This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer File: OffHSY_ZyfKGgElRYrnrdq1HxgM.cer (raw, json) Hash identifier: gIWsGOqAClFDFaS/rwF3SNlW7pHZgTyBgx3xhB3jUNE= Subject key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791142F26D4D8C4DCF9F4109BEA23BEA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.250.108.0/22 IP: 2a0c:c40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:42:f2:6d:4d:8c:4d:cf:9f:41:09:be:a2:3b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:81:78:8e:e1:8b:c3:68:cd:83:21:53:45:2f: 28:7a:27:cb:f8:e7:08:c9:53:98:2f:08:d7:fb:39: f2:8d:33:3e:0e:08:de:a9:06:26:3e:c3:7e:e2:0b: cb:1b:9a:aa:c2:09:1a:da:6d:f1:ad:1e:20:12:10: b8:9f:d8:d9:0b:cf:50:48:d1:c9:3c:8d:a0:bc:60: 42:04:cd:51:55:0c:ea:53:12:c3:93:73:f6:6f:4b: 07:ec:65:27:ce:9f:2b:18:82:2f:81:7c:a9:fa:7f: 12:f1:b8:76:65:3b:37:cc:17:75:a7:f2:b3:70:cb: 07:56:7c:e5:17:d7:54:82:1d:b8:60:d9:11:8e:47: 8f:bb:34:dd:fb:6d:26:f6:57:46:da:f8:b4:a7:62: 2e:5e:70:4c:d8:f2:0c:8e:4d:68:51:f9:b0:1a:c2: 58:b2:f5:b1:c9:64:a9:dd:28:2e:f5:11:43:cf:d9: 08:a5:9b:c7:87:22:ae:80:2a:5a:d7:06:6c:c3:67: f6:9c:af:bb:db:71:30:53:33:b5:ca:87:e6:b3:21: ab:bc:93:a9:b0:7d:79:94:76:16:98:51:af:af:fb: 83:90:52:6a:1c:ca:be:4a:36:e6:f6:8e:bd:2e:de: e0:27:ae:67:b2:7a:f3:f5:86:90:dc:47:6d:9b:28: 87:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.108.0/22 IPv6: 2a0c:c40::/32 Signature Algorithm: sha256WithRSAEncryption 62:bc:11:f4:65:ae:ea:e1:36:00:a4:0c:62:08:63:ab:e3:51: 57:b1:38:f2:94:f2:70:f8:e7:ec:51:85:8e:87:e3:68:f2:18: 66:7e:97:7b:3b:ce:ad:73:ac:83:ad:78:e1:87:aa:ab:80:ca: 68:43:fa:77:e4:d4:a0:62:a5:61:c4:2b:f6:97:79:f0:5c:0d: 40:33:0d:e9:17:e9:e1:a2:70:e5:8e:cc:4e:aa:f0:f2:45:35: fe:86:52:9e:3e:b8:49:d7:78:72:6e:90:54:91:38:75:36:72: 60:ae:53:cf:64:8b:75:5a:68:2c:4a:85:b1:42:36:db:92:94: 70:9f:46:50:76:9a:7c:72:b6:4d:35:c8:77:79:97:bf:3c:3a: 38:5a:71:4c:70:0a:24:2d:b8:97:f1:f5:ec:d7:2f:4f:ff:bb: 58:ae:c3:47:ea:8a:02:6d:40:82:04:f1:10:60:38:98:ef:cf: 8a:3a:38:a2:b5:a3:d3:ed:f3:40:e3:88:3e:db:cc:c2:d0:c4: 6f:59:44:60:56:52:08:bd:ba:57:a1:27:5c:7d:72:7d:93:2a: df:0f:ff:27:e4:83:33:90:e7:6c:9d:72:83:1d:48:ba:66:64: e8:fe:49:8b:b9:b0:1f:15:47:69:e2:9d:19:bf:7a:43:13:75: e8:b4:c3:b9 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5EULybU2MTc+fQQm+ojvqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWY3Yzc0OThmZDljOWYyODY4MDQ5NTE2MmI5ZWI3NmFkNDdjNjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4F4juGLw2jNgyFTRS8oeifL+OcI yVOYLwjX+znyjTM+DgjeqQYmPsN+4gvLG5qqwgka2m3xrR4gEhC4n9jZC89QSNHJ PI2gvGBCBM1RVQzqUxLDk3P2b0sH7GUnzp8rGIIvgXyp+n8S8bh2ZTs3zBd1p/Kz cMsHVnzlF9dUgh24YNkRjkePuzTd+20m9ldG2vi0p2IuXnBM2PIMjk1oUfmwGsJY svWxyWSp3Sgu9RFDz9kIpZvHhyKugCpa1wZsw2f2nK+723EwUzO1yofmsyGrvJOp sH15lHYWmFGvr/uDkFJqHMq+Sjbm9o69Lt7gJ65nsnrz9YaQ3EdtmyiHUwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDn3x0mP2cnyhoBJUWK563atR8YDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2LzFkNWIw Yi00YjA1LTQwMmMtODI2NS1lZmNmYmE5OTA3ZGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvMWQ1YjBi LTRiMDUtNDAyYy04MjY1LWVmY2ZiYTk5MDdkYy8xL09mZkhTWV9aeWZLR2dFbFJZ cm5yZHExSHhnTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufpsMA0EAgACMAcDBQAqDAxAMA0GCSqGSIb3 DQEBCwUAA4IBAQBivBH0Za7q4TYApAxiCGOr41FXsTjylPJw+OfsUYWOh+No8hhm fpd7O86tc6yDrXjhh6qrgMpoQ/p35NSgYqVhxCv2l3nwXA1AMw3pF+nhonDljsxO qvDyRTX+hlKePrhJ13hybpBUkTh1NnJgrlPPZIt1WmgsSoWxQjbbkpRwn0ZQdpp8 crZNNch3eZe/PDo4WnFMcAokLbiX8fXs1y9P/7tYrsNH6ooCbUCCBPEQYDiY78+K OjiitaPT7fNA44g+28zC0MRvWURgVlIIvbpXoSdcfXJ9kyrfD/8n5IMzkOdsnXKD HUi6ZmTo/kmLubAfFUdp4p0Zv3pDE3XotMO5 -----END CERTIFICATE-----Generated at Tue Feb 3 01:51:18 2026 by rpki-client