This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer File: O94s1SFek7-gym34ssH17SyUr3Q.cer (raw, json) Hash identifier: oFj0/NfcZKURiIn2JGCMniXzMJu6fmXuVOynGc+q394= Subject key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C690A3948707FC10FCB07AF552AE06 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 80.112.128.0/18 IP: 80.114.128.0/18 IP: 80.115.224.0/19 IP: 80.242.224.0/19 IP: 91.195.160.0/23 IP: 91.198.151.0/24 IP: 91.221.96.0/23 IP: 91.236.83.0/24 IP: 185.130.172.0/22 IP: 194.0.250.0/24 IP: 194.30.188.0/24 IP: 195.35.128.0/17 IP: 195.85.128.0/18 IP: 212.178.64.0 -- 212.178.159.255 IP: 212.178.192.0/19 IP: 212.203.0.0/19 IP: 213.34.64.0/19 IP: 213.34.160.0/19 IP: 213.124.0.0 -- 213.124.159.255 IP: 213.125.0.0 -- 213.126.127.255 IP: 213.132.160.0/19 IP: 217.100.0.0/16 IP: 217.102.224.0/20 IP: 217.105.192.0/19 IP: 2001:41f0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:90:a3:94:87:07:fc:10:fc:b0:7a:f5:52:ae:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:ed:df:ca:3d:9e:e0:91:9a:bc:99:58:ba: 93:b9:7e:92:62:83:32:a7:2e:d5:e4:82:d0:bb:3e: 26:82:1d:c9:13:c2:91:34:7a:90:53:81:04:e9:58: 00:c5:b0:b1:67:92:d1:8c:3f:5a:72:00:a0:15:1c: 60:a7:3b:18:56:09:71:25:e8:8a:ed:2d:93:bf:46: 9e:1c:14:5e:48:80:8b:24:03:8e:ff:d7:fc:11:78: a9:c0:96:6a:71:da:93:cb:a1:c4:66:d0:35:f5:f0: e9:1e:f7:59:2b:bf:10:b9:ef:80:dc:ad:0e:46:1e: 9f:c4:a4:b5:f0:1e:78:b1:ce:4b:b8:34:76:88:ec: 78:95:be:07:f7:ff:89:9b:50:87:79:2a:86:1b:42: 65:1e:52:47:ce:2c:82:89:bd:f0:f5:ec:98:c5:f8: ac:f6:55:63:03:77:00:f9:4c:d8:e3:d5:c3:37:c2: 5c:cd:58:8b:4c:5e:44:f0:28:38:19:bf:56:ae:b3: d0:26:69:70:f1:54:28:65:7a:c7:a3:93:e6:b1:3e: 75:9e:f5:38:f0:0c:ad:3b:94:63:d0:b5:ee:b6:37: 0a:0e:df:27:84:57:b1:2a:25:10:f5:6f:89:59:a8: 4c:7d:b6:d9:52:fb:93:3d:b6:24:59:ab:62:d4:2b: 69:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.112.128.0/18 80.114.128.0/18 80.115.224.0/19 80.242.224.0/19 91.195.160.0/23 91.198.151.0/24 91.221.96.0/23 91.236.83.0/24 185.130.172.0/22 194.0.250.0/24 194.30.188.0/24 195.35.128.0/17 195.85.128.0/18 212.178.64.0-212.178.159.255 212.178.192.0/19 212.203.0.0/19 213.34.64.0/19 213.34.160.0/19 213.124.0.0-213.124.159.255 213.125.0.0-213.126.127.255 213.132.160.0/19 217.100.0.0/16 217.102.224.0/20 217.105.192.0/19 IPv6: 2001:41f0::/29 Signature Algorithm: sha256WithRSAEncryption 7a:7f:44:a5:65:3a:08:db:a7:64:0d:97:12:56:b8:fc:0e:1f: 