This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer File: OuUFv8f9kXaGscizohj1UI9aNwo.cer (raw, json) Hash identifier: tSrpbV+moA9giD+7LGHDUVYAaVOhKbG1hyy+wmJOqI8= Subject key identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38E2F7C97804724A30AA7C53D04DF0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.43.0.0/22 IP: 2a01:6620::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e2:f7:c9:78:04:72:4a:30:aa:7c:53:d0:4d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5b:56:a1:69:0c:bb:c9:c6:80:9f:70:e6:5f: f2:4b:9d:74:5b:19:77:86:d7:33:85:66:90:6b:ce: 14:fe:8a:4c:89:b9:9f:b9:93:01:00:59:f0:50:f9: e5:96:06:30:f6:35:e7:12:03:09:44:bf:ba:1a:0f: 31:05:bb:fe:9c:24:d6:b0:eb:c5:17:82:15:4b:0a: ab:26:93:c2:ae:e2:f3:06:ea:df:e1:e6:73:79:35: e5:35:ab:4f:05:c2:b6:c9:75:bb:bc:c8:a7:fc:8e: 8c:ee:13:1d:fa:d2:4e:d6:41:02:45:0c:aa:8f:97: ea:77:6a:4f:c2:41:ac:1d:32:f7:6d:f3:56:41:d1: d4:b1:70:6a:7f:22:70:6a:ed:09:5f:7d:b1:d1:1b: 80:a6:aa:ae:5b:a8:f9:99:be:fa:a3:bb:21:39:7f: 33:0e:99:ef:9e:a0:f8:81:52:bd:92:f0:ce:8c:a2: d5:8a:4b:a6:65:fd:71:c0:73:c3:ae:cf:b1:57:ab: a0:b6:17:bf:78:34:cd:41:a7:c0:76:da:e5:bd:aa: 7f:6a:08:5e:1c:50:08:37:61:b8:20:d1:00:fa:24: 0d:0b:b9:cc:df:e0:ad:de:8c:31:a8:69:d8:f4:5c: 4f:d0:ff:fb:3f:bf:a7:b7:10:eb:cf:9b:b2:3e:21: 40:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.43.0.0/22 IPv6: 2a01:6620::/32 Signature Algorithm: sha256WithRSAEncryption ad:37:67:b5:89:c9:4c:df:1b:73:cd:4f:87:2b:c3:f5:5a:57: f6:98:33:a7:a2:99:3e:7b:46:fb:dc:df:02:64:bc:80:63:5d: 58:c4:b1:47:2e:b0:76:42:c6:8f:0e:47:14:fa:af:2f:65:ed: 8b:ca:43:fa:e0:9a:34:ce:51:62:eb:ca:aa:d1:a0:df:61:50: 79:60:33:3c:b1:1a:98:b0:b0:f4:af:3a:b1:6a:7b:28:35:7a: 6e:0c:02:7d:71:02:aa:e9:ba:df:53:2d:52:f0:79:1d:99:99: 82:79:20:f7:36:d0:33:4b:77:ea:e4:ba:2b:b7:b9:65:e0:e5: fd:8d:99:0b:f2:ed:e8:b9:04:4c:21:34:57:d5:09:de:5b:55: aa:a1:f7:6d:70:10:1d:a7:08:ed:9d:18:e6:9a:fc:f8:ab:42: b5:09:04:8b:3f:bc:53:fa:96:53:23:e5:a3:d6:ee:32:5e:22: 3f:a4:3b:d5:57:90:ba:be:21:84:6a:11:23:5a:b8:b9:b3:4e: 1c:68:04:51:4c:c0:7e:cb:92:4c:56:3f:8a:02:09:0e:54:72: 98:9b:3e:00:c3:a7:66:03:e3:23:05:9a:95:b0:76:d7:6d:9d: 3f:21:bf:6d:d0:fd:80:49:8e:89:96:ef:49:67:55:18:e4:f1: 07:b5:7f:80 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+OOL3yXgEckowqnxT0E3wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWU1MDViZmM3ZmQ5MTc2ODZiMWM4YjNhMjE4ZjU1MDhmNWEzNzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVtWoWkMu8nGgJ9w5l/yS510Wxl3 htczhWaQa84U/opMibmfuZMBAFnwUPnllgYw9jXnEgMJRL+6Gg8xBbv+nCTWsOvF F4IVSwqrJpPCruLzBurf4eZzeTXlNatPBcK2yXW7vMin/I6M7hMd+tJO1kECRQyq j5fqd2pPwkGsHTL3bfNWQdHUsXBqfyJwau0JX32x0RuApqquW6j5mb76o7shOX8z DpnvnqD4gVK9kvDOjKLVikumZf1xwHPDrs+xV6ugthe/eDTNQafAdtrlvap/aghe HFAIN2G4INEA+iQNC7nM3+Ct3owxqGnY9FxP0P/7P7+ntxDrz5uyPiFAEwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDrlBb/H/ZF2hrHIs6IY9VCPWjcKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlLzQxOTNl YS1jODNmLTRiZWItYTIxZS1hMWM3OGEwYTZiZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvNDE5M2Vh LWM4M2YtNGJlYi1hMjFlLWExYzc4YTBhNmJmZC8xL091VUZ2OGY5a1hhR3NjaXpv aGoxVUk5YU53by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSsAMA0EAgACMAcDBQAqAWYgMA0GCSqGSIb3 DQEBCwUAA4IBAQCtN2e1iclM3xtzzU+HK8P1Wlf2mDOnopk+e0b73N8CZLyAY11Y xLFHLrB2QsaPDkcU+q8vZe2LykP64Jo0zlFi68qq0aDfYVB5YDM8sRqYsLD0rzqx ansoNXpuDAJ9cQKq6brfUy1S8HkdmZmCeSD3NtAzS3fq5Lort7ll4OX9jZkL8u3o uQRMITRX1QneW1WqofdtcBAdpwjtnRjmmvz4q0K1CQSLP7xT+pZTI+Wj1u4yXiI/ pDvVV5C6viGEahEjWri5s04caARRTMB+y5JMVj+KAgkOVHKYmz4Aw6dmA+MjBZqV sHbXbZ0/Ib9t0P2ASY6Jlu9JZ1UY5PEHtX+A -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:00 2026 by rpki-client