This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer File: OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer (raw, json) Hash identifier: NFziJpCvOf/XObcRDzEfBrabuAqC9dCzrKeJ00soSvM= Subject key identifier: 38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79108104129FF224794C0A9881A77D20 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 176.110.105.0/24 IP: 188.127.252.0/24 IP: 192.33.163.0/24 IP: 192.35.205.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:81:04:12:9f:f2:24:79:4c:0a:98:81:a7:7d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:01:bc:66:e9:aa:55:21:ab:c0:09:26:e2:76: 80:ad:f8:36:56:d3:ff:37:fd:71:3c:db:cb:f6:2f: fd:4e:e6:66:74:5a:45:c2:13:f7:60:6f:2f:9f:d1: f9:ec:1a:63:af:94:89:1f:bb:01:8a:46:9d:96:35: 0c:d3:89:17:cc:82:45:0b:52:af:98:3d:68:84:9a: 4c:fc:4e:f9:f3:eb:b1:c8:0a:af:d3:34:27:56:d5: b3:e7:34:99:a4:e8:89:c2:b7:c4:a2:7e:e4:6d:85: 61:89:c3:8c:2b:ab:cf:a1:32:be:14:8a:f0:27:86: ff:b0:a5:6c:20:6e:92:7a:2e:6e:69:39:ca:74:e4: 97:2c:93:ba:e3:df:8c:37:74:15:a0:44:2b:38:bb: a2:fc:ed:25:76:71:4d:46:03:37:ed:9c:4f:ee:08: 7a:47:86:89:6f:a0:62:bf:ed:90:75:19:bf:6d:f0: 9f:f9:f7:ce:81:6f:22:b0:ba:fc:05:bb:46:b6:c2: d3:84:a8:1a:79:8a:3d:25:1f:7b:8e:71:92:ca:0e: 97:41:ad:28:81:09:16:59:cb:8b:51:a2:7b:09:9c: 0b:dd:62:d3:23:fd:08:91:97:43:e0:13:5a:f7:35: 8d:2f:d5:98:5e:e4:82:5a:bb:b9:6b:11:ea:65:be: a9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.110.105.0/24 188.127.252.0/24 192.33.163.0/24 192.35.205.0/24 Signature Algorithm: sha256WithRSAEncryption b0:8c:0a:02:bf:7b:12:f1:65:08:fb:6b:ec:8e:af:9b:49:6a: 62:61:fc:8e:bb:f3:83:56:30:d1:07:2a:57:21:66:97:f1:4d: 09:29:48:09:cd:63:e2:93:2d:7a:fe:72:88:22:76:6c:5b:7f: 0f:0a:14:fb:99:cb:de:ce:b3:d8:b5:f2:d5:06:26:82:2b:04: cd:8d:51:ef:f0:d8:be:1d:6d:0c:58:39:ff:46:e8:b3:85:d0: e8:28:bb:72:5f:6c:5d:e5:2f:94:32:f2:e9:4c:b3:a6:ef:71: f5:6c:30:7b:80:71:d3:0c:da:0a:d8:d6:43:82:84:00:ff:d6: 88:bf:70:13:40:2e:d8:d3:fa:35:84:29:1e:fd:cd:fb:7d:05: ed:f4:3b:49:50:8e:7e:02:c2:97:bf:75:36:d8:69:57:30:83: 17:b1:a5:87:d7:db:a4:e6:7f:82:97:66:b3:ad:f6:7d:51:c5: 3c:ea:63:0c:71:21:92:a8:f8:41:92:f8:0a:f2:0c:b3:69:50: 9a:c9:56:2b:c7:6e:7e:1f:32:af:cc:b5:0f:a3:d9:74:5c:69: f8:61:02:48:65:e5:94:37:af:fc:f6:6d:0a:67:cf:94:e5:99: 3b:c3:11:b7:58:7e:1a:9f:a3:b5:ff:f8:5c:7f:50:d8:d7:f3: d5:e0:13:9b -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZt5EIEEEp/yJHlMCpiBp30gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGEwYzg4MjZjMThiY2Q1MTNhYWE3ZTUyMDgxZmY5ZmQzNzkxOWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQG8ZumqVSGrwAkm4naArfg2VtP/ N/1xPNvL9i/9TuZmdFpFwhP3YG8vn9H57Bpjr5SJH7sBikadljUM04kXzIJFC1Kv mD1ohJpM/E758+uxyAqv0zQnVtWz5zSZpOiJwrfEon7kbYVhicOMK6vPoTK+FIrw J4b/sKVsIG6Sei5uaTnKdOSXLJO649+MN3QVoEQrOLui/O0ldnFNRgM37ZxP7gh6 R4aJb6Biv+2QdRm/bfCf+ffOgW8isLr8BbtGtsLThKgaeYo9JR97jnGSyg6XQa0o gQkWWcuLUaJ7CZwL3WLTI/0IkZdD4BNa9zWNL9WYXuSCWru5axHqZb6pfwIDAQAB o4ICljCCApIwHQYDVR0OBBYEFDigyIJsGLzVE6qn5SCB/5/TeRn7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmLzI5NjM4 Yi0xMmNhLTQ5ZWYtOTRlOS0wNTAyYTZhNTRhYWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvMjk2Mzhi LTEyY2EtNDllZi05NGU5LTA1MDJhNmE1NGFhYi8xL09LRElnbXdZdk5VVHFxZmxJ SUhfbjlONUdmcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQAsG5pAwQAvH/8AwQAwCGjAwQAwCPNMA0GCSqG SIb3DQEBCwUAA4IBAQCwjAoCv3sS8WUI+2vsjq+bSWpiYfyOu/ODVjDRBypXIWaX 8U0JKUgJzWPiky16/nKIInZsW38PChT7mcvezrPYtfLVBiaCKwTNjVHv8Ni+HW0M WDn/RuizhdDoKLtyX2xd5S+UMvLpTLOm73H1bDB7gHHTDNoK2NZDgoQA/9aIv3AT QC7Y0/o1hCke/c37fQXt9DtJUI5+AsKXv3U22GlXMIMXsaWH19uk5n+Cl2azrfZ9 UcU86mMMcSGSqPhBkvgK8gyzaVCayVYrx25+HzKvzLUPo9l0XGn4YQJIZeWUN6/8 9m0KZ8+U5Zk7wxG3WH4an6O1//hcf1DY1/PV4BOb -----END CERTIFICATE-----Generated at Tue Feb 10 05:31:29 2026 by rpki-client