This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer File: o082XngGS1jETUjPs5KR0_sdnhA.cer (raw, json) Hash identifier: zf4AogLKw81OyBLUjpnWeDKFPklf8i4QujRtDzlnfD0= Subject key identifier: A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BCF695066E4C72D6F175001137778 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20694 IP: 185.166.200.0/22 IP: 188.94.24.0/21 IP: 217.114.64.0/20 IP: 2a01:688::/30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:cf:69:50:66:e4:c7:2d:6f:17:50:01:13:77:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f3:c2:6a:aa:a0:ea:53:08:e6:de:af:06:2e: c2:75:d3:9c:8b:f9:52:5b:0c:cd:95:06:b0:35:26: f1:a0:c8:4a:8d:fe:44:0b:b8:d0:60:dd:d8:c1:53: f5:d4:dc:ef:fd:67:e3:ac:67:b4:1b:bd:60:e2:b4: fb:eb:9c:c4:46:aa:87:0e:cd:e1:4d:ec:38:7a:8a: 95:ef:96:8e:5c:b1:a6:3f:66:db:55:06:b3:23:cb: 1f:74:0f:be:09:71:ea:f6:3b:a4:1e:f8:b6:69:e2: b5:ba:90:92:f7:12:91:4e:23:0c:9d:33:ad:ff:0f: cd:7f:7a:ab:d3:03:83:a3:61:79:43:f8:c5:31:ca: 34:9c:39:f2:76:fb:fc:8b:0f:19:22:4c:93:30:a1: 2c:c0:cb:fc:02:d1:28:7e:ec:81:06:ef:a5:b0:f3: 70:b8:03:b8:0b:df:b0:9b:e9:68:dd:0f:9f:fc:9d: 15:e1:1f:c8:fb:9b:2b:b3:6a:4b:72:05:56:6f:7d: f4:6e:22:34:de:f9:61:25:98:d5:da:19:5d:ed:ee: b6:05:65:40:32:a5:63:44:9f:69:35:e3:d5:75:5f: 42:29:c2:fb:27:ea:56:4d:3e:6a:8b:e3:0b:33:45: 60:00:72:57:d8:45:9a:3e:65:e4:95:77:63:a7:21: 49:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.166.200.0/22 188.94.24.0/21 217.114.64.0/20 IPv6: 2a01:688::/30 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20694 Signature Algorithm: sha256WithRSAEncryption a6:6e:31:ee:d0:b6:8e:6f:2d:cb:9e:4d:88:76:23:b2:70:1d: 9a:e0:85:1b:67:a0:83:86:d7:d7:58:29:37:b4:6f:72:f1:9d: 4c:04:15:94:d6:52:b7:ab:15:6f:45:dd:f0:cc:22:ab:12:fe: 9d:a1:ac:ea:61:d0:e3:ae:42:08:0d:07:4c:76:83:c1:f2:07: 0d:f6:88:b6:39:fd:55:90:78:d2:95:fe:2f:6c:1f:2e:61:9f: 2b:c4:79:f5:cb:bd:8d:26:0b:1a:c1:73:d9:32:71:b8:28:d4: 58:4f:3b:2e:30:eb:dd:6b:83:f2:cd:12:05:3a:a3:56:62:37: a1:6e:94:da:31:a0:0c:63:82:b6:cd:34:87:56:4e:e2:a8:1a: 9f:ec:20:8f:a4:ff:44:38:f2:76:b1:72:87:56:fc:4c:19:b1: 62:eb:a7:7f:76:7c:4b:9b:97:aa:db:2e:6a:8c:b3:f6:85:a8: 33:4a:db:73:a4:d8:a4:1b:cf:4a:d8:98:da:ae:3e:18:ab:fe: 9e:79:8a:9b:30:34:ce:f4:7e:c2:a2:b8:9c:75:87:83:b7:58: 68:c5:b1:22:54:79:cb:ef:42:24:40:35:da:23:40:04:1b:4a: 9b:7e:10:fb:38:e0:88:64:4b:3e:89:35:09:c9:52:b8:4b:bf: f4:1d:e3:94 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt9W89pUGbkxy1vF1ABE3d4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzRmMzY1ZTc4MDY0YjU4YzQ0ZDQ4Y2ZiMzkyOTFkM2ZiMWQ5ZTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifPCaqqg6lMI5t6vBi7CddOci/lS WwzNlQawNSbxoMhKjf5EC7jQYN3YwVP11Nzv/WfjrGe0G71g4rT765zERqqHDs3h Tew4eoqV75aOXLGmP2bbVQazI8sfdA++CXHq9jukHvi2aeK1upCS9xKRTiMMnTOt /w/Nf3qr0wODo2F5Q/jFMco0nDnydvv8iw8ZIkyTMKEswMv8AtEofuyBBu+lsPNw uAO4C9+wm+lo3Q+f/J0V4R/I+5srs2pLcgVWb330biI03vlhJZjV2hld7e62BWVA MqVjRJ9pNePVdV9CKcL7J+pWTT5qi+MLM0VgAHJX2EWaPmXklXdjpyFJTQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFKNPNl54BktYxE1Iz7OSkdP7HZ4QMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzNlZTdj NS0xMjY0LTQ3ZTktOGExMi0wNDFiNzhhZGEyMTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvM2VlN2M1 LTEyNjQtNDdlOS04YTEyLTA0MWI3OGFkYTIxNS8xL28wODJYbmdHUzFqRVRValBz NUtSMF9zZG5oQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuabIAwQDvF4YAwQE2XJAMA0EAgACMAcDBQIq AQaIMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlDWMA0GCSqGSIb3DQEBCwUAA4IB AQCmbjHu0LaOby3Lnk2IdiOycB2a4IUbZ6CDhtfXWCk3tG9y8Z1MBBWU1lK3qxVv Rd3wzCKrEv6doazqYdDjrkIIDQdMdoPB8gcN9oi2Of1VkHjSlf4vbB8uYZ8rxHn1 y72NJgsawXPZMnG4KNRYTzsuMOvda4PyzRIFOqNWYjehbpTaMaAMY4K2zTSHVk7i qBqf7CCPpP9EOPJ2sXKHVvxMGbFi66d/dnxLm5eq2y5qjLP2hagzSttzpNikG89K 2Jjarj4Yq/6eeYqbMDTO9H7CoricdYeDt1hoxbEiVHnL70IkQDXaI0AEG0qbfhD7 OOCIZEs+iTUJyVK4S7/0HeOU -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:21 2026 by rpki-client