This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer File: OWQDC_IwvVbT_j4pwYiBujL656I.cer (raw, json) Hash identifier: kz0z995jFA/LpDhKkY7u614ZkBUHBv0wDJ2meTMFwLg= Subject key identifier: 39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C807111BC6FDF37A79444C39852A852 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214118 IP: 45.93.252.0/22 IP: 195.35.104.32/27 IP: 2a01:6fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:71:11:bc:6f:df:37:a7:94:44:c3:98:52:a8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8f:2e:2a:1e:e6:98:c6:f9:0e:50:92:a3:82: cb:00:88:73:23:3e:0c:83:67:84:c7:82:9b:6b:4e: fb:ff:5b:ad:2f:80:a3:3b:4d:14:17:58:0c:9d:0d: 8d:5e:81:8b:35:2a:ee:e5:58:35:49:52:79:3d:5e: 35:bd:68:14:f6:7f:3b:39:76:16:65:a1:28:5c:e8: c8:e9:36:b8:81:8b:8f:aa:07:a2:da:a8:ec:db:67: f0:ff:9c:0f:2d:bb:ad:5a:52:bd:9b:48:0e:4c:d2: d2:ce:da:29:de:db:c9:96:e3:82:da:d1:58:80:c8: 31:40:fd:16:d8:0b:e5:63:99:39:46:33:a2:49:b2: e5:17:ce:b7:5f:e6:d0:91:f5:63:ed:f8:54:a7:24: 41:5a:e6:d4:c1:f2:3a:a3:62:b5:80:8b:64:cd:12: 55:66:3d:b2:77:77:9b:a8:b2:60:57:14:ad:55:15: 77:b3:cc:0d:f6:79:bf:50:e4:4f:47:e1:fe:38:2d: 47:d6:f8:cf:db:02:42:cc:f9:a8:82:41:f0:9b:61: 99:73:ce:b7:67:61:06:c1:63:1b:67:11:28:cc:8c: 6e:d7:62:5d:1f:0a:01:a1:a5:24:4f:6d:8d:95:bf: a7:8c:7f:0b:d9:0f:3e:da:82:1f:e6:b3:72:c5:43: 58:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.252.0/22 195.35.104.32/27 IPv6: 2a01:6fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214118 Signature Algorithm: sha256WithRSAEncryption 1d:01:3d:56:c8:02:6e:ad:7a:96:05:08:d3:57:c7:61:7d:38: 2a:37:b1:b4:e4:cc:55:7e:dd:5b:37:e7:08:9a:ad:07:e8:a1: 53:b0:36:3a:d8:6b:9f:b5:e4:18:f5:5c:a2:dc:70:8a:34:60: 9d:1f:c2:3e:f7:36:36:78:ea:81:52:69:d0:81:06:92:5e:f1: 28:9c:13:91:aa:0d:1e:5b:84:ee:67:a9:a1:bb:7f:5f:84:74: 84:7c:c4:12:b4:9b:9c:66:91:95:5e:96:1d:88:82:69:3f:c6: 0d:b7:53:e6:93:26:ca:63:94:ad:79:6c:62:da:7e:d4:22:0f: e2:82:31:02:44:bb:e8:8b:2f:2e:50:43:af:c5:6a:14:87:c7: 8c:b5:e0:f8:0d:d4:7c:79:9e:d3:61:16:63:45:af:55:ab:81: 19:ea:44:50:67:a4:26:bd:a0:e9:26:44:98:06:97:ee:72:a4: 2a:c2:a3:ba:71:54:33:8f:fd:f6:1d:3d:3d:24:ce:03:d8:c0: 74:3e:db:4d:4f:07:c0:b0:3b:58:a7:2f:f2:23:4b:8b:26:13: 37:44:94:37:b4:0b:50:aa:1e:93:9b:61:c2:79:f4:bb:f5:c8: d5:8e:bd:ad:c7:68:73:18:18:67:bb:d3:02:b7:0e:91:ef:eb: 1d:35:f2:92 -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt8gHERvG/fN6eURMOYUqhSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTY0MDMwYmYyMzBiZDU2ZDNmZTNlMjljMTg4ODFiYTMyZmFlN2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY8uKh7mmMb5DlCSo4LLAIhzIz4M g2eEx4Kba077/1utL4CjO00UF1gMnQ2NXoGLNSru5Vg1SVJ5PV41vWgU9n87OXYW ZaEoXOjI6Ta4gYuPqgei2qjs22fw/5wPLbutWlK9m0gOTNLSztop3tvJluOC2tFY gMgxQP0W2AvlY5k5RjOiSbLlF863X+bQkfVj7fhUpyRBWubUwfI6o2K1gItkzRJV Zj2yd3ebqLJgVxStVRV3s8wN9nm/UORPR+H+OC1H1vjP2wJCzPmogkHwm2GZc863 Z2EGwWMbZxEozIxu12JdHwoBoaUkT22Nlb+njH8L2Q8+2oIf5rNyxUNYLwIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFDlkAwvyML1W0/4+KcGIgboy+ueiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzFkZDI2 ZC1lYWU1LTRlMTktYWMzNS1jOTkzZmRmYzRhMGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvMWRkMjZk LWVhZTUtNGUxOS1hYzM1LWM5OTNmZGZjNGEwYi8xL09XUURDX0l3dlZiVF9qNHB3 WWlCdWpMNjU2SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUF BwEHAQH/BCYwJDATBAIAATANAwQCLV38AwUFwyNoIDANBAIAAjAHAwUDKgFvwDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDRGYwDQYJKoZIhvcNAQELBQADggEBAB0B PVbIAm6tepYFCNNXx2F9OCo3sbTkzFV+3Vs35wiarQfooVOwNjrYa5+15Bj1XKLc cIo0YJ0fwj73NjZ46oFSadCBBpJe8SicE5GqDR5bhO5nqaG7f1+EdIR8xBK0m5xm kZVelh2Igmk/xg23U+aTJspjlK15bGLaftQiD+KCMQJEu+iLLy5QQ6/FahSHx4y1 4PgN1Hx5ntNhFmNFr1WrgRnqRFBnpCa9oOkmRJgGl+5ypCrCo7pxVDOP/fYdPT0k zgPYwHQ+201PB8CwO1inL/IjS4smEzdElDe0C1CqHpObYcJ59Lv1yNWOva3HaHMY GGe70wK3DpHv6x018pI= -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:53 2026 by rpki-client