This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OZETdfzEhZYSGQ6-zHrjcaAaam0.cer File: OZETdfzEhZYSGQ6-zHrjcaAaam0.cer (raw, json) Hash identifier: B0sSnm+27kj+gOicsmzjgLFdcaw9cUogP9UDjI6SGWU= Subject key identifier: 39:91:13:75:FC:C4:85:96:12:19:0E:BE:CC:7A:E3:71:A0:1A:6A:6D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B790FF544A0463CC0EFD2514ADDC144CF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210111 IP: 185.88.72.0/22 IP: 2a0d:b0c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:f5:44:a0:46:3c:c0:ef:d2:51:4a:dd:c1:44:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39911375fcc4859612190ebecc7ae371a01a6a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:81:8e:bc:41:b4:04:0e:da:84:4c:a4:8c:09: 64:0a:10:59:cc:1f:2f:b0:c3:6d:47:58:1b:d3:b3: 69:d6:0a:c9:05:53:30:17:5a:8f:6e:05:e9:46:95: c3:79:be:ac:fe:83:b8:26:7c:a7:6a:3e:f5:ed:36: f5:db:45:c1:e0:53:30:60:0b:9b:07:01:26:e2:90: 16:9f:3b:69:05:1b:cf:c7:87:13:2b:54:ce:41:96: 45:b0:9d:ec:d5:40:93:23:94:a5:9f:72:ae:79:2c: 7f:9e:99:f8:4c:c6:ae:90:19:6f:fa:42:c2:ab:8e: 3f:bf:4f:c8:f4:1e:98:2b:34:5a:b5:36:76:f7:14: 4a:9f:bd:d7:b2:e5:b2:93:42:1e:d9:d6:92:7f:2d: 08:e9:5a:0a:55:76:01:6d:bd:6b:46:3d:19:eb:79: b7:2f:57:fe:a0:17:88:48:8e:f0:25:90:db:a6:d6: c4:8f:3d:5d:93:7c:4d:74:64:ad:21:41:47:52:51: bf:d9:ef:57:0b:c5:44:85:38:24:a8:36:39:81:42: ee:14:fe:62:8a:2f:98:9e:0e:7e:c4:88:1b:8f:e7: 61:63:3a:70:2c:f7:cb:8d:d4:0b:38:2f:d2:58:35: b7:75:38:23:41:84:6c:03:a5:20:61:db:f6:11:7d: c7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:91:13:75:FC:C4:85:96:12:19:0E:BE:CC:7A:E3:71:A0:1A:6A:6D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.72.0/22 IPv6: 2a0d:b0c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210111 Signature Algorithm: sha256WithRSAEncryption 27:a2:ea:f7:98:a0:70:7b:99:1c:3d:6a:3f:70:84:c1:eb:ac: 48:a7:75:2f:2a:2a:11:86:9f:1e:a3:a2:6c:6d:7c:17:eb:58: 21:c6:3b:ab:b0:86:1c:5f:c9:e7:54:ce:0e:42:6c:70:4b:48: f4:5a:cb:16:32:cb:2a:e5:bd:37:c3:bf:ce:5a:e4:44:2a:7f: 3e:db:93:27:ea:24:9b:43:9f:b8:c1:7f:e6:2e:5f:fe:bf:d0: 26:cf:66:79:02:19:7a:57:a5:9a:d7:31:2e:33:f0:f6:f1:70: 9a:f1:32:ae:54:62:be:ac:a2:70:1c:26:84:c5:93:53:0b:e9: 61:a6:2c:27:8c:4c:ba:4e:ac:f1:e5:d9:6d:a7:ac:65:e3:93: 23:dd:07:4a:7a:d8:92:14:fb:dc:6a:83:b6:0d:6e:1f:e1:e2: 5e:78:3e:84:8c:92:f9:d1:cf:47:98:9d:ed:43:d9:dd:d4:d0: 38:ac:f1:b7:5a:d7:a1:b3:99:68:7e:fd:51:1b:82:83:0e:ed: 35:0d:9f:ab:ea:e9:da:08:7c:ec:33:dc:14:ca:f7:6d:7a:dd: 98:f7:7d:5a:c1:ce:4d:ff:4e:07:6e:20:d1:a2:55:4d:fd:33: f5:a8:58:fc:b5:97:66:67:ae:9c:34:71:36:8b:34:cd:bd:4c: e2:4f:5b:0a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5D/VEoEY8wO/SUUrdwUTPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTkxMTM3NWZjYzQ4NTk2MTIxOTBlYmVjYzdhZTM3MWEwMWE2YTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YGOvEG0BA7ahEykjAlkChBZzB8v sMNtR1gb07Np1grJBVMwF1qPbgXpRpXDeb6s/oO4Jnynaj717Tb120XB4FMwYAub BwEm4pAWnztpBRvPx4cTK1TOQZZFsJ3s1UCTI5Sln3KueSx/npn4TMaukBlv+kLC q44/v0/I9B6YKzRatTZ29xRKn73XsuWyk0Ie2daSfy0I6VoKVXYBbb1rRj0Z63m3 L1f+oBeISI7wJZDbptbEjz1dk3xNdGStIUFHUlG/2e9XC8VEhTgkqDY5gULuFP5i ii+Yng5+xIgbj+dhYzpwLPfLjdQLOC/SWDW3dTgjQYRsA6UgYdv2EX3HLwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDmRE3X8xIWWEhkOvsx643GgGmptMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzYxYzBj NS01MjU3LTQ1M2MtOGU3NC05MzNkOTJkMDAwMGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvNjFjMGM1 LTUyNTctNDUzYy04ZTc0LTkzM2Q5MmQwMDAwYy8xL09aRVRkZnpFaFpZU0dRNi16 SHJqY2FBYWFtMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVhIMA0EAgACMAcDBQMqDbDAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM0vzANBgkqhkiG9w0BAQsFAAOCAQEAJ6Lq95igcHuZ HD1qP3CEweusSKd1LyoqEYafHqOibG18F+tYIcY7q7CGHF/J51TODkJscEtI9FrL FjLLKuW9N8O/zlrkRCp/PtuTJ+okm0OfuMF/5i5f/r/QJs9meQIZelelmtcxLjPw 9vFwmvEyrlRivqyicBwmhMWTUwvpYaYsJ4xMuk6s8eXZbaesZeOTI90HSnrYkhT7 3GqDtg1uH+HiXng+hIyS+dHPR5id7UPZ3dTQOKzxt1rXobOZaH79URuCgw7tNQ2f q+rp2gh87DPcFMr3bXrdmPd9WsHOTf9OB24g0aJVTf0z9ahY/LWXZmeunDRxNos0 zb1M4k9bCg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:38 2026 by rpki-client