This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer File: O95jhoTGRf7dYA7TxQzfMQsRbT4.cer (raw, json) Hash identifier: GC4NfZnuq8x6SSzBhYsoKsUoWN00Job6Td8qsSovAA0= Subject key identifier: 3B:DE:63:86:84:C6:45:FE:DD:60:0E:D3:C5:0C:DF:31:0B:11:6D:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35FE0215BDA426E81D2A6A418C4D6C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209045 IP: 147.189.192.0/20 IP: 194.61.20.0/22 IP: 2a09:7000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:fe:02:15:bd:a4:26:e8:1d:2a:6a:41:8c:4d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bde638684c645fedd600ed3c50cdf310b116d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:53:ae:30:b8:94:d3:1f:55:c8:cf:fe:82:fc: 97:45:d1:ae:64:5c:e6:71:a9:04:01:0c:23:f2:cb: 9d:55:c1:52:3c:75:5d:e1:98:48:b4:54:4b:bb:b1: 6e:1f:04:99:97:f8:36:b2:12:0b:62:67:10:e1:bd: cf:42:87:2d:21:f0:90:50:56:74:24:dd:1b:1f:5d: 45:f0:f4:b1:6d:65:dd:32:27:aa:bf:04:24:ef:fc: 76:8c:81:8f:e0:95:15:95:ae:cf:d2:7b:5d:f0:3f: 92:39:41:0f:38:59:1b:b1:b4:ff:80:a6:b5:c3:73: 83:94:23:e1:f3:08:1d:f0:3b:11:db:15:58:1d:36: 19:c7:2c:4f:99:6b:dd:92:fe:b1:af:ea:80:58:4f: 6c:f6:37:f8:08:ad:c8:d3:b0:d0:3f:47:0f:97:76: 44:ef:cd:2e:8a:7f:cb:67:11:a7:d6:73:d9:d4:3d: f4:f7:97:6e:5a:ef:af:ea:af:a2:25:07:f2:52:fd: e9:d4:e3:21:aa:4e:41:b3:32:63:89:fc:e7:cc:41: 0d:a9:39:ad:1b:52:c0:82:64:0f:4f:02:a9:b9:db: 71:9e:0d:56:72:1e:12:af:4a:cd:30:b5:6a:d5:bb: 13:e3:61:cd:93:c0:71:24:c1:f5:94:c1:5a:29:21: 68:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DE:63:86:84:C6:45:FE:DD:60:0E:D3:C5:0C:DF:31:0B:11:6D:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.189.192.0/20 194.61.20.0/22 IPv6: 2a09:7000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209045 Signature Algorithm: sha256WithRSAEncryption 96:df:43:25:33:17:58:8a:14:ab:14:f3:82:af:da:6b:d0:53: 32:7f:10:0e:e4:cd:6c:73:e7:a5:58:a0:0a:ee:a7:8b:af:56: e1:68:42:9c:11:80:fd:33:a0:cf:29:f1:59:9f:8c:89:cd:58: c7:86:70:b2:95:2d:37:ec:d5:01:b3:98:bb:41:0d:c9:31:54: 71:46:7d:52:96:52:c9:70:a2:71:36:c6:a7:79:7c:ee:13:d4: 2d:f8:ec:e6:85:e4:88:49:4a:e1:97:fb:a2:0d:15:8a:2f:36: 96:3a:98:0e:f8:e8:73:59:0d:f5:1d:3b:a3:7f:bc:ff:8c:5b: ca:b8:e0:87:7c:95:f2:02:c1:c9:46:05:b2:ae:51:4f:f1:b1: 74:ec:48:7a:f8:ff:1b:91:cf:69:95:34:1b:84:f1:51:38:71: 02:68:21:a1:c7:c0:e2:48:2a:d3:7c:23:0b:b7:72:d7:e5:df: ea:1d:83:d4:13:86:a9:13:e6:79:1c:7b:e0:bc:a5:31:85:cb: 18:cf:91:5c:4d:cd:fb:75:cc:f5:9a:fb:ec:65:56:8d:6d:e7: d7:ff:b9:d2:cb:5b:b5:02:21:84:b0:d8:5c:4e:b4:1d:05:16: 2d:38:f0:3c:a8:03:05:43:80:65:87:79:2f:5a:82:16:8c:5f: 6a:96:79:88 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7Nf4CFb2kJugdKmpBjE1sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmRlNjM4Njg0YzY0NWZlZGQ2MDBlZDNjNTBjZGYzMTBiMTE2ZDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVOuMLiU0x9VyM/+gvyXRdGuZFzm cakEAQwj8sudVcFSPHVd4ZhItFRLu7FuHwSZl/g2shILYmcQ4b3PQoctIfCQUFZ0 JN0bH11F8PSxbWXdMieqvwQk7/x2jIGP4JUVla7P0ntd8D+SOUEPOFkbsbT/gKa1 w3ODlCPh8wgd8DsR2xVYHTYZxyxPmWvdkv6xr+qAWE9s9jf4CK3I07DQP0cPl3ZE 780uin/LZxGn1nPZ1D3095duWu+v6q+iJQfyUv3p1OMhqk5BszJjifznzEENqTmt G1LAgmQPTwKpudtxng1Wch4Sr0rNMLVq1bsT42HNk8BxJMH1lMFaKSFo9QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFDveY4aExkX+3WAO08UM3zELEW0+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1LzYyYjE1 ZC1lZTUwLTQ1MGItOGUyZC0wOTdiMDUxMGQzZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvNjJiMTVk LWVlNTAtNDUwYi04ZTJkLTA5N2IwNTEwZDNlMi8xL085NWpob1RHUmY3ZFlBN1R4 UXpmTVFzUmJUNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEk73AAwQCwj0UMA0EAgACMAcDBQMqCXAAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMwlTANBgkqhkiG9w0BAQsFAAOCAQEAlt9D JTMXWIoUqxTzgq/aa9BTMn8QDuTNbHPnpVigCu6ni69W4WhCnBGA/TOgzynxWZ+M ic1Yx4ZwspUtN+zVAbOYu0ENyTFUcUZ9UpZSyXCicTbGp3l87hPULfjs5oXkiElK 4Zf7og0Vii82ljqYDvjoc1kN9R07o3+8/4xbyrjgh3yV8gLByUYFsq5RT/GxdOxI evj/G5HPaZU0G4TxUThxAmghocfA4kgq03wjC7dy1+Xf6h2D1BOGqRPmeRx74Lyl MYXLGM+RXE3N+3XM9Zr77GVWjW3n1/+50stbtQIhhLDYXE60HQUWLTjwPKgDBUOA ZYd5L1qCFoxfapZ5iA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:22 2026 by rpki-client