This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer File: OvCbozta5YGw0pMjJJMU92qhBRE.cer (raw, json) Hash identifier: V9HAHO3aCu2EXMBaSNUGazvsTbDnOjGhZQf1IUJqLVw= Subject key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BA269A6A7DC227561A4A17E0E17B454CA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 09 Jan 2026 10:59:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 2278 -- 2309 AS: 2340 -- 2349 AS: 2370 -- 2375 AS: 2377 AS: 2917 AS: 3215 AS: 5511 AS: 5583 AS: 8891 AS: 16028 AS: 24600 AS: 25113 AS: 25186 AS: 28708 AS: 41128 AS: 199140 IP: 2.3.0.0 -- 2.15.255.255 IP: 62.160.0.0/15 IP: 80.8.0.0/13 IP: 81.48.0.0/13 IP: 81.80.0.0/16 IP: 81.248.0.0/13 IP: 82.120.0.0/13 IP: 83.112.0.0/14 IP: 83.192.0.0/12 IP: 86.192.0.0 -- 86.231.255.255 IP: 86.233.0.0 -- 86.255.255.255 IP: 90.0.0.0 -- 90.71.255.255 IP: 90.73.0.0 -- 90.96.255.255 IP: 90.97.128.0 -- 90.127.255.255 IP: 91.123.112.0/20 IP: 92.128.0.0/10 IP: 109.208.0.0/12 IP: 139.100.0.0/16 IP: 161.104.0.0 -- 161.106.255.255 IP: 192.44.60.0/24 IP: 192.144.74.0/24 IP: 192.144.76.0/23 IP: 192.190.131.0 -- 192.190.132.255 IP: 192.190.233.0 -- 192.190.236.255 IP: 193.105.90.0/24 IP: 193.248.0.0 -- 193.253.255.255 IP: 194.2.0.0 -- 194.2.73.255 IP: 194.2.76.0/24 IP: 194.2.78.0 -- 194.2.87.255 IP: 194.2.96.0 -- 194.2.154.255 IP: 194.2.156.0 -- 194.3.135.255 IP: 194.3.137.0 -- 194.3.255.255 IP: 194.51.0.0/16 IP: 194.206.0.0/16 IP: 194.250.0.0/16 IP: 195.6.0.0/16 IP: 195.25.0.0/16 IP: 195.101.0.0/16 IP: 212.234.0.0/16 IP: 213.56.0.0/16 IP: 217.108.0.0/15 IP: 217.128.0.0/16 IP: 217.167.0.0/16 IP: 2001:67c:128c::/48 IP: 2001:688::/32 IP: 2001:7f8:2d::/48 IP: 2a01:c000:: -- 2a01:dffe:ffff:ffff:ffff:ffff:ffff:ffff Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:69:a6:a7:dc:22:75:61:a4:a1:7e:0e:17:b4:54:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 9 10:59:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:38:71:23:aa:17:de:a6:6b:6c:ea:17:05:ae: e3:55:0b:65:58:f5:2e:0a:15:17:f0:96:f4:04:28: 1b:9f:87:08:af:31:79:a1:bb:27:fd:d6:4b:87:e1: 86:91:d4:e2:27:e7:5c:ff:37:fc:27:01:f1:af:a6: 41:f1:a9:a5:31:e5:01:cf:ca:3a:d9:d7:ad:ef:11: b7:17:24:18:93:1b:82:62:45:b0:56:9a:32:fe:9e: 1c:43:4a:98:2e:20:0e:ab:e9:7d:86:0c:e0:35:94: e3:5d:d7:23:53:85:13:d5:f9:98:a4:ca:67:b7:1d: