This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer File: o-VcYHJU0eKwURqFbnADn_r0MDI.cer (raw, json) Hash identifier: mkxQS45SAMedamkQKprKHk4+PUTDunUle8K26AF8szg= Subject key identifier: A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF28BB08AB98F0F7D4B8A9B80546DBA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211579 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:8b:b0:8a:b9:8f:0f:7d:4b:8a:9b:80:54:6d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3e55c607254d1e2b0511a856e70039ffaf43032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d5:8d:26:bf:c6:7f:89:50:04:c2:03:12:d7: 5a:dd:f8:3b:63:bb:11:40:2b:4a:c1:0a:f1:81:e7: 0b:dd:69:30:cd:b9:3f:2e:48:3a:1e:65:0b:96:28: 70:33:05:64:de:b5:d2:f9:34:df:e5:02:b1:a1:12: d3:72:41:70:c6:87:38:1d:a4:df:57:89:4b:7b:ce: 2d:f6:a9:61:4f:ea:2a:56:57:c2:bb:5c:7d:25:d1: 12:0c:c6:5e:fa:59:fe:da:80:08:3e:a0:6b:71:f6: f5:b0:3e:4e:48:ef:fe:25:ad:28:4b:e4:24:4f:11: e2:22:3e:9e:ba:74:cb:56:74:4a:fd:53:1e:5a:f7: 8e:8f:ac:d4:ad:47:ca:fb:ca:35:32:91:59:55:47: 41:45:c8:fe:6a:88:13:59:0d:c0:4c:fd:d8:b9:b2: b5:86:79:c3:95:f9:e1:7c:a4:37:5a:6f:a6:81:63: f8:14:d1:a9:6c:5f:07:c3:5b:21:c5:73:2d:6c:00: ed:1e:95:0f:b9:50:60:81:e9:55:27:3f:20:c3:96: 9d:a5:68:30:37:57:87:6f:b8:42:57:c8:e4:b4:0b: 78:88:c2:6d:c8:09:32:a6:f8:c5:5e:7d:a9:97:67: b0:7b:e0:a8:fe:d6:1d:73:b9:64:b6:5e:7b:35:9f: be:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211579 Signature Algorithm: sha256WithRSAEncryption 92:9a:b7:46:71:53:67:d6:d4:b5:40:a0:7b:b4:09:dd:03:63: 44:55:e9:2b:df:81:73:8c:18:d2:22:27:e2:e5:3c:6d:8c:06: 65:ee:ac:e6:f9:47:c3:ca:f1:68:e9:48:b6:70:87:8e:1b:cd: c2:de:13:5f:43:aa:77:81:e9:a9:ed:1d:60:60:e8:44:39:ac: 26:d4:b1:89:c6:4e:7a:f2:c7:30:6c:c5:d7:bc:10:cf:8d:18: c1:c1:07:7c:d2:2e:f3:ca:28:63:98:7b:6a:6c:5f:f5:5e:8b: aa:f7:bb:ff:82:2d:17:4c:ca:8c:39:a1:49:c6:b3:70:a7:e3: 96:05:aa:08:6c:10:09:ce:61:ee:04:51:82:15:2e:81:40:af: 9f:2d:0e:6f:cb:bb:5c:c3:5a:02:0e:dc:9f:64:06:5b:d1:24: 65:53:f5:d8:dd:35:8c:38:08:96:d6:01:1c:24:aa:f2:9d:3a: 52:56:8e:bb:d3:58:12:a9:4a:61:0b:27:86:73:cf:3b:08:f5: 4d:4f:b2:8a:0c:d6:f8:6a:16:f1:68:23:d5:2d:e9:cc:a9:f8: 7d:b0:f4:44:c0:f9:df:6a:32:24:3e:53:b2:6a:a3:d7:ff:62: b5:ca:90:1c:2d:fa:cc:d0:32:7b:43:42:22:fa:4c:3e:2d:fe: 83:72:13:d1 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/8ouwirmPD31LipuAVG26MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2U1NWM2MDcyNTRkMWUyYjA1MTFhODU2ZTcwMDM5ZmZhZjQzMDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9WNJr/Gf4lQBMIDEtda3fg7Y7sR QCtKwQrxgecL3Wkwzbk/Lkg6HmULlihwMwVk3rXS+TTf5QKxoRLTckFwxoc4HaTf V4lLe84t9qlhT+oqVlfCu1x9JdESDMZe+ln+2oAIPqBrcfb1sD5OSO/+Ja0oS+Qk TxHiIj6eunTLVnRK/VMeWveOj6zUrUfK+8o1MpFZVUdBRcj+aogTWQ3ATP3YubK1 hnnDlfnhfKQ3Wm+mgWP4FNGpbF8Hw1shxXMtbADtHpUPuVBggelVJz8gw5adpWgw N1eHb7hCV8jktAt4iMJtyAkypvjFXn2pl2ewe+Co/tYdc7lktl57NZ++MQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFKPlXGByVNHisFEahW5wA5/69DAyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzIwNmFm Zi00NTllLTRhYmItODE5YS0yZDM2MWU0ZjM0NWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvMjA2YWZm LTQ1OWUtNGFiYi04MTlhLTJkMzYxZTRmMzQ1Yy8xL28tVmNZSEpVMGVLd1VScUZi bkFEbl9yME1ESS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM6ezANBgkqhkiG9w0BAQsFAAOCAQEAkpq3RnFTZ9bU tUCge7QJ3QNjRFXpK9+Bc4wY0iIn4uU8bYwGZe6s5vlHw8rxaOlItnCHjhvNwt4T X0Oqd4Hpqe0dYGDoRDmsJtSxicZOevLHMGzF17wQz40YwcEHfNIu88ooY5h7amxf 9V6Lqve7/4ItF0zKjDmhScazcKfjlgWqCGwQCc5h7gRRghUugUCvny0Ob8u7XMNa Ag7cn2QGW9EkZVP12N01jDgIltYBHCSq8p06UlaOu9NYEqlKYQsnhnPPOwj1TU+y igzW+GoW8Wgj1S3pzKn4fbD0RMD532oyJD5Tsmqj1/9itcqQHC36zNAye0NCIvpM Pi3+g3IT0Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:14 2026 by rpki-client