6a:f0:6e:f5:51:84:48:4f:37:b8:e9:16:ad:da:fc:e4:33:e1: 3d:33:cf:5c:27:bc:10:1d:36:d6:a7:bf:7d:25:6a:70:2f:c0: ca:da:14:b7:9e:2d:07:90:e2:35:f6:2e:c2:f9:1b:61:a3:76: a2:01:93:d0:9f:d2:0b:b5:e0:12:2a:b8:2e:7e:2d:09:de:dc: 55:c9:90:4f:a7:fe:a8:55:f9:67:d5:5b:2f:23:94:ba:8d:2a: 32:99:26:2f:95:86:4b:ee:20:3c:50:e3:16:8c:5a:29:af:33: fe:e4:95:81:3a:01:b1:7e:e7:44:0f:82:5d:a3:54:3f:3f:5f: 75:84:e2:1a:e4:a7:7a:65:71:93:66:d5:bc:67:9c:71:5c:af: 12:c9:ea:20:21:24:85:10:60:df:e6:9c:b8:df:d6:52:d1:fd: 8a:75:0d:63:84:f3:7b:59:dc:74:23:99:15:e5:ed:8a:83:60: 4d:d2:63:39:ef:76:a8:71:08:94:d9:1f:e0:d8:16:a5:a8:b9: 9e:49:46:b9:76:37:c5:7a:c2:de:86:9e:b4:89:84:88:f1:9f: 33:66:98:08:b2:a6:86:1d:6e:7c:55:eb:f7:c3:f7:0b:96:a7: 42:ab:c4:3f -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgISAZt3xpCjlIcH/BD8sHr1Uq4GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmRlMmNkNTIxNWU5M2JmYTBjYTZkZjhiMmMxZjVlZDJjOTRhZjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgTt38o9nuCRmryZWLqTuX6SYoMy py7V5ILQuz4mgh3JE8KRNHqQU4EE6VgAxbCxZ5LRjD9acgCgFRxgpzsYVglxJeiK 7S2Tv0aeHBReSICLJAOO/9f8EXipwJZqcdqTy6HEZtA19fDpHvdZK78Que+A3K0O Rh6fxKS18B54sc5LuDR2iOx4lb4H9/+Jm1CHeSqGG0JlHlJHziyCib3w9eyYxfis 9lVjA3cA+UzY49XDN8JczViLTF5E8Cg4Gb9WrrPQJmlw8VQoZXrHo5PmsT51nvU4 8AytO5Rj0LXutjcKDt8nhFexKiUQ9W+JWahMfbbZUvuTPbYkWati1Ctp4QIDAQAB o4IDNzCCAzMwHQYDVR0OBBYEFDveLNUhXpO/oMpt+LLB9e0slK90MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhL2M1M2Ez ZS1mOTBkLTQ3NDItODRmYi1kYjMxOWEzMWJkZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvYzUzYTNl LWY5MGQtNDc0Mi04NGZiLWRiMzE5YTMxYmRmNy8xL085NHMxU0ZlazctZ3ltMzRz c0gxN1N5VXIzUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHRBggrBgEF BQcBBwEB/wSBwTCBvjCBrAQCAAEwgaUDBAZQcIADBAZQcoADBAVQc+ADBAVQ8uAD BAFbw6ADBABbxpcDBAFb3WADBABb7FMDBAK5gqwDBADCAPoDBADCHrwDBAfDI4AD BAbDVYAwDAMEBtSyQAMEBdSygAMEBdSywAMEBdTLAAMEBdUiQAMEBdUioDALAwMC 1XwDBAXVfIAwCwMDANV9AwQH1X4AAwQF1YSgAwMA2WQDBATZZuADBAXZacAwDQQC AAIwBwMFAyABQfAwDQYJKoZIhvcNAQELBQADggEBAHp/RKVlOgjbp2QNlxJWuPwO H2rwbvVRhEhPN7jpFq3a/OQz4T0zz1wnvBAdNtanv30lanAvwMraFLeeLQeQ4jX2 LsL5G2GjdqIBk9Cf0gu14BIquC5+LQne3FXJkE+n/qhV+WfVWy8jlLqNKjKZJi+V hkvuIDxQ4xaMWimvM/7klYE6AbF+50QPgl2jVD8/X3WE4hrkp3plcZNm1bxnnHFc rxLJ6iAhJIUQYN/mnLjf1lLR/Yp1DWOE83tZ3HQjmRXl7YqDYE3SYznvdqhxCJTZ H+DYFqWouZ5JRrl2N8V6wt6GnrSJhIjxnzNmmAiypoYdbnxV6/fD9wuWp0KrxD8= -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:38 2026 by rpki-client