This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer File: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer (raw, json) Hash identifier: e0kVAu9vi1hy6LmPTvWcUEdWn/tlsuVBUiU70I+pblw= Subject key identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BC658F1606FAED76EB0F26FB72CF995E3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 16 Jan 2026 10:27:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202649 IP: 85.137.236.0/24 IP: 85.137.250.0/24 IP: 2a12:5740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:58:f1:60:6f:ae:d7:6e:b0:f2:6f:b7:2c:f9:95:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 16 10:27:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3afb9f43a46f059827a9dec366d1496d66089134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:10:f0:45:ac:48:00:6b:82:65:f7:49:d3:65: 4c:45:1f:5b:8d:6f:3b:1a:db:28:f6:db:0a:ba:24: c3:a7:df:b1:f5:e3:23:f1:1c:63:4f:c1:58:7a:1f: eb:29:67:0b:28:17:8e:e5:b2:c3:32:b9:44:77:c4: 34:6f:9f:8e:b4:83:e4:f1:4d:82:3b:b9:6c:90:87: fc:71:de:fa:3e:74:d6:95:fb:10:b3:1c:d4:f8:b0: 96:12:af:95:a5:01:05:40:7e:ca:3d:00:24:d0:02: 51:5b:30:e3:67:a8:b6:d1:f9:f8:27:aa:28:6e:ba: 8c:88:cd:a5:9a:8f:bb:2c:ff:1c:5e:22:92:3e:b0: 1b:94:f2:26:07:ec:5e:44:6b:19:d5:96:6d:e3:8c: 20:88:38:4a:44:f8:7c:82:34:d3:4a:65:3d:28:26: 2d:5d:65:e3:fb:e0:6d:fa:fb:a4:4d:48:5f:08:08: a1:ee:b5:b8:14:f2:0d:ee:41:b0:0d:09:92:e2:ce: 32:dd:d3:d8:b8:3e:56:bd:c0:9c:91:8e:be:93:f4: 93:cd:29:b1:9d:c0:8a:52:71:50:10:f4:16:96:c8: e6:ea:3d:91:52:d4:02:48:61:07:77:7d:a4:6d:81: 04:d7:d6:a8:55:d0:fb:c1:43:7f:9a:37:74:76:e8: db:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.137.236.0/24 85.137.250.0/24 IPv6: 2a12:5740::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202649 Signature Algorithm: sha256WithRSAEncryption a7:d7:ee:46:0d:f2:09:a5:ae:8e:e5:4b:5d:96:53:3e:a9:3f: 0c:d6:ab:3e:c7:28:83:f7:ea:f2:ca:5a:8c:02:80:33:c2:cb: c8:38:62:db:64:b3:b7:e0:35:a1:d2:4d:fd:93:19:2f:ba:3e: 82:4d:51:1f:88:75:ed:53:b1:cf:1b:b9:0e:ab:37:86:f7:55: aa:e0:11:cf:a8:dd:67:95:57:64:56:02:41:13:56:07:00:4d: 89:92:eb:11:0d:a6:7d:f5:76:44:ee:34:1f:86:76:24:b8:e3: a6:39:2d:b8:2b:3c:0e:2a:14:cb:63:65:a1:a4:97:52:4f:88: 47:22:3e:0f:a6:7b:a1:2c:62:c9:ff:6c:5f:87:8b:fe:30:3c: 4e:a8:08:9f:f3:e5:6c:01:15:36:1d:c7:b7:d5:c2:d3:54:ab: d1:f5:84:4e:57:f2:94:37:15:94:cc:08:ff:c8:57:52:4f:e2: e7:f2:63:7b:83:ee:f6:0b:6b:07:15:88:5e:b3:c7:98:90:b8: 82:ff:6a:e3:77:c9:c8:a7:40:a8:97:59:94:c3:ae:10:65:0a: 57:1b:8f:06:d1:7b:24:62:2d:a0:e6:a2:61:70:5a:9e:ab:60: c5:25:85:9e:50:f3:7a:f3:56:e2:7e:a1:eb:8b:70:fb:ab:9b: 12:0d:61:d2 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZvGWPFgb67XbrDyb7cs+ZXjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE2MTAyNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWZiOWY0M2E0NmYwNTk4MjdhOWRlYzM2NmQxNDk2ZDY2MDg5MTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRDwRaxIAGuCZfdJ02VMRR9bjW87 Gtso9tsKuiTDp9+x9eMj8RxjT8FYeh/rKWcLKBeO5bLDMrlEd8Q0b5+OtIPk8U2C O7lskIf8cd76PnTWlfsQsxzU+LCWEq+VpQEFQH7KPQAk0AJRWzDjZ6i20fn4J6oo brqMiM2lmo+7LP8cXiKSPrAblPImB+xeRGsZ1ZZt44wgiDhKRPh8gjTTSmU9KCYt XWXj++Bt+vukTUhfCAih7rW4FPIN7kGwDQmS4s4y3dPYuD5WvcCckY6+k/STzSmx ncCKUnFQEPQWlsjm6j2RUtQCSGEHd32kbYEE19aoVdD7wUN/mjd0dujb9QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFDr7n0OkbwWYJ6new2bRSW1mCJE0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzQyMmU5 OS1hZjVlLTQyZDctOTA1ZS03MTkzZTFiMDY2YzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNDIyZTk5 LWFmNWUtNDJkNy05MDVlLTcxOTNlMWIwNjZjMy8xL092dWZRNlJ2QlpnbnFkN0Ra dEZKYldZSWtUUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAVYnsAwQAVYn6MA0EAgACMAcDBQMqEldAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMXmTANBgkqhkiG9w0BAQsFAAOCAQEAp9fu Rg3yCaWujuVLXZZTPqk/DNarPscog/fq8spajAKAM8LLyDhi22Szt+A1odJN/ZMZ L7o+gk1RH4h17VOxzxu5Dqs3hvdVquARz6jdZ5VXZFYCQRNWBwBNiZLrEQ2mffV2 RO40H4Z2JLjjpjktuCs8DioUy2NloaSXUk+IRyI+D6Z7oSxiyf9sX4eL/jA8TqgI n/PlbAEVNh3Ht9XC01Sr0fWETlfylDcVlMwI/8hXUk/i5/Jje4Pu9gtrBxWIXrPH mJC4gv9q43fJyKdAqJdZlMOuEGUKVxuPBtF7JGItoOaiYXBanqtgxSWFnlDzevNW 4n6h64tw+6ubEg1h0g== -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:52 2026 by rpki-client