This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer File: o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer (raw, json) Hash identifier: 5I+iNb3ahVZUjMg105paZgDWvYhbSJA4isM8IRZaWzc= Subject key identifier: A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB7964413036B9B1B1D5E96A000C0B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 212.108.125.0/24 IP: 2a0d:eb40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:79:64:41:30:36:b9:b1:b1:d5:e9:6a:00:0c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a36619427c283fa3b2bb7b45cc35a51286398961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a8:5f:00:51:5e:18:8c:82:aa:2c:2e:2a:bd: 4b:85:46:60:c6:75:fb:56:cd:b8:08:2e:97:55:1a: 06:97:dd:76:92:31:54:53:4a:e8:2c:3a:8e:59:4f: 11:29:b4:81:f6:30:cd:64:47:f6:2d:66:e0:2b:bf: 44:af:fc:44:02:31:17:99:27:f2:1f:34:24:66:8a: de:b5:81:cb:c3:04:00:de:50:84:6e:e7:af:24:5b: c2:4f:6a:eb:5a:78:54:91:76:15:88:b6:57:15:34: 07:c2:1e:ab:bd:59:ec:f1:d4:fb:0f:ac:30:38:d8: c1:d9:d2:37:8f:d1:02:87:a8:21:ad:83:e9:70:03: 77:a9:b3:fd:20:57:4e:77:cd:85:46:ef:13:7e:01: ea:fd:15:b7:ee:6e:cd:0c:a2:9a:7e:1f:89:84:f1: 19:bb:f9:76:0e:78:78:5f:1e:0f:8c:14:99:05:12: 63:aa:d8:9e:6b:24:e5:c9:0c:fc:7d:08:e2:e0:ed: f0:9e:1a:5f:df:e6:d0:eb:c6:c9:d3:72:9f:9b:d0: ba:a2:ab:7a:6c:52:d1:c4:ff:52:3a:98:72:20:80: db:84:85:34:f0:e9:4f:50:ec:42:0d:22:bc:23:47: c6:6a:ff:83:fc:6c:1e:8f:27:e4:33:ee:84:61:3e: 9b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.108.125.0/24 IPv6: 2a0d:eb40::/29 Signature Algorithm: sha256WithRSAEncryption 53:ec:59:c7:13:83:ea:6d:fe:54:23:81:77:59:39:0b:63:ea: 79:8a:7e:f5:8e:b5:dd:03:f4:29:73:4d:a8:a1:53:2e:78:56: 62:15:b9:51:d2:dd:4f:0c:9f:82:52:f7:ab:71:c8:c1:7b:ed: 04:d3:c8:2e:01:4a:86:95:f1:9b:fb:0b:87:c3:31:d4:80:67: 0a:95:c2:e7:d8:29:76:9b:c6:06:6b:76:57:ae:e5:08:90:78: 66:47:9e:01:d5:a6:88:ef:05:60:a3:22:d1:66:ab:a2:b5:8b: 3a:99:b1:cf:91:d7:43:11:eb:94:6a:76:39:d4:22:40:32:89: 87:b2:b7:6f:11:cc:81:c2:45:16:45:cb:d2:85:9e:e8:59:ce: 74:f2:de:8c:24:d6:6e:a6:09:ba:8c:f6:62:1d:69:55:c4:97: f1:50:63:d2:c3:5b:8e:e4:bf:cc:cd:3f:a3:42:2d:66:04:ad: bd:01:d4:d9:59:73:4f:20:f4:7c:91:b6:22:aa:b3:27:ea:d3: 91:13:da:54:fb:bb:9d:3f:70:b8:8f:d3:e6:0f:19:ad:23:54: 99:fb:ab:b8:96:24:3b:96:76:98:f4:bd:3f:59:c6:e3:99:6b: ae:96:6f:8a:ec:7d:67:87:46:e7:c2:42:9e:59:da:66:a0:f8: 6b:58:21:5b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt263lkQTA2ubGx1elqAAwLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzY2MTk0MjdjMjgzZmEzYjJiYjdiNDVjYzM1YTUxMjg2Mzk4OTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzahfAFFeGIyCqiwuKr1LhUZgxnX7 Vs24CC6XVRoGl912kjFUU0roLDqOWU8RKbSB9jDNZEf2LWbgK79Er/xEAjEXmSfy HzQkZoretYHLwwQA3lCEbuevJFvCT2rrWnhUkXYViLZXFTQHwh6rvVns8dT7D6ww ONjB2dI3j9ECh6ghrYPpcAN3qbP9IFdOd82FRu8TfgHq/RW37m7NDKKafh+JhPEZ u/l2Dnh4Xx4PjBSZBRJjqtieayTlyQz8fQji4O3wnhpf3+bQ68bJ03Kfm9C6oqt6 bFLRxP9SOphyIIDbhIU08OlPUOxCDSK8I0fGav+D/GwejyfkM+6EYT6bYwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFKNmGUJ8KD+jsrt7Rcw1pRKGOYlhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlLzBmYTI4 MC0wMmRkLTQ1MTctODlhNy0zYjgxNzhkYmI5NGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvMGZhMjgw LTAyZGQtNDUxNy04OWE3LTNiODE3OGRiYjk0Yy8xL28yWVpRbndvUDZPeXUzdEZ6 RFdsRW9ZNWlXRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA1Gx9MA0EAgACMAcDBQMqDetAMA0GCSqGSIb3 DQEBCwUAA4IBAQBT7FnHE4Pqbf5UI4F3WTkLY+p5in71jrXdA/Qpc02ooVMueFZi FblR0t1PDJ+CUverccjBe+0E08guAUqGlfGb+wuHwzHUgGcKlcLn2Cl2m8YGa3ZX ruUIkHhmR54B1aaI7wVgoyLRZquitYs6mbHPkddDEeuUanY51CJAMomHsrdvEcyB wkUWRcvShZ7oWc508t6MJNZupgm6jPZiHWlVxJfxUGPSw1uO5L/MzT+jQi1mBK29 AdTZWXNPIPR8kbYiqrMn6tORE9pU+7udP3C4j9PmDxmtI1SZ+6u4liQ7lnaY9L0/ WcbjmWuulm+K7H1nh0bnwkKeWdpmoPhrWCFb -----END CERTIFICATE-----Generated at Mon Jan 26 22:27:42 2026 by rpki-client