This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OpYsbtKgSaKpOg08VHHGBrqOUlw.cer File: OpYsbtKgSaKpOg08VHHGBrqOUlw.cer (raw, json) Hash identifier: SVkam9dDf8ujjDCeTKDGppSbBRzrR93GyXSw8KWjwqs= Subject key identifier: 3A:96:2C:6E:D2:A0:49:A2:A9:3A:0D:3C:54:71:C6:06:BA:8E:52:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C03C8FF401E513742EA13DB3F74BC0EB7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/c9d7de-7b7b-4f7d-998b-2f57dcce46c7/1/OpYsbtKgSaKpOg08VHHGBrqOUlw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/c9d7de-7b7b-4f7d-998b-2f57dcce46c7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 28 Jan 2026 08:47:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199221 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:03:c8:ff:40:1e:51:37:42:ea:13:db:3f:74:bc:0e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 28 08:47:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a962c6ed2a049a2a93a0d3c5471c606ba8e525c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4c:2d:f7:9e:5e:51:a7:79:a3:61:b2:4e:ca: fc:1c:0f:06:bd:02:bd:cb:3a:a2:8f:5f:05:dc:14: db:e8:40:88:b4:ab:3b:2d:7c:65:5f:8b:72:fd:47: a0:09:80:1e:bc:70:39:b5:24:40:f4:a5:ae:cc:ae: fd:75:2b:34:9b:26:09:67:05:f2:c3:14:a3:d1:fe: 95:5c:cd:70:be:04:61:0a:63:57:08:e0:b3:08:87: ad:4e:a2:8f:fb:c2:f9:57:67:b3:91:12:30:46:c9: 32:d9:6f:97:c6:07:85:73:c3:ec:05:30:b6:ac:3a: 5f:79:7c:94:a0:09:d3:c7:7f:9b:44:e8:85:9b:75: f4:6e:27:3f:c6:54:05:9b:07:a3:1d:f8:5c:7e:11: a8:1f:89:07:fc:f2:d2:36:40:72:11:02:33:10:5d: b1:92:85:37:76:42:ed:9b:0a:1c:40:1b:aa:87:f1: 7d:e1:a9:41:eb:5f:d8:1f:f9:f8:01:44:68:11:ba: 80:9a:96:0f:ad:a5:95:3b:95:9e:20:f9:63:72:a7: 3f:bd:95:c7:0c:9a:c3:77:1b:9d:d2:e8:e9:3e:3b: a1:bf:66:5c:d6:14:5f:c2:fa:1f:ed:5c:c1:9c:a6: c9:f9:db:e0:c0:c9:2e:9c:68:71:82:43:10:0f:6f: c3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:96:2C:6E:D2:A0:49:A2:A9:3A:0D:3C:54:71:C6:06:BA:8E:52:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c9d7de-7b7b-4f7d-998b-2f57dcce46c7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c9d7de-7b7b-4f7d-998b-2f57dcce46c7/1/OpYsbtKgSaKpOg08VHHGBrqOUlw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 199221 Signature Algorithm: sha256WithRSAEncryption 37:66:95:2c:2e:a7:a4:83:ff:d6:3c:e1:e9:c3:54:fd:58:8e: 5a:1d:ed:59:ca:12:cd:12:37:b4:8f:fc:4d:33:87:2e:52:3f: a3:8a:d7:e9:6b:d1:4e:d1:01:40:47:85:1f:12:e2:fe:ad:31: 01:52:ad:cb:94:6a:a3:45:9e:10:1e:b8:b4:7d:09:4c:a0:2f: 72:a2:23:37:de:c3:fb:68:e3:23:09:40:f8:15:f0:a9:18:7b: 09:d5:7e:3b:72:9a:97:8b:7e:9d:2f:fd:36:6c:66:cc:b8:f0: 06:d1:59:4b:82:7f:f6:3f:d7:30:b6:89:c4:c1:fc:74:1f:5a: bf:56:3d:7c:e5:16:8c:a7:47:9e:c8:05:1e:af:57:81:c1:67: 86:f6:27:c5:e9:98:4e:e3:11:00:67:4d:e8:34:ba:89:28:e8: c3:8a:ed:4c:5d:47:a3:4d:5a:8b:70:24:9e:d7:7c:1f:69:f0: 72:e7:a0:b2:4f:be:b8:f6:08:23:f1:8c:e3:ee:ce:d1:7e:69: 37:14:34:07:78:d2:83:08:a8:97:5d:ad:7f:88:a1:75:34:de: f3:07:23:69:cb:62:13:99:f7:2b:12:a7:fc:33:4e:c6:99:52: 03:02:36:44:76:40:66:88:c1:45:4e:71:1f:4e:f4:2c:10:87: 52:77:86:ed -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZwDyP9AHlE3QuoT2z90vA63MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI4MDg0NzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTk2MmM2ZWQyYTA0OWEyYTkzYTBkM2M1NDcxYzYwNmJhOGU1MjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0wt955eUad5o2GyTsr8HA8GvQK9 yzqij18F3BTb6ECItKs7LXxlX4ty/UegCYAevHA5tSRA9KWuzK79dSs0myYJZwXy wxSj0f6VXM1wvgRhCmNXCOCzCIetTqKP+8L5V2ezkRIwRsky2W+XxgeFc8PsBTC2 rDpfeXyUoAnTx3+bROiFm3X0bic/xlQFmwejHfhcfhGoH4kH/PLSNkByEQIzEF2x koU3dkLtmwocQBuqh/F94alB61/YH/n4AURoEbqAmpYPraWVO5WeIPljcqc/vZXH DJrDdxud0ujpPjuhv2Zc1hRfwvof7VzBnKbJ+dvgwMkunGhxgkMQD2/D6wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFDqWLG7SoEmiqToNPFRxxga6jlJcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkL2M5ZDdk ZS03YjdiLTRmN2QtOTk4Yi0yZjU3ZGNjZTQ2YzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvYzlkN2Rl LTdiN2ItNGY3ZC05OThiLTJmNTdkY2NlNDZjNy8xL09wWXNidEtnU2FLcE9nMDhW SEhHQnJxT1Vsdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMKNTANBgkqhkiG9w0BAQsFAAOCAQEAN2aVLC6npIP/ 1jzh6cNU/ViOWh3tWcoSzRI3tI/8TTOHLlI/o4rX6WvRTtEBQEeFHxLi/q0xAVKt y5Rqo0WeEB64tH0JTKAvcqIjN97D+2jjIwlA+BXwqRh7CdV+O3Kal4t+nS/9Nmxm zLjwBtFZS4J/9j/XMLaJxMH8dB9av1Y9fOUWjKdHnsgFHq9XgcFnhvYnxemYTuMR AGdN6DS6iSjow4rtTF1Ho01ai3Akntd8H2nwcuegsk++uPYII/GM4+7O0X5pNxQ0 B3jSgwiol12tf4ihdTTe8wcjactiE5n3KxKn/DNOxplSAwI2RHZAZojBRU5xH070 LBCHUneG7Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:24 2026 by rpki-client