This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer File: Od2goAlTA6kfOOQ6tNN7YZw76h0.cer (raw, json) Hash identifier: PcVkQ/MSgIwe2m66/EUtuLGTUCcl3vH6o9mvIHkShyA= Subject key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11F486DB4823205672223166E63BAE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.105.216.0/21 IP: 185.114.24.0/22 IP: 2a06:6c80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:f4:86:db:48:23:20:56:72:22:31:66:e6:3b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d4:da:e2:0d:69:37:a7:a3:4c:1e:60:77:80: 7e:2a:09:8e:0d:49:6b:55:38:bd:68:6d:cb:81:30: be:d7:88:ad:c6:a6:71:d9:07:14:1f:21:53:af:51: 19:6c:a6:97:c3:50:be:0d:70:dc:f6:26:f1:3e:10: 96:9d:81:9f:7a:cd:91:b2:19:8e:48:44:21:66:fa: 87:1c:6f:b0:2b:c1:73:20:97:ab:4c:ae:c2:11:fd: 9b:24:60:f2:ee:49:1e:c8:dd:2e:a9:99:5a:61:de: e1:6c:a3:04:43:f6:e0:6e:72:a8:f2:19:18:99:74: fd:54:ba:bf:cd:41:d4:ef:e3:e9:f7:ec:db:25:15: 40:39:dd:d1:5d:59:ea:7e:04:3c:ab:a3:99:25:4a: 3e:35:9f:f2:df:6c:34:fb:94:27:ee:1c:fd:81:a9: 82:f8:77:aa:72:ff:3e:1a:79:e1:94:52:d8:24:49: 96:f7:ea:78:aa:9f:ed:75:a7:25:b1:d6:8e:f8:cb: 4d:fb:41:1c:76:6f:02:30:6b:36:72:bd:fe:2b:a3: 7e:c5:c0:0d:5a:8d:74:a7:6a:51:fc:e0:91:64:0d: ea:a8:ac:36:9b:2b:36:12:dc:05:95:be:ac:81:90: db:e3:3c:e9:b5:42:e2:4c:7c:cb:6f:7d:74:a4:ec: de:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.105.216.0/21 185.114.24.0/22 IPv6: 2a06:6c80::/29 Signature Algorithm: sha256WithRSAEncryption 8b:03:a5:f4:24:f5:3b:01:11:1d:96:71:5c:a0:ce:c5:09:5c: 29:1f:33:56:6f:07:49:81:3b:9f:4a:05:56:8d:3b:95:ed:f3: 56:3f:68:9b:5b:15:d6:d9:b7:cd:05:98:a0:5d:1d:43:52:4c: 8e:2a:b3:93:87:3f:5c:ca:d6:27:20:8d:cf:9c:d1:34:77:69: 79:a5:90:6e:99:68:07:b9:1a:29:72:57:80:c2:62:90:5c:79: fd:06:61:71:ee:75:9f:0b:d8:7e:fd:c9:ae:4e:ad:22:41:1d: a2:a1:e3:18:f5:46:88:15:c1:c8:42:27:21:dd:39:86:82:24: d8:8e:40:e4:ec:23:de:35:fc:e5:59:07:45:0a:d6:2e:4b:79: 3a:cc:7c:09:eb:99:90:c8:a8:14:e9:00:02:b1:62:29:4d:2f: f1:48:70:ca:73:c7:b0:c9:cf:af:c5:56:cd:e8:ac:29:d3:81: 6e:6e:97:7b:4d:a8:9f:6f:01:ae:d0:b5:03:ac:c0:42:c8:b5: b7:61:fa:37:ad:64:6f:11:9d:67:7a:b8:d4:ec:13:21:56:ff: fd:73:8f:62:c6:fa:1f:90:02:2d:7f:92:c3:68:8f:e1:b7:bf: 23:d7:6a:81:b7:dc:dc:2c:f4:4a:9d:78:bd:42:d7:99:b8:10: a4:67:1d:cd -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt8EfSG20gjIFZyIjFm5juuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWRkYTBhMDA5NTMwM2E5MWYzOGU0M2FiNGQzN2I2MTljM2JlYTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NTa4g1pN6ejTB5gd4B+KgmODUlr VTi9aG3LgTC+14itxqZx2QcUHyFTr1EZbKaXw1C+DXDc9ibxPhCWnYGfes2RshmO SEQhZvqHHG+wK8FzIJerTK7CEf2bJGDy7kkeyN0uqZlaYd7hbKMEQ/bgbnKo8hkY mXT9VLq/zUHU7+Pp9+zbJRVAOd3RXVnqfgQ8q6OZJUo+NZ/y32w0+5Qn7hz9gamC +Heqcv8+GnnhlFLYJEmW9+p4qp/tdaclsdaO+MtN+0Ecdm8CMGs2cr3+K6N+xcAN Wo10p2pR/OCRZA3qqKw2mys2EtwFlb6sgZDb4zzptULiTHzLb310pOzeyQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFDndoKAJUwOpHzjkOrTTe2GcO+odMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzg5Nzg3 Ni1kYTcyLTQwYmMtOGQ1Yy03Y2E5YjhlOTFhYzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvODk3ODc2 LWRhNzItNDBiYy04ZDVjLTdjYTliOGU5MWFjNy8xL09kMmdvQWxUQTZrZk9PUTZ0 Tk43WVp3NzZoMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDW2nYAwQCuXIYMA0EAgACMAcDBQMqBmyAMA0G CSqGSIb3DQEBCwUAA4IBAQCLA6X0JPU7AREdlnFcoM7FCVwpHzNWbwdJgTufSgVW jTuV7fNWP2ibWxXW2bfNBZigXR1DUkyOKrOThz9cytYnII3PnNE0d2l5pZBumWgH uRopcleAwmKQXHn9BmFx7nWfC9h+/cmuTq0iQR2ioeMY9UaIFcHIQich3TmGgiTY jkDk7CPeNfzlWQdFCtYuS3k6zHwJ65mQyKgU6QACsWIpTS/xSHDKc8ewyc+vxVbN 6Kwp04Fubpd7TaifbwGu0LUDrMBCyLW3Yfo3rWRvEZ1nerjU7BMhVv/9c49ixvof kAItf5LDaI/ht78j12qBt9zcLPRKnXi9QteZuBCkZx3N -----END CERTIFICATE-----Generated at Tue Jan 27 02:10:36 2026 by rpki-client