This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer File: _oN5mWfs0ExTYUie5M-gmM5DaHE.cer (raw, json) Hash identifier: 9yhie3vusvv/efj0afxMjOaYIDTsKy4Xp/B7m8R5jL8= Subject key identifier: FE:83:79:99:67:EC:D0:4C:53:61:48:9E:E4:CF:A0:98:CE:43:68:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79101D26FA4F9264EA28A968767B075C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.55.139.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1d:26:fa:4f:92:64:ea:28:a9:68:76:7b:07:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe83799967ecd04c5361489ee4cfa098ce436871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a4:3a:5c:83:d6:f9:b0:b5:20:8a:df:db:c2: 75:2c:54:66:bd:c3:72:d9:7b:c5:7c:9f:41:0c:09: 0a:ea:0f:7c:6e:27:3b:68:3d:29:38:71:21:70:08: e4:15:f5:e4:2e:cb:eb:6e:98:86:9f:86:65:41:30: ec:3a:fd:f8:8b:3c:84:dd:11:21:4d:b7:3e:40:25: 57:ec:e4:3c:60:c6:96:94:0a:e7:24:f7:03:32:56: d3:e7:8e:46:59:dc:ae:37:e2:d6:6b:8c:6e:f2:fb: 9e:72:95:19:1b:26:72:61:0f:4f:67:2f:1f:81:43: a1:9d:a8:26:c5:5c:a4:7a:cc:61:91:07:bc:16:e3: 27:7d:8f:a2:aa:20:ce:6c:30:75:25:32:69:9d:3a: ca:72:1b:13:31:e6:c0:94:f4:7f:40:09:6b:99:9b: fe:52:8a:55:85:3c:81:ed:56:43:ce:c5:8b:30:c0: c7:9d:9d:ef:6e:c4:de:83:98:9b:38:91:42:13:0d: 72:fc:19:6e:07:38:ca:ac:2d:e4:b1:ea:df:ee:5e: 5d:f1:2a:80:73:63:b6:3a:2c:d2:cc:6f:c8:68:91: 5e:4b:68:6b:eb:a2:fc:ef:2a:ac:43:fa:56:2d:f1: b9:93:c8:22:fd:d2:1e:15:e2:54:dc:a4:91:b0:8c: cf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:83:79:99:67:EC:D0:4C:53:61:48:9E:E4:CF:A0:98:CE:43:68:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.55.139.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:a6:21:60:b1:05:dc:2a:07:63:b5:ff:04:85:46:78:ac:e6: 4f:11:99:58:bc:22:58:c3:06:5b:96:d2:0d:1f:4a:f0:14:33: 5d:32:b8:09:15:42:16:8b:48:da:c3:9b:59:94:3c:3d:2d:c0: cf:90:58:b2:ef:d4:a5:ec:ca:69:7d:a9:48:45:bc:f2:a1:e2: df:8e:c8:c0:8f:bc:06:fc:fe:28:3e:52:50:74:32:f7:11:8a: 87:63:55:b7:ab:e2:d6:d0:f4:ae:ec:b9:54:94:53:fb:e3:60: 11:87:14:3f:5c:13:3b:30:da:55:ed:fb:3a:2c:e7:61:93:d1: f0:bc:48:0f:ea:5c:8a:71:e1:1b:9c:30:f7:fb:ec:2d:49:f2: 9d:73:cc:e8:67:53:44:0c:e8:0b:4f:7c:36:2d:3b:85:70:58: 17:88:48:13:f6:b6:a9:84:4d:75:ef:01:11:11:0f:d0:b0:ec: c0:5f:6a:9a:41:5c:b7:8f:85:b3:32:19:f2:0f:95:06:75:14: 1a:4a:7c:12:9c:1b:93:50:58:40:66:e2:be:86:42:75:52:ec: 59:ec:a0:d1:9b:72:c2:96:9e:40:85:d7:c0:4a:31:56:83:eb: 9f:42:89:d9:72:73:21:2b:fb:5e:0c:4f:20:ac:5d:c7:a7:75: 14:6b:90:d7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5EB0m+k+SZOooqWh2ewdcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTgzNzk5OTY3ZWNkMDRjNTM2MTQ4OWVlNGNmYTA5OGNlNDM2ODcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKQ6XIPW+bC1IIrf28J1LFRmvcNy 2XvFfJ9BDAkK6g98bic7aD0pOHEhcAjkFfXkLsvrbpiGn4ZlQTDsOv34izyE3REh Tbc+QCVX7OQ8YMaWlArnJPcDMlbT545GWdyuN+LWa4xu8vuecpUZGyZyYQ9PZy8f gUOhnagmxVykesxhkQe8FuMnfY+iqiDObDB1JTJpnTrKchsTMebAlPR/QAlrmZv+ UopVhTyB7VZDzsWLMMDHnZ3vbsTeg5ibOJFCEw1y/BluBzjKrC3kserf7l5d8SqA c2O2OizSzG/IaJFeS2hr66L87yqsQ/pWLfG5k8gi/dIeFeJU3KSRsIzPDQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFP6DeZln7NBMU2FInuTPoJjOQ2hxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzlhZjAz My0yMzRkLTQ0MDQtODA5Ni1jNzNiZWRjZGNhNmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvOWFmMDMz LTIzNGQtNDQwNC04MDk2LWM3M2JlZGNkY2E2ZC8xL19vTjVtV2ZzMEV4VFlVaWU1 TS1nbU01RGFIRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwjeLMA0GCSqGSIb3DQEBCwUAA4IBAQA8piFg sQXcKgdjtf8EhUZ4rOZPEZlYvCJYwwZbltINH0rwFDNdMrgJFUIWi0jaw5tZlDw9 LcDPkFiy79Sl7MppfalIRbzyoeLfjsjAj7wG/P4oPlJQdDL3EYqHY1W3q+LW0PSu 7LlUlFP742ARhxQ/XBM7MNpV7fs6LOdhk9HwvEgP6lyKceEbnDD3++wtSfKdc8zo Z1NEDOgLT3w2LTuFcFgXiEgT9raphE117wEREQ/QsOzAX2qaQVy3j4WzMhnyD5UG dRQaSnwSnBuTUFhAZuK+hkJ1UuxZ7KDRm3LClp5AhdfASjFWg+ufQonZcnMhK/te DE8grF3Hp3UUa5DX -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:02 2026 by rpki-client