This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer File: OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer (raw, json) Hash identifier: 8x1TgYf2ofU9alMq1d9Exx4UOSjLgNuXHIGVAsMYZOI= Subject key identifier: 3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A798AA9583571B2D7F3A2019FD356 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47730 AS: 57581 IP: 45.148.160.0/22 IP: 185.27.76.0/22 IP: 194.114.145.0/24 IP: 2a00:92a0::/29 IP: 2a0f:200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:79:8a:a9:58:35:71:b2:d7:f3:a2:01:9f:d3:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cf:d2:05:41:00:e1:94:80:67:48:ca:e5:7d: 22:e9:0a:ca:f3:34:17:78:11:c4:0f:ea:c5:5a:7d: 2b:88:85:55:62:23:e9:4b:fb:94:5e:12:f5:6a:82: 3c:73:a0:7b:ac:e1:2f:31:cf:d3:f8:c8:6e:d4:b1: 3d:18:db:29:01:80:0c:d9:f4:33:c1:33:fb:4c:18: 5b:06:24:08:7b:09:d0:97:b0:3f:e2:b2:29:0d:8f: 99:d5:da:7b:c9:b4:77:c1:b8:e3:48:e3:c4:12:1e: 36:b0:1f:1c:31:79:b0:de:1f:3c:c8:3b:9a:b4:5b: 09:26:89:33:a8:22:aa:f6:1e:a3:54:a8:64:7d:7e: f9:bf:3c:be:63:ea:24:0e:0f:45:a5:a4:f4:a9:f2: 04:85:42:16:c6:b4:24:b3:6f:f1:6e:e9:1f:02:3f: 77:ac:07:0b:48:a0:b8:e2:db:bd:86:c6:7f:ad:b6: 0d:04:e8:b6:07:a7:a9:00:93:4a:c4:94:9e:32:a8: bb:f1:c4:26:1a:94:e1:6c:c2:04:85:07:84:12:9d: df:9e:71:95:23:55:bd:db:6a:6f:20:a1:01:24:11: 92:06:aa:13:cd:07:ad:68:aa:4b:15:98:f3:af:ec: b3:94:33:c2:0b:be:32:f7:e9:ad:47:d5:9f:8d:da: 93:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.160.0/22 185.27.76.0/22 194.114.145.0/24 IPv6: 2a00:92a0::/29 2a0f:200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47730 57581 Signature Algorithm: sha256WithRSAEncryption 0b:01:ed:66:6d:d2:9f:97:c7:a2:e0:9c:6b:c8:d1:60:de:28: 03:04:7f:6c:3b:81:55:4f:a4:fb:1c:9b:be:18:4b:8b:a1:ba: 59:f2:da:90:fc:f6:c4:3e:04:e2:32:71:d3:b7:28:62:73:a5: 0b:f1:9d:3c:0d:0a:75:a9:de:44:6e:da:a7:6b:a5:0f:e0:af: 4a:83:e5:fb:a8:ea:cd:c7:29:42:93:5e:71:11:5c:e0:71:9e: 09:28:c5:c2:ca:87:b2:ea:5d:0c:df:f5:bd:ff:39:fe:f2:f6: a2:7a:9e:b6:1a:92:49:68:12:d0:d1:43:a1:e8:c2:7c:8e:a4: be:09:5f:ec:bb:7e:39:60:0c:03:30:bc:dd:69:01:e5:b1:fb: c9:a3:bf:e2:46:3b:03:8d:17:76:c0:73:82:9b:6d:f9:77:c0: 6d:0f:73:80:71:10:37:52:77:70:de:13:8c:65:bd:55:dd:d2: a8:4e:c3:0e:20:78:26:e0:67:5a:81:c9:e6:e7:de:96:d8:4c: 6e:73:eb:f7:d6:10:5e:9f:5c:dc:96:db:44:86:70:3f:da:2c: 46:0e:fe:8f:86:2b:af:7b:66:24:70:17:36:c1:a8:c4:9d:0b: 1a:99:a0:dd:2c:00:aa:be:b5:ce:56:f1:5d:28:c3:5c:2d:be: d5:f3:5c:b1 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt6WnmKqVg1cbLX86IBn9NWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWUwMDk2MjQ3YThjNTRlNWRlOGMxYjBkYWYxMDU0YWVjOGNjNDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc/SBUEA4ZSAZ0jK5X0i6QrK8zQX eBHED+rFWn0riIVVYiPpS/uUXhL1aoI8c6B7rOEvMc/T+Mhu1LE9GNspAYAM2fQz wTP7TBhbBiQIewnQl7A/4rIpDY+Z1dp7ybR3wbjjSOPEEh42sB8cMXmw3h88yDua tFsJJokzqCKq9h6jVKhkfX75vzy+Y+okDg9FpaT0qfIEhUIWxrQks2/xbukfAj93 rAcLSKC44tu9hsZ/rbYNBOi2B6epAJNKxJSeMqi78cQmGpThbMIEhQeEEp3fnnGV I1W922pvIKEBJBGSBqoTzQetaKpLFZjzr+yzlDPCC74y9+mtR9WfjdqTQwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFDrgCWJHqMVOXejBsNrxBUrsjMRQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzBhYTQ5 NC05MzA4LTQ3ZWUtYTgwOC1iOTcyMjE0NDUxM2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvMGFhNDk0 LTkzMDgtNDdlZS1hODA4LWI5NzIyMTQ0NTEzZi8xL091QUpZa2VveFU1ZDZNR3cy dkVGU3V5TXhGQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQCLZSgAwQCuRtMAwQAwnKRMBQEAgACMA4DBQMq AJKgAwUDKg8CADAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAunICAwDg7TANBgkq hkiG9w0BAQsFAAOCAQEACwHtZm3Sn5fHouCca8jRYN4oAwR/bDuBVU+k+xybvhhL i6G6WfLakPz2xD4E4jJx07coYnOlC/GdPA0KdaneRG7ap2ulD+CvSoPl+6jqzccp QpNecRFc4HGeCSjFwsqHsupdDN/1vf85/vL2onqethqSSWgS0NFDoejCfI6kvglf 7Lt+OWAMAzC83WkB5bH7yaO/4kY7A40XdsBzgptt+XfAbQ9zgHEQN1J3cN4TjGW9 Vd3SqE7DDiB4JuBnWoHJ5ufelthMbnPr99YQXp9c3JbbRIZwP9osRg7+j4Yrr3tm JHAXNsGoxJ0LGpmg3SwAqr61zlbxXSjDXC2+1fNcsQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:11 2026 by rpki-client