This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer File: Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer (raw, json) Hash identifier: U0wfwHxRB/OxQ9pg48M/LD8pvqV6l6WDswQFyDae5so= Subject key identifier: 3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF1D4B29C033E87BE7B476F5EB5BB73 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21161 IP: 178.249.80.0/21 IP: 185.195.180.0/22 IP: 193.138.83.0/24 IP: 194.110.196.0/24 IP: 194.121.11.0/24 IP: 2a02:2198::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:d4:b2:9c:03:3e:87:be:7b:47:6f:5e:b5:bb:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3aedd3c7273d9ab364a314da481e5ba51f84296f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ac:61:f7:75:c1:2f:74:0f:c3:07:bf:03:a9: 78:0a:f9:02:16:e7:09:99:d7:8a:8d:d5:98:32:8a: db:0a:fa:96:69:76:4a:5f:65:fb:84:e7:e9:b1:68: ba:ea:52:9d:ee:94:aa:dc:d0:ec:b2:9d:a9:57:e1: 90:01:fb:79:a0:51:a6:f8:74:39:51:0d:99:5f:46: 70:1b:63:2c:fb:ee:d2:c6:25:f8:ad:4a:15:29:41: 6d:5c:1c:a6:76:d8:15:e0:40:49:a9:53:09:4c:bb: db:ab:22:3a:07:4b:6b:2e:f3:b6:69:52:0f:08:11: cd:71:00:71:58:7e:03:fa:2f:06:6b:8d:8f:f8:2c: 06:6a:a8:16:00:5b:16:64:21:1f:b7:a9:d3:c4:c7: 64:9c:25:ca:f9:b7:96:24:11:33:75:19:c3:28:18: c6:ef:14:d4:24:c9:26:91:82:89:bb:e8:a9:6e:5d: 8c:ba:37:f4:61:fd:9d:bf:a0:02:db:12:38:0e:92: 2e:9e:65:0a:e4:7f:32:64:91:aa:73:26:87:c7:9e: e1:75:d7:d2:28:45:ab:c8:48:a2:70:71:5d:1b:1b: e2:b8:c6:aa:22:0a:91:40:25:1e:e0:21:8d:0a:a4: 08:25:72:3c:6a:23:a9:d3:9b:38:b7:ec:56:3f:00: 46:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.249.80.0/21 185.195.180.0/22 193.138.83.0/24 194.110.196.0/24 194.121.11.0/24 IPv6: 2a02:2198::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21161 Signature Algorithm: sha256WithRSAEncryption 85:83:01:55:fc:4b:a7:ec:d5:3a:25:ee:37:dd:3c:58:29:bc: f7:2e:b0:04:5d:73:b5:f3:04:4f:21:95:c6:38:aa:f2:1b:8b: 5b:ab:65:a2:e8:79:db:6c:6a:ab:bd:75:92:aa:0f:d4:2f:99: 0a:b8:d5:4f:d7:9e:29:b4:90:73:7e:68:94:26:1b:85:8c:62: 9c:a8:bc:b3:e5:f1:2d:26:da:e3:06:0d:28:77:0e:52:53:a7: 2c:23:f4:40:27:5f:28:22:a6:88:04:99:a7:fb:0f:49:ad:eb: 9e:c6:4c:dd:bd:52:76:b8:0f:fb:70:1f:25:c2:16:ab:84:ab: 13:7e:c3:2a:59:bb:6f:e7:b8:67:09:e6:8c:8d:97:75:e5:0f: 12:67:48:5a:1c:b5:84:0f:e8:5c:47:0a:57:84:6b:ef:11:b6: 57:40:80:85:b0:af:83:3b:d6:c1:22:b9:5e:c6:5a:b8:f2:55: 29:89:32:f7:dc:d3:e2:32:ed:14:0d:f4:e8:82:d1:01:c6:4c: 8f:d1:36:bb:e6:7d:fc:4a:38:dc:60:69:10:c2:ec:38:3d:90: 3b:82:cb:0b:c2:6b:a8:d1:f7:0b:99:a1:00:9f:2f:02:ec:3f: 15:e4:84:d5:ec:2d:41:b2:25:4d:5e:47:8b:be:3f:c4:e9:9a: 64:de:c8:35 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt/8dSynAM+h757R29etbtzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWVkZDNjNzI3M2Q5YWIzNjRhMzE0ZGE0ODFlNWJhNTFmODQyOTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqxh93XBL3QPwwe/A6l4CvkCFucJ mdeKjdWYMorbCvqWaXZKX2X7hOfpsWi66lKd7pSq3NDssp2pV+GQAft5oFGm+HQ5 UQ2ZX0ZwG2Ms++7SxiX4rUoVKUFtXBymdtgV4EBJqVMJTLvbqyI6B0trLvO2aVIP CBHNcQBxWH4D+i8Ga42P+CwGaqgWAFsWZCEft6nTxMdknCXK+beWJBEzdRnDKBjG 7xTUJMkmkYKJu+ipbl2Mujf0Yf2dv6AC2xI4DpIunmUK5H8yZJGqcyaHx57hddfS KEWryEiicHFdGxviuMaqIgqRQCUe4CGNCqQIJXI8aiOp05s4t+xWPwBGqwIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFDrt08cnPZqzZKMU2kgeW6UfhClvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5LzYyYzky YS01YzIzLTQ4ZDctYmNhMi02M2YwNDA5NWE0YzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvNjJjOTJh LTVjMjMtNDhkNy1iY2EyLTYzZjA0MDk1YTRjNC8xL091M1R4eWM5bXJOa294VGFT QjVicFItRUtXOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQDsvlQAwQCucO0AwQAwYpTAwQAwm7EAwQAwnkL MA0EAgACMAcDBQMqAiGYMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlKpMA0GCSqG SIb3DQEBCwUAA4IBAQCFgwFV/Eun7NU6Je433TxYKbz3LrAEXXO18wRPIZXGOKry G4tbq2Wi6HnbbGqrvXWSqg/UL5kKuNVP154ptJBzfmiUJhuFjGKcqLyz5fEtJtrj Bg0odw5SU6csI/RAJ18oIqaIBJmn+w9JreuexkzdvVJ2uA/7cB8lwharhKsTfsMq Wbtv57hnCeaMjZd15Q8SZ0haHLWED+hcRwpXhGvvEbZXQICFsK+DO9bBIrlexlq4 8lUpiTL33NPiMu0UDfTogtEBxkyP0Ta75n38SjjcYGkQwuw4PZA7gssLwmuo0fcL maEAny8C7D8V5ITV7C1BsiVNXkeLvj/E6Zpk3sg1 -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:46 2026 by rpki-client