This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer File: ODQP9mmjrcnWaWE1yNcfbfXqwns.cer (raw, json) Hash identifier: 0EXpZV/lzTBCtIZGy5+nv37RWMh0DJ8J3rEDH8TWYlg= Subject key identifier: 38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B357D809D9CE89DAB628A29A8DAF36C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.183.244.0/22 IP: 2a0e:2a00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:7d:80:9d:9c:e8:9d:ab:62:8a:29:a8:da:f3:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38340ff669a3adc9d6696135c8d71f6df5eac27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:01:d7:01:0b:eb:4b:f6:80:34:85:d1:62:0d: db:c8:18:8f:95:97:7a:3a:26:30:54:62:ef:a0:0b: ea:0b:28:ab:63:62:90:26:2e:3c:07:45:6c:df:e9: c7:cc:bf:2b:df:aa:68:44:ee:d3:68:cf:d3:7d:f3: 33:43:71:43:1b:76:81:33:ea:f7:71:5e:06:f0:66: 1a:9e:a0:1b:72:98:71:95:6d:0a:23:d8:18:28:fd: e4:e9:0d:21:27:75:9e:78:da:04:ba:53:1d:db:d4: 64:46:15:68:38:57:91:f4:b1:64:9f:d2:e6:51:cc: 5d:b9:0e:f6:73:6d:46:11:44:06:80:42:0d:4a:e6: 85:01:96:19:b3:89:a4:d9:4f:de:de:bb:49:c2:6b: 6c:86:9c:1c:e5:b8:c5:ab:80:b9:ff:9c:3f:14:8b: 0d:a7:a2:1a:23:43:c0:46:ad:ee:ca:17:a4:03:d1: 8c:54:cf:33:41:7d:84:40:de:40:c1:36:fb:0b:84: 5a:b7:a3:ca:48:53:a3:c6:4c:1f:40:43:80:65:5d: 25:c6:c2:24:3b:c1:85:6d:ea:21:22:7b:c1:28:c6: 0c:89:a8:c9:5d:90:2a:02:0c:f6:43:d0:4f:60:bc: e0:a4:f6:9d:78:46:83:40:a6:10:61:81:c7:6e:54: 22:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.244.0/22 IPv6: 2a0e:2a00::/29 Signature Algorithm: sha256WithRSAEncryption 2f:ad:dd:ce:fd:bf:79:32:70:57:63:30:d5:ea:57:b8:ca:77: cc:91:dc:77:e7:a8:d2:73:a7:32:bf:12:5f:5e:57:dd:10:55: 25:46:8d:85:e9:d9:42:4f:75:88:80:5c:99:ec:20:d7:ef:86: 76:b9:ef:55:1e:21:c6:88:c2:6b:89:c2:81:8d:e1:5b:e0:7d: 04:6f:19:29:88:42:a4:03:36:16:56:a7:06:58:eb:55:56:3e: dc:1b:b3:d6:2d:a5:0c:62:15:c1:06:dd:cc:42:21:4c:c6:ea: 4c:80:64:27:6e:14:61:5d:57:92:2e:cf:dd:2c:cc:2e:aa:59: 96:14:55:18:f8:79:76:c2:0a:e3:58:0d:1d:9b:10:95:c0:9d: a9:48:0e:80:aa:44:c7:7c:26:ab:b9:f0:aa:d0:be:34:f1:f4: 2b:b2:e9:ea:a9:58:e2:ff:6d:fc:68:6d:76:56:5a:ae:6f:b0: f2:4c:6d:95:b9:7c:da:ba:23:6a:bb:ee:90:ea:ae:ec:89:2d: b7:22:98:fb:46:89:3a:eb:3d:47:ef:f4:6e:f5:bc:b6:4a:c4: ae:27:a4:89:2c:f7:5f:34:61:27:cf:d9:95:c9:24:40:ba:10: 40:09:ef:60:4c:d2:75:ef:cd:ac:c6:07:04:2d:61:c6:87:68: af:54:7c:a9 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7NX2AnZzonatiiimo2vNsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODM0MGZmNjY5YTNhZGM5ZDY2OTYxMzVjOGQ3MWY2ZGY1ZWFjMjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gHXAQvrS/aANIXRYg3byBiPlZd6 OiYwVGLvoAvqCyirY2KQJi48B0Vs3+nHzL8r36poRO7TaM/TffMzQ3FDG3aBM+r3 cV4G8GYanqAbcphxlW0KI9gYKP3k6Q0hJ3WeeNoEulMd29RkRhVoOFeR9LFkn9Lm UcxduQ72c21GEUQGgEINSuaFAZYZs4mk2U/e3rtJwmtshpwc5bjFq4C5/5w/FIsN p6IaI0PARq3uyhekA9GMVM8zQX2EQN5AwTb7C4Rat6PKSFOjxkwfQEOAZV0lxsIk O8GFbeohInvBKMYMiajJXZAqAgz2Q9BPYLzgpPadeEaDQKYQYYHHblQifQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDg0D/Zpo63J1mlhNcjXH2316sJ7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkL2Y0Y2U4 OS04YTE2LTRhZjUtYjU3Yy0yODQ2ZWFhZGRlNjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvZjRjZTg5 LThhMTYtNGFmNS1iNTdjLTI4NDZlYWFkZGU2Ny8xL09EUVA5bW1qcmNuV2FXRTF5 TmNmYmZYcXducy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCBbf0MA0EAgACMAcDBQMqDioAMA0GCSqGSIb3 DQEBCwUAA4IBAQAvrd3O/b95MnBXYzDV6le4ynfMkdx356jSc6cyvxJfXlfdEFUl Ro2F6dlCT3WIgFyZ7CDX74Z2ue9VHiHGiMJricKBjeFb4H0EbxkpiEKkAzYWVqcG WOtVVj7cG7PWLaUMYhXBBt3MQiFMxupMgGQnbhRhXVeSLs/dLMwuqlmWFFUY+Hl2 wgrjWA0dmxCVwJ2pSA6AqkTHfCarufCq0L408fQrsunqqVji/238aG12Vlqub7Dy TG2VuXzauiNqu+6Q6q7siS23Ipj7Rok66z1H7/Ru9by2SsSuJ6SJLPdfNGEnz9mV ySRAuhBACe9gTNJ1782sxgcELWHGh2ivVHyp -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:35 2026 by rpki-client