This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer File: Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer (raw, json) Hash identifier: yB+tFl65Hd3GsgZkdCwctLIX0MRTbpmHKpPT90H7P2M= Subject key identifier: 39:EF:4A:A5:97:7F:1F:37:13:3E:73:10:80:9F:FF:89:35:C0:C8:BC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2165ACE2EEB2CDFC6756D69E64D39 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214243 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:16:5a:ce:2e:eb:2c:df:c6:75:6d:69:e6:4d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39ef4aa5977f1f37133e7310809fff8935c0c8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:03:de:1f:e9:79:b7:3d:81:66:38:cc:37:77: d2:b5:cb:ff:bc:22:af:db:d7:59:e0:13:42:55:61: 51:5e:c4:55:13:95:76:d6:e1:35:8d:bf:e2:76:58: 0a:28:34:e7:91:e5:c4:a8:a4:44:9c:cc:d4:ce:58: 0f:4d:b7:e7:29:04:10:c0:ce:17:de:e7:2d:e5:2d: e0:f3:33:fb:2e:a2:44:1f:8c:bd:ba:60:5f:9a:1a: d0:e1:68:49:d8:5a:98:2c:8c:9b:d8:e5:3b:d0:ee: 34:64:b8:20:e8:f1:cf:8d:d3:5b:2b:43:ce:3f:7f: b6:ed:c4:ac:0e:ca:64:dd:9a:36:71:c7:a2:01:87: e4:0e:c3:05:6d:f2:6f:be:49:e2:48:bc:fd:aa:e7: e1:55:89:aa:60:af:ef:96:09:e9:ce:0b:0d:e8:8c: ed:09:be:e6:d6:75:d5:1c:8b:76:9e:00:bd:ec:3f: 49:ee:8d:90:37:3e:7f:95:94:d7:ba:be:1d:5f:fe: 42:77:f9:f1:66:cd:fb:94:ea:06:c8:9f:a1:d5:8c: 7a:12:9e:4c:06:fc:4d:19:29:a8:14:4b:d7:29:8b: fe:18:7c:2f:aa:16:aa:38:89:ed:e8:70:69:b3:21: a8:db:52:a3:20:a9:a3:a2:e7:03:68:9b:0f:91:a0: 80:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EF:4A:A5:97:7F:1F:37:13:3E:73:10:80:9F:FF:89:35:C0:C8:BC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214243 Signature Algorithm: sha256WithRSAEncryption 13:ed:4a:df:89:aa:dc:19:c0:0c:79:ad:52:8b:0f:58:48:03: d8:4c:a6:6a:56:f7:d8:b6:de:5c:e6:4e:61:53:81:9c:87:29: 8f:68:f6:22:10:61:a1:b2:02:cd:14:b1:7d:74:5b:16:3b:74: a0:5b:40:f8:da:2e:87:11:86:6f:aa:88:56:b3:ca:a7:96:26: 6a:1d:d9:47:67:07:c0:78:9a:aa:7b:62:55:57:b1:bc:f0:db: 8e:a2:1f:5a:d7:43:32:20:6d:95:bd:36:99:b9:97:75:b5:15: 21:1b:dd:bc:4e:be:24:78:38:21:bc:98:0f:ac:f5:f9:30:f0: f2:03:48:1b:46:c7:a2:48:d7:43:68:35:7f:bf:4c:73:11:40: 20:b8:2b:14:9b:d2:f7:14:2f:6c:11:20:f5:43:cb:e2:ff:d2: a2:0f:fd:c3:44:7f:87:cf:5c:f1:a6:8a:73:86:ac:9e:b4:0d: eb:49:ce:58:50:fa:bf:87:ef:32:13:cc:c3:86:2c:d7:c9:4e: 3a:b7:2f:bb:41:e8:fc:f0:15:74:85:d1:86:39:4e:88:20:ca: f9:35:0f:69:f1:8a:06:0b:4a:ef:3f:b4:f9:b2:1f:5e:84:58: 71:4a:d3:79:67:14:72:bf:c0:7f:45:32:49:2d:a5:5e:ed:e5: a0:8b:1e:4b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4ohZazi7rLN/GdW1p5k05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWVmNGFhNTk3N2YxZjM3MTMzZTczMTA4MDlmZmY4OTM1YzBjOGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwPeH+l5tz2BZjjMN3fStcv/vCKv 29dZ4BNCVWFRXsRVE5V21uE1jb/idlgKKDTnkeXEqKREnMzUzlgPTbfnKQQQwM4X 3uct5S3g8zP7LqJEH4y9umBfmhrQ4WhJ2FqYLIyb2OU70O40ZLgg6PHPjdNbK0PO P3+27cSsDspk3Zo2cceiAYfkDsMFbfJvvkniSLz9qufhVYmqYK/vlgnpzgsN6Izt Cb7m1nXVHIt2ngC97D9J7o2QNz5/lZTXur4dX/5Cd/nxZs37lOoGyJ+h1Yx6Ep5M BvxNGSmoFEvXKYv+GHwvqhaqOInt6HBpsyGo21KjIKmjoucDaJsPkaCA/wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFDnvSqWXfx83Ez5zEICf/4k1wMi8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzE0OGY3 MS1hYjJjLTQ0MDktYWUxZi1lN2Q1ZmNlNmJmYWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvMTQ4Zjcx LWFiMmMtNDQwOS1hZTFmLWU3ZDVmY2U2YmZhYy8xL09lOUtwWmRfSHpjVFBuTVFn Sl9faVRYQXlMdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNE4zANBgkqhkiG9w0BAQsFAAOCAQEAE+1K34mq3BnA DHmtUosPWEgD2Eymalb32LbeXOZOYVOBnIcpj2j2IhBhobICzRSxfXRbFjt0oFtA +NouhxGGb6qIVrPKp5Ymah3ZR2cHwHiaqntiVVexvPDbjqIfWtdDMiBtlb02mbmX dbUVIRvdvE6+JHg4IbyYD6z1+TDw8gNIG0bHokjXQ2g1f79McxFAILgrFJvS9xQv bBEg9UPL4v/Sog/9w0R/h89c8aaKc4asnrQN60nOWFD6v4fvMhPMw4Ys18lOOrcv u0Ho/PAVdIXRhjlOiCDK+TUPafGKBgtK7z+0+bIfXoRYcUrTeWcUcr/Af0UySS2l Xu3loIseSw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:02 2026 by rpki-client