This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OKHYmhOz67e_WeQ5Xz8Niop9Ys4.cer File: OKHYmhOz67e_WeQ5Xz8Niop9Ys4.cer (raw, json) Hash identifier: 8jCMwKXW7Qyhpxx9i4bW+82iCp3h3lG20+f+ruqvmyg= Subject key identifier: 38:A1:D8:9A:13:B3:EB:B7:BF:59:E4:39:5F:3F:0D:8A:8A:7D:62:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC88550418D54ED2A770C0C2D209414 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/8fca7f-a9ed-48db-a7e2-3a6fe3ba5c4d/1/OKHYmhOz67e_WeQ5Xz8Niop9Ys4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/8fca7f-a9ed-48db-a7e2-3a6fe3ba5c4d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25539 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:85:50:41:8d:54:ed:2a:77:0c:0c:2d:20:94:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38a1d89a13b3ebb7bf59e4395f3f0d8a8a7d62ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e6:1a:43:c1:e7:8d:d2:b8:55:00:1a:42:20: ca:04:7a:11:99:68:7f:4d:a3:af:08:7e:6e:53:be: 52:5a:29:49:8d:df:ca:6c:64:43:31:7b:03:fc:5e: 08:d5:75:c9:a3:8c:b6:98:06:1f:4a:4e:ff:87:5e: 3b:d6:d6:8c:6e:2f:2e:b7:cf:aa:bc:64:a5:96:b6: c4:ac:1d:c2:1b:7d:91:f6:03:62:02:87:e0:87:c9: 51:36:eb:0d:42:ee:d1:22:03:62:72:da:8f:ed:8c: 04:04:f5:8f:36:4d:b1:49:ac:a9:73:9c:b1:d9:57: 0e:96:d6:a7:f7:e1:05:e3:02:45:3a:03:d2:37:cf: 67:d6:a6:26:16:e9:15:01:b8:c7:8e:3d:46:4a:46: 34:20:63:53:2d:23:54:a4:dd:a2:81:39:ae:e9:38: b8:e6:2a:0e:a9:c3:79:ba:e3:98:cd:4f:84:f7:a3: e4:0a:ba:56:96:a5:1b:60:5b:13:e9:4c:7d:45:e8: ab:c8:61:db:67:34:ab:bc:d9:95:a3:c9:97:56:ac: 5d:1a:54:f5:ac:5e:dd:ac:ac:a9:8a:b1:83:45:c7: 90:17:6f:03:7d:a1:33:39:57:65:8b:3f:00:97:4a: 57:d3:73:f7:50:f2:70:cd:55:34:cf:0d:a8:b9:55: 7e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A1:D8:9A:13:B3:EB:B7:BF:59:E4:39:5F:3F:0D:8A:8A:7D:62:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8fca7f-a9ed-48db-a7e2-3a6fe3ba5c4d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8fca7f-a9ed-48db-a7e2-3a6fe3ba5c4d/1/OKHYmhOz67e_WeQ5Xz8Niop9Ys4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 25539 Signature Algorithm: sha256WithRSAEncryption 73:64:94:4d:bf:66:8f:db:27:61:dc:5a:69:8c:8d:64:04:da: 45:56:12:d7:73:b5:83:77:6e:6d:28:f8:25:bb:8c:aa:3e:33: 57:db:a7:53:84:e7:af:1e:56:72:05:3d:df:30:e5:79:09:a9: 05:62:f5:47:7a:39:f9:c6:c3:b5:1d:9f:7b:51:67:82:d6:88: 16:91:b5:16:53:8b:bd:ad:2b:8f:28:7a:88:66:c1:08:e8:bc: 35:31:dd:70:ed:08:be:17:d2:ee:6b:f1:47:16:5d:6a:2c:35: 6f:c8:97:0c:e2:28:ec:18:8b:57:50:96:6b:15:66:0a:ea:6f: 7a:53:79:db:1c:0f:73:21:27:cf:97:00:b4:87:7d:12:c1:f7: 25:31:2d:0d:1f:72:b6:b0:f3:93:de:c9:98:75:08:3b:0c:10: a9:04:a5:e0:9a:42:dd:d9:26:87:6e:01:b4:80:15:78:37:cc: d6:b4:28:d2:95:64:35:54:b5:9a:a1:7f:6d:f0:86:2b:bb:2f: da:bf:e6:2a:19:4c:72:7a:3f:b1:55:ba:6b:5d:19:c9:bc:4f: e1:8f:29:2b:f4:1b:4a:3b:15:16:2e:94:57:16:63:56:83:be: b2:9f:04:99:76:f9:ef:44:6e:fe:6e:1a:c2:ae:06:1c:ae:e9: d4:9d:fa:ce -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZt6yIVQQY1U7Sp3DAwtIJQUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGExZDg5YTEzYjNlYmI3YmY1OWU0Mzk1ZjNmMGQ4YThhN2Q2MmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+YaQ8HnjdK4VQAaQiDKBHoRmWh/ TaOvCH5uU75SWilJjd/KbGRDMXsD/F4I1XXJo4y2mAYfSk7/h1471taMbi8ut8+q vGSllrbErB3CG32R9gNiAofgh8lRNusNQu7RIgNictqP7YwEBPWPNk2xSaypc5yx 2VcOltan9+EF4wJFOgPSN89n1qYmFukVAbjHjj1GSkY0IGNTLSNUpN2igTmu6Ti4 5ioOqcN5uuOYzU+E96PkCrpWlqUbYFsT6Ux9ReiryGHbZzSrvNmVo8mXVqxdGlT1 rF7drKypirGDRceQF28DfaEzOVdliz8Al0pX03P3UPJwzVU0zw2ouVV+gwIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFDih2JoTs+u3v1nkOV8/DYqKfWLOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzhmY2E3 Zi1hOWVkLTQ4ZGItYTdlMi0zYTZmZTNiYTVjNGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvOGZjYTdm LWE5ZWQtNDhkYi1hN2UyLTNhNmZlM2JhNWM0ZC8xL09LSFltaE96NjdlX1dlUTVY ejhOaW9wOVlzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmPDMA0GCSqGSIb3DQEBCwUAA4IBAQBzZJRNv2aP2ydh 3FppjI1kBNpFVhLXc7WDd25tKPglu4yqPjNX26dThOevHlZyBT3fMOV5CakFYvVH ejn5xsO1HZ97UWeC1ogWkbUWU4u9rSuPKHqIZsEI6Lw1Md1w7Qi+F9Lua/FHFl1q LDVvyJcM4ijsGItXUJZrFWYK6m96U3nbHA9zISfPlwC0h30SwfclMS0NH3K2sPOT 3smYdQg7DBCpBKXgmkLd2SaHbgG0gBV4N8zWtCjSlWQ1VLWaoX9t8IYruy/av+Yq GUxyej+xVbprXRnJvE/hjykr9BtKOxUWLpRXFmNWg76ynwSZdvnvRG7+bhrCrgYc runUnfrO -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:44 2026 by rpki-client