This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OBssWXKaU7hBEqryyhIo80JHo5s.cer File: OBssWXKaU7hBEqryyhIo80JHo5s.cer (raw, json) Hash identifier: pN2f7y0fCp0f3v6ngOS4rORpoh+WDdB+hZ1T6CgxUXA= Subject key identifier: 38:1B:2C:59:72:9A:53:B8:41:12:AA:F2:CA:12:28:F3:42:47:A3:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED0757F5EE8620FEDB42E2364F9FA7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/14917a-4911-4c3b-b2a7-27d5ace0307f/1/OBssWXKaU7hBEqryyhIo80JHo5s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/14917a-4911-4c3b-b2a7-27d5ace0307f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209605 AS: 211872 IP: 141.98.8.0/22 IP: 2a0f:8a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:07:57:f5:ee:86:20:fe:db:42:e2:36:4f:9f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=381b2c59729a53b84112aaf2ca1228f34247a39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bd:09:7b:92:cf:fd:72:e4:34:bc:c1:1d:27: 6a:86:1a:d4:d4:66:a5:19:5f:df:9b:42:54:4b:90: 40:24:61:d6:f7:ab:54:85:82:ff:41:16:22:1a:ee: 4d:4d:bd:79:46:fd:55:46:5c:5b:ad:d7:ef:63:51: 97:7c:88:ef:a3:b0:43:5b:c4:02:b5:5b:70:f1:08: c6:9b:e3:93:47:6d:b1:27:86:eb:a9:b3:53:9c:50: 8f:14:5f:f6:cb:74:ab:2d:4f:39:d9:b7:5e:78:df: 29:a2:3d:22:3e:cf:c3:cf:aa:8c:d5:c5:aa:12:45: d7:d2:41:dc:55:28:e4:7e:4d:25:91:15:33:69:cd: ab:af:14:62:ae:f0:db:3a:03:0e:75:36:5e:2b:9e: c0:e2:8e:3f:7f:fa:91:3b:11:4b:91:31:b5:6a:ce: b1:1a:30:be:9d:cb:2d:11:46:17:11:bf:b3:99:f1: e7:46:0a:ec:41:22:57:b9:d9:2e:c8:26:b2:1a:34: 38:cd:cc:d4:0c:c9:bd:97:f2:54:1e:d4:7f:29:fd: 7a:46:98:a8:89:94:94:92:47:b8:ed:07:e7:b1:c5: dd:f3:9f:b1:10:95:1b:eb:86:2c:b0:93:83:c2:12: d6:39:82:e3:29:aa:3c:0e:b4:83:cf:fd:b1:69:3f: 86:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1B:2C:59:72:9A:53:B8:41:12:AA:F2:CA:12:28:F3:42:47:A3:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/14917a-4911-4c3b-b2a7-27d5ace0307f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/14917a-4911-4c3b-b2a7-27d5ace0307f/1/OBssWXKaU7hBEqryyhIo80JHo5s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.8.0/22 IPv6: 2a0f:8a40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209605 211872 Signature Algorithm: sha256WithRSAEncryption 8d:79:e3:85:98:2a:a8:3c:be:fb:86:07:3e:31:a2:07:4d:88: 2b:43:1b:c0:80:1b:3a:b6:58:e4:e2:34:6d:7a:4d:e0:58:c0: ac:d9:8c:95:44:81:ab:14:25:1f:aa:19:54:41:5d:4f:56:e4: 3b:02:bf:01:37:a0:9a:9b:29:bb:b1:12:92:54:67:4f:1f:6a: 9f:e3:66:76:65:47:94:44:3f:b8:e7:e9:95:6f:13:03:3a:5f: 6f:cd:43:1e:7b:98:a7:5d:2b:2f:4f:b3:9d:c2:63:4c:c6:80: 3f:3c:4b:05:e6:28:81:62:0b:e1:5a:0f:4e:87:0c:2f:57:b1: b9:b0:b8:cc:ec:8d:49:be:2f:2d:d9:ce:c0:57:f9:d2:99:4f: 4a:fa:b6:c0:49:01:8d:8e:b6:59:56:33:43:50:de:9e:42:a8: b0:92:88:f6:6b:63:cb:a8:83:06:b2:72:08:7b:bc:14:77:8b: 17:0a:9d:c2:e3:d7:a9:29:50:84:b9:ba:0d:49:c8:89:32:be: 81:8c:d3:39:3a:f0:f6:75:eb:37:a0:21:9d:c2:f1:51:2f:8e: f7:7e:6c:37:c0:fc:23:9a:76:67:f3:a3:df:9a:15:fc:2a:7c: 2b:54:5b:8e:ee:38:70:c5:3f:5c:26:9f:16:cb:d5:e5:d1:4f: 3e:ed:24:4f -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt57QdX9e6GIP7bQuI2T5+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODFiMmM1OTcyOWE1M2I4NDExMmFhZjJjYTEyMjhmMzQyNDdhMzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5b0Je5LP/XLkNLzBHSdqhhrU1Gal GV/fm0JUS5BAJGHW96tUhYL/QRYiGu5NTb15Rv1VRlxbrdfvY1GXfIjvo7BDW8QC tVtw8QjGm+OTR22xJ4brqbNTnFCPFF/2y3SrLU852bdeeN8poj0iPs/Dz6qM1cWq EkXX0kHcVSjkfk0lkRUzac2rrxRirvDbOgMOdTZeK57A4o4/f/qROxFLkTG1as6x GjC+ncstEUYXEb+zmfHnRgrsQSJXudkuyCayGjQ4zczUDMm9l/JUHtR/Kf16Rpio iZSUkke47QfnscXd85+xEJUb64YssJODwhLWOYLjKao8DrSDz/2xaT+GfQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFDgbLFlymlO4QRKq8soSKPNCR6ObMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzE0OTE3 YS00OTExLTRjM2ItYjJhNy0yN2Q1YWNlMDMwN2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMTQ5MTdh LTQ5MTEtNGMzYi1iMmE3LTI3ZDVhY2UwMzA3Zi8xL09Cc3NXWEthVTdoQkVxcnl5 aElvODBKSG81cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCjWIIMA0EAgACMAcDBQMqD4pAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMyxQIDAzugMA0GCSqGSIb3DQEBCwUAA4IBAQCNeeOF mCqoPL77hgc+MaIHTYgrQxvAgBs6tljk4jRtek3gWMCs2YyVRIGrFCUfqhlUQV1P VuQ7Ar8BN6Camym7sRKSVGdPH2qf42Z2ZUeURD+45+mVbxMDOl9vzUMee5inXSsv T7OdwmNMxoA/PEsF5iiBYgvhWg9OhwwvV7G5sLjM7I1Jvi8t2c7AV/nSmU9K+rbA SQGNjrZZVjNDUN6eQqiwkoj2a2PLqIMGsnIIe7wUd4sXCp3C49epKVCEuboNSciJ Mr6BjNM5OvD2des3oCGdwvFRL473fmw3wPwjmnZn86PfmhX8KnwrVFuO7jhwxT9c Jp8Wy9Xl0U8+7SRP -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:01 2026 by rpki-client