This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aOlYF0Bglex8tceyhrETM0l7lFE.cer File: aOlYF0Bglex8tceyhrETM0l7lFE.cer (raw, json) Hash identifier: x0fyW9MQ2v1rXGVZXsnG6qu2tMX4lidTumfXZJ//VZo= Subject key identifier: 68:E9:58:17:40:60:95:EC:7C:B5:C7:B2:86:B1:13:33:49:7B:94:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA521BB3C7591FB92FF3A2291C2CBBE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/4a5d71-e11d-4d32-b597-019ec9d9a758/1/aOlYF0Bglex8tceyhrETM0l7lFE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/4a5d71-e11d-4d32-b597-019ec9d9a758/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208477 IP: 91.208.31.0/24 IP: 91.208.46.0/24 IP: 91.208.48.0/24 IP: 91.208.64.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:21:bb:3c:75:91:fb:92:ff:3a:22:91:c2:cb:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68e95817406095ec7cb5c7b286b11333497b9451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f2:79:9a:43:1e:6f:3a:23:41:b5:42:91:50: 63:a2:8e:17:99:45:69:28:9a:ec:46:47:82:2d:3a: 6e:f0:83:f1:a2:8c:c4:bd:e1:08:37:e0:ed:0e:73: 7f:ea:f1:c9:33:82:36:69:1c:2d:54:62:0d:31:8b: 64:6b:ee:93:cc:57:54:29:67:b0:f7:28:0e:d5:85: b2:80:f1:06:fa:20:28:70:80:df:c6:60:5b:0a:33: ad:5e:33:64:92:ae:db:a0:3f:67:6b:47:36:2c:ca: a3:56:b6:5b:17:e9:f1:80:a3:74:43:36:b9:c9:01: 93:90:c8:60:c1:11:80:93:a0:1b:6d:7a:25:f0:e9: c8:b0:f0:1b:a4:e5:57:32:a2:e4:62:76:0e:73:b0: d7:96:16:fe:cf:37:1c:c8:32:35:d9:b4:07:61:28: 35:4d:38:8a:f9:f8:fd:91:3c:52:33:f2:c0:f7:15: 21:6a:b0:06:f8:c0:41:ef:e1:52:b4:44:da:9f:3e: 72:92:b0:25:88:02:25:a8:8c:4a:98:56:21:f1:b9: 90:6c:c4:7d:94:0b:e8:86:0b:c3:ef:cc:40:a7:c5: d2:c9:9b:27:cb:15:b9:1c:51:60:7a:4c:17:90:ee: 51:3b:bc:e9:a4:5d:f5:6e:46:7d:b1:32:7b:7f:21: 6d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E9:58:17:40:60:95:EC:7C:B5:C7:B2:86:B1:13:33:49:7B:94:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4a5d71-e11d-4d32-b597-019ec9d9a758/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4a5d71-e11d-4d32-b597-019ec9d9a758/1/aOlYF0Bglex8tceyhrETM0l7lFE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.31.0/24 91.208.46.0/24 91.208.48.0/24 91.208.64.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208477 Signature Algorithm: sha256WithRSAEncryption b0:3f:89:a1:5b:ab:b2:61:ff:a9:c2:2c:0b:eb:7c:0b:26:89: 94:82:ad:9f:4f:53:c6:08:20:aa:b7:6e:48:08:bf:55:05:a6: 27:f3:7e:e9:f0:d9:01:67:28:0c:a4:12:df:32:09:2f:9b:c6: f6:58:a5:e9:70:1a:e2:db:8e:aa:ac:3a:31:67:c3:e7:94:14: 02:83:b7:6b:90:b0:b1:51:0b:4c:1b:09:52:a1:1b:b0:58:6e: db:a0:04:08:29:74:f3:20:d5:73:cd:e4:8b:47:27:1e:dc:ba: da:ff:00:be:e0:e6:b5:03:50:a4:b3:a1:05:c5:4d:91:6b:b2: ab:e9:7f:87:4d:84:ac:09:f2:1f:67:af:99:10:76:d8:45:a2: a8:25:24:6f:c9:e7:fc:76:41:9f:eb:1c:39:26:1c:c9:fd:43: 6e:90:c7:74:07:f0:5f:ac:10:b7:8a:f5:2f:80:79:62:d3:34: 9b:a2:cc:e5:5e:32:de:1a:3f:87:91:6c:f0:a3:34:6c:a3:62: de:55:ae:2f:fd:bd:3e:5b:66:75:2f:db:e5:71:69:a3:86:a8: 8f:9e:25:f6:03:99:2d:67:f9:f5:09:78:be:90:7b:42:04:fb: 57:41:0d:d5:d0:e3:42:ff:16:60:b4:6c:74:2a:1b:a0:50:c6: 55:87:40:b4 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZt7pSG7PHWR+5L/OiKRwsu+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGU5NTgxNzQwNjA5NWVjN2NiNWM3YjI4NmIxMTMzMzQ5N2I5NDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fJ5mkMebzojQbVCkVBjoo4XmUVp KJrsRkeCLTpu8IPxoozEveEIN+DtDnN/6vHJM4I2aRwtVGINMYtka+6TzFdUKWew 9ygO1YWygPEG+iAocIDfxmBbCjOtXjNkkq7boD9na0c2LMqjVrZbF+nxgKN0Qza5 yQGTkMhgwRGAk6AbbXol8OnIsPAbpOVXMqLkYnYOc7DXlhb+zzccyDI12bQHYSg1 TTiK+fj9kTxSM/LA9xUharAG+MBB7+FStETanz5ykrAliAIlqIxKmFYh8bmQbMR9 lAvohgvD78xAp8XSyZsnyxW5HFFgekwXkO5RO7zppF31bkZ9sTJ7fyFtRwIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFGjpWBdAYJXsfLXHsoaxEzNJe5RRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzRhNWQ3 MS1lMTFkLTRkMzItYjU5Ny0wMTllYzlkOWE3NTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvNGE1ZDcx LWUxMWQtNGQzMi1iNTk3LTAxOWVjOWQ5YTc1OC8xL2FPbFlGMEJnbGV4OHRjZXlo ckVUTTBsN2xGRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQAW9AfAwQAW9AuAwQAW9AwAwQAW9BAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwMuXTANBgkqhkiG9w0BAQsFAAOCAQEAsD+JoVur smH/qcIsC+t8CyaJlIKtn09TxgggqrduSAi/VQWmJ/N+6fDZAWcoDKQS3zIJL5vG 9lil6XAa4tuOqqw6MWfD55QUAoO3a5CwsVELTBsJUqEbsFhu26AECCl08yDVc83k i0cnHty62v8AvuDmtQNQpLOhBcVNkWuyq+l/h02ErAnyH2evmRB22EWiqCUkb8nn /HZBn+scOSYcyf1DbpDHdAfwX6wQt4r1L4B5YtM0m6LM5V4y3ho/h5Fs8KM0bKNi 3lWuL/29PltmdS/b5XFpo4aoj54l9gOZLWf59Ql4vpB7QgT7V0EN1dDjQv8WYLRs dCoboFDGVYdAtA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:55 2026 by rpki-client