This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o7HPJ-q7mfazXewahDm21lPc4zo.cer File: o7HPJ-q7mfazXewahDm21lPc4zo.cer (raw, json) Hash identifier: BVGJVMBthXDoOWxz2vQ5hhYBUarl1LOgcKIiDoaLMIE= Subject key identifier: A3:B1:CF:27:EA:BB:99:F6:B3:5D:EC:1A:84:39:B6:D6:53:DC:E3:3A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C69C93DA3919100BFF307C419F7F0A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.128.44.0/22 IP: 193.29.5.0/24 IP: 2a04:1e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9c:93:da:39:19:10:0b:ff:30:7c:41:9f:7f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3b1cf27eabb99f6b35dec1a8439b6d653dce33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f8:a2:8b:fb:04:f2:f2:6d:45:12:33:e7:d2: 72:4b:aa:e8:07:bb:98:0d:44:c8:85:00:28:35:b9: a5:3c:bd:f2:36:22:9b:3e:00:ed:02:78:4a:3f:d4: 1b:a3:bb:a0:78:63:3a:73:fd:cf:db:66:8d:5c:17: 4c:9d:f3:e0:9f:5a:6f:81:2f:6f:50:1a:2b:1d:0f: 5f:21:9d:91:66:8a:23:98:7c:6b:6e:19:cf:df:60: e8:d5:b7:45:54:6a:60:76:bb:1e:ef:7e:83:3c:e5: 06:07:7b:b6:ac:c4:ac:e2:93:15:1f:b5:92:fc:2b: 39:d2:69:ab:28:df:4b:38:bd:b3:27:8a:27:47:a2: c9:2f:03:c1:5a:01:be:00:95:7f:95:ea:0e:f3:ef: 1e:56:5e:bd:8e:c8:97:92:2b:6f:d9:75:37:a4:ac: 5d:dc:da:9d:c1:16:f1:37:a4:3a:b8:0d:43:e8:60: 89:df:ef:7e:67:2c:d6:c6:e5:02:ef:6c:60:45:aa: 06:10:06:71:1c:37:78:ea:d8:12:d1:a9:c0:c4:7e: 74:26:42:6c:21:b2:d1:a9:66:b6:37:68:5f:49:9b: 03:6b:db:11:c3:ef:82:6a:94:16:23:38:60:b2:70: 95:77:b5:fb:00:d1:20:09:34:0b:cc:3d:9f:07:15: dc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B1:CF:27:EA:BB:99:F6:B3:5D:EC:1A:84:39:B6:D6:53:DC:E3:3A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.44.0/22 193.29.5.0/24 IPv6: 2a04:1e40::/29 Signature Algorithm: sha256WithRSAEncryption 3c:b9:7b:37:80:2c:20:3c:6d:6e:fb:1f:00:38:f3:07:b3:01: d4:9f:26:77:6e:78:2a:af:63:2a:6d:6c:30:8b:e6:0a:a9:c7: 29:e3:82:66:2d:d6:27:9e:cb:c1:f5:85:ee:a4:59:74:64:5a: 48:0b:8a:6b:31:95:83:fd:35:f9:73:ae:a9:f3:0c:44:84:7c: 60:ed:80:2a:d4:47:f8:0b:3f:04:22:07:ba:82:f5:71:81:ba: 47:b1:ec:13:44:fc:e9:3a:fb:fc:ca:a2:35:f9:7a:77:27:78: 61:e1:7d:fa:14:6d:72:cb:cd:95:9d:0a:05:f9:bd:47:2e:be: a7:ba:a1:2f:9c:3a:51:9e:70:33:58:17:1d:5c:10:66:e4:58: 54:02:74:c3:e5:b2:15:a0:24:35:e7:6f:01:82:07:bb:b1:0d: 21:7d:d4:38:cb:35:99:d8:c7:f8:68:6b:2e:21:7b:95:46:a4: dd:eb:3b:56:26:01:be:56:40:96:94:a5:e4:08:03:c6:fc:66: d4:95:e8:61:10:0b:4a:83:78:0e:29:cd:f6:d7:86:94:a6:22: 03:df:98:e9:59:84:55:08:f6:2a:19:7f:ba:dc:93:8f:1b:17: f3:40:dd:91:52:ec:13:bf:73:ad:70:5e:85:18:4a:08:e2:07: ca:81:d9:80 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt3xpyT2jkZEAv/MHxBn38KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2IxY2YyN2VhYmI5OWY2YjM1ZGVjMWE4NDM5YjZkNjUzZGNlMzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvviii/sE8vJtRRIz59JyS6roB7uY DUTIhQAoNbmlPL3yNiKbPgDtAnhKP9Qbo7ugeGM6c/3P22aNXBdMnfPgn1pvgS9v UBorHQ9fIZ2RZoojmHxrbhnP32Do1bdFVGpgdrse736DPOUGB3u2rMSs4pMVH7WS /Cs50mmrKN9LOL2zJ4onR6LJLwPBWgG+AJV/leoO8+8eVl69jsiXkitv2XU3pKxd 3NqdwRbxN6Q6uA1D6GCJ3+9+ZyzWxuUC72xgRaoGEAZxHDd46tgS0anAxH50JkJs IbLRqWa2N2hfSZsDa9sRw++CapQWIzhgsnCVd7X7ANEgCTQLzD2fBxXcgQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFKOxzyfqu5n2s13sGoQ5ttZT3OM6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjLzQxNjc0 Mi03ZGQ2LTQxMDEtOGMxOC0wNTc4NmJmZDY4NTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvNDE2NzQy LTdkZDYtNDEwMS04YzE4LTA1Nzg2YmZkNjg1Ny8xL283SFBKLXE3bWZhelhld2Fo RG0yMWxQYzR6by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuYAsAwQAwR0FMA0EAgACMAcDBQMqBB5AMA0G CSqGSIb3DQEBCwUAA4IBAQA8uXs3gCwgPG1u+x8AOPMHswHUnyZ3bngqr2MqbWww i+YKqccp44JmLdYnnsvB9YXupFl0ZFpIC4prMZWD/TX5c66p8wxEhHxg7YAq1Ef4 Cz8EIge6gvVxgbpHsewTRPzpOvv8yqI1+Xp3J3hh4X36FG1yy82VnQoF+b1HLr6n uqEvnDpRnnAzWBcdXBBm5FhUAnTD5bIVoCQ1528Bgge7sQ0hfdQ4yzWZ2Mf4aGsu IXuVRqTd6ztWJgG+VkCWlKXkCAPG/GbUlehhEAtKg3gOKc3214aUpiID35jpWYRV CPYqGX+63JOPGxfzQN2RUuwTv3OtcF6FGEoI4gfKgdmA -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:02 2026 by rpki-client