This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Os5p2XnZoNxneVEGweVayhVHCH8.cer File: Os5p2XnZoNxneVEGweVayhVHCH8.cer (raw, json) Hash identifier: aPt7iTLCqHHe6gAZeka67DDLOrBPUSx4uXqgM9x8REQ= Subject key identifier: 3A:CE:69:D9:79:D9:A0:DC:67:79:51:06:C1:E5:5A:CA:15:47:08:7F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1263CA1E98067B28534F1E2826B167 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.200.220.0/24 IP: 193.247.164.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:63:ca:1e:98:06:7b:28:53:4f:1e:28:26:b1:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ace69d979d9a0dc67795106c1e55aca1547087f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7e:16:7f:87:f2:c5:87:b2:b2:04:6f:b3:ce: 14:ff:d1:66:be:86:f3:6d:d8:2c:f7:c1:69:a4:59: 5b:38:5b:dc:30:a9:32:f0:d8:dd:c6:f6:26:4f:9b: 83:cc:e1:90:76:b6:93:1a:ce:cc:12:00:e7:74:75: c4:fd:e2:63:30:f7:5b:e2:ae:a6:19:7b:f6:9d:bc: b0:47:2d:cd:47:ed:34:7a:da:ad:57:ce:f5:97:a2: 6d:b5:12:2b:b0:9f:81:1f:6b:4a:54:7d:c1:28:7f: 7b:aa:38:1f:37:e1:8f:ba:3e:5e:f7:2e:47:70:c4: 56:8d:6c:1e:96:47:e1:dd:5a:8d:33:c0:e6:36:77: 89:35:ae:53:5f:4f:8b:70:77:26:59:22:34:56:36: 0d:48:7a:d0:bf:5b:05:b1:db:f3:2f:c6:2a:3a:84: e7:15:2b:f2:5b:dc:23:06:6a:5d:f9:ba:e6:b9:8a: 5a:ef:d2:ba:48:a2:3c:93:74:5d:20:6d:6d:4a:33: bf:51:52:9b:b8:63:12:f3:e7:31:1a:33:3c:f7:29: ea:29:a9:55:ef:21:43:aa:cb:a4:fe:ae:df:6e:60: f2:ce:81:bd:73:b1:f4:fc:cc:2e:f7:4c:2e:92:55: 43:59:fa:3c:b8:2b:f1:4a:18:fb:5e:59:b4:f0:21: 86:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CE:69:D9:79:D9:A0:DC:67:79:51:06:C1:E5:5A:CA:15:47:08:7F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.220.0/24 193.247.164.0/24 Signature Algorithm: sha256WithRSAEncryption 06:8a:be:66:80:fd:60:8c:05:e9:38:ff:7f:b7:f3:30:f3:c7: aa:27:04:1c:7d:5c:a8:4f:31:54:d6:04:0c:b3:de:63:4d:c2: 25:38:e0:33:e4:87:1f:ba:72:17:0a:57:38:33:a1:ac:f9:1c: d4:17:38:63:24:63:d3:b3:ad:08:66:1b:fd:df:cd:93:c3:94: 81:d3:0a:61:08:6b:3b:23:1f:4d:bf:67:82:1c:a6:56:4e:ce: a1:4a:80:55:c5:6a:e3:6e:9c:41:ff:69:7a:5a:d9:3b:2c:7c: dd:d4:a1:f7:a8:96:e0:a4:c5:ac:5f:35:67:38:58:6e:44:41: 61:d4:a8:9f:49:b0:89:9c:a6:7c:e5:10:61:8d:cf:60:e8:8a: ea:e2:7d:cb:b7:66:d0:b3:7b:56:f1:60:8e:1d:5a:df:6c:5a: 2b:3c:ef:6f:bd:35:b9:36:65:61:4d:6e:cd:9e:66:d7:b0:5a: cd:99:83:14:fc:db:ba:61:db:27:51:b8:5a:52:d8:f5:47:d9: bc:e7:5d:f3:31:3f:54:70:21:20:1a:96:8a:36:69:a3:98:4a: b5:5c:92:07:3b:57:52:4e:89:8a:a1:77:17:9b:0a:1a:30:41: b0:8a:36:dc:7d:5e:12:91:01:14:53:58:27:54:de:e8:04:60: d1:11:35:2e -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt8EmPKHpgGeyhTTx4oJrFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWNlNjlkOTc5ZDlhMGRjNjc3OTUxMDZjMWU1NWFjYTE1NDcwODdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX4Wf4fyxYeysgRvs84U/9Fmvobz bdgs98FppFlbOFvcMKky8NjdxvYmT5uDzOGQdraTGs7MEgDndHXE/eJjMPdb4q6m GXv2nbywRy3NR+00etqtV871l6JttRIrsJ+BH2tKVH3BKH97qjgfN+GPuj5e9y5H cMRWjWwelkfh3VqNM8DmNneJNa5TX0+LcHcmWSI0VjYNSHrQv1sFsdvzL8YqOoTn FSvyW9wjBmpd+brmuYpa79K6SKI8k3RdIG1tSjO/UVKbuGMS8+cxGjM89ynqKalV 7yFDqsuk/q7fbmDyzoG9c7H0/Mwu90wuklVDWfo8uCvxShj7Xlm08CGGVQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFDrOadl52aDcZ3lRBsHlWsoVRwh/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2L2FmZDk5 Zi1kZjU1LTRlOTctODg2YS1hOTc3NWFhOGQ4MTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvYWZkOTlm LWRmNTUtNGU5Ny04ODZhLWE5Nzc1YWE4ZDgxMi8xL09zNXAyWG5ab054bmVWRUd3 ZVZheWhWSENIOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwcjcAwQAwfekMA0GCSqGSIb3DQEBCwUAA4IB AQAGir5mgP1gjAXpOP9/t/Mw88eqJwQcfVyoTzFU1gQMs95jTcIlOOAz5IcfunIX Clc4M6Gs+RzUFzhjJGPTs60IZhv9382Tw5SB0wphCGs7Ix9Nv2eCHKZWTs6hSoBV xWrjbpxB/2l6Wtk7LHzd1KH3qJbgpMWsXzVnOFhuREFh1KifSbCJnKZ85RBhjc9g 6Irq4n3Lt2bQs3tW8WCOHVrfbForPO9vvTW5NmVhTW7NnmbXsFrNmYMU/Nu6Ydsn UbhaUtj1R9m8513zMT9UcCEgGpaKNmmjmEq1XJIHO1dSTomKoXcXmwoaMEGwijbc fV4SkQEUU1gnVN7oBGDRETUu -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:21 2026 by rpki-client