This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer File: OQJ3OPl4_tokqdh7DLi7mqevVA0.cer (raw, json) Hash identifier: z+EZz/NF49P7HQpR3JdPUtlYDtsN0qxrsC3u7AvfDLA= Subject key identifier: 39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F156AF0AFC8AB894F51768366A9E6E1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58233 AS: 202207 IP: 5.56.160.0/21 IP: 5.181.44.0/22 IP: 185.5.124.0/22 IP: 2a03:1c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6a:f0:af:c8:ab:89:4f:51:76:83:66:a9:e6:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39027738f978feda24a9d87b0cb8bb9aa7af540d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8c:d5:b0:07:37:58:1b:75:63:0d:dc:3a:8e: 91:f2:f2:ea:fd:6c:69:e8:09:fa:6e:94:79:bc:d1: 4e:37:52:1a:34:96:2c:53:3c:a0:61:09:b2:37:67: 72:42:a9:d5:30:0f:fa:c7:02:02:55:79:f8:19:16: 2f:84:ca:7f:33:1f:ae:72:9f:bf:73:96:6e:42:37: 77:fa:fc:60:82:35:22:76:ed:ec:e3:3d:db:cc:39: 47:5b:f7:0d:1b:a5:71:76:a0:19:26:44:71:11:c0: 16:49:80:d9:2b:f9:cb:f3:ba:67:46:ce:54:c8:c8: 96:5c:89:9a:43:20:96:a4:ba:df:ec:d4:05:9a:18: c3:36:92:d7:b5:72:bf:9b:77:af:d3:bb:51:b5:22: 47:e2:ea:f4:e4:20:79:d3:a7:c6:ef:f6:67:30:2d: b9:6b:55:81:a8:07:73:ac:4b:17:a6:58:85:91:97: d9:fa:17:58:6b:db:1e:5d:85:a0:3f:14:b7:68:68: 67:2d:8c:6b:99:03:9c:a7:fc:37:78:3c:67:ca:ec: 9d:48:1d:b2:5f:a8:b3:05:5c:00:80:d6:45:a5:6a: cc:93:b2:c5:1a:dc:cc:72:ff:ea:bf:d7:e9:05:0d: 8e:d5:64:d7:2a:65:7c:a3:f1:cf:54:ba:e1:f6:09: f8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.160.0/21 5.181.44.0/22 185.5.124.0/22 IPv6: 2a03:1c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58233 202207 Signature Algorithm: sha256WithRSAEncryption 3f:80:e0:67:fa:95:dd:df:68:78:0b:d2:04:09:f1:c2:85:7a: b0:59:cf:b8:71:8e:8b:81:27:08:42:94:95:5d:25:3e:d6:43: dc:c0:39:03:ef:5c:d0:a2:09:f9:4f:a2:08:bc:0b:05:11:62: de:bd:a7:56:85:94:38:17:1d:9f:78:9d:8d:b4:e4:b3:1a:20: 09:e4:1b:39:6a:85:25:c9:9e:64:21:ed:86:1c:25:f0:7a:dd: a2:6f:a2:cc:38:69:d9:2d:5a:bb:4e:5d:db:52:f4:f0:38:52: 95:fc:da:60:93:f2:57:c4:8d:91:23:56:3c:bb:3d:1d:47:a5: 67:1d:d7:b8:ec:ec:78:3b:6a:40:73:4b:3a:69:32:aa:60:d9: f2:ec:9c:1b:3f:cb:6d:a7:8b:6e:e4:32:d7:eb:b4:27:26:b5: cd:77:85:bb:f8:5c:46:a8:61:61:89:3e:9b:4d:42:c3:4e:62: d1:41:2e:d8:6c:fb:c0:b2:5e:d0:6f:4a:c5:1a:27:03:e8:b2: 4d:43:78:54:ed:b7:d8:51:7f:31:8c:db:4e:6f:23:a7:d7:65: 27:64:53:6d:75:99:f8:aa:bc:f2:72:89:da:4d:b9:59:50:be: cc:99:e2:35:92:25:b3:52:5a:a9:75:fa:29:91:81:9f:f5:65: ac:cb:ab:8a -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt/FWrwr8iriU9RdoNmqebhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTAyNzczOGY5NzhmZWRhMjRhOWQ4N2IwY2I4YmI5YWE3YWY1NDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYzVsAc3WBt1Yw3cOo6R8vLq/Wxp 6An6bpR5vNFON1IaNJYsUzygYQmyN2dyQqnVMA/6xwICVXn4GRYvhMp/Mx+ucp+/ c5ZuQjd3+vxggjUidu3s4z3bzDlHW/cNG6VxdqAZJkRxEcAWSYDZK/nL87pnRs5U yMiWXImaQyCWpLrf7NQFmhjDNpLXtXK/m3ev07tRtSJH4ur05CB506fG7/ZnMC25 a1WBqAdzrEsXpliFkZfZ+hdYa9seXYWgPxS3aGhnLYxrmQOcp/w3eDxnyuydSB2y X6izBVwAgNZFpWrMk7LFGtzMcv/qv9fpBQ2O1WTXKmV8o/HPVLrh9gn49QIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFDkCdzj5eP7aJKnYewy4u5qnr1QNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2L2I5MTE3 Yy01MWM1LTRhZjgtYmJlZi1mNWQ4YWI3YzE1ZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvYjkxMTdj LTUxYzUtNGFmOC1iYmVmLWY1ZDhhYjdjMTVmMC8xL09RSjNPUGw0X3Rva3FkaDdE TGk3bXFldlZBMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDBTigAwQCBbUsAwQCuQV8MA0EAgACMAcDBQAq AwHAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDjeQIDAxXfMA0GCSqGSIb3DQEB CwUAA4IBAQA/gOBn+pXd32h4C9IECfHChXqwWc+4cY6LgScIQpSVXSU+1kPcwDkD 71zQogn5T6IIvAsFEWLevadWhZQ4Fx2feJ2NtOSzGiAJ5Bs5aoUlyZ5kIe2GHCXw et2ib6LMOGnZLVq7Tl3bUvTwOFKV/Npgk/JXxI2RI1Y8uz0dR6VnHde47Ox4O2pA c0s6aTKqYNny7JwbP8ttp4tu5DLX67QnJrXNd4W7+FxGqGFhiT6bTULDTmLRQS7Y bPvAsl7Qb0rFGicD6LJNQ3hU7bfYUX8xjNtObyOn12UnZFNtdZn4qrzyconaTblZ UL7MmeI1kiWzUlqpdfopkYGf9WWsy6uK -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:50 2026 by rpki-client