This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer File: OCxntKtK-G_mHqjG4X0R4-BdClE.cer (raw, json) Hash identifier: Wp3oGDEfLTcWaikKCo1N+cafcNSM4nCqx5xVEAPZ2Us= Subject key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791123020CDBA8250F0E132C0EDE6631 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41743 IP: 176.115.136.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:23:02:0c:db:a8:25:0f:0e:13:2c:0e:de:66:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:46:98:56:80:94:f3:c5:93:1a:11:c0:50:5c: 1a:ba:b9:fc:27:14:41:f2:1e:f4:f8:5c:da:d8:9a: 8f:4d:52:b1:aa:a9:d5:5e:ac:a2:ba:08:ca:7b:ee: 66:90:66:c3:db:42:5c:73:f2:61:6f:c5:80:c6:fe: 57:5d:80:7f:dd:d3:bc:0d:85:ef:25:5c:5a:07:f8: 2f:d1:de:d9:7c:e1:a8:b9:98:1c:e9:45:09:7c:56: 00:0a:85:63:0d:b8:04:ae:7e:c8:1a:a2:98:e4:70: 01:bf:8a:78:32:22:f9:8e:cc:93:88:45:0b:8d:1e: 8b:01:23:8a:d8:3a:05:15:20:6a:b8:57:55:f2:8f: 48:74:f3:c6:37:46:97:85:b5:06:bd:90:97:10:76: 65:f5:a0:4d:b3:31:71:e3:8c:aa:e1:8e:26:67:4a: ae:0c:d8:13:7a:66:ab:7f:7b:71:0e:2a:70:d3:98: 4b:fa:f3:05:6f:6e:c9:85:31:cb:6b:6d:65:96:1a: e1:a7:fd:ff:f4:9a:42:48:77:57:d3:a5:ab:7f:ce: 8d:5e:cd:70:94:c4:c1:bf:e2:39:92:ff:f8:ef:62: a0:4b:15:70:0b:63:c9:32:63:8c:e5:2f:dd:e3:40: 4c:9b:b7:43:53:6b:99:fa:c9:52:f9:0e:57:29:a9: 0e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.115.136.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41743 Signature Algorithm: sha256WithRSAEncryption 7b:ea:97:72:2c:e1:1c:3d:7a:f4:69:87:7d:de:cf:77:b9:c8: b3:9e:c4:be:a4:99:cf:15:32:9b:34:99:de:26:56:e9:3b:a5: 82:72:4f:7e:f1:58:52:43:e3:32:c8:7f:9f:e0:ef:d6:c6:8f: f7:02:59:a0:6a:84:f2:8c:ae:71:f1:b1:80:61:6a:43:89:f0: f9:25:d0:d5:d2:d3:12:5a:b5:36:49:c8:6e:5a:6e:6c:d3:04: d8:14:8a:98:16:f6:0f:29:ed:dc:d8:1b:d9:a9:7e:87:87:35: e5:a2:58:19:d6:92:41:c5:c4:2e:27:c4:df:e0:37:ab:33:d5: 9e:51:0d:53:e5:86:c7:42:f1:4b:29:8e:59:db:17:4b:ad:c3: 89:79:81:1e:8a:66:13:43:8c:08:f7:a8:c8:5f:f6:6a:68:ce: 3e:8f:36:63:c1:da:fb:03:ed:31:dd:94:cb:cc:85:79:8c:30: 80:1c:40:da:33:ad:37:1f:af:45:16:dd:15:b9:7a:b8:0a:02: 4e:d9:c6:a7:ee:1d:12:f5:87:bc:21:9f:11:61:83:9f:7f:9b: f7:d7:81:00:17:a7:3e:88:d7:51:af:5f:43:69:83:bd:f9:26: 27:15:85:78:72:dc:7b:f0:e8:f0:38:b8:0c:cf:a9:ca:b3:4d: 6b:4c:f3:18 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5ESMCDNuoJQ8OEywO3mYxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODJjNjdiNGFiNGFmODZmZTYxZWE4YzZlMTdkMTFlM2UwNWQwYTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEaYVoCU88WTGhHAUFwaurn8JxRB 8h70+Fza2JqPTVKxqqnVXqyiugjKe+5mkGbD20Jcc/Jhb8WAxv5XXYB/3dO8DYXv JVxaB/gv0d7ZfOGouZgc6UUJfFYACoVjDbgErn7IGqKY5HABv4p4MiL5jsyTiEUL jR6LASOK2DoFFSBquFdV8o9IdPPGN0aXhbUGvZCXEHZl9aBNszFx44yq4Y4mZ0qu DNgTemarf3txDipw05hL+vMFb27JhTHLa21llhrhp/3/9JpCSHdX06Wrf86NXs1w lMTBv+I5kv/472KgSxVwC2PJMmOM5S/d40BMm7dDU2uZ+slS+Q5XKakOjQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDgsZ7SrSvhv5h6oxuF9EePgXQpRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjLzBjNjcx Ni0xNzE1LTQzMjAtYWEyNS0yNzk5MDZlYjVjODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvMGM2NzE2 LTE3MTUtNDMyMC1hYTI1LTI3OTkwNmViNWM4NS8xL09DeG50S3RLLUdfbUhxakc0 WDBSNC1CZENsRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDsHOIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCjDzANBgkqhkiG9w0BAQsFAAOCAQEAe+qXcizhHD169GmHfd7Pd7nIs57EvqSZ zxUymzSZ3iZW6TulgnJPfvFYUkPjMsh/n+Dv1saP9wJZoGqE8oyucfGxgGFqQ4nw +SXQ1dLTElq1NknIblpubNME2BSKmBb2Dynt3Ngb2al+h4c15aJYGdaSQcXELifE 3+A3qzPVnlENU+WGx0LxSymOWdsXS63DiXmBHopmE0OMCPeoyF/2amjOPo82Y8Ha +wPtMd2Uy8yFeYwwgBxA2jOtNx+vRRbdFbl6uAoCTtnGp+4dEvWHvCGfEWGDn3+b 99eBABenPojXUa9fQ2mDvfkmJxWFeHLce/Do8Di4DM+pyrNNa0zzGA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:36 2026 by rpki-client