fd:2f: 92:ac:a9:f4:cf:1b:35:73:98:31:ef:b7:08:cc:28:07:39:93: 55:3e:3a:eb:c5:8a:ff:d4:35:85:e8:c6:3a:fa:ae:9d:25:9f: 69:b3:8f:75:dc:8e:73:a6:98:06:44:b7:b6:6c:d8:7d:48:14: ab:c9:f5:81:91:60:6e:fa:17:b0:52:c6:36:e8:95:fe:11:67: 0e:4a:ff:43:c7:67:41:9d:a9:15:0e:87:00:20:83:38:3f:14: f1:ca:54:5a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+OKGjjuPUNW+1JEN2QXRYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjYzN2NjZjM5M2Y1MmUwYjU2ZmI1OGVlMzVhZjU0NDExZGFmNjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+5yi+PvL8iE3Ckg4aO+SSy02am3 7grYvAadnIWgrNGGUby/iNcP41ZJ9QH0eAAkTAfZziVHzrYOjkh9TZPgMGeIdYOi sCbvjbLfSZPZN4l0yO3ehQsZNJFcYQnorbvk5E/v8ffLb1cutU0/t/SQ9uRJZIBU 9b7GzxBEbewpexr+Wwim0pXDAUOwQhdcznbQ5MddHDFfXctvW9gRGLHhXiwDbhz5 6LQpx/Ti31Sb8AAloE5qsWYL7goii8UXS/WFAwoyouaE1Rj9VOMs5Q7HRzX00Xyz QebG0nLa+BuxaBeP9BdrktAXzWRnbzAHzIf3/ajNSTf2iRnHo9IT/E4+tQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDtjfM85P1LgtW+1juNa9UQR2vZEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzljNWMx Zi1mNGI2LTQ1YTgtOWM5Zi0zMDczM2QzNzBkZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvOWM1YzFm LWY0YjYtNDVhOC05YzlmLTMwNzMzZDM3MGRmMy8xL08yTjh6emtfVXVDMWI3V080 MXIxUkJIYTlrUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuT9IMA0EAgACMAcDBQAqAwmgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMUXTANBgkqhkiG9w0BAQsFAAOCAQEAk2ldGQe/i9gc nHXeO8ISCpQLvgBhMztfBWA6i8iBh4Cq+94XQ8Mx6W4Qq3OPlGc+jm2+aROv88E+ 9bIVlORt+3wMuiVsE+91lMKswngxTk9hDvdVMLqU/G8Nm5JGASGRFrgW1a2bIBUc 3RSWYftGAX6itiF271BuMj2dzSl5TIHmv7/YQgQXUDhJtmWSxHHG1D6Dwww8UGnM PF9lrwTCOv0vkqyp9M8bNXOYMe+3CMwoBzmTVT4668WK/9Q1hejGOvqunSWfabOP ddyOc6aYBkS3tmzYfUgUq8n1gZFgbvoXsFLGNuiV/hFnDkr/Q8dnQZ2pFQ6HACCD OD8U8cpUWg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:27 2026 by rpki-client