This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer (raw, json) Hash identifier: RwBGccDotr/vwsKFVOVMuIMEXnx4W+CfN8xAKpjamk8= Subject key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F01E19F79D99A17629156C94833E0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.49.240.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:01:e1:9f:79:d9:9a:17:62:91:56:c9:48:33:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:17:6d:5f:e9:03:07:6a:29:66:0b:c1:ce: 24:61:78:94:93:fb:92:be:32:5b:3d:4c:95:f6:74: 8c:cc:2c:1f:dc:47:ef:a3:b4:ff:8f:aa:80:b1:4c: 65:5c:1a:e6:bb:bb:e0:38:f1:82:ac:70:1c:a6:b8: 51:bd:64:32:49:9e:7a:c7:48:bc:25:67:d2:12:ee: a6:1a:be:48:0e:0a:de:e7:7f:86:22:f3:b5:cb:6f: d8:d8:05:0e:6e:50:d5:67:2e:c3:bf:6d:b5:e5:df: 0c:9e:42:4f:3a:f4:cf:63:86:47:13:27:11:41:a5: 9f:34:15:99:4d:ad:97:7d:74:0e:9c:55:94:9d:d7: fa:be:75:4c:4b:2e:42:2b:87:0c:ab:eb:86:e8:d3: 5e:9f:61:52:c1:e2:22:f2:ea:91:95:70:89:57:39: e2:e1:c0:38:a5:58:5d:15:e9:a8:37:af:c8:51:06: 5a:48:7c:0a:a2:e0:a2:52:bd:7b:63:1d:47:7d:89: 83:b1:8f:28:7a:27:20:1b:f8:76:c7:0b:2f:c5:df: 18:ca:e4:0c:9c:8c:4f:8d:f9:0a:31:d7:99:55:1a: 22:cd:1f:98:fc:0e:b5:9d:f6:f9:c3:bf:75:fc:6f: 80:0a:2c:06:ea:1c:54:44:7e:fe:f7:9a:cf:23:5f: ef:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.49.240.0/21 Signature Algorithm: sha256WithRSAEncryption 39:42:dc:06:c6:03:fa:43:73:24:82:26:d5:c2:52:f0:fc:ff: 87:f5:df:7b:3c:16:0f:ff:a0:5d:c4:67:f7:2d:18:c3:a3:96: 31:73:5c:1f:b6:59:e3:5d:4f:b9:a0:20:54:49:84:e3:d9:60: 23:52:fc:90:f2:97:6e:f7:0d:fd:ad:fe:0a:73:0a:51:ae:5c: 78:ff:44:86:7f:5a:30:88:6b:ed:d2:a2:32:7a:38:31:72:32: 23:e5:85:71:f9:e7:2e:67:6d:d0:30:30:22:33:7c:9c:ba:87: 4f:09:73:1c:79:33:4e:f3:47:7f:fa:b5:af:78:5a:92:27:31: d0:2f:55:bd:f2:00:20:c3:4b:a9:48:be:a1:9c:9d:ab:87:4a: 39:4b:16:99:1b:b9:75:f6:51:45:ef:33:b9:c3:50:a5:5c:10: d8:49:7b:8b:ab:c1:14:3c:e7:16:08:6d:2e:2e:3f:ce:90:88: b1:e2:00:67:5c:4d:58:96:fa:e5:76:e0:a4:7e:2f:46:8c:3b: 76:57:eb:1a:04:ad:eb:fa:3e:3c:db:1d:2d:ac:b7:77:4a:dc: 8d:9f:57:6a:0a:15:85:9f:3a:9f:f1:f5:5a:22:df:62:ba:49: ed:74:04:ee:9a:22:74:cd:e1:1a:16:d3:12:e9:66:7e:74:fa: ea:64:71:7c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5fwHhn3nZmhdikVbJSDPgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGUzYmE4N2UzYTkzNDY4Y2MzYjNjM2Y2MGZhNjNkNWU4NTNjMzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpEXbV/pAwdqKWYLwc4kYXiUk/uS vjJbPUyV9nSMzCwf3Efvo7T/j6qAsUxlXBrmu7vgOPGCrHAcprhRvWQySZ56x0i8 JWfSEu6mGr5IDgre53+GIvO1y2/Y2AUOblDVZy7Dv2215d8MnkJPOvTPY4ZHEycR QaWfNBWZTa2XfXQOnFWUndf6vnVMSy5CK4cMq+uG6NNen2FSweIi8uqRlXCJVzni 4cA4pVhdFemoN6/IUQZaSHwKouCiUr17Yx1HfYmDsY8oeicgG/h2xwsvxd8YyuQM nIxPjfkKMdeZVRoizR+Y/A61nfb5w791/G+ACiwG6hxURH7+95rPI1/vowIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFGjjuofjqTRozDs8P2D6Y9XoU8MUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzFlZmYx Ny02NWVjLTQ1ZWEtYTc1ZC05NmViMDdmNzgyNWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvMWVmZjE3 LTY1ZWMtNDVlYS1hNzVkLTk2ZWIwN2Y3ODI1Yi8xL2FPTzZoLU9wTkdqTU96d19Z UHBqMWVoVHd4US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDwzHwMA0GCSqGSIb3DQEBCwUAA4IBAQA5QtwG xgP6Q3MkgibVwlLw/P+H9d97PBYP/6BdxGf3LRjDo5Yxc1wftlnjXU+5oCBUSYTj 2WAjUvyQ8pdu9w39rf4KcwpRrlx4/0SGf1owiGvt0qIyejgxcjIj5YVx+ecuZ23Q MDAiM3ycuodPCXMceTNO80d/+rWveFqSJzHQL1W98gAgw0upSL6hnJ2rh0o5SxaZ G7l19lFF7zO5w1ClXBDYSXuLq8EUPOcWCG0uLj/OkIix4gBnXE1YlvrlduCkfi9G jDt2V+saBK3r+j482x0trLd3StyNn1dqChWFnzqf8fVaIt9iukntdATumiJ0zeEa FtMS6WZ+dPrqZHF8 -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:11 2026 by rpki-client