This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer File: OxRinHZc4axPaIlW47kPatjEtYI.cer (raw, json) Hash identifier: NjSGud3dlwTevcGqmkSRVf0Dl/q1TUrc96yjeKHnVy0= Subject key identifier: 3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758B70F49D7D615EBD96A129BD5C064 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 160.80.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b7:0f:49:d7:d6:15:eb:d9:6a:12:9b:d5:c0:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:77:2e:cc:07:17:20:c0:33:23:34:4d:5e:29: 58:d8:b1:82:0e:31:03:45:3f:c2:68:b7:91:ed:c7: 39:e8:3d:c9:7d:fc:01:09:bc:2b:f0:ed:04:84:ae: 6d:75:5a:ab:09:fe:fb:49:c9:3b:31:fc:c1:3f:a4: 6e:bd:22:ad:d3:41:68:9a:e9:85:3c:8e:bf:be:78: ce:de:63:83:ee:9d:49:06:bd:7f:24:6e:ef:53:56: 4e:1c:f5:e0:64:09:3a:78:17:1f:20:4b:1e:ee:3a: 10:6b:e1:f1:dc:08:75:61:dc:c2:53:ee:6f:b3:e6: 32:f5:d2:a9:10:e2:6f:a7:01:e1:eb:10:8b:16:be: e5:f4:f5:72:2a:62:37:1a:82:39:7c:67:05:be:15: 6f:1d:d9:5f:96:8b:7c:b4:f3:96:bd:82:8a:0d:66: 8c:cf:7c:86:90:0b:e5:69:6e:24:48:c5:46:48:77: c4:1f:61:be:ba:f4:26:93:cb:4f:d2:6e:9c:9a:52: d8:f4:0f:da:55:c9:e4:2b:96:5c:09:fa:f4:55:0b: 91:57:a2:43:46:0e:80:f4:a3:f0:cc:93:c4:f7:0e: b0:f1:4f:5f:c5:27:90:74:d9:21:b2:34:0f:ce:c5: d2:d2:b8:14:cd:8a:ad:8d:c2:64:44:3c:a1:6a:15: 7f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.80.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5a:a1:42:b2:df:5b:55:6a:67:89:15:65:9f:fa:36:6f:8e:83: e5:1e:b0:b6:e3:d1:79:47:ae:ec:f4:ad:73:12:cf:72:02:c6: 89:2a:d2:d7:67:7d:a4:1a:68:a3:45:14:9e:c0:2c:95:3f:aa: b9:ff:c9:92:1c:e1:c7:43:b1:ba:39:48:22:d2:27:d9:ed:5b: e6:26:7c:2e:2d:d5:4c:07:b0:0e:bb:81:92:16:d9:d6:e9:b9: 76:54:48:7b:f6:c1:75:38:2b:b6:e1:47:04:a9:fd:62:c5:5e: d6:80:49:4e:87:7d:6f:75:df:ef:ec:e5:54:62:99:90:25:d0: 1e:c2:11:5d:d8:f8:a9:92:67:50:76:49:59:f1:b9:ff:b0:43: c1:bc:cf:e1:cc:99:e3:de:5a:6a:c7:a2:e5:c6:f0:8d:66:d3: 5a:fc:db:2c:04:9b:e3:b1:93:6a:dd:fe:3a:68:d0:fe:3b:bb: bf:b8:87:89:4a:db:2c:0e:71:f5:88:ca:f7:b7:c7:a7:a9:db: 98:48:6d:2d:4e:b2:2b:2d:e8:c5:25:66:b7:ca:c0:f2:6d:37: f6:23:6c:17:e3:12:8a:5d:c6:cc:33:f9:9e:8b:6e:3e:c8:55: f5:55:e4:b5:e8:8d:a1:26:42:f8:53:f4:c1:4a:25:c4:52:a1: 76:b4:7c:cb -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt3WLcPSdfWFevZahKb1cBkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjE0NjI5Yzc2NWNlMWFjNGY2ODg5NTZlM2I5MGY2YWQ4YzRiNTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HcuzAcXIMAzIzRNXilY2LGCDjED RT/CaLeR7cc56D3JffwBCbwr8O0EhK5tdVqrCf77Sck7MfzBP6RuvSKt00FomumF PI6/vnjO3mOD7p1JBr1/JG7vU1ZOHPXgZAk6eBcfIEse7joQa+Hx3Ah1YdzCU+5v s+Yy9dKpEOJvpwHh6xCLFr7l9PVyKmI3GoI5fGcFvhVvHdlflot8tPOWvYKKDWaM z3yGkAvlaW4kSMVGSHfEH2G+uvQmk8tP0m6cmlLY9A/aVcnkK5ZcCfr0VQuRV6JD Rg6A9KPwzJPE9w6w8U9fxSeQdNkhsjQPzsXS0rgUzYqtjcJkRDyhahV/SQIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFDsUYpx2XOGsT2iJVuO5D2rYxLWCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjL2EzN2Y5 Yy0xZTZhLTQ2NjUtYTBlMi1mZTMxMTAwZDA4MWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvYTM3Zjlj LTFlNmEtNDY2NS1hMGUyLWZlMzExMDBkMDgxZi8xL094UmluSFpjNGF4UGFJbFc0 N2tQYXRqRXRZSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAoFAwDQYJKoZIhvcNAQELBQADggEBAFqhQrLf W1VqZ4kVZZ/6Nm+Og+UesLbj0XlHruz0rXMSz3ICxokq0tdnfaQaaKNFFJ7ALJU/ qrn/yZIc4cdDsbo5SCLSJ9ntW+YmfC4t1UwHsA67gZIW2dbpuXZUSHv2wXU4K7bh RwSp/WLFXtaASU6HfW913+/s5VRimZAl0B7CEV3Y+KmSZ1B2SVnxuf+wQ8G8z+HM mePeWmrHouXG8I1m01r82ywEm+Oxk2rd/jpo0P47u7+4h4lK2ywOcfWIyve3x6ep 25hIbS1Osist6MUlZrfKwPJtN/YjbBfjEopdxswz+Z6Lbj7IVfVV5LXojaEmQvhT 9MFKJcRSoXa0fMs= -----END CERTIFICATE-----Generated at Tue Feb 10 01:06:11 2026 by rpki-client