This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer File: OZ61MiamYLfJOBbGFrZtjHZVBgM.cer (raw, json) Hash identifier: 812ZT7Tzo87YYAOn+uQ+zDxIHJ+O26iTDkvxvzbWLro= Subject key identifier: 39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EADB4571444B65239B2C47457C001A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59783 IP: 217.144.52.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:db:45:71:44:4b:65:23:9b:2c:47:45:7c:00:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=399eb53226a660b7c93816c616b66d8c76550603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cb:0d:a3:91:d4:ed:67:e1:7b:b1:f2:0f:24: a2:bb:f4:6b:c7:fc:99:65:82:be:16:6b:86:b3:8f: 17:92:4e:23:97:72:46:58:71:fc:4b:2a:93:59:b3: 5e:4e:40:c1:b5:9b:41:95:15:a3:d5:9f:50:95:ad: e6:d3:70:41:e5:30:46:5d:2d:77:c7:17:69:31:28: 60:7c:44:07:0b:1a:72:9f:38:9e:f3:48:f3:d8:73: c6:b5:2f:a9:4d:23:75:57:1b:9c:80:c4:12:e3:2a: 6a:06:27:2f:76:19:28:35:83:81:bc:d2:e5:b7:b8: 7b:30:2b:7e:08:a4:47:af:87:29:3c:d4:fd:7c:fa: f9:7c:7d:df:7c:3d:7b:7f:8d:31:e6:ed:36:30:fb: 31:cb:ec:80:ea:6f:3c:f3:d9:3b:8f:c4:88:b7:7b: fa:1f:ec:d5:e1:46:b0:8f:4e:06:7b:6e:86:a7:e9: af:16:f5:f8:cb:d1:02:0e:43:73:9f:64:f9:01:a0: 0d:d9:16:8e:9d:72:b2:cb:78:dc:d2:d0:8e:0c:98: 75:68:3b:41:2e:81:1f:05:4d:ad:91:3c:92:72:40: 04:a8:ad:25:c0:62:29:d1:69:84:9a:f2:12:23:14: da:dc:3d:d6:5f:12:a2:78:3d:d3:13:5e:d3:d8:ca: d4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.144.52.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59783 Signature Algorithm: sha256WithRSAEncryption 0c:4a:a9:d6:9e:bc:58:c0:db:fd:90:be:bb:ba:6a:dd:4e:28: 37:e1:13:a8:00:95:16:35:c8:7c:c4:1a:96:97:c9:70:d0:7a: 0f:09:22:dc:41:9c:d5:71:0a:5b:de:35:d9:09:0d:56:7f:ce: 8c:bf:01:27:e9:08:a4:d7:6c:76:8b:d5:b6:99:e8:9f:bd:79: 04:98:0e:d4:46:1e:cf:00:2b:36:95:93:6d:a4:43:8f:51:d6: aa:00:9e:5c:9c:32:43:00:36:38:9d:67:5b:6c:a8:ee:68:8f: 3d:6b:e5:8e:2c:2e:f7:07:66:59:33:3a:62:ef:d3:17:7a:60: 57:9f:65:59:c6:16:95:0d:15:ae:36:53:d0:49:4f:2f:b9:34: 87:78:fd:ad:b1:2d:3f:b8:69:f3:89:66:16:55:d8:a0:86:1c: 6c:2f:47:f8:c5:48:18:36:25:40:61:42:8d:78:48:ea:8e:47: 81:ea:46:11:8e:f1:01:91:1e:95:25:b7:6a:fb:c6:d5:19:5a: e0:93:fc:10:64:f0:26:37:e2:91:66:2e:69:43:fc:7c:eb:7b: 08:c3:93:a4:1e:b1:7b:47:0d:e9:e3:50:76:05:56:69:98:ab: d4:23:82:79:26:9d:20:cf:20:07:37:7f:cb:34:99:8a:f9:7d: a4:a5:93:4a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt26ttFcURLZSObLEdFfAAaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTllYjUzMjI2YTY2MGI3YzkzODE2YzYxNmI2NmQ4Yzc2NTUwNjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8sNo5HU7Wfhe7HyDySiu/Rrx/yZ ZYK+FmuGs48Xkk4jl3JGWHH8SyqTWbNeTkDBtZtBlRWj1Z9Qla3m03BB5TBGXS13 xxdpMShgfEQHCxpynzie80jz2HPGtS+pTSN1VxucgMQS4ypqBicvdhkoNYOBvNLl t7h7MCt+CKRHr4cpPNT9fPr5fH3ffD17f40x5u02MPsxy+yA6m8889k7j8SIt3v6 H+zV4Uawj04Ge26Gp+mvFvX4y9ECDkNzn2T5AaAN2RaOnXKyy3jc0tCODJh1aDtB LoEfBU2tkTySckAEqK0lwGIp0WmEmvISIxTa3D3WXxKieD3TE17T2MrUnwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDmetTImpmC3yTgWxha2bYx2VQYDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwLzExMDZi MS05YmRmLTRmOTItOTc1NC1hYmU1MmQ3YWE3N2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvMTEwNmIx LTliZGYtNGY5Mi05NzU0LWFiZTUyZDdhYTc3ZS8xL09aNjFNaWFtWUxmSk9CYkdG clp0akhaVkJnTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQA2ZA0MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDphzANBgkqhkiG9w0BAQsFAAOCAQEADEqp1p68WMDb/ZC+u7pq3U4oN+ETqACV FjXIfMQalpfJcNB6Dwki3EGc1XEKW9412QkNVn/OjL8BJ+kIpNdsdovVtpnon715 BJgO1EYezwArNpWTbaRDj1HWqgCeXJwyQwA2OJ1nW2yo7miPPWvljiwu9wdmWTM6 Yu/TF3pgV59lWcYWlQ0VrjZT0ElPL7k0h3j9rbEtP7hp84lmFlXYoIYcbC9H+MVI GDYlQGFCjXhI6o5HgepGEY7xAZEelSW3avvG1Rla4JP8EGTwJjfikWYuaUP8fOt7 CMOTpB6xe0cN6eNQdgVWaZir1COCeSadIM8gBzd/yzSZivl9pKWTSg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:49:58 2026 by rpki-client