This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer File: o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer (raw, json) Hash identifier: Ij+q2V68k2mBzU3u96gDCvMf23i2QlvD+2vZkAAOHH8= Subject key identifier: A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DD89B47F548046A2BA7EDE23050C5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203716 IP: 176.107.48.0/20 IP: 176.122.0.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:d8:9b:47:f5:48:04:6a:2b:a7:ed:e2:30:50:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ce:97:81:c5:7d:40:6f:e6:64:30:d6:e2:ef: 0a:a0:ae:9e:9b:1f:84:5f:d2:13:a3:97:81:a6:4c: 13:ca:55:e7:d3:c2:d9:c4:38:05:69:f2:0b:2a:64: 4e:6e:39:a4:05:46:5a:9a:87:6d:57:4d:8c:4c:6b: fa:19:d9:9e:a5:da:c8:a2:02:6f:c5:b0:b0:95:77: 22:61:b0:b7:75:bd:a8:70:07:a8:60:fe:74:90:69: 40:97:24:80:4e:08:78:0a:a3:6b:5f:58:06:eb:d6: 2d:ef:7b:cf:6d:07:79:bb:15:9d:14:58:4f:c0:23: f4:5b:a4:2d:dc:b6:d6:c3:07:c6:c3:37:e1:62:6b: 12:52:56:0d:bb:4f:48:ad:89:8b:03:55:ee:b5:f0: 8a:a9:89:dd:51:46:0f:3a:ca:68:09:b8:cf:ad:87: e9:70:8c:40:60:2a:a6:97:cb:47:07:22:f4:5c:9f: 49:db:67:3c:3a:9d:dc:28:30:2f:ce:ec:98:4f:8d: ca:a9:5f:e1:39:91:68:0e:ca:86:6b:6c:fc:15:eb: ff:3a:ef:e7:fb:42:e1:87:8e:56:c5:37:f7:d0:01: a9:43:2a:fc:58:51:6a:b8:d4:56:d6:5c:f7:46:09: 3e:01:9e:76:e3:1e:4e:3f:2c:69:f0:e0:9f:98:a0: e2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.107.48.0/20 176.122.0.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203716 Signature Algorithm: sha256WithRSAEncryption 94:8b:c4:9b:9a:ba:74:b8:11:16:82:45:88:a6:e4:98:0e:4a: df:0e:32:17:32:5e:30:36:b3:9d:55:df:bb:19:82:7e:c5:91: 24:37:66:97:d9:7d:bc:0c:b5:52:8c:07:10:52:fc:c6:75:f0: 97:87:83:f9:6a:dc:ba:c7:b2:82:4e:b6:26:80:d0:84:2d:0b: ac:64:c2:f3:8c:f3:03:f9:a7:25:dc:81:d0:c8:cd:02:25:61: cb:81:60:4a:c4:a5:c0:7a:7e:61:25:19:2b:27:ee:ac:5a:09: 91:49:96:b6:11:c0:ab:64:66:b0:2f:b2:85:81:8d:a6:fe:b9: d6:36:6e:5d:15:85:09:3f:c2:16:02:e6:0c:54:db:1d:e3:5f: 53:0c:83:ea:cb:e2:ec:01:9a:b6:62:0e:15:46:64:59:4a:0e: cb:b1:00:ef:26:b5:08:18:6f:f8:58:c9:fc:05:d2:c5:64:d7: 4a:11:3d:f0:2d:1d:fa:77:6c:fb:f1:b1:08:32:16:2f:5c:8b: 7b:2f:9d:95:13:44:27:00:36:6a:cb:ed:af:1a:2e:1f:d9:29: 6f:9b:c8:6c:08:54:78:43:69:41:3a:48:d9:b3:4f:b4:81:88: d3:29:67:09:89:87:b9:d4:bf:a5:eb:e1:02:ba:80:57:ce:8b: c9:46:59:45 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt5fdibR/VIBGorp+3iMFDFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2U1OTk5MjgzYWFmMmU0Mzk1MDc5ZWEzNzE2ZGRmYzJiMTMwZjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc6XgcV9QG/mZDDW4u8KoK6emx+E X9ITo5eBpkwTylXn08LZxDgFafILKmRObjmkBUZamodtV02MTGv6GdmepdrIogJv xbCwlXciYbC3db2ocAeoYP50kGlAlySATgh4CqNrX1gG69Yt73vPbQd5uxWdFFhP wCP0W6Qt3LbWwwfGwzfhYmsSUlYNu09IrYmLA1XutfCKqYndUUYPOspoCbjPrYfp cIxAYCqml8tHByL0XJ9J22c8Op3cKDAvzuyYT43KqV/hOZFoDsqGa2z8Fev/Ou/n +0Lhh45WxTf30AGpQyr8WFFquNRW1lz3Rgk+AZ524x5OPyxp8OCfmKDigwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFKPlmZKDqvLkOVB56jcW3fwrEw8HMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmL2NkOTU4 OS0zODI1LTQzZTYtOTU1Mi0wMzA3NDg2MjY5ZDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvY2Q5NTg5 LTM4MjUtNDNlNi05NTUyLTAzMDc0ODYyNjlkNy8xL28tV1prb09xOHVRNVVIbnFO eGJkX0NzVER3Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQEsGswAwQEsHoAMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMbxDANBgkqhkiG9w0BAQsFAAOCAQEAlIvEm5q6dLgRFoJFiKbkmA5K 3w4yFzJeMDaznVXfuxmCfsWRJDdml9l9vAy1UowHEFL8xnXwl4eD+Wrcuseygk62 JoDQhC0LrGTC84zzA/mnJdyB0MjNAiVhy4FgSsSlwHp+YSUZKyfurFoJkUmWthHA q2RmsC+yhYGNpv651jZuXRWFCT/CFgLmDFTbHeNfUwyD6svi7AGatmIOFUZkWUoO y7EA7ya1CBhv+FjJ/AXSxWTXShE98C0d+nds+/GxCDIWL1yLey+dlRNEJwA2asvt rxouH9kpb5vIbAhUeENpQTpI2bNPtIGI0ylnCYmHudS/pevhArqAV86LyUZZRQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:00 2026 by rpki-client