This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer (raw, json) Hash identifier: eH1zsHz6fPEa75+RttqH8LkHbPf8aZQFDP56EZoiwmM= Subject key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C805C1FA28007ABE29A41BFC58F7F02 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59970 IP: 185.61.84.0/22 IP: 185.219.16.0/22 IP: 185.244.188.0/22 IP: 2a02:78a0::/29 IP: 2a0b:ddc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5c:1f:a2:80:07:ab:e2:9a:41:bf:c5:8f:7f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39d43c26468819c07b1925115fe4921f84203d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c7:02:02:16:4a:41:1f:86:44:f0:a3:99:ff: 70:63:b3:43:68:4e:70:c3:75:b4:4a:40:02:4b:95: ca:ae:e4:d6:58:f5:b1:a3:79:31:ec:83:46:a9:d0: a9:04:b8:a2:b2:1e:18:5a:4a:04:23:b5:9b:2d:02: 88:e9:37:01:4c:08:ad:75:ba:7e:16:8d:b4:27:e3: 93:1d:cf:f8:ec:82:49:48:61:eb:80:27:5b:63:69: a9:7d:91:ae:43:2d:51:59:4b:2e:cb:04:12:37:5d: 00:c2:19:6c:69:7d:41:3d:13:5f:81:f5:48:3f:9d: 4d:12:53:8c:98:70:23:4e:01:e3:e7:b8:4d:fb:ef: c9:1c:17:0a:07:1f:85:37:c7:bc:a2:e9:09:21:8e: 8b:89:73:3d:34:61:50:85:f1:1f:f8:bf:37:68:8f: 8d:cb:ed:27:d7:3c:2f:4b:13:e6:5c:17:b6:d3:60: dd:cd:c1:14:ea:9d:12:e6:60:48:e4:75:11:2d:fd: e2:37:40:29:9e:d0:f2:b8:4c:51:1a:c9:0f:1a:69: d8:8a:bd:20:87:22:b0:3e:51:53:75:eb:02:6c:27: 0b:d5:78:3a:0b:f5:41:6d:4a:f0:ad:d0:89:24:69: af:9e:f0:ba:cd:d0:60:ed:d3:22:a7:b1:af:2e:b6: 1e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.61.84.0/22 185.219.16.0/22 185.244.188.0/22 IPv6: 2a02:78a0::/29 2a0b:ddc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59970 Signature Algorithm: sha256WithRSAEncryption ae:c6:af:3c:8a:f0:71:89:97:2c:d4:b9:52:d3:d3:d4:92:f1: 15:0d:56:c5:af:ba:7c:f7:f0:09:e8:3a:e9:a0:f5:4e:d6:d1: 95:dc:b7:61:9b:85:e3:7d:1d:74:3a:ca:56:8f:f4:73:de:71: 6c:82:e5:44:dc:f6:9a:ef:bb:2f:a0:93:89:bf:be:c8:c0:df: c3:59:49:0a:25:1c:91:b2:63:62:2d:6e:4b:c8:d8:67:71:6d: cf:c4:de:5c:73:2d:de:0a:33:9e:4d:3c:2f:89:5c:47:3e:f3: a8:10:3e:d9:b2:9c:18:7d:10:ce:2f:4e:55:90:c5:31:d2:94: de:34:6b:bd:23:68:54:af:a5:75:82:cc:3c:ce:e8:ba:22:b5: 6a:e5:47:db:b3:c0:22:f4:b9:2f:94:af:da:fb:a0:0d:0e:3a: 03:bf:04:b9:17:51:06:94:7c:2f:31:00:e9:81:6b:a1:00:40: 64:a1:5e:25:0a:a4:8c:9a:7c:2d:55:d2:60:5b:c7:ac:a3:f4: 3a:fe:a5:7a:58:4c:13:6b:a6:b1:c9:46:c6:13:3b:d2:c5:ab: 0f:a6:6f:93:6e:11:a2:30:a8:6c:e0:e2:a0:54:56:96:f6:26: 97:85:bf:1d:12:cb:92:4d:6c:5e:87:2f:6d:42:dc:2d:8a:97: 4a:80:fb:12 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZt8gFwfooAHq+KaQb/Fj38CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWQ0M2MyNjQ2ODgxOWMwN2IxOTI1MTE1ZmU0OTIxZjg0MjAzZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmccCAhZKQR+GRPCjmf9wY7NDaE5w w3W0SkACS5XKruTWWPWxo3kx7INGqdCpBLiish4YWkoEI7WbLQKI6TcBTAitdbp+ Fo20J+OTHc/47IJJSGHrgCdbY2mpfZGuQy1RWUsuywQSN10AwhlsaX1BPRNfgfVI P51NElOMmHAjTgHj57hN++/JHBcKBx+FN8e8oukJIY6LiXM9NGFQhfEf+L83aI+N y+0n1zwvSxPmXBe202DdzcEU6p0S5mBI5HURLf3iN0ApntDyuExRGskPGmnYir0g hyKwPlFTdesCbCcL1Xg6C/VBbUrwrdCJJGmvnvC6zdBg7dMip7GvLrYecwIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFDnUPCZGiBnAexklEV/kkh+EID0WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwL2FmZmMw MS1hNThmLTRmNzAtYTQwNC1hYmYwZWEwN2VmYWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvYWZmYzAx LWE1OGYtNGY3MC1hNDA0LWFiZjBlYTA3ZWZhZi8xL09kUThKa2FJR2NCN0dTVVJY LVNTSDRRZ1BSWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQCuT1UAwQCudsQAwQCufS8MBQEAgACMA4DBQMq AnigAwUDKgvdwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA6kIwDQYJKoZIhvcN AQELBQADggEBAK7GrzyK8HGJlyzUuVLT09SS8RUNVsWvunz38AnoOumg9U7W0ZXc t2GbheN9HXQ6ylaP9HPecWyC5UTc9prvuy+gk4m/vsjA38NZSQolHJGyY2ItbkvI 2Gdxbc/E3lxzLd4KM55NPC+JXEc+86gQPtmynBh9EM4vTlWQxTHSlN40a70jaFSv pXWCzDzO6LoitWrlR9uzwCL0uS+Ur9r7oA0OOgO/BLkXUQaUfC8xAOmBa6EAQGSh XiUKpIyafC1V0mBbx6yj9Dr+pXpYTBNrprHJRsYTO9LFqw+mb5NuEaIwqGzg4qBU Vpb2JpeFvx0Sy5JNbF6HL21C3C2Kl0qA+xI= -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:24 2026 by rpki-client