This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer File: OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer (raw, json) Hash identifier: pp2JhxnMixXfdOsDfPGc4Cxs+aDBJ9agrErA9F/20z4= Subject key identifier: 39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758B16445A20DBF40DEAB79FAE9F883 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.155.252.0/22 IP: 2a07:9900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b1:64:45:a2:0d:bf:40:de:ab:79:fa:e9:f8:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:38:fb:65:6f:d4:da:83:52:e1:91:8f:dc:fe: ad:6c:cc:d1:42:aa:8f:d6:c8:4b:e1:6e:2f:d5:a3: 90:7c:45:f8:4f:89:14:ac:7a:4d:b7:9d:b9:36:87: 49:ec:01:8f:1f:fe:cb:34:67:31:99:77:d2:fb:42: f2:d3:61:fb:21:78:ac:72:1f:1a:71:a7:9b:49:e0: 19:f9:3f:9f:73:63:f2:15:7f:33:ac:8e:43:58:37: 0e:b4:95:cb:70:30:58:c3:81:b9:ac:c6:1a:a2:53: 07:d1:c4:70:23:84:ff:b9:18:0e:e5:0a:f4:c3:84: fc:ac:d7:20:4f:75:7c:c5:a7:1f:08:bf:3c:ab:8e: 40:e0:3d:0f:5b:ac:fd:cc:0f:eb:0e:92:a2:f3:5c: 4c:3b:9f:e3:bf:45:8f:86:e9:d0:f6:4d:47:15:54: b4:49:3f:31:ff:70:24:f0:e1:91:00:06:6c:fe:b0: a0:41:ed:6a:b5:9a:92:0d:0e:c4:b3:b0:ea:58:92: 52:2d:f9:1c:c9:39:8e:b1:8c:47:88:df:b4:6a:97: 65:c5:ca:e1:3a:52:7b:09:fd:00:fc:f0:6e:5f:f0: 2d:7d:26:6b:f8:18:ae:49:55:b1:f7:b2:d1:13:a5: 19:65:c1:a1:e4:5a:82:a4:8a:8c:33:d4:ec:af:3f: 41:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.252.0/22 IPv6: 2a07:9900::/29 Signature Algorithm: sha256WithRSAEncryption 82:f8:6b:bb:97:f3:5a:db:ff:e8:00:c5:e5:71:f4:b6:09:5f: f5:87:5a:d0:6f:84:47:a8:d5:35:59:53:69:f0:1b:42:f6:da: 00:f3:af:52:69:3a:68:c9:f7:5f:ea:a6:18:3d:fb:75:45:f3: b0:3f:e5:a3:c1:4c:19:c2:21:5b:0a:01:3f:93:f9:f4:09:a7: 7b:0c:4d:5f:e6:f4:09:ed:43:a5:9f:d4:4d:77:99:34:8f:81: df:d6:1c:60:b7:05:da:74:b5:77:f5:50:16:7f:5a:ba:81:83: 69:f9:52:b5:c2:98:ad:ed:77:34:34:f3:ff:35:3d:ea:c3:ce: 7f:7c:6d:de:c0:62:02:83:31:fa:98:b4:f9:43:34:eb:87:7a: 5f:2f:1a:c1:e6:5a:c1:49:5e:01:86:91:72:9f:b0:4b:1f:ce: 37:d4:5a:ca:88:6a:48:ab:3a:18:d1:53:5c:e8:80:00:3e:0e: 96:86:2f:ee:87:e0:db:a7:d5:d4:74:b2:05:1e:99:86:49:d2: 47:9d:b6:0d:82:d8:60:65:42:22:a0:b8:cf:90:6c:2d:f9:7e: b6:88:10:93:14:3e:e9:21:c2:41:2f:eb:bf:1a:58:6c:f7:2a: 85:7c:5a:16:57:e8:95:23:f6:13:fc:d4:a0:82:7e:6f:6d:08: 7b:c1:e8:4b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3WLFkRaINv0Deq3n66fiDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTRjNmY3M2IzYzgzODgxZmZjOGU2NjAzYTZiNjRmNDUzNjVhY2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzj7ZW/U2oNS4ZGP3P6tbMzRQqqP 1shL4W4v1aOQfEX4T4kUrHpNt525NodJ7AGPH/7LNGcxmXfS+0Ly02H7IXisch8a caebSeAZ+T+fc2PyFX8zrI5DWDcOtJXLcDBYw4G5rMYaolMH0cRwI4T/uRgO5Qr0 w4T8rNcgT3V8xacfCL88q45A4D0PW6z9zA/rDpKi81xMO5/jv0WPhunQ9k1HFVS0 ST8x/3Ak8OGRAAZs/rCgQe1qtZqSDQ7Es7DqWJJSLfkcyTmOsYxHiN+0apdlxcrh OlJ7Cf0A/PBuX/AtfSZr+BiuSVWx97LRE6UZZcGh5FqCpIqMM9Tsrz9BXwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDlMb3OzyDiB/8jmYDprZPRTZazxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlLzBjM2Qy YS1hZGI3LTQ5ZTktYWRmYS02OTY4ZTJkODE4MjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvMGMzZDJh LWFkYjctNDllOS1hZGZhLTY5NjhlMmQ4MTgyNi8xL09VeHZjN1BJT0lIX3lPWmdP bXRrOUZObHJQRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZv8MA0EAgACMAcDBQMqB5kAMA0GCSqGSIb3 DQEBCwUAA4IBAQCC+Gu7l/Na2//oAMXlcfS2CV/1h1rQb4RHqNU1WVNp8BtC9toA 869SaTpoyfdf6qYYPft1RfOwP+WjwUwZwiFbCgE/k/n0Cad7DE1f5vQJ7UOln9RN d5k0j4Hf1hxgtwXadLV39VAWf1q6gYNp+VK1wpit7Xc0NPP/NT3qw85/fG3ewGIC gzH6mLT5QzTrh3pfLxrB5lrBSV4BhpFyn7BLH8431FrKiGpIqzoY0VNc6IAAPg6W hi/uh+Dbp9XUdLIFHpmGSdJHnbYNgthgZUIioLjPkGwt+X62iBCTFD7pIcJBL+u/ Glhs9yqFfFoWV+iVI/YT/NSggn5vbQh7wehL -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:25 2026 by rpki-client