ad:7f:25:3b:0f:44:a0:1c:68:83:12:10:07:cc:d1: 0e:81:ed:c5:b2:9e:ee:3a:d3:05:f6:6c:b2:d9:45: fc:46:71:bf:c2:b1:9d:4b:9d:60:d9:f3:c6:17:40: ca:22:6c:8f:ba:5e:10:ac:ed:34:76:08:cf:fb:47: 89:02:b2:80:99:ae:cf:34:e7:ed:28:5c:41:86:d0: e2:61:40:27:01:39:52:6a:ce:13:28:02:74:d1:85: d2:b1:1a:a4:ba:02:5a:5e:d2:ff:2a:05:1f:38:69: f1:b5:5b:1f:90:72:e2:20:6e:60:99:19:59:e1:76: f7:2e:32:c3:ca:97:a9:70:91:eb:cd:bf:f1:65:3b: ac:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.3.0.0-2.15.255.255 62.160.0.0/15 80.8.0.0/13 81.48.0.0/13 81.80.0.0/16 81.248.0.0/13 82.120.0.0/13 83.112.0.0/14 83.192.0.0/12 86.192.0.0-86.231.255.255 86.233.0.0-86.255.255.255 90.0.0.0-90.71.255.255 90.73.0.0-90.96.255.255 90.97.128.0-90.127.255.255 91.123.112.0/20 92.128.0.0/10 109.208.0.0/12 139.100.0.0/16 161.104.0.0-161.106.255.255 192.44.60.0/24 192.144.74.0/24 192.144.76.0/23 192.190.131.0-192.190.132.255 192.190.233.0-192.190.236.255 193.105.90.0/24 193.248.0.0-193.253.255.255 194.2.0.0-194.2.73.255 194.2.76.0/24 194.2.78.0-194.2.87.255 194.2.96.0-194.2.154.255 194.2.156.0-194.3.135.255 194.3.137.0-194.3.255.255 194.51.0.0/16 194.206.0.0/16 194.250.0.0/16 195.6.0.0/16 195.25.0.0/16 195.101.0.0/16 212.234.0.0/16 213.56.0.0/16 217.108.0.0/15 217.128.0.0/16 217.167.0.0/16 IPv6: 2001:67c:128c::/48 2001:688::/32 2001:7f8:2d::/48 2a01:c000::-2a01:dffe:ffff:ffff:ffff:ffff:ffff:ffff sbgp-autonomousSysNum: critical Autonomous System Numbers: 2278-2309 2340-2349 2370-2375 2377 2917 3215 5511 5583 8891 16028 24600 25113 25186 28708 41128 199140 Signature Algorithm: sha256WithRSAEncryption 65:db:ac:ce:e5:dd:25:1a:fa:11:98:3b:7c:c2:bc:8f:dd:0b: 3d:97:ef:59:cf:5d:4b:45:74:3b:3e:94:a3:cf:05:fb:55:58: a9:99:9a:2b:70:88:4e:a2:26:71:fb:51:6e:ba:9f:8e:2a:2a: d4:aa:35:45:a3:70:c1:0b:43:0d:66:ce:f7:23:0b:58:42:57: 2e:34:d7:dc:57:5f:9d:ac:33:c2:a6:56:58:84:88:da:69:63: ed:50:95:31:e7:ac:d8:96:9d:fd:ca:75:0e:72:a8:2e:ac:ff: 68:cf:d6:8f:6a:e2:dd:57:77:a6:9f:cc:d3:62:e4:25:c1:4c: 17:80:86:57:0a:51:8e:02:ac:ed:7c:5d:59:5e:5a:e5:c4:5f: 5a:ca:4c:b0:8e:0e:67:6e:ce:f7:c8:c2:45:08:af:e9:2b:34: 20:42:9a:9b:36:f3:66:2a:d0:0a:77:bd:0a:ac:43:fe:31:75: 39:74:23:2b:0b:40:96:ba:07:ad:0d:54:3a:1d:d6:16:61:e3: 78:85:7f:f3:97:36:a0:52:d4:f3:5a:4c:c8:c8:d0:25:8f:7b: 