This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer File: OVHxhNTfiFYEykfFOX4CWi2y_Po.cer (raw, json) Hash identifier: 3Wb8D2cUpQFQ5zFkpOMD2sJcDI8brfoK0ceDTPTqgoo= Subject key identifier: 39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B94905466882ECF3591B356C162DE8159 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 06 Jan 2026 18:27:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31187 IP: 193.24.30.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:90:54:66:88:2e:cf:35:91:b3:56:c1:62:de:81:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 6 18:27:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3951f184d4df885604ca47c5397e025a2db2fcfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1a:c6:81:78:83:c0:25:16:37:e7:96:ad:ed: 0c:bd:49:f2:5d:77:c5:b5:55:ad:78:d0:5b:65:68: d3:70:1e:a3:d4:3e:af:3d:10:2d:5d:6d:a3:4e:6e: b6:62:9b:53:f5:af:6b:f5:c5:6f:b2:f7:f3:a4:ac: 65:fe:59:d9:94:dc:82:a9:1b:0c:4b:fc:3c:0e:d3: b2:c1:3a:87:a3:f6:b5:95:8d:9f:da:09:3b:8c:49: e2:1f:fd:d6:5c:27:30:68:31:4e:6f:22:20:8a:a7: 66:bb:e5:a9:52:1e:51:75:a5:3c:17:33:fb:df:ad: aa:14:a9:1c:d4:cb:57:47:3b:bc:09:67:9f:51:3e: 69:3d:b5:86:dd:ba:23:e1:7e:86:0a:0a:21:09:32: bc:cd:69:ae:67:9e:5d:25:19:df:0c:05:c0:85:df: aa:b5:7d:1b:f1:99:1d:e8:6a:e1:35:a4:b2:11:8d: 0e:8e:b9:07:af:80:ff:37:92:c5:ab:5b:49:58:45: 82:db:6a:1e:76:2d:4e:05:8c:3d:46:a4:39:71:be: 46:11:45:9c:dc:40:2b:5e:03:82:80:c9:ae:c9:0f: 76:a3:52:c5:89:9f:2e:19:da:d4:ff:29:0d:d3:6a: 28:29:8e:41:d7:6d:cd:8d:67:a8:9a:dc:06:69:51: 23:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.30.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31187 Signature Algorithm: sha256WithRSAEncryption 8b:e7:40:31:fb:1a:f3:36:e6:dd:95:0d:28:a5:f3:46:50:f5: 31:77:9e:4d:d5:de:47:df:80:f8:c7:99:1a:8c:8a:d4:34:ef: 30:a8:fa:5e:3e:27:86:a5:fb:41:3e:95:b6:bb:7d:2c:a5:58: 4b:0f:af:b4:c3:2e:e6:de:3c:52:6c:04:11:79:60:3e:1d:f4: 21:c1:cd:ed:f7:c7:23:02:85:2b:4a:6d:fd:ea:3c:42:48:3e: 44:60:a1:8f:b5:ed:38:ce:56:cf:a8:b0:3e:ee:2e:dc:12:cb: 3a:1a:74:80:6c:ec:7b:38:29:59:a7:02:12:7c:a4:58:ee:25: c0:d1:cf:2b:93:17:91:86:8b:19:cf:e5:65:a0:a5:4b:5c:f7: 3a:c9:01:42:28:ac:a7:fc:fc:2f:fd:1c:01:ba:bb:35:4e:04: a7:5e:53:45:c0:6b:df:c5:0e:df:77:ce:20:1c:e2:24:fb:02: 41:83:59:b1:eb:aa:b4:db:08:0b:1b:44:a5:79:d0:ed:4d:38: 5d:76:5b:dd:83:f4:cb:ee:ca:02:91:db:ec:e5:16:7b:a2:bc: cc:94:6c:28:68:9a:08:cd:21:07:f9:f0:5a:03:07:7b:b6:44: 4e:b5:bd:3e:b6:8b:6a:15:9b:4b:c5:e2:24:1c:5f:0a:1b:a0: 0e:e5:c9:d7 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZuUkFRmiC7PNZGzVsFi3oFZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA2MTgyNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTUxZjE4NGQ0ZGY4ODU2MDRjYTQ3YzUzOTdlMDI1YTJkYjJmY2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRrGgXiDwCUWN+eWre0MvUnyXXfF tVWteNBbZWjTcB6j1D6vPRAtXW2jTm62YptT9a9r9cVvsvfzpKxl/lnZlNyCqRsM S/w8DtOywTqHo/a1lY2f2gk7jEniH/3WXCcwaDFObyIgiqdmu+WpUh5RdaU8FzP7 362qFKkc1MtXRzu8CWefUT5pPbWG3boj4X6GCgohCTK8zWmuZ55dJRnfDAXAhd+q tX0b8Zkd6GrhNaSyEY0OjrkHr4D/N5LFq1tJWEWC22oedi1OBYw9RqQ5cb5GEUWc 3EArXgOCgMmuyQ92o1LFiZ8uGdrU/ykN02ooKY5B123NjWeomtwGaVEjwQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFDlR8YTU34hWBMpHxTl+Alotsvz6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyLzNmZDI5 Yi04ZTMyLTRkZWQtOGM5Ny02OGM0NTY3MjA4ZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvM2ZkMjli LThlMzItNGRlZC04Yzk3LTY4YzQ1NjcyMDhkYS8xL09WSHhoTlRmaUZZRXlrZkZP WDRDV2kyeV9Qby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwRgeMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnnTMA0GCSqGSIb3DQEBCwUAA4IBAQCL50Ax+xrzNubdlQ0opfNGUPUxd55N1d5H 34D4x5kajIrUNO8wqPpePieGpftBPpW2u30spVhLD6+0wy7m3jxSbAQReWA+HfQh wc3t98cjAoUrSm396jxCSD5EYKGPte04zlbPqLA+7i7cEss6GnSAbOx7OClZpwIS fKRY7iXA0c8rkxeRhosZz+VloKVLXPc6yQFCKKyn/Pwv/RwBurs1TgSnXlNFwGvf xQ7fd84gHOIk+wJBg1mx66q02wgLG0SledDtTThddlvdg/TL7soCkdvs5RZ7orzM lGwoaJoIzSEH+fBaAwd7tkROtb0+totqFZtLxeIkHF8KG6AO5cnX -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:57 2026 by rpki-client