This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer File: f0OdlCQm_Gc7J5zJirNf29fql_U.cer (raw, json) Hash identifier: nll/FvKfXRFpc6dBf0IaNrE00zUR2AMjLAYWecNq9Q8= Subject key identifier: 7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E387F7176436AB412BC90F891FA64C5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48483 IP: 94.247.112.0/21 IP: 2a01:7a40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:7f:71:76:43:6a:b4:12:bc:90:f8:91:fa:64:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9c:26:fa:78:96:3f:02:8e:d6:3c:85:8b:b2: 05:4c:a8:71:03:49:53:7e:ba:b8:cf:78:3c:8e:74: 79:02:f9:ed:6b:b0:ef:7b:a3:05:4c:11:ae:d4:a7: ee:aa:f4:cd:84:90:ca:a1:c2:f2:98:1c:42:9c:e1: 60:51:58:13:6a:e6:32:98:c2:e5:cb:76:01:9a:8f: bd:9c:ee:49:57:66:06:23:f9:fd:2c:49:a3:f0:ad: a1:be:15:9a:39:51:54:20:34:7c:9f:64:77:e7:33: 9a:a5:15:99:f0:2f:6b:07:49:fb:1a:ff:c7:c9:07: 24:7b:20:4a:77:f2:e1:b2:66:75:6c:b6:6c:d2:46: 18:5c:cc:7c:56:5e:8d:94:ec:f3:19:3e:10:8a:ce: 1c:42:a2:c1:82:f3:9a:1b:41:4a:e6:d8:a7:dd:b1: e4:6f:34:20:7b:6b:c1:04:13:e1:ee:08:96:d8:2e: 54:61:fe:d2:46:e7:87:07:d9:d8:e6:55:c2:2d:7c: 57:4a:57:be:15:0f:25:78:14:3b:91:0d:05:3d:aa: 45:3e:1f:88:30:5a:ac:29:f6:40:33:a9:d5:4b:8d: a3:32:6b:09:5e:cd:d2:c3:5c:59:2a:27:ce:30:a2: 9f:89:b7:02:82:e3:95:1a:ba:b8:ce:62:e5:bf:99: 95:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.247.112.0/21 IPv6: 2a01:7a40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48483 Signature Algorithm: sha256WithRSAEncryption 2a:5a:de:e3:e4:98:a6:61:6b:44:37:93:15:bf:54:79:48:3b: 98:e1:92:d2:e2:19:32:ad:1d:eb:e9:ed:ce:83:58:97:57:a9: 3f:4e:51:52:e3:e4:a1:fe:79:76:12:d7:02:e4:53:3f:5a:29: 53:1b:47:58:31:9d:9e:cd:62:87:7d:d4:5c:06:bf:3f:04:9a: d0:49:78:4f:f3:ba:e1:e0:9c:45:81:b1:44:87:ac:05:8f:f6: 8e:da:82:68:b1:8f:5d:e0:de:dc:d4:0c:44:49:f9:6b:72:83: 1c:82:ce:5f:6e:34:6a:0c:83:de:71:ae:27:14:98:95:3d:e4: f7:27:27:be:25:66:7a:6b:dc:27:d3:18:76:47:a7:45:26:07: aa:f1:8f:e7:01:f4:13:b7:2b:8e:e4:c0:7b:bb:15:ba:0d:af: e5:53:42:bc:f4:5f:2c:74:ec:dc:78:73:55:44:1b:be:ad:1f: 49:72:b9:b7:d3:99:f1:3e:30:42:40:60:c8:00:b9:1c:c9:8d: 8c:49:0a:fe:3d:7f:46:92:b9:2f:19:80:34:eb:3f:ec:de:f7: d3:f7:69:db:44:01:81:c9:63:e0:2d:1e:ca:ed:85:8a:e1:c6: 51:34:87:63:cb:6f:82:92:e0:ff:76:71:0e:48:39:e0:be:12: 03:22:d7:4b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+OH9xdkNqtBK8kPiR+mTFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjQzOWQ5NDI0MjZmYzY3M2IyNzljYzk4YWIzNWZkYmQ3ZWE5N2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJwm+niWPwKO1jyFi7IFTKhxA0lT frq4z3g8jnR5Avnta7Dve6MFTBGu1KfuqvTNhJDKocLymBxCnOFgUVgTauYymMLl y3YBmo+9nO5JV2YGI/n9LEmj8K2hvhWaOVFUIDR8n2R35zOapRWZ8C9rB0n7Gv/H yQckeyBKd/LhsmZ1bLZs0kYYXMx8Vl6NlOzzGT4Qis4cQqLBgvOaG0FK5tin3bHk bzQge2vBBBPh7giW2C5UYf7SRueHB9nY5lXCLXxXSle+FQ8leBQ7kQ0FPapFPh+I MFqsKfZAM6nVS42jMmsJXs3Sw1xZKifOMKKfibcCguOVGrq4zmLlv5mVCQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFH9DnZQkJvxnOyecyYqzX9vX6pf1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhLzY5YTA5 Zi01ODA5LTQ2NTYtYjM1NS0xNDZmMjU0YWMxMzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvNjlhMDlm LTU4MDktNDY1Ni1iMzU1LTE0NmYyNTRhYzEzMS8xL2YwT2RsQ1FtX0djN0o1ekpp ck5mMjlmcWxfVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDXvdwMA0EAgACMAcDBQAqAXpAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC9YzANBgkqhkiG9w0BAQsFAAOCAQEAKlre4+SYpmFr RDeTFb9UeUg7mOGS0uIZMq0d6+ntzoNYl1epP05RUuPkof55dhLXAuRTP1opUxtH WDGdns1ih33UXAa/PwSa0El4T/O64eCcRYGxRIesBY/2jtqCaLGPXeDe3NQMREn5 a3KDHILOX240agyD3nGuJxSYlT3k9ycnviVmemvcJ9MYdkenRSYHqvGP5wH0E7cr juTAe7sVug2v5VNCvPRfLHTs3HhzVUQbvq0fSXK5t9OZ8T4wQkBgyAC5HMmNjEkK /j1/RpK5LxmANOs/7N730/dp20QBgclj4C0eyu2FiuHGUTSHY8tvgpLg/3ZxDkg5 4L4SAyLXSw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:17 2026 by rpki-client