This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer File: OR8g8mqm1jWY_zAlzdvbS5yatn0.cer (raw, json) Hash identifier: FueZ+oU4pefX25v17T4F8nk8snbQAIapSXeV6X9e3ZA= Subject key identifier: 39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C2DF484ECE8DCE18A3A9E0DA57A3A8027 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 05 Feb 2026 13:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215685 IP: 2001:678:a90::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2d:f4:84:ec:e8:dc:e1:8a:3a:9e:0d:a5:7a:3a:80:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 5 13:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bc:f6:0e:75:9b:fd:a9:8c:84:d8:40:d9:7e: b0:0b:80:3b:9c:53:8e:d3:03:c2:23:8a:e5:ea:be: 3f:58:fd:27:4b:56:cf:79:2f:d1:0d:8c:b9:68:1d: 7f:3b:97:cb:8c:f9:bc:48:3d:83:22:85:a7:66:de: f0:b8:02:8e:46:5e:fa:1e:96:3e:d6:3f:6b:c7:2e: e6:62:11:3d:48:df:4b:c9:32:c8:e7:49:d6:85:77: b6:05:8e:ba:84:22:0e:54:e0:3b:b5:8c:57:af:ae: 1a:cc:6e:ce:3c:8d:97:3c:e2:89:c3:46:37:8d:27: bb:41:57:ee:3c:06:75:08:ad:d1:bb:65:80:6a:68: 7c:da:04:c9:f1:8d:03:5b:59:3e:e8:f9:bf:c5:c5: f4:73:76:38:56:45:a4:c3:31:c2:d5:1a:cb:0f:62: 21:31:42:0d:42:36:17:57:6e:7b:41:58:9d:42:30: 21:66:69:12:e1:8e:ce:30:6b:54:e9:16:44:a0:c4: 8c:d0:2e:7f:40:29:7f:1e:80:ee:ca:70:52:38:0c: bb:db:de:8b:d2:37:39:45:ca:b1:a7:5c:e9:4e:d1: e5:07:a9:06:15:11:2b:eb:3c:62:4c:9d:8a:0c:47: 61:ea:52:27:6b:a1:3e:5e:9b:82:68:44:9e:52:b6: f6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:a90::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215685 Signature Algorithm: sha256WithRSAEncryption 84:42:94:8b:a1:78:da:2f:91:11:ca:81:e2:5f:ce:2c:39:68: a2:2e:b2:87:18:7c:61:d6:12:3c:ee:9e:eb:89:27:ed:2d:e7: 94:45:60:96:a3:f3:1a:12:5e:58:4a:26:c5:e7:a6:f7:ac:57: 39:ef:30:15:74:6e:01:92:54:f7:88:6f:14:0b:e4:34:1c:86: e1:f6:6f:9c:6a:46:af:f9:9d:a7:15:39:28:d1:08:e5:16:5b: ba:95:af:9c:6e:7c:4d:bd:83:e1:df:b0:4c:a2:74:f1:1a:05: 1d:af:6a:b0:2c:6b:7b:f1:7b:4e:7d:e0:cf:8b:00:ff:a2:7c: 7f:dc:af:8c:be:ab:1e:18:67:a7:cf:6f:9c:a8:f7:77:bf:be: 2e:47:4d:4c:6e:9a:84:00:46:90:23:86:53:a5:29:20:16:c1: a8:2a:69:28:dd:57:6c:45:91:2e:05:72:72:5e:2f:f1:8e:59: 5a:b3:6c:89:0d:14:93:de:be:42:5f:af:5b:89:eb:e4:f3:6f: 88:76:de:cf:fe:c9:d1:63:0b:57:9d:77:19:b9:56:2d:81:c6: 2c:6b:19:4d:47:f8:b8:f7:af:ce:78:c9:e7:af:c2:03:46:66: 0a:32:ca:37:98:17:22:11:ac:26:ab:44:6a:5e:2d:12:2d:a0: e8:d5:50:45 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZwt9ITs6NzhijqeDaV6OoAnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA1MTMxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTFmMjBmMjZhYTZkNjM1OThmZjMwMjVjZGRiZGI0YjljOWFiNjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27z2DnWb/amMhNhA2X6wC4A7nFOO 0wPCI4rl6r4/WP0nS1bPeS/RDYy5aB1/O5fLjPm8SD2DIoWnZt7wuAKORl76HpY+ 1j9rxy7mYhE9SN9LyTLI50nWhXe2BY66hCIOVOA7tYxXr64azG7OPI2XPOKJw0Y3 jSe7QVfuPAZ1CK3Ru2WAamh82gTJ8Y0DW1k+6Pm/xcX0c3Y4VkWkwzHC1RrLD2Ih MUINQjYXV257QVidQjAhZmkS4Y7OMGtU6RZEoMSM0C5/QCl/HoDuynBSOAy7296L 0jc5Rcqxp1zpTtHlB6kGFREr6zxiTJ2KDEdh6lIna6E+XpuCaESeUrb2bQIDAQAB o4ICvzCCArswHQYDVR0OBBYEFDkfIPJqptY1mP8wJc3b20ucmrZ9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzZlN2Y3 NDdlLWZmNjgtNGZhMi1iMmUzLWY2ZWRlNTQ4YTMyMC8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmU3 Zjc0N2UtZmY2OC00ZmEyLWIyZTMtZjZlZGU1NDhhMzIwLzAvMzkxRjIwRjI2QUE2 RDYzNTk4RkYzMDI1Q0REQkRCNEI5QzlBQjY3RC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH ACABBngKkDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDSoUwDQYJKoZIhvcNAQEL BQADggEBAIRClIuheNovkRHKgeJfziw5aKIusocYfGHWEjzunuuJJ+0t55RFYJaj 8xoSXlhKJsXnpvesVznvMBV0bgGSVPeIbxQL5DQchuH2b5xqRq/5nacVOSjRCOUW W7qVr5xufE29g+HfsEyidPEaBR2varAsa3vxe0594M+LAP+ifH/cr4y+qx4YZ6fP b5yo93e/vi5HTUxumoQARpAjhlOlKSAWwagqaSjdV2xFkS4FcnJeL/GOWVqzbIkN FJPevkJfr1uJ6+Tzb4h23s/+ydFjC1eddxm5Vi2BxixrGU1H+Lj3r854yeevwgNG ZgoyyjeYFyIRrCarRGpeLRItoOjVUEU= -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:33 2026 by rpki-client