This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer File: OBgMB0--WYgkxwAxlbMKpKNmFSw.cer (raw, json) Hash identifier: pv/o5Qr2+eTZrkpfNR30vVGyUsL8qVWe7P5yrkEwbCY= Subject key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C127B4D078F6AF7BC18A2652827C198 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20682 IP: 91.235.248.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:7b:4d:07:8f:6a:f7:bc:18:a2:65:28:27:c1:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38180c074fbe598824c7003195b30aa4a366152c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5d:7f:37:f6:2c:f6:70:79:a2:3f:57:ae:74: 1c:bf:bd:b2:61:89:7c:81:92:1b:d1:c1:c5:23:68: d6:dc:44:34:ab:cf:dc:c6:8c:fa:2d:61:56:6e:f3: e5:19:6f:71:94:96:de:17:16:79:79:a2:dc:a8:83: 84:85:08:f9:62:8c:cd:47:65:33:2e:6e:82:b0:4d: eb:5d:2d:aa:81:0c:d6:74:e8:1a:06:34:e8:5f:a6: b0:de:d0:28:e4:ce:86:91:ee:f2:76:1a:b2:ce:c5: 9b:33:49:3b:bb:de:29:07:da:ce:87:bb:58:d3:7d: ad:83:33:a4:dd:55:00:46:87:03:53:b0:53:24:b3: 9a:98:10:9d:7a:d4:d1:d8:84:a1:ed:8d:29:d2:7d: 01:0f:38:19:1a:e3:7c:24:f8:d8:90:47:b9:e2:95: 34:d7:cf:11:ee:87:f9:b6:79:e2:58:01:e4:b2:31: 2c:5d:f1:f2:b1:9d:6f:0c:c3:84:c3:32:ca:a3:89: 7a:ab:13:e1:92:a9:4f:08:0a:53:56:5c:d5:41:e5: 3b:e6:61:45:14:ff:de:b4:2d:90:57:54:c3:22:58: b6:42:5c:c3:08:d6:f0:3a:7d:13:5f:00:92:fe:15: 1b:fe:48:f9:e4:9c:a7:de:a4:e0:a7:75:30:ce:bb: e2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.248.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20682 Signature Algorithm: sha256WithRSAEncryption 2a:0d:eb:ef:c6:89:9a:76:6a:1e:b5:7e:44:cb:38:5b:9d:56: b7:f5:62:5e:3d:a3:d7:6a:f2:6d:1f:3a:08:5f:c6:60:f7:c0: 7c:49:64:da:82:dc:10:65:fe:2e:62:5f:1e:1d:a0:a2:09:6a: df:21:ae:ec:d1:82:68:9d:20:02:cf:88:bb:0e:c0:98:fa:a3: fc:9d:45:6c:6c:93:3c:b0:f5:4e:e7:fe:ba:4e:6e:d4:6c:56: 54:84:c1:53:e0:4c:e7:51:45:7f:92:79:c4:ab:ae:cd:b3:ea: b5:74:6d:5f:ba:14:0f:74:db:48:6c:23:78:23:5b:0e:39:6c: b0:b4:c5:cd:f4:27:7a:18:5a:aa:de:75:1b:42:20:db:c3:56: 3d:ed:fe:5b:9c:94:7d:57:ae:dc:d8:9f:9c:3e:6d:26:63:cd: 6d:98:65:24:d2:41:ba:4c:66:4f:a6:25:98:4c:9e:a2:d9:7a: 1f:15:7d:53:4d:e8:fe:0d:e1:b8:aa:32:57:98:46:21:7f:bd: 79:32:e3:5e:0e:9b:9d:0b:79:03:bc:f9:90:f9:0d:3c:4c:41: 67:85:94:3b:a9:07:05:87:b7:3e:14:14:3a:8d:84:fa:42:b2: 99:ae:8f:40:e8:50:52:83:08:3c:fe:9d:dd:58:c6:b3:8a:7b: 13:7a:b5:7b -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt8EntNB49q97wYomUoJ8GYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODE4MGMwNzRmYmU1OTg4MjRjNzAwMzE5NWIzMGFhNGEzNjYxNTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp11/N/Ys9nB5oj9XrnQcv72yYYl8 gZIb0cHFI2jW3EQ0q8/cxoz6LWFWbvPlGW9xlJbeFxZ5eaLcqIOEhQj5YozNR2Uz Lm6CsE3rXS2qgQzWdOgaBjToX6aw3tAo5M6Gke7ydhqyzsWbM0k7u94pB9rOh7tY 032tgzOk3VUARocDU7BTJLOamBCdetTR2ISh7Y0p0n0BDzgZGuN8JPjYkEe54pU0 188R7of5tnniWAHksjEsXfHysZ1vDMOEwzLKo4l6qxPhkqlPCApTVlzVQeU75mFF FP/etC2QV1TDIli2QlzDCNbwOn0TXwCS/hUb/kj55Jyn3qTgp3UwzrvicQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFDgYDAdPvlmIJMcAMZWzCqSjZhUsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzIzOWVj Ny03ZDJjLTQyZTUtYjQ5YS0yZjllOTNhNjVjMDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvMjM5ZWM3 LTdkMmMtNDJlNS1iNDlhLTJmOWU5M2E2NWMwOC8xL09CZ01CMC0tV1lna3h3QXhs Yk1LcEtObUZTdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW+v4MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AlDKMA0GCSqGSIb3DQEBCwUAA4IBAQAqDevvxomadmoetX5EyzhbnVa39WJePaPX avJtHzoIX8Zg98B8SWTagtwQZf4uYl8eHaCiCWrfIa7s0YJonSACz4i7DsCY+qP8 nUVsbJM8sPVO5/66Tm7UbFZUhMFT4EznUUV/knnEq67Ns+q1dG1fuhQPdNtIbCN4 I1sOOWywtMXN9Cd6GFqq3nUbQiDbw1Y97f5bnJR9V67c2J+cPm0mY81tmGUk0kG6 TGZPpiWYTJ6i2XofFX1TTej+DeG4qjJXmEYhf715MuNeDpudC3kDvPmQ+Q08TEFn hZQ7qQcFh7c+FBQ6jYT6QrKZro9A6FBSgwg8/p3dWMazinsTerV7 -----END CERTIFICATE-----Generated at Mon Feb 9 20:49:58 2026 by rpki-client