This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Oc0dW7iJWMacvd6QqeBWtIxPq_g.cer File: Oc0dW7iJWMacvd6QqeBWtIxPq_g.cer (raw, json) Hash identifier: ol9SIRRl6xvr34WBZqR4Q7dWgGyc9vHWFwJwr0PnaqU= Subject key identifier: 39:CD:1D:5B:B8:89:58:C6:9C:BD:DE:90:A9:E0:56:B4:8C:4F:AB:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF1FAAF33FF3729BCD984E3E14499A4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209293 IP: 213.108.26.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:fa:af:33:ff:37:29:bc:d9:84:e3:e1:44:99:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39cd1d5bb88958c69cbdde90a9e056b48c4fabf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0a:c1:48:4c:89:2a:98:8a:8f:d6:25:4c:08: f4:49:88:31:af:bc:81:63:92:9a:07:4c:d9:aa:0b: b2:39:88:d6:10:a2:c4:33:5a:0a:c8:3e:fa:c0:34: b9:ad:b2:9f:1e:58:35:c9:fa:d2:96:5c:b2:65:85: a9:eb:15:b4:62:f3:da:36:c8:93:41:8b:19:7e:65: 3e:ab:18:ab:10:ce:03:ff:32:3e:63:8c:dd:64:55: 3a:86:2e:b8:a3:96:64:72:5c:55:9d:95:ed:43:51: dc:69:c7:07:29:04:9b:8b:56:d6:1a:ad:20:14:a4: 75:3a:30:fe:c4:94:95:06:ee:fd:38:d7:85:54:33: ec:70:15:32:69:17:f4:08:aa:04:1d:d5:bc:7a:54: 78:05:52:dd:70:a6:4b:62:59:1b:86:1c:17:9c:74: fd:04:8d:22:8f:5f:d1:8b:52:97:98:e7:3e:1b:1e: 2e:83:7b:5f:26:42:d1:4e:f1:3a:9a:9c:52:75:34: b4:84:c7:c8:c1:53:1c:e0:30:4a:ab:e0:20:57:bc: 92:76:63:54:47:0a:16:16:57:12:75:8e:91:a9:eb: a7:c5:a2:c7:42:1f:d5:5a:dd:7b:eb:ce:e4:dd:74: cb:b9:da:cf:4d:16:3c:82:2a:25:6a:79:d8:5c:fe: 06:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CD:1D:5B:B8:89:58:C6:9C:BD:DE:90:A9:E0:56:B4:8C:4F:AB:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.108.26.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209293 Signature Algorithm: sha256WithRSAEncryption 91:d0:c2:e5:c8:b9:f7:b3:79:f5:da:ab:db:34:78:a2:f8:fa: 5d:dd:54:d8:82:24:95:ff:f9:ba:35:b3:25:f0:0e:42:51:c5: f2:0a:07:d6:99:b4:b0:14:41:b2:c5:dd:1a:65:8c:a2:a3:79: b8:35:39:68:c2:49:0c:d7:67:19:0c:85:ff:3c:0b:80:71:d1: f4:3d:89:49:7c:b6:f1:07:08:83:8e:04:7a:56:2a:76:7c:0c: f6:9a:7f:ca:83:22:47:4d:90:de:d2:cd:2a:c6:cb:d9:e9:ed: 48:e8:1f:29:41:2e:1b:c7:07:34:78:76:5a:20:0d:53:f3:cf: 64:8b:03:a5:39:a9:48:09:95:fe:90:31:79:3a:99:57:3f:d7: 56:04:ad:ca:1b:2a:be:18:0b:f9:77:5f:74:d0:8f:3b:5d:35: 80:54:40:11:ba:78:5f:c4:a2:56:2b:1c:54:54:bc:43:69:5e: f9:a0:84:f5:bb:c6:f2:77:9a:7c:7a:35:86:dc:68:fc:45:25: b7:9c:9e:6f:4b:e3:27:09:2e:5a:56:45:8e:06:38:80:19:9e: e0:02:78:8d:33:80:86:ed:d4:c9:1d:fe:57:f0:fe:2c:8e:57: 08:d1:ea:47:6a:8a:61:eb:af:2d:7b:04:0e:08:06:87:59:db: c8:44:c5:2b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/8fqvM/83KbzZhOPhRJmkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWNkMWQ1YmI4ODk1OGM2OWNiZGRlOTBhOWUwNTZiNDhjNGZhYmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwrBSEyJKpiKj9YlTAj0SYgxr7yB Y5KaB0zZqguyOYjWEKLEM1oKyD76wDS5rbKfHlg1yfrSllyyZYWp6xW0YvPaNsiT QYsZfmU+qxirEM4D/zI+Y4zdZFU6hi64o5ZkclxVnZXtQ1HcaccHKQSbi1bWGq0g FKR1OjD+xJSVBu79ONeFVDPscBUyaRf0CKoEHdW8elR4BVLdcKZLYlkbhhwXnHT9 BI0ij1/Ri1KXmOc+Gx4ug3tfJkLRTvE6mpxSdTS0hMfIwVMc4DBKq+AgV7ySdmNU RwoWFlcSdY6RqeunxaLHQh/VWt17687k3XTLudrPTRY8giolannYXP4GJQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDnNHVu4iVjGnL3ekKngVrSMT6v4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzU3YWM3 Zi1mNWM4LTQwZmYtODI1Yy00NmE4NWEyOGU3NDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvNTdhYzdm LWY1YzgtNDBmZi04MjVjLTQ2YTg1YTI4ZTc0OS8xL09jMGRXN2lKV01hY3ZkNlFx ZUJXdEl4UHFfZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQB1WwaMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMxjTANBgkqhkiG9w0BAQsFAAOCAQEAkdDC5ci597N59dqr2zR4ovj6Xd1U2IIk lf/5ujWzJfAOQlHF8goH1pm0sBRBssXdGmWMoqN5uDU5aMJJDNdnGQyF/zwLgHHR 9D2JSXy28QcIg44EelYqdnwM9pp/yoMiR02Q3tLNKsbL2entSOgfKUEuG8cHNHh2 WiANU/PPZIsDpTmpSAmV/pAxeTqZVz/XVgStyhsqvhgL+XdfdNCPO101gFRAEbp4 X8SiViscVFS8Q2le+aCE9bvG8neafHo1htxo/EUlt5yeb0vjJwkuWlZFjgY4gBme 4AJ4jTOAhu3UyR3+V/D+LI5XCNHqR2qKYeuvLXsEDggGh1nbyETFKw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:06 2026 by rpki-client