This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer File: O63rHzjiUanY1hTzLTbyat9P1YA.cer (raw, json) Hash identifier: M7w/LGvMcKEEHHwYvLN3h8EHj/PhKSu60re4QMFeSFU= Subject key identifier: 3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36D4BBB04D9E88662C734FE5DC7518 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 143.129.0.0/16 IP: 143.169.0.0/16 IP: 146.175.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d4:bb:b0:4d:9e:88:66:2c:73:4f:e5:dc:75:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:87:ed:04:93:6d:7a:9e:cc:58:58:58:61:e7: 39:d2:49:17:32:d1:61:c5:fc:a8:ef:b4:08:50:1a: 32:a1:8a:5f:41:e9:b4:c6:c7:e2:8e:da:1e:e6:ae: 24:cc:8a:de:55:7e:fc:f8:49:39:ab:a5:c5:8c:ad: e5:26:0a:a0:5a:bd:99:22:f3:30:fc:3b:8f:da:39: 47:d6:28:26:e0:a3:83:d2:27:22:49:f1:6b:ec:7e: af:e6:08:75:b5:4b:82:36:cb:b8:39:b3:01:72:62: bd:cc:0e:1c:e2:39:86:b9:6b:af:2d:5b:75:81:ff: 9a:fb:5d:99:f0:cc:e6:27:d3:03:fc:76:43:f1:06: 60:c5:24:bc:17:83:e8:00:9e:8f:40:df:20:f7:08: f9:5a:c6:8d:62:c2:ff:5b:52:a8:5a:80:76:df:1b: ea:3a:cd:54:de:e6:7c:22:6d:ee:bc:2d:a7:ce:46: 81:a1:c1:2c:08:56:ae:75:18:37:bb:dc:68:45:3e: 1b:75:bc:75:0d:4a:13:75:46:d9:3b:bc:d5:ea:70: a3:8d:68:cd:49:67:72:72:82:81:06:c5:73:d5:f2: 07:00:03:09:ca:95:03:e1:32:3e:7a:46:e6:9d:ef: 1d:8b:5f:f6:90:97:08:e6:e8:00:cd:7c:50:fd:f4: 5f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.129.0.0/16 143.169.0.0/16 146.175.0.0/16 Signature Algorithm: sha256WithRSAEncryption a9:cf:17:b9:8e:08:57:a1:a9:68:00:c7:5d:72:38:d0:40:44: c4:05:20:be:79:df:52:89:e2:b5:ec:bf:12:1b:30:1a:8c:d3: ee:be:3f:56:e6:29:07:59:78:b0:cb:a4:75:b5:29:ec:39:56: fc:79:f3:19:9a:7d:0d:21:83:b7:ed:a3:64:63:a4:7d:91:90: 92:cd:a5:13:d0:99:21:51:9e:0f:53:ea:49:5f:d3:ff:69:38: 0a:c5:a1:49:07:8b:5e:d1:a4:ff:b8:94:d3:3f:dc:c6:4a:f8: ca:1f:6f:9c:b9:38:18:21:98:77:9c:b9:f3:5b:61:17:05:22: 4d:06:c0:a8:83:73:8d:5c:a4:ca:ab:9e:40:11:dc:48:04:f5: 66:28:89:62:84:a7:f4:51:a7:fa:b0:70:88:2b:f5:50:aa:a0: 72:e3:75:3d:28:91:66:8b:15:01:db:60:80:73:8c:b2:68:14: d9:c7:fa:fc:df:b2:df:db:ff:e2:26:78:97:47:bb:08:b2:29: 17:3c:c3:7c:17:cf:c5:d4:39:a3:f7:33:bf:2e:de:c2:6c:62: 21:47:d6:dd:44:ea:4a:2b:18:a8:a4:be:35:e2:c9:1d:28:fa: d0:e0:38:1e:c2:3a:f7:a6:d3:5b:00:e3:2e:d4:25:e6:f0:27: 85:3b:c2:c6 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgISAZt7NtS7sE2eiGYsc0/l3HUYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmFkZWIxZjM4ZTI1MWE5ZDhkNjE0ZjMyZDM2ZjI2YWRmNGZkNTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroftBJNtep7MWFhYYec50kkXMtFh xfyo77QIUBoyoYpfQem0xsfijtoe5q4kzIreVX78+Ek5q6XFjK3lJgqgWr2ZIvMw /DuP2jlH1igm4KOD0iciSfFr7H6v5gh1tUuCNsu4ObMBcmK9zA4c4jmGuWuvLVt1 gf+a+12Z8MzmJ9MD/HZD8QZgxSS8F4PoAJ6PQN8g9wj5WsaNYsL/W1KoWoB23xvq Os1U3uZ8Im3uvC2nzkaBocEsCFaudRg3u9xoRT4bdbx1DUoTdUbZO7zV6nCjjWjN SWdycoKBBsVz1fIHAAMJypUD4TI+ekbmne8di1/2kJcI5ugAzXxQ/fRfsQIDAQAB o4ICjTCCAokwHQYDVR0OBBYEFDut6x844lGp2NYU8y028mrfT9WAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzFiYmEw Zi1kNTZkLTRkN2YtYThiNS00Yzg3ZmU1ZmRhZGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvMWJiYTBm LWQ1NmQtNGQ3Zi1hOGI1LTRjODdmZTVmZGFkYy8xL082M3JIemppVWFuWTFoVHpM VGJ5YXQ5UDFZQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCgGCCsGAQUF BwEHAQH/BBkwFzAVBAIAATAPAwMAj4EDAwCPqQMDAJKvMA0GCSqGSIb3DQEBCwUA A4IBAQCpzxe5jghXoaloAMddcjjQQETEBSC+ed9SieK17L8SGzAajNPuvj9W5ikH WXiwy6R1tSnsOVb8efMZmn0NIYO37aNkY6R9kZCSzaUT0JkhUZ4PU+pJX9P/aTgK xaFJB4te0aT/uJTTP9zGSvjKH2+cuTgYIZh3nLnzW2EXBSJNBsCog3ONXKTKq55A EdxIBPVmKIlihKf0Uaf6sHCIK/VQqqBy43U9KJFmixUB22CAc4yyaBTZx/r837Lf 2//iJniXR7sIsikXPMN8F8/F1Dmj9zO/Lt7CbGIhR9bdROpKKxiopL414skdKPrQ 4Dgewjr3ptNbAOMu1CXm8CeFO8LG -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:36 2026 by rpki-client