This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer File: OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer (raw, json) Hash identifier: N0+yRaHcutTQW/TNTrH1wsng8oc+2HM60Slo9VpaRK4= Subject key identifier: 38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E9125DC584A8D6E35EA443B2B10EB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31140 IP: 193.22.248.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:91:25:dc:58:4a:8d:6e:35:ea:44:3b:2b:10:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:66:c8:db:2b:71:df:4f:7c:2d:2d:70:48:a5: 4e:dd:64:0d:94:33:57:bb:ad:c5:4d:76:33:89:b1: af:5e:1f:b7:02:31:28:14:71:18:4f:a9:28:1d:cd: 91:26:a5:9f:f5:5d:15:eb:8b:aa:22:98:a3:96:0e: 25:53:9e:87:ec:cf:94:db:4b:24:2f:58:07:87:1c: aa:12:a4:34:50:28:84:f2:45:2f:4b:8b:76:b2:25: 9e:e9:a1:03:b5:d1:7a:26:c6:d5:36:06:22:54:7b: aa:a1:2e:93:0c:81:9b:b7:0c:60:75:a7:31:a5:ca: 0c:64:d3:b3:77:0e:9d:0f:8c:38:e8:a4:6e:8a:fc: 21:ba:e6:15:b8:c8:76:6b:8c:a1:47:65:c7:04:0a: c5:c3:73:9b:41:8c:aa:70:89:2d:30:c8:a1:a4:0c: 77:a0:8f:3e:d8:3e:02:20:2a:c8:53:cd:04:e9:83: 9f:3f:27:32:b7:da:59:16:e3:0b:c8:e6:0b:31:b1: 37:65:b7:ca:83:29:0d:70:a5:e3:26:69:c5:34:ec: 83:4e:d6:c6:d3:85:7a:b5:9b:1a:f6:a9:7b:ed:c2: 42:7c:73:47:a4:e1:de:5f:44:4c:d8:2c:f3:70:3e: 8b:35:8f:af:fd:43:71:19:e2:fd:a0:3e:6c:bf:50: 72:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.248.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31140 Signature Algorithm: sha256WithRSAEncryption 57:00:4e:90:42:9f:f7:4b:a1:61:49:ce:a0:73:3f:81:66:a1: 47:0e:76:9e:fa:b8:0c:ae:79:f6:3b:3c:be:ad:42:71:54:eb: 5b:4e:70:f1:d1:00:0b:9e:a2:05:d2:15:cf:69:11:1e:47:e6: 1b:e2:20:28:e3:f9:82:d1:bc:f0:aa:91:e4:11:d8:c6:56:76: f6:00:bc:9f:a1:e8:f3:a9:20:f9:a9:e7:15:d9:21:63:1e:77: 41:66:e9:4e:61:b7:b4:c7:73:00:eb:11:44:71:4c:63:63:58: d4:c8:ee:ca:3d:18:73:3e:7e:f8:76:27:d1:5e:f6:6d:ca:49: 0b:4a:12:b1:c6:6d:a3:bb:40:5f:e8:84:73:d0:a1:24:21:cb: d7:32:51:c0:83:0a:c3:68:1c:c9:39:a4:04:0b:24:d5:82:e3: ad:b1:65:b3:c0:9f:c9:be:ff:5d:8e:88:e7:4c:76:29:70:0b: d1:b4:b5:d1:2d:dc:95:2d:28:d3:bd:e1:18:9f:ba:05:97:45: 54:97:d8:8d:42:41:17:97:63:b8:1d:d5:b5:b0:7a:57:c7:2a: c4:98:8b:f6:36:32:f8:fc:0c:81:00:35:a6:f4:4e:29:9d:59: d2:1a:cc:f3:03:90:05:fa:28:90:70:db:45:06:d2:4f:9e:ed: 79:0f:ad:07 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt5fpEl3FhKjW416kQ7KxDrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODE0YjY0OGRkNTc0MjAyNWMzZGRhNWVhYTY2NDkxZmZkYjJlNWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGbI2ytx3098LS1wSKVO3WQNlDNX u63FTXYzibGvXh+3AjEoFHEYT6koHc2RJqWf9V0V64uqIpijlg4lU56H7M+U20sk L1gHhxyqEqQ0UCiE8kUvS4t2siWe6aEDtdF6JsbVNgYiVHuqoS6TDIGbtwxgdacx pcoMZNOzdw6dD4w46KRuivwhuuYVuMh2a4yhR2XHBArFw3ObQYyqcIktMMihpAx3 oI8+2D4CICrIU80E6YOfPycyt9pZFuMLyOYLMbE3ZbfKgykNcKXjJmnFNOyDTtbG 04V6tZsa9ql77cJCfHNHpOHeX0RM2CzzcD6LNY+v/UNxGeL9oD5sv1By4wIDAQAB o4ICnzCCApswHQYDVR0OBBYEFDgUtkjdV0ICXD3aXqpmSR/9suXZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzLzEyZGYy ZC05NGYxLTRkMTAtOTRhNC0xZjgzNjg4MDFmZGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvMTJkZjJk LTk0ZjEtNGQxMC05NGE0LTFmODM2ODgwMWZkYy8xL09CUzJTTjFYUWdKY1BkcGVx bVpKSF8yeTVkay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwRb4MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnmkMA0GCSqGSIb3DQEBCwUAA4IBAQBXAE6QQp/3S6FhSc6gcz+BZqFHDnae+rgM rnn2Ozy+rUJxVOtbTnDx0QALnqIF0hXPaREeR+Yb4iAo4/mC0bzwqpHkEdjGVnb2 ALyfoejzqSD5qecV2SFjHndBZulOYbe0x3MA6xFEcUxjY1jUyO7KPRhzPn74difR XvZtykkLShKxxm2ju0Bf6IRz0KEkIcvXMlHAgwrDaBzJOaQECyTVguOtsWWzwJ/J vv9djojnTHYpcAvRtLXRLdyVLSjTveEYn7oFl0VUl9iNQkEXl2O4HdW1sHpXxyrE mIv2NjL4/AyBADWm9E4pnVnSGszzA5AF+iiQcNtFBtJPnu15D60H -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:13 2026 by rpki-client