This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer File: mOszws77XaNGB7ALUAXkS3VSSh8.cer (raw, json) Hash identifier: DmyuX8ZDDLcv9UCI0vkJi3F3sklXWgw62FzyPFsrdxQ= Subject key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FEDA82CE194489959E03B3858A24A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56958 IP: 45.130.16.0/22 IP: 45.142.228.0/22 IP: 178.211.133.0/24 IP: 185.237.234.0/23 IP: 201.46.112.0/23 IP: 2a12:d280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ed:a8:2c:e1:94:48:99:59:e0:3b:38:58:a2:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9d:2c:96:71:57:f9:3f:56:f7:ad:92:28:81: 56:98:49:7d:ce:44:c9:b3:bc:81:e4:2a:b1:02:e9: 23:ff:8c:ce:ee:cc:63:4c:d5:b1:01:0b:a1:c6:d7: 4f:6e:6d:4d:d3:5b:f7:a1:48:93:13:30:a6:b0:fd: 53:1c:87:a1:82:33:12:8d:da:6c:69:32:88:df:44: 1a:ef:a3:43:48:ba:68:6e:27:52:46:bc:2c:45:55: dd:8b:22:7d:4e:65:6c:43:72:2e:93:7f:05:b1:34: 57:f1:f8:bd:c2:01:4b:60:3b:ae:db:2b:49:85:67: 9f:54:d0:6b:ea:bd:01:27:cd:bd:79:2f:47:c3:92: b2:74:03:f9:9e:6e:34:a7:b7:6f:53:84:14:36:63: ff:2d:8b:3f:e7:9a:32:5d:d3:07:b8:7a:f9:ee:7e: 6f:19:d5:da:77:07:48:41:1d:07:b2:b6:33:10:0c: cd:45:1c:04:8e:a0:42:86:a1:a3:3a:15:f9:cc:ed: f4:14:7e:4b:c2:13:3d:85:22:f3:27:31:a6:02:ad: 5f:e1:c7:2d:c2:16:42:a0:4c:87:95:9a:ea:07:bb: 1f:cf:67:16:7c:dc:b7:4f:00:63:1d:4d:8c:6e:fa: 55:7d:31:46:04:64:77:64:59:7b:53:df:98:bb:44: 61:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.16.0/22 45.142.228.0/22 178.211.133.0/24 185.237.234.0/23 201.46.112.0/23 IPv6: 2a12:d280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56958 Signature Algorithm: sha256WithRSAEncryption 19:83:25:76:e8:0c:98:38:9a:2d:c8:f9:57:02:19:d5:e7:1d: 02:48:a4:8b:8d:b3:61:6e:0e:87:a0:31:35:c2:b4:7f:41:65: 69:05:2c:bf:8f:5f:f5:e8:8e:20:67:4f:c8:45:95:19:f8:f8: 89:be:ce:54:45:f1:f8:18:1e:60:6c:2d:9b:0d:88:52:e7:30: 0c:34:d9:3b:f3:ef:4d:f0:90:ca:85:bd:85:97:86:8b:cb:3b: d4:88:22:6c:32:6d:ce:90:0c:c1:41:5d:c6:aa:60:d1:5e:6b: 79:7a:bb:83:35:3b:9b:4e:d8:35:db:da:14:73:1a:5c:5f:8b: 09:e4:49:c0:af:79:d5:78:60:1e:a0:b2:03:22:45:ce:3c:e1: d4:41:31:f5:32:08:8d:ac:51:5b:5e:4c:71:7d:ef:eb:15:58: 9c:bf:b4:2c:bb:1e:49:be:c0:31:95:d4:d8:7b:67:43:df:36: 13:35:44:38:7f:e4:79:5b:6c:4c:e7:65:66:84:0a:20:9b:7b: 8c:72:20:b3:96:7c:e4:27:34:42:74:8f:58:e0:e1:e1:25:f6: 35:bf:ad:6a:7f:e1:4d:15:c7:37:cb:b4:59:8e:20:95:00:cd: a9:a6:1c:fc:f1:1c:3a:4a:a9:0c:e1:37:9d:fa:66:56:ec:2c: 2d:14:e5:2c -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt8f+2oLOGUSJlZ4Ds4WKJKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGViMzNjMmNlZmI1ZGEzNDYwN2IwMGI1MDA1ZTQ0Yjc1NTI0YTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ0slnFX+T9W962SKIFWmEl9zkTJ s7yB5CqxAukj/4zO7sxjTNWxAQuhxtdPbm1N01v3oUiTEzCmsP1THIehgjMSjdps aTKI30Qa76NDSLpobidSRrwsRVXdiyJ9TmVsQ3Iuk38FsTRX8fi9wgFLYDuu2ytJ hWefVNBr6r0BJ829eS9Hw5KydAP5nm40p7dvU4QUNmP/LYs/55oyXdMHuHr57n5v GdXadwdIQR0HsrYzEAzNRRwEjqBChqGjOhX5zO30FH5LwhM9hSLzJzGmAq1f4cct whZCoEyHlZrqB7sfz2cWfNy3TwBjHU2MbvpVfTFGBGR3ZFl7U9+Yu0RhdwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFJjrM8LO+12jRgewC1AF5Et1UkofMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2Lzc2YjFk My00ZmQ5LTQ2Y2YtODNlNi0yMGM0ZGMxZTRhNzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvNzZiMWQz LTRmZDktNDZjZi04M2U2LTIwYzRkYzFlNGE3Ny8xL21Pc3p3czc3WGFOR0I3QUxV QVhrUzNWU1NoOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCLYIQAwQCLY7kAwQAstOFAwQBue3qAwQByS5w MA0EAgACMAcDBQMqEtKAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDefjANBgkq hkiG9w0BAQsFAAOCAQEAGYMldugMmDiaLcj5VwIZ1ecdAkiki42zYW4Oh6AxNcK0 f0FlaQUsv49f9eiOIGdPyEWVGfj4ib7OVEXx+BgeYGwtmw2IUucwDDTZO/PvTfCQ yoW9hZeGi8s71IgibDJtzpAMwUFdxqpg0V5reXq7gzU7m07YNdvaFHMaXF+LCeRJ wK951XhgHqCyAyJFzjzh1EEx9TIIjaxRW15McX3v6xVYnL+0LLseSb7AMZXU2Htn Q982EzVEOH/keVtsTOdlZoQKIJt7jHIgs5Z85Cc0QnSPWODh4SX2Nb+tan/hTRXH N8u0WY4glQDNqaYc/PEcOkqpDOE3nfpmVuwsLRTlLA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:52 2026 by rpki-client