This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer File: OyMEQv6un8Jri9iH-qDtAnWCelg.cer (raw, json) Hash identifier: dirDkcp9k/382sjCJVgnTpq8AS62jOxxQQzR2XCaC9M= Subject key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37FEA34955B1D5E4D75DC8C8B34798 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20570 AS: 44178 AS: 48951 AS: 205453 AS: 209598 IP: 2.160.0.0/12 IP: 31.212.0.0/15 IP: 31.224.0.0/11 IP: 37.50.0.0/15 IP: 37.80.0.0/12 IP: 46.78.0.0/15 IP: 78.140.64.0/18 IP: 80.187.0.0/16 IP: 81.7.192.0/19 IP: 82.210.192.0/18 IP: 88.128.0.0/16 IP: 93.122.0.0/17 IP: 109.237.176.0/20 IP: 185.149.164.0/22 IP: 193.17.77.0/24 IP: 193.254.128.0 -- 193.254.175.255 IP: 194.41.39.0/24 IP: 2001:67c:22bc::/48 IP: 2a01:598::/29 IP: 2a01:660::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:fe:a3:49:55:b1:d5:e4:d7:5d:c8:c8:b3:47:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b230442feae9fc26b8bd887faa0ed0275827a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f7:80:d8:95:a0:21:47:9c:af:73:c2:3b:ce: 85:fe:7e:29:09:c9:81:4d:a1:7a:49:a2:d0:9b:8e: 2d:a9:4f:a8:19:ce:4e:49:57:9e:53:5c:84:37:45: 4b:5a:39:41:6f:ee:2e:5d:86:77:46:5a:8f:2d:9a: 7f:76:cc:e6:f8:68:ee:86:c9:8f:36:1c:7c:2b:ec: cc:0b:4a:f0:df:54:85:b8:76:d7:dc:51:1e:cf:89: 8e:30:46:ff:ee:38:ad:4e:77:d9:95:93:4e:b4:29: cb:f2:cb:df:01:40:58:64:01:2a:68:ca:7d:6a:f0: cb:69:65:84:19:67:7f:38:88:8e:96:cb:5c:2a:4d: 14:fb:53:35:b5:0b:9a:8b:7b:f2:d2:27:a5:70:fc: d4:41:d2:3f:9e:7b:07:84:fc:7c:60:08:ec:d4:e4: e8:49:65:dc:d8:54:7b:53:5b:a6:76:72:5e:4b:df: e3:9d:da:e0:86:39:3d:91:20:09:8b:d9:48:a0:53: 47:5e:36:6a:a7:64:7e:78:84:ba:d7:70:b8:1a:58: d4:59:ec:a0:fa:75:5a:57:a9:62:45:a5:4a:b7:4b: 21:eb:39:40:7b:07:cd:9e:40:df:dc:56:cd:a9:ce: 6f:6a:cc:06:f3:c0:f0:ef:6f:4d:f9:f8:ec:fa:6b: 81:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.160.0.0/12 31.212.0.0/15 31.224.0.0/11 37.50.0.0/15 37.80.0.0/12 46.78.0.0/15 78.140.64.0/18 80.187.0.0/16 81.7.192.0/19 82.210.192.0/18 88.128.0.0/16 93.122.0.0/17 109.237.176.0/20 185.149.164.0/22 193.17.77.0/24 193.254.128.0-193.254.175.255 194.41.39.0/24 IPv6: 2001:67c:22bc::/48 2a01:598::/29 2a01:660::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20570 44178 48951 205453 209598 Signature Algorithm: sha256WithRSAEncryption 66:8e:e3:99:cb:d2:39:58:90:cc:0c:59:f6:93:40:99:8f:8b: 28:68:bf:ec:a2:0f:24:05:73:e6:dd:2b:34:b7:b4:91:d2:77: ab:7b:df:78:4e:e0:e0:8b:00:be:14:70:54:31:f9:3a:f9:de: bc:48:59:18:cf:e6:0f:6f:dd:53:1d:20:98:ff:5c:ae:5b:c7: 86:84:40:7f:da:c3:6c:5e:89:c6:06:4b:99:cb:f9:92:18:8e: f5:d4:c0:13:f9:a3:6e:7f:24:66:de:cb:5c:ab:56:e1:0a:fd: 12:53:13:bf:62:f2:94:bd:72:04:49:f3:60:a2:c1:95:fc:39: 9e:cc:2a:17:e7:47:5a:c1:2a:fb:ef:b3:fb:67:ab:c8:78:a0: bc:54:97:7a:48:14:45:3d:3a:6e:00:01:b1:82:93:00:05:60: 91:a7:3a:ef:7f:c9:6a:2d:f2:c8:53:2c:44:33:ca:02:8c:51: 70:4f:3a:96:c9:d7:05:09:2b:b9:6d:71:4d:8d:eb:aa:66:e2: c5:d0:a3:cd:40:ef:c3:3e:97:cf:d2:77:90:6b:db:26:a7:95: 40:ee:aa:e6:07:fa:b9:15:bf:ec:39:1e:d4:b7:e4:49:83:3c: 4a:cb:77:53:d5:ac:b1:e2:46:78:ab:80:45:8a:1f:ff:a3:26: 13:ee:71:ae -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgISAZt+N/6jSVWx1eTXXcjIs0eYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjIzMDQ0MmZlYWU5ZmMyNmI4YmQ4ODdmYWEwZWQwMjc1ODI3YTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5veA2JWgIUecr3PCO86F/n4pCcmB TaF6SaLQm44tqU+oGc5OSVeeU1yEN0VLWjlBb+4uXYZ3RlqPLZp/dszm+GjuhsmP Nhx8K+zMC0rw31SFuHbX3FEez4mOMEb/7jitTnfZlZNOtCnL8svfAUBYZAEqaMp9 avDLaWWEGWd/OIiOlstcKk0U+1M1tQuai3vy0ielcPzUQdI/nnsHhPx8YAjs1OTo SWXc2FR7U1umdnJeS9/jndrghjk9kSAJi9lIoFNHXjZqp2R+eIS613C4GljUWeyg +nVaV6liRaVKt0sh6zlAewfNnkDf3FbNqc5vaswG88Dw729N+fjs+muBewIDAQAB o4IDNTCCAzEwHQYDVR0OBBYEFDsjBEL+rp/Ca4vYh/qg7QJ1gnpYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzNhMTA5 NC05YjcwLTQyNTEtYjY4Zi03MjY3MDczNzYxZDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvM2ExMDk0 LTliNzAtNDI1MS1iNjhmLTcyNjcwNzM3NjFkNC8xL095TUVRdjZ1bjhKcmk5aUgt cUR0QW5XQ2VsZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGgBggrBgEF BQcBBwEB/wSBkDCBjTBsBAIAATBmAwMEAqADAwEf1AMDBR/gAwMBJTIDAwQlUAMD AS5OAwQGToxAAwMAULsDBAVRB8ADBAZS0sADAwBYgAMEB116AAMEBG3tsAMEArmV pAMEAMERTTAMAwQHwf6AAwQEwf6gAwQAwiknMB0EAgACMBcDBwAgAQZ8IrwDBQMq AQWYAwUDKgEGYDAtBggrBgEFBQcBCAEB/wQeMBygGjAYAgJQWgIDAKySAgMAvzcC AwMijQIDAzK+MA0GCSqGSIb3DQEBCwUAA4IBAQBmjuOZy9I5WJDMDFn2k0CZj4so aL/sog8kBXPm3Ss0t7SR0nere994TuDgiwC+FHBUMfk6+d68SFkYz+YPb91THSCY /1yuW8eGhEB/2sNsXonGBkuZy/mSGI711MAT+aNufyRm3stcq1bhCv0SUxO/YvKU vXIESfNgosGV/DmezCoX50dawSr777P7Z6vIeKC8VJd6SBRFPTpuAAGxgpMABWCR pzrvf8lqLfLIUyxEM8oCjFFwTzqWydcFCSu5bXFNjeuqZuLF0KPNQO/DPpfP0neQ a9smp5VA7qrmB/q5Fb/sOR7Ut+RJgzxKy3dT1ayx4kZ4q4BFih//oyYT7nGu -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:21 2026 by rpki-client