6a:d4:23:ba:87:ff:1c:3d:f6:41:a3:d8:27:36:f9:ae:af:81: d3:57:69:c9:b1:a8:1b:bc:6e:fc:9a:de:b4:eb:06:a8:c6:1d: 76:b8:46:65 -----BEGIN CERTIFICATE----- MIIHaDCCBlCgAwIBAgISAZuiaaan3CJ1YaShfg4XtFTKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA5MTA1OTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWYwOWJhMzNiNWFlNTgxYjBkMjkzMjMyNDkzMTRmNzZhYTEwNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDhxI6oX3qZrbOoXBa7jVQtlWPUu ChUX8Jb0BCgbn4cIrzF5obsn/dZLh+GGkdTiJ+dc/zf8JwHxr6ZB8amlMeUBz8o6 2det7xG3FyQYkxuCYkWwVpoy/p4cQ0qYLiAOq+l9hgzgNZTjXdcjU4UT1fmYpMpn tx2tfyU7D0SgHGiDEhAHzNEOge3Fsp7uOtMF9myy2UX8RnG/wrGdS51g2fPGF0DK ImyPul4QrO00dgjP+0eJArKAma7PNOftKFxBhtDiYUAnATlSas4TKAJ00YXSsRqk ugJaXtL/KgUfOGnxtVsfkHLiIG5gmRlZ4Xb3LjLDypepcJHrzb/xZTuscQIDAQAB o4IEdDCCBHAwHQYDVR0OBBYEFDrwm6M7WuWBsNKTIySTFPdqoQURMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiLzMzZDVk MS1jNDUwLTQxM2ItYWZlNC00NTkzNWY1MDZhMTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvMzNkNWQx LWM0NTAtNDEzYi1hZmU0LTQ1OTM1ZjUwNmExMi8xL092Q2JvenRhNVlHdzBwTWpK Sk1VOTJxaEJSRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBogYIKwYB BQUHAQcBAf8EggGRMIIBjTCCAVkEAgABMIIBUTAKAwMAAgMDAwQCAAMDAT6gAwMD UAgDAwNRMAMDAFFQAwMDUfgDAwNSeAMDAlNwAwMEU8AwCgMDBlbAAwMDVuAwCQMD AFbpAwIAVjAJAwIBWgMDA1pAMAoDAwBaSQMDAFpgMAsDBAdaYYADAwdaAAMEBFt7 cAMDBlyAAwMEbdADAwCLZDAKAwMDoWgDAwChagMEAMAsPAMEAMCQSgMEAcCQTDAM AwQAwL6DAwQAwL6EMAwDBADAvukDBADAvuwDBADBaVowCgMDA8H4AwMBwfwwCwMD AcICAwQBwgJIAwQAwgJMMAwDBAHCAk4DBAPCAlAwDAMEBcICYAMEAMICmjAMAwQC wgKcAwQDwgOAMAsDBADCA4kDAwLCAAMDAMIzAwMAws4DAwDC+gMDAMMGAwMAwxkD AwDDZQMDANTqAwMA1TgDAwHZbAMDANmAAwMA2acwLgQCAAIwKAMHACABBnwSjAMF ACABBogDBwAgAQf4AC0wDQMEBioBwAMFACoB3/4waQYIKwYBBQUHAQgBAf8EWjBY oFYwVDAIAgII5gICCQUwCAICCSQCAgktMAgCAglCAgIJRwICCUkCAgtlAgIMjwIC FYcCAhXPAgIiuwICPpwCAmAYAgJiGQICYmICAnAkAgMAoKgCAwMJ5DANBgkqhkiG 9w0BAQsFAAOCAQEAZduszuXdJRr6EZg7fMK8j90LPZfvWc9dS0V0Oz6Uo88F+1VY qZmaK3CITqImcftRbrqfjioq1Ko1RaNwwQtDDWbO9yMLWEJXLjTX3FdfnawzwqZW WISI2mlj7VCVMees2Jad/cp1DnKoLqz/aM/Wj2ri3Vd3pp/M02LkJcFMF4CGVwpR jgKs7XxdWV5a5cRfWspMsI4OZ27O98jCRQiv6Ss0IEKamzbzZirQCne9CqxD/jF1 OXQjKwtAlroHrQ1UOh3WFmHjeIV/85c2oFLU81pMyMjQJY97atQjuof/HD32QaPY Jzb5rq+B01dpybGoG7xu/JretOsGqMYddrhGZQ== -----END CERTIFICATE-----Generated at Wed Jan 21 14:44:15 2026 by rpki-client