This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer File: OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer (raw, json) Hash identifier: JS58jLLYjyRjy4773gZq5bm1EEYTsLTsYs7SSdiOl4w= Subject key identifier: 39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC834EB01F2486600C6BB5603066C0C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.189.252.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:34:eb:01:f2:48:66:00:c6:bb:56:03:06:6c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3979b435a3cfefe7c33a84b22f6033009a5225c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3a:8d:7b:9a:ec:d3:2c:80:a1:b9:30:52:fd: 69:b3:c7:4c:26:7d:41:8d:54:bd:42:58:b6:86:04: 9b:78:d2:2f:ad:05:7f:c1:d6:42:08:62:3c:96:fc: cb:57:d5:d9:a3:06:dd:63:b8:34:2d:31:9b:6f:f1: c9:95:e8:2c:64:7f:73:9e:be:64:e5:75:f3:c6:a1: c7:5e:09:91:1f:bf:a2:27:0e:bd:ec:59:59:44:bc: 01:0b:9e:ea:f5:e2:0d:21:a4:07:40:98:af:15:eb: ce:e3:e4:c8:f6:cc:d0:34:e6:1a:de:77:b0:dc:7c: 8c:20:1a:4c:e2:03:88:40:f5:3c:85:8f:f9:28:3b: ee:b7:31:bb:71:84:70:2a:de:eb:4f:61:5a:73:ee: bf:6a:c1:19:d4:35:47:c8:48:6d:ed:42:78:cc:28: 50:0f:de:49:74:45:1b:1b:6e:b6:f3:f2:ca:54:8c: e3:82:f4:f8:57:4b:0f:c7:1b:1f:0c:00:85:3e:ea: 4d:1e:f6:8f:a2:a3:c4:cf:21:ab:3f:7f:24:aa:dd: 57:23:03:7a:12:a9:2a:a5:3f:62:98:16:d6:49:86: cb:f1:85:d5:89:60:66:ab:78:e2:aa:5e:11:d8:dd: 34:e0:cf:92:28:e2:47:cb:c2:e5:52:01:77:86:24: 2b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.189.252.0/23 Signature Algorithm: sha256WithRSAEncryption 67:c7:fc:e4:f0:30:0c:75:e4:bf:e8:29:72:46:d5:46:14:8e: c6:9b:ae:65:67:7b:de:28:49:63:cb:c8:a9:99:d4:e4:32:e9: f4:d1:dd:32:c1:5a:e9:ed:79:f4:6b:1b:fe:3a:64:db:86:95: 4c:d3:69:45:dc:b4:b7:42:2b:61:35:16:db:27:ad:f3:86:25: 19:b3:34:8a:f4:fb:09:d0:99:8c:71:26:43:0a:bc:0e:11:1d: a3:20:a8:b7:d0:eb:09:9a:c0:81:25:a6:ff:4a:5d:7c:53:b1: 3a:f5:d1:b4:d7:fe:f1:bc:0a:50:c5:2e:25:24:ad:75:cb:16: 12:b1:13:f6:12:ab:6f:13:42:46:0d:8d:b9:72:97:ec:0b:df: a4:ea:1b:8f:be:10:cd:9e:49:26:8a:56:0d:f5:b7:f5:5f:df: 6e:80:24:aa:69:07:ab:59:a8:36:3a:a3:18:d8:2f:95:bf:c4: 6e:e6:7c:c4:10:dd:79:0c:f7:60:a9:ef:cf:41:d7:b9:9b:f6: 0e:9c:ae:a6:45:80:01:02:b9:0a:72:f5:c9:98:be:a5:06:5e: 7c:21:6e:5c:4f:9a:d6:76:3e:e5:eb:f3:99:d2:10:a1:fc:4c: 59:6f:2a:a7:28:08:61:22:4f:39:18:87:13:0b:53:cb:c8:5c: d8:a6:67:6b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6yDTrAfJIZgDGu1YDBmwMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTc5YjQzNWEzY2ZlZmU3YzMzYTg0YjIyZjYwMzMwMDlhNTIyNWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljqNe5rs0yyAobkwUv1ps8dMJn1B jVS9Qli2hgSbeNIvrQV/wdZCCGI8lvzLV9XZowbdY7g0LTGbb/HJlegsZH9znr5k 5XXzxqHHXgmRH7+iJw697FlZRLwBC57q9eINIaQHQJivFevO4+TI9szQNOYa3new 3HyMIBpM4gOIQPU8hY/5KDvutzG7cYRwKt7rT2Fac+6/asEZ1DVHyEht7UJ4zChQ D95JdEUbG2628/LKVIzjgvT4V0sPxxsfDACFPupNHvaPoqPEzyGrP38kqt1XIwN6 EqkqpT9imBbWSYbL8YXViWBmq3jiql4R2N004M+SKOJHy8LlUgF3hiQriwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFDl5tDWjz+/nwzqEsi9gMwCaUiXHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhLzczYTcx ZS00NDZkLTQxZmYtYWFiZi1kNWJjMjM5ZjZhOTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvNzNhNzFl LTQ0NmQtNDFmZi1hYWJmLWQ1YmMyMzlmNmE5OC8xL09YbTBOYVBQNy1mRE9vU3lM MkF6QUpwU0pjYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw738MA0GCSqGSIb3DQEBCwUAA4IBAQBnx/zk 8DAMdeS/6ClyRtVGFI7Gm65lZ3veKEljy8ipmdTkMun00d0ywVrp7Xn0axv+OmTb hpVM02lF3LS3QithNRbbJ63zhiUZszSK9PsJ0JmMcSZDCrwOER2jIKi30OsJmsCB Jab/Sl18U7E69dG01/7xvApQxS4lJK11yxYSsRP2EqtvE0JGDY25cpfsC9+k6huP vhDNnkkmilYN9bf1X99ugCSqaQerWag2OqMY2C+Vv8Ru5nzEEN15DPdgqe/PQde5 m/YOnK6mRYABArkKcvXJmL6lBl58IW5cT5rWdj7l6/OZ0hCh/ExZbyqnKAhhIk85 GIcTC1PLyFzYpmdr -----END CERTIFICATE-----Generated at Mon Jan 26 20:52:42 2026 by rpki-client