This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer File: Obi08Elz83zGn7fCNGj5U_FJQg4.cer (raw, json) Hash identifier: A41fWIq44gicTf9xgOcBeTxdGcjlWZgkzOoNC9eKd0E= Subject key identifier: 39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F154FE595A00FF8E0360C7A10BAEFC4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25377 IP: 193.177.1.0 -- 193.177.127.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:4f:e5:95:a0:0f:f8:e0:36:0c:7a:10:ba:ef:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39b8b4f04973f37cc69fb7c23468f953f149420e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:52:1a:c6:25:66:3d:b4:61:50:51:2e:de:bd: 4c:f2:98:d3:8a:76:93:7f:f4:ee:94:0b:66:20:fd: 66:13:54:64:b5:48:93:1d:7a:d9:75:ae:4f:db:f0: 04:e6:6b:b2:b2:dc:86:cb:bd:3a:c3:67:16:44:62: 48:a1:03:d1:51:fa:c4:c1:99:7c:7e:67:e6:7e:9a: 35:f1:74:57:99:bf:af:64:02:0d:94:ce:8a:f9:50: 9f:86:74:60:b7:58:b4:07:30:3b:9e:86:da:1a:84: 0b:57:d9:50:eb:f0:89:72:22:66:8e:ec:b4:10:cb: 8f:02:2a:6f:a4:da:f5:11:ee:3f:c4:cb:ef:6e:f9: a9:c4:31:2a:68:56:1c:f6:b8:e1:64:f4:95:51:36: 17:ef:d7:be:2f:05:ff:f1:a0:3a:f7:82:b5:c2:c2: 2a:22:86:07:40:59:6a:eb:8b:c7:67:18:39:e7:bd: c8:3c:a9:0b:6d:49:df:99:ad:4f:bc:1c:63:5e:73: c5:7f:f1:53:57:d9:39:4b:a7:7c:dd:87:af:b9:f4: 59:17:ba:39:72:83:8c:2a:1d:38:e5:0d:01:23:77: 14:b0:af:2c:33:2e:96:bc:8b:8a:f2:9f:b1:03:65: 33:de:4d:a6:cf:cf:f4:4c:93:2e:d8:bd:98:4d:77: 42:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.177.1.0-193.177.127.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25377 Signature Algorithm: sha256WithRSAEncryption 3b:01:02:19:ab:17:39:1e:77:d0:33:a7:6d:02:eb:65:f9:12: f1:ee:41:5a:7d:b5:48:3b:18:78:e5:74:65:09:b9:8b:40:af: 4f:95:d1:23:d3:5f:27:38:25:dc:92:12:0a:ff:eb:eb:57:38: 97:f7:c1:d9:67:10:e7:74:f5:91:4d:cf:12:97:da:40:f6:c8: 60:99:bf:f1:5c:d9:96:e4:a3:b1:cd:8b:c8:ba:6b:94:79:d0: 11:21:69:14:91:ea:16:76:00:c0:3e:9c:16:24:0b:b1:ac:13: ac:4d:ac:d5:4d:a1:31:ed:20:3e:5c:c8:6e:47:61:c9:fd:a0: 03:4b:02:bd:0b:7c:f2:d3:08:f2:09:a9:a5:16:c8:a9:00:ca: af:44:76:39:be:89:e7:a7:d6:2d:09:2a:81:e6:5c:70:66:57: a5:dd:d4:8c:8f:35:f8:56:68:48:ec:bf:9a:8f:c0:4b:7a:94: cd:17:95:ff:34:7a:33:7e:6d:13:4d:ac:93:90:87:e6:1d:7f: 4f:24:89:ef:0e:00:d4:04:28:cb:9c:6a:e0:47:2b:d2:91:00: 0c:38:3e:91:0e:22:5e:5a:bb:65:9e:79:5b:c6:a9:b3:50:be: 85:2b:9c:f5:4d:6a:fb:27:1a:54:1b:33:fa:b4:1b:f0:83:a6: 95:f8:e3:23 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgISAZt/FU/llaAP+OA2DHoQuu/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWI4YjRmMDQ5NzNmMzdjYzY5ZmI3YzIzNDY4Zjk1M2YxNDk0MjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1IaxiVmPbRhUFEu3r1M8pjTinaT f/TulAtmIP1mE1RktUiTHXrZda5P2/AE5muystyGy706w2cWRGJIoQPRUfrEwZl8 fmfmfpo18XRXmb+vZAINlM6K+VCfhnRgt1i0BzA7nobaGoQLV9lQ6/CJciJmjuy0 EMuPAipvpNr1Ee4/xMvvbvmpxDEqaFYc9rjhZPSVUTYX79e+LwX/8aA694K1wsIq IoYHQFlq64vHZxg5573IPKkLbUnfma1PvBxjXnPFf/FTV9k5S6d83YevufRZF7o5 coOMKh045Q0BI3cUsK8sMy6WvIuK8p+xA2Uz3k2mz8/0TJMu2L2YTXdCtQIDAQAB o4ICpzCCAqMwHQYDVR0OBBYEFDm4tPBJc/N8xp+3wjRo+VPxSUIOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmLzhhY2M0 Yi1lMGEyLTRkMjEtYjg2NC05OTAzMDdkMjAzYzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOGFjYzRi LWUwYTItNGQyMS1iODY0LTk5MDMwN2QyMDNjOC8xL09iaTA4RWx6ODN6R243ZkNO R2o1VV9GSlFnNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBADBsQEDBAfBsQAwGQYIKwYBBQUHAQgBAf8E CjAIoAYwBAICYyEwDQYJKoZIhvcNAQELBQADggEBADsBAhmrFzked9Azp20C62X5 EvHuQVp9tUg7GHjldGUJuYtAr0+V0SPTXyc4JdySEgr/6+tXOJf3wdlnEOd09ZFN zxKX2kD2yGCZv/Fc2Zbko7HNi8i6a5R50BEhaRSR6hZ2AMA+nBYkC7GsE6xNrNVN oTHtID5cyG5HYcn9oANLAr0LfPLTCPIJqaUWyKkAyq9Edjm+ieen1i0JKoHmXHBm V6Xd1IyPNfhWaEjsv5qPwEt6lM0Xlf80ejN+bRNNrJOQh+Ydf08kie8OANQEKMuc auBHK9KRAAw4PpEOIl5au2WeeVvGqbNQvoUrnPVNavsnGlQbM/q0G/CDppX44yM= -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:43 2026 by rpki-client