This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer File: OUiGnOVLnTsvPjmu4snI6xnLWw8.cer (raw, json) Hash identifier: 3G9HePDrKD55AWuw8siIgjvWT7LrAWMNucI7Yxxbcz8= Subject key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C1000D1CC44E866A17446B960E170 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201503 IP: 82.163.120.0/22 IP: 82.163.132.0/22 IP: 185.72.208.0/22 IP: 2a05:3950::/31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:10:00:d1:cc:44:e8:66:a1:74:46:b9:60:e1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:34:ba:40:17:d5:6a:89:94:fc:53:9d:bc:db: e2:08:ba:79:4c:03:a2:84:23:82:16:af:3f:25:a3: 2c:a4:97:2c:ab:8a:eb:43:ac:63:b2:e5:4a:9a:a8: 2e:98:d6:f7:51:86:a3:fb:ec:c3:2c:a7:ed:d0:10: 65:3f:99:ed:11:4a:31:29:e4:ff:77:ad:ff:38:c7: 11:4a:df:e2:b2:82:8d:00:36:2c:4b:1d:9d:36:f0: 5d:3b:77:d1:c7:dc:2a:18:b5:9a:eb:1f:e5:cd:0a: e5:6c:0d:69:da:cc:19:ed:bb:37:5c:84:5b:a5:26: 47:57:1e:07:e3:be:3d:41:c6:2a:1a:45:40:61:de: 91:74:69:73:c1:8b:43:42:fe:8f:28:04:03:9f:2d: 77:7c:74:6b:9a:1b:5a:81:f0:95:3c:74:60:e2:54: d4:8d:ba:6d:e5:83:c0:0d:f4:aa:e0:ec:7a:92:ab: 80:7c:14:a1:91:6c:21:e7:50:b2:6a:13:34:c7:6d: 92:e9:1e:96:dc:76:19:29:41:94:b9:eb:21:a9:bf: 03:e0:c6:26:7b:28:da:9a:1a:60:95:70:34:6c:93: aa:11:84:3e:76:fa:23:9f:24:3c:a6:c7:d0:46:c2: 32:76:be:41:93:a6:da:03:a3:bc:74:0e:52:3e:74: 1a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.163.120.0/22 82.163.132.0/22 185.72.208.0/22 IPv6: 2a05:3950::/31 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201503 Signature Algorithm: sha256WithRSAEncryption a6:0d:cd:9a:71:6f:6a:33:ac:d4:2b:30:fc:d0:fc:1e:61:bb: 02:b8:f6:11:27:9b:da:9a:6c:d8:85:16:b2:2a:b6:b7:78:c5: f2:8d:01:cb:a2:f1:e8:0a:5f:37:ec:a5:51:56:91:c8:b5:55: 9b:69:26:a5:9b:be:62:d5:ba:51:15:26:9d:ea:a0:67:15:2d: 97:ac:b7:25:70:db:b0:6d:a0:6d:33:1a:89:46:97:56:cc:2d: e6:9d:fb:98:d3:41:d5:84:e2:20:55:c4:91:28:d5:fe:6e:80: 92:5e:56:5f:23:51:36:85:c9:65:f6:00:8b:38:d6:eb:be:7e: f4:7a:56:5e:33:d8:bc:58:2d:df:11:cb:05:58:6c:bf:8f:34: 3f:89:6f:5f:4e:0c:a8:47:e1:e8:b3:9e:62:df:06:11:5b:e2: 69:49:72:22:b3:59:d9:45:5c:64:81:fc:99:8d:28:8c:2c:6f: b2:46:f9:25:eb:50:2b:be:83:c6:3f:12:b3:37:fd:c1:4f:84: f8:cc:8d:b1:e4:7d:6e:9d:41:67:98:26:1f:a5:11:84:06:b6: 3c:dd:74:90:de:6b:da:94:48:da:73:22:93:30:c8:77:ed:dd: f5:13:23:a6:49:28:e6:a6:fc:d1:78:1e:f0:c1:ed:e2:78:15: 38:4f:f9:27 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt9XBAA0cxE6GahdEa5YOFwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTQ4ODY5Y2U1NGI5ZDNiMmYzZTM5YWVlMmM5YzhlYjE5Y2I1YjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTS6QBfVaomU/FOdvNviCLp5TAOi hCOCFq8/JaMspJcsq4rrQ6xjsuVKmqgumNb3UYaj++zDLKft0BBlP5ntEUoxKeT/ d63/OMcRSt/isoKNADYsSx2dNvBdO3fRx9wqGLWa6x/lzQrlbA1p2swZ7bs3XIRb pSZHVx4H4749QcYqGkVAYd6RdGlzwYtDQv6PKAQDny13fHRrmhtagfCVPHRg4lTU jbpt5YPADfSq4Ox6kquAfBShkWwh51CyahM0x22S6R6W3HYZKUGUueshqb8D4MYm eyjamhpglXA0bJOqEYQ+dvojnyQ8psfQRsIydr5Bk6baA6O8dA5SPnQaIwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFDlIhpzlS507Lz45ruLJyOsZy1sPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ1L2RkMDE4 OS03OTY5LTRmZDUtOTc0Ny0yOGJkYWJjYTcwY2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvZGQwMTg5 LTc5NjktNGZkNS05NzQ3LTI4YmRhYmNhNzBjYi8xL09VaUduT1ZMblRzdlBqbXU0 c25JNnhuTFd3OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCUqN4AwQCUqOEAwQCuUjQMA0EAgACMAcDBQEq BTlQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMTHzANBgkqhkiG9w0BAQsFAAOC AQEApg3NmnFvajOs1Csw/ND8HmG7Arj2ESeb2pps2IUWsiq2t3jF8o0By6Lx6Apf N+ylUVaRyLVVm2kmpZu+YtW6URUmneqgZxUtl6y3JXDbsG2gbTMaiUaXVswt5p37 mNNB1YTiIFXEkSjV/m6Akl5WXyNRNoXJZfYAizjW675+9HpWXjPYvFgt3xHLBVhs v480P4lvX04MqEfh6LOeYt8GEVviaUlyIrNZ2UVcZIH8mY0ojCxvskb5JetQK76D xj8Sszf9wU+E+MyNseR9bp1BZ5gmH6URhAa2PN10kN5r2pRI2nMikzDId+3d9RMj pkko5qb80Xge8MHt4ngVOE/5Jw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:07 2026 by rpki-client