This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer File: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer (raw, json) Hash identifier: MlPUmdxhy0Z2QNV6vd/kHj6+Zn9e30DdmXloQiAdNyI= Subject key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AD8882D1D558E1CF5A4E6EDAC4681 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204541 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:d8:88:2d:1d:55:8e:1c:f5:a4:e6:ed:ac:46:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:26:3f:65:ca:b9:ae:89:4c:72:c8:21:e4:5d: 9e:ec:7a:d7:2a:ac:e7:0c:b1:86:de:b5:cb:2b:44: aa:35:04:a2:d8:d7:31:bf:2e:6b:11:d4:cb:33:b0: 7a:9e:97:b4:0e:b4:e7:45:ca:2e:17:0a:22:3c:a7: a2:8f:81:81:e3:53:11:73:43:84:ef:82:72:19:46: dc:a7:38:ec:c6:ca:64:1a:3e:1e:89:47:84:35:80: 06:17:24:01:c8:d7:b0:a0:ee:78:36:c9:16:fb:10: e3:e8:33:7a:b9:89:01:6f:b0:f0:db:f2:9f:db:94: e5:9c:05:5a:06:1c:59:d1:54:16:45:24:17:57:70: 93:2e:c1:ee:f5:f8:7a:40:d2:dd:48:00:21:0c:40: 9a:5b:4c:0a:3e:4a:00:d4:cc:08:10:79:c4:0d:78: 2b:d4:f6:07:2b:2e:00:c4:0e:ce:a3:a7:1c:60:0a: 6f:9d:7c:3c:dc:a3:d2:c3:c0:28:36:4f:cc:bf:91: 06:7f:28:a6:95:0c:f8:c0:a3:92:a7:2f:91:84:7a: 0f:2c:5b:57:d0:62:dc:22:3a:af:3d:60:1a:2e:b6: 99:08:b8:8c:ad:49:ac:51:ec:c7:20:8e:4b:7b:92: 9e:c7:35:86:c1:f1:ba:40:99:59:9c:fe:fb:ea:f3: ab:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204541 Signature Algorithm: sha256WithRSAEncryption 35:e7:56:bc:b7:1a:71:82:d7:6c:d0:73:63:ed:e2:8f:01:94: 62:05:ab:b4:dd:8f:b9:84:70:04:b9:ea:42:33:04:f4:f9:ca: 29:58:d9:6c:08:7b:0d:75:eb:92:e1:b8:88:e4:8b:5e:d9:c6: e7:7d:2c:17:5e:7f:68:02:74:67:56:e6:a6:40:d4:1c:dd:08: 4f:33:e9:c3:63:9d:0c:a7:2c:3f:e0:f7:09:cd:c3:d2:6a:82: c8:b7:50:9e:96:29:c4:49:41:ca:50:88:44:8b:21:45:06:b3: 04:cc:39:b4:b2:3b:5d:9c:97:90:b0:1d:f0:31:f4:64:2b:0b: 9a:d8:73:be:5b:bf:16:18:12:8d:aa:8b:9f:52:61:13:5b:09: 21:18:2e:b6:15:b1:cc:31:ab:32:cb:2e:26:ec:98:3e:66:f7: 23:99:c6:c9:fc:57:ce:75:21:9f:c9:dd:13:c9:7d:a8:20:34: ca:8e:38:41:58:0d:c9:89:cc:d3:92:8a:24:ff:85:d2:55:e6: 68:62:3b:d3:05:28:4d:e7:fc:f3:e3:93:de:41:da:a6:3f:48: c8:5a:6d:c0:a7:45:ab:3b:71:b2:88:e4:d5:33:a2:b4:60:8a: 89:de:b2:36:eb:2f:43:15:fa:82:ad:ca:19:77:cc:74:42:d5: 6f:bd:99:31 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9WtiILR1Vjhz1pObtrEaBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTY4ZWUwYjFmNDBjYmIxM2E4OGZkZTRjMGIxMTY4MzA0ZGYyZDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiY/Zcq5rolMcsgh5F2e7HrXKqzn DLGG3rXLK0SqNQSi2Ncxvy5rEdTLM7B6npe0DrTnRcouFwoiPKeij4GB41MRc0OE 74JyGUbcpzjsxspkGj4eiUeENYAGFyQByNewoO54NskW+xDj6DN6uYkBb7Dw2/Kf 25TlnAVaBhxZ0VQWRSQXV3CTLsHu9fh6QNLdSAAhDECaW0wKPkoA1MwIEHnEDXgr 1PYHKy4AxA7Oo6ccYApvnXw83KPSw8AoNk/Mv5EGfyimlQz4wKOSpy+RhHoPLFtX 0GLcIjqvPWAaLraZCLiMrUmsUezHII5Le5KexzWGwfG6QJlZnP776vOrAQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFDlo7gsfQMuxOoj95MCxFoME3y1rMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1LzlmNjlk NC02NWVmLTRkNWUtOWMyZi03OTk4ZjRiZGYyMWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvOWY2OWQ0 LTY1ZWYtNGQ1ZS05YzJmLTc5OThmNGJkZjIxYy8xL09XanVDeDlBeTdFNmlQM2t3 TEVXZ3dUZkxXcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMe/TANBgkqhkiG9w0BAQsFAAOCAQEANedWvLcacYLX bNBzY+3ijwGUYgWrtN2PuYRwBLnqQjME9PnKKVjZbAh7DXXrkuG4iOSLXtnG530s F15/aAJ0Z1bmpkDUHN0ITzPpw2OdDKcsP+D3Cc3D0mqCyLdQnpYpxElBylCIRIsh RQazBMw5tLI7XZyXkLAd8DH0ZCsLmthzvlu/FhgSjaqLn1JhE1sJIRguthWxzDGr MssuJuyYPmb3I5nGyfxXznUhn8ndE8l9qCA0yo44QVgNyYnM05KKJP+F0lXmaGI7 0wUoTef88+OT3kHapj9IyFptwKdFqztxsojk1TOitGCKid6yNusvQxX6gq3KGXfM dELVb72ZMQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:40 2026 by rpki-client