This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer File: Ooz8_rg-iPNror8kRduewegvDVQ.cer (raw, json) Hash identifier: h8H4rqClCwfDo3/pougctKARz/Q53IBPCOApM9X8arc= Subject key identifier: 3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED16BE0425FEFF632134AB58F15126 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200301 IP: 2001:678:7e4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:16:be:04:25:fe:ff:63:21:34:ab:58:f1:51:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ca:90:8b:00:52:15:13:11:21:fd:26:8d:d4: 42:8c:01:32:22:48:3d:94:6b:07:e5:52:51:08:e7: 3e:f8:ee:1d:10:4f:9c:88:1d:7d:b3:02:92:34:f0: 18:56:ae:6b:9e:7e:f8:b1:3f:f9:3e:92:e4:17:81: 59:68:45:a0:ea:f1:77:f4:91:a1:1e:45:6c:26:9e: 0a:66:92:3b:a0:74:a0:1c:71:7b:14:e1:d6:d9:71: 78:ee:47:c7:3c:e0:76:12:80:1e:1d:ed:15:fc:33: 13:f9:9e:2f:13:f6:8b:c2:74:d2:62:fa:d4:59:32: fe:a5:be:61:5f:c1:c9:98:c6:34:9e:a1:c9:8d:bd: e3:6a:25:15:90:1e:76:89:4d:ac:7e:10:4a:df:51: 90:78:4a:6f:b9:a8:79:35:85:df:77:40:e7:ee:f0: a9:e6:66:f6:bf:0e:e1:62:b2:3e:be:47:fc:b9:5a: a4:16:83:64:ad:a3:47:eb:91:da:05:81:bd:b3:fc: 6b:81:69:b8:2b:90:83:f2:e2:db:68:e2:0e:5f:86: 77:9f:2b:60:20:93:06:e7:a5:e5:f7:45:5f:f6:92: b0:4c:a2:bb:97:cc:42:18:7d:5a:6e:bf:97:20:c2: ef:75:db:6e:7a:86:22:bf:ab:85:35:e7:47:df:0b: 6a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:7e4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200301 Signature Algorithm: sha256WithRSAEncryption 6f:e2:d6:bb:81:61:7f:18:cf:88:d9:6d:1c:04:8a:ce:11:b4: 6f:3c:e5:60:02:d0:59:c7:40:57:8f:68:43:d3:29:ca:46:af: e5:21:64:6b:8e:aa:ba:e7:46:e1:32:90:38:d8:52:e9:05:87: 0f:82:aa:73:ce:e5:22:ae:10:88:9c:b6:d1:fa:ff:39:44:38: ff:92:39:fb:57:8c:92:13:bb:09:2e:d5:e1:9a:71:6c:ec:48: 66:27:80:06:42:06:ce:91:d2:ec:d6:16:14:83:a6:1a:0d:fa: 64:7a:df:ce:67:90:62:f9:3a:8e:5f:ac:c6:bb:47:31:6e:3d: dc:42:cd:76:43:a0:19:84:35:81:8a:64:72:19:1a:82:3b:15: 2c:f3:91:e8:e0:44:aa:0d:62:76:da:e5:85:47:2c:9a:7a:80: bb:14:dc:03:a6:d8:0e:69:db:a0:e6:7d:b0:0d:bc:d5:21:54: 32:26:8c:38:c8:d1:ff:a7:e1:47:3f:e4:42:10:6a:b1:98:11: ab:4e:ab:6e:64:6f:68:46:53:2c:7c:c7:5c:27:69:d5:b7:93: c3:ce:52:47:82:33:b3:6d:ed:5f:f3:55:bd:ea:c4:5c:dc:38: 44:ea:48:46:79:9a:ad:6a:dc:22:01:d8:be:d7:eb:e6:9a:db: 9a:8b:a2:44 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt57Ra+BCX+/2MhNKtY8VEmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYThjZmNmZWI4M2U4OGYzNmJhMmJmMjQ0NWRiOWVjMWU4MmYwZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08qQiwBSFRMRIf0mjdRCjAEyIkg9 lGsH5VJRCOc++O4dEE+ciB19swKSNPAYVq5rnn74sT/5PpLkF4FZaEWg6vF39JGh HkVsJp4KZpI7oHSgHHF7FOHW2XF47kfHPOB2EoAeHe0V/DMT+Z4vE/aLwnTSYvrU WTL+pb5hX8HJmMY0nqHJjb3jaiUVkB52iU2sfhBK31GQeEpvuah5NYXfd0Dn7vCp 5mb2vw7hYrI+vkf8uVqkFoNkraNH65HaBYG9s/xrgWm4K5CD8uLbaOIOX4Z3nytg IJMG56Xl90Vf9pKwTKK7l8xCGH1abr+XIMLvddtueoYiv6uFNedH3wtqhwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFDqM/P64Pojza6K/JEXbnsHoLw1UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzkwMmMx YS0yOWY1LTQ4ZGQtYWRhMS02YTRlYjM3YTMzY2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvOTAyYzFh LTI5ZjUtNDhkZC1hZGExLTZhNGViMzdhMzNjYy8xL09vejhfcmctaVBOcm9yOGtS ZHVld2VndkRWUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAfkMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMObTANBgkqhkiG9w0BAQsFAAOCAQEAb+LWu4FhfxjPiNltHASKzhG0bzzl YALQWcdAV49oQ9Mpykav5SFka46quudG4TKQONhS6QWHD4Kqc87lIq4QiJy20fr/ OUQ4/5I5+1eMkhO7CS7V4ZpxbOxIZieABkIGzpHS7NYWFIOmGg36ZHrfzmeQYvk6 jl+sxrtHMW493ELNdkOgGYQ1gYpkchkagjsVLPOR6OBEqg1idtrlhUcsmnqAuxTc A6bYDmnboOZ9sA281SFUMiaMOMjR/6fhRz/kQhBqsZgRq06rbmRvaEZTLHzHXCdp 1beTw85SR4Izs23tX/NVverEXNw4ROpIRnmarWrcIgHYvtfr5prbmouiRA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:52 2026 by rpki-client