This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OB8xR3o28Ye309uK9NmzSehIb1w.cer File: OB8xR3o28Ye309uK9NmzSehIb1w.cer (raw, json) Hash identifier: bKk7mkjf/6Wb+OENYr18BWehEURgdPdYab3v97z8m6Q= Subject key identifier: 38:1F:31:47:7A:36:F1:87:B7:D3:DB:8A:F4:D9:B3:49:E8:48:6F:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B54B29A9BFFE99589C35C8E35806C2E15 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/381F31477A36F187B7D3DB8AF4D9B349E8486F5C.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 25 Dec 2025 08:49:09 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 210773 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:b2:9a:9b:ff:e9:95:89:c3:5c:8e:35:80:6c:2e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 25 08:49:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=381f31477a36f187b7d3db8af4d9b349e8486f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:34:2a:88:00:bc:95:07:17:cd:80:16:86:32: 93:d6:33:28:fe:3f:be:bb:3a:93:fa:22:74:a6:51: c8:3f:25:04:22:95:aa:08:d3:bb:c0:f9:be:30:53: 8b:a0:f6:c5:a2:39:3f:d0:12:32:75:b2:8b:8a:d3: c8:c9:17:61:29:81:cf:45:82:1b:52:dd:c7:23:68: a7:47:5f:31:2b:d9:5a:75:08:ef:e2:e2:23:97:d9: 39:fb:7a:c5:37:6a:0d:01:61:16:aa:8e:fa:cf:06: 5e:48:80:e3:e3:eb:7f:d9:49:40:0e:e0:69:88:43: 4f:f9:d5:08:4b:6b:d5:e3:96:1d:86:f9:88:19:0a: ef:f0:fe:d0:aa:07:32:d4:4b:bf:4d:d0:57:33:93: c1:81:5f:9b:58:49:f9:96:99:ea:2e:79:ea:29:39: e0:52:d4:57:52:5b:a4:00:06:32:56:77:e2:68:d1: 5c:9c:1f:ca:b8:3d:ee:e3:f5:0e:cf:f3:6b:47:27: f2:96:7a:40:18:59:b8:19:d3:c1:b3:e2:dc:d9:f4: 06:d1:bb:cd:ce:43:de:b9:be:f6:7e:4a:df:98:b8: 79:78:eb:74:e6:33:a7:7a:49:d3:0a:3c:1e:2d:81: bc:d3:fe:c6:94:86:42:8e:e1:90:e0:15:fb:2f:65: 8b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1F:31:47:7A:36:F1:87:B7:D3:DB:8A:F4:D9:B3:49:E8:48:6F:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/381F31477A36F187B7D3DB8AF4D9B349E8486F5C.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210773 Signature Algorithm: sha256WithRSAEncryption 6c:a3:8f:ff:68:11:8c:c0:3a:1e:65:68:98:18:e7:69:19:a6: 2b:40:bf:84:12:38:0b:4c:d4:4e:b6:08:a5:f5:bc:21:1a:04: c5:6a:9d:d3:05:86:e8:09:57:c0:cb:37:54:c7:de:59:b7:65: bd:ba:cb:c9:7b:48:5c:26:d0:0e:11:b9:38:20:7e:6a:9a:71: 61:0c:08:4f:10:52:bd:3b:ae:15:66:03:9d:5e:67:98:cf:04: df:3d:46:9e:15:48:7f:92:e0:79:c7:f6:c3:64:09:ab:49:27: ab:1f:3c:85:cd:c3:a7:7b:86:90:7c:ab:b9:0c:79:0b:f3:6a: 49:0b:d0:f3:6d:ad:ba:7b:8f:86:b4:63:d0:1d:af:46:af:e4: 89:af:54:c6:4e:db:fb:fa:91:bf:2f:00:6e:35:03:19:b9:64: 39:70:fa:ea:96:30:b5:07:b0:a8:65:11:95:57:8e:a7:be:58: b9:56:2a:d2:13:3d:7f:1b:ab:b9:e0:1d:f3:79:23:e9:39:19: e3:17:10:ba:43:13:4a:ca:15:88:82:f3:f4:eb:50:5b:18:c7: 8f:4a:13:29:21:a5:00:ad:fb:01:56:43:b6:95:de:90:fd:ab: ac:2e:c4:0e:17:d7:69:df:cd:4d:ce:ec:5a:ed:05:10:d0:1b: 7c:ad:df:75 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZtUspqb/+mVicNcjjWAbC4VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjI1MDg0OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODFmMzE0NzdhMzZmMTg3YjdkM2RiOGFmNGQ5YjM0OWU4NDg2ZjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DQqiAC8lQcXzYAWhjKT1jMo/j++ uzqT+iJ0plHIPyUEIpWqCNO7wPm+MFOLoPbFojk/0BIydbKLitPIyRdhKYHPRYIb Ut3HI2inR18xK9ladQjv4uIjl9k5+3rFN2oNAWEWqo76zwZeSIDj4+t/2UlADuBp iENP+dUIS2vV45YdhvmIGQrv8P7Qqgcy1Eu/TdBXM5PBgV+bWEn5lpnqLnnqKTng UtRXUlukAAYyVnfiaNFcnB/KuD3u4/UOz/NrRyfylnpAGFm4GdPBs+Lc2fQG0bvN zkPeub72fkrfmLh5eOt05jOneknTCjweLYG80/7GlIZCjuGQ4BX7L2WLBwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFDgfMUd6NvGHt9PbivTZs0noSG9cMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzM4ZmRh N2MxLTlmYjUtNDU1MS1iNmNhLWY5NTdlYjA3NDJkZi8xLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzhm ZGE3YzEtOWZiNS00NTUxLWI2Y2EtZjk1N2ViMDc0MmRmLzEvMzgxRjMxNDc3QTM2 RjE4N0I3RDNEQjhBRjREOUIzNDlFODQ4NkY1Qy5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDN1Uw DQYJKoZIhvcNAQELBQADggEBAGyjj/9oEYzAOh5laJgY52kZpitAv4QSOAtM1E62 CKX1vCEaBMVqndMFhugJV8DLN1TH3lm3Zb26y8l7SFwm0A4RuTggfmqacWEMCE8Q Ur07rhVmA51eZ5jPBN89Rp4VSH+S4HnH9sNkCatJJ6sfPIXNw6d7hpB8q7kMeQvz akkL0PNtrbp7j4a0Y9Adr0av5ImvVMZO2/v6kb8vAG41Axm5ZDlw+uqWMLUHsKhl EZVXjqe+WLlWKtITPX8bq7ngHfN5I+k5GeMXELpDE0rKFYiC8/TrUFsYx49KEykh pQCt+wFWQ7aV3pD9q6wuxA4X12nfzU3O7FrtBRDQG3yt33U= -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:43 2025 by rpki-client