This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer File: O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer (raw, json) Hash identifier: m3UUT4JYfXr6bmAmGl/csQfjTc19wpZBkroGbLy9vWY= Subject key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA77355C1028E5848B73F7BF20628E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212135 IP: 2001:678:efc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:77:35:5c:10:28:e5:84:8b:73:f7:bf:20:62:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:c8:ad:34:8b:d2:9f:60:2d:af:a7:8e:fa: 29:a0:e0:cc:f4:49:68:56:9d:ba:b1:c9:17:7d:7a: c8:70:9d:63:d1:72:8e:b3:f7:83:fe:da:a4:eb:fa: bf:24:30:89:40:ec:38:5a:e3:9b:58:47:12:e0:b4: f0:ca:cf:af:35:0f:b5:35:16:bc:b8:e8:92:fd:5a: 1e:6b:f7:f6:9c:5d:ea:66:1e:92:e7:ba:5b:5a:7f: 67:27:29:5f:93:c6:eb:1a:8c:64:a1:6b:34:ac:39: db:88:27:8f:c8:1f:c2:24:7e:28:53:89:cb:dd:3b: 65:25:5e:08:aa:86:43:bb:4c:65:35:2a:2c:21:18: 44:61:84:cd:aa:75:52:8e:81:c2:77:61:39:13:2e: 7a:63:8a:c0:9a:43:70:1f:f9:2a:91:6f:e9:71:8c: 7e:31:0a:78:ce:d6:55:c2:39:0e:2c:26:e4:93:d6: 68:4d:40:6b:50:f3:4c:ac:21:84:8f:db:93:03:da: ba:07:14:cd:39:81:ee:78:ea:63:60:c6:b7:56:c8: 28:46:d5:54:8c:b5:37:39:25:c8:4f:d4:c7:bd:db: 0f:a8:a8:71:cb:50:25:31:42:3a:40:b4:fc:26:ef: 13:e6:62:fd:88:72:a6:6d:95:f5:3b:8d:87:ec:2d: f2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:efc::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212135 Signature Algorithm: sha256WithRSAEncryption 09:9a:4c:b7:3a:e1:fa:b3:42:4d:47:06:64:f4:74:31:ac:5a: 98:10:48:f7:24:a3:0a:97:da:d4:c3:fc:dc:72:b4:21:48:a5: 11:e9:3d:ee:32:01:ae:bb:b9:86:a2:ae:97:35:e4:f4:56:ef: d1:91:17:eb:9c:25:27:75:f7:a4:aa:60:a2:e2:0a:46:84:e9: 40:d0:a9:b1:da:01:89:34:56:5a:12:e8:11:83:a4:99:bb:b5: 37:0a:b0:f1:2a:92:61:eb:43:11:44:5a:88:39:28:31:a3:49: 5f:7f:40:9e:22:d3:33:62:51:62:ef:27:26:50:0e:fd:c2:aa: dd:77:e2:22:1c:de:cc:5d:ec:a1:68:5f:41:6a:dd:e8:bc:79: 46:2c:43:3e:d7:fe:f5:94:96:7a:17:9e:a5:91:48:02:36:89: 1d:38:71:fe:2a:22:ec:10:0f:88:40:70:c2:dd:78:51:f8:a1: 67:e2:18:a6:16:64:12:b5:c7:94:cd:de:d1:ac:47:47:eb:54: 7c:5c:98:c6:d7:18:9f:b2:29:da:7b:e4:e3:5c:4e:10:0c:db: e5:95:73:30:41:97:d6:1e:a3:d6:ba:ad:01:d4:37:53:e1:b6: ab:69:53:0b:ed:29:20:28:78:20:93:b1:0d:00:43:a5:39:1b: 37:fe:07:57 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt9ync1XBAo5YSLc/e/IGKOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmQ5ZmI1N2Y0YjBmMjUzZjlhZjg1ODMwM2U2YjQ2YTUyOWMxOTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYPIrTSL0p9gLa+njvopoODM9Elo Vp26sckXfXrIcJ1j0XKOs/eD/tqk6/q/JDCJQOw4WuObWEcS4LTwys+vNQ+1NRa8 uOiS/Voea/f2nF3qZh6S57pbWn9nJylfk8brGoxkoWs0rDnbiCePyB/CJH4oU4nL 3TtlJV4IqoZDu0xlNSosIRhEYYTNqnVSjoHCd2E5Ey56Y4rAmkNwH/kqkW/pcYx+ MQp4ztZVwjkOLCbkk9ZoTUBrUPNMrCGEj9uTA9q6BxTNOYHueOpjYMa3VsgoRtVU jLU3OSXIT9THvdsPqKhxy1AlMUI6QLT8Ju8T5mL9iHKmbZX1O42H7C3y8wIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFDvZ+1f0sPJT+a+FgwPmtGpSnBlOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzIwNGNk Zi1mNmU3LTQ4NzQtOTgwMi02NTBkZDEzOGU2YTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvMjA0Y2Rm LWY2ZTctNDg3NC05ODAyLTY1MGRkMTM4ZTZhMi8xL085bjdWX1N3OGxQNXI0V0RB LWEwYWxLY0dVNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA78MBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM8pzANBgkqhkiG9w0BAQsFAAOCAQEACZpMtzrh+rNCTUcGZPR0MaxamBBI 9ySjCpfa1MP83HK0IUilEek97jIBrru5hqKulzXk9Fbv0ZEX65wlJ3X3pKpgouIK RoTpQNCpsdoBiTRWWhLoEYOkmbu1Nwqw8SqSYetDEURaiDkoMaNJX39AniLTM2JR Yu8nJlAO/cKq3XfiIhzezF3soWhfQWrd6Lx5RixDPtf+9ZSWeheepZFIAjaJHThx /ioi7BAPiEBwwt14UfihZ+IYphZkErXHlM3e0axHR+tUfFyYxtcYn7Ip2nvk41xO EAzb5ZVzMEGX1h6j1rqtAdQ3U+G2q2lTC+0pICh4IJOxDQBDpTkbN/4HVw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:13 2026 by rpki-client