This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer File: o8cchkWd50u9NaPMv9iuXZy00tg.cer (raw, json) Hash identifier: AP3arpjplxgr22rHWRkDCyGwsc5Dvv6b/aAB8DQMmdk= Subject key identifier: A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAB377DA0DD5B6E667F40BCB92A386 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211080 IP: 185.182.158.0/24 IP: 2a10:ff40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b3:77:da:0d:d5:b6:e6:67:f4:0b:cb:92:a3:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:be:03:a0:b7:d5:0f:e1:f2:24:e7:0f:30:e6: cd:7d:a4:7f:a9:9f:f0:96:d8:b7:41:f7:aa:f9:3f: 5f:4c:5d:2f:bc:2e:44:d4:87:36:69:fe:ed:87:ed: 88:82:61:88:d5:b5:a8:92:6d:41:bf:ff:66:9d:fc: f3:b1:5d:4e:c4:32:c0:7c:fa:76:60:ab:09:a6:43: c0:21:d5:aa:3b:3a:38:89:79:27:f7:ea:f8:3f:20: 3b:4d:46:fd:09:59:8f:9d:c8:cb:6c:db:a1:a1:95: c8:52:7d:96:9f:78:f4:f8:71:e9:fc:19:6b:46:09: 1d:2d:bb:6f:fb:f3:f6:23:1e:99:7f:ef:03:89:c9: 75:08:78:f9:be:f0:e5:db:2d:3a:9e:65:17:dc:45: e1:fd:2a:43:17:3f:39:7d:c7:b3:34:72:b7:df:b9: ad:d4:cd:88:49:8c:d1:ac:87:52:53:70:85:cf:10: 27:ae:02:dc:69:d1:8f:b7:ce:b1:c0:f3:7d:76:35: d9:c2:a2:dd:63:db:63:94:97:ce:40:a9:8a:0d:2b: 7f:29:aa:f8:83:39:43:e1:34:b8:e5:d6:74:c5:60: ee:45:8f:34:c5:a9:f8:02:2e:3e:00:b9:91:cf:1f: 0b:01:a0:d5:7b:4f:a2:f0:0d:5c:37:92:26:8f:07: 63:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.182.158.0/24 IPv6: 2a10:ff40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211080 Signature Algorithm: sha256WithRSAEncryption a5:d6:68:fc:e0:54:37:81:d7:40:e1:63:9b:0a:6b:5b:10:bb: 43:8a:08:d2:0a:57:e1:89:eb:07:29:a3:54:39:bf:30:38:84: 1c:f1:34:03:3a:5f:0f:ca:4b:eb:81:85:cd:b8:4b:d8:d1:13: a8:86:99:54:81:14:97:62:37:a3:27:5c:3e:a5:0f:21:d8:3e: f3:14:46:f1:51:aa:96:dc:94:e7:43:1a:b7:d1:e5:ed:f0:95: a4:ce:f1:eb:e1:47:5c:39:82:4f:16:5e:cf:27:61:ca:54:de: cc:96:2e:af:a2:3c:36:f0:cb:29:a8:d8:6f:48:49:76:ea:93: d1:ce:96:b4:5a:a4:ab:8d:18:ea:d0:d9:a4:87:dc:2d:b7:6a: ba:16:73:22:48:3c:af:38:38:0d:91:e8:de:1d:2a:65:ca:0f: 18:a7:58:8e:d6:c6:b9:3d:9c:1e:05:c8:cb:38:9b:ac:19:af: e0:df:b9:10:3c:12:94:2a:47:8e:5e:6d:7a:cd:4e:c4:d0:3a: 09:5e:bf:6e:32:1e:40:0d:d4:37:a5:9d:80:91:c4:5e:94:f6: 49:59:b4:f6:8c:9d:fc:2b:ac:ef:be:5f:72:f4:bb:dd:b7:3f: 9e:da:9e:0a:d8:04:54:23:48:44:42:02:eb:2b:67:fa:fe:70: c8:23:66:98 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9yrN32g3VtuZn9AvLkqOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2M3MWM4NjQ1OWRlNzRiYmQzNWEzY2NiZmQ4YWU1ZDljYjRkMmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb4DoLfVD+HyJOcPMObNfaR/qZ/w lti3Qfeq+T9fTF0vvC5E1Ic2af7th+2IgmGI1bWokm1Bv/9mnfzzsV1OxDLAfPp2 YKsJpkPAIdWqOzo4iXkn9+r4PyA7TUb9CVmPncjLbNuhoZXIUn2Wn3j0+HHp/Blr RgkdLbtv+/P2Ix6Zf+8Dicl1CHj5vvDl2y06nmUX3EXh/SpDFz85fcezNHK337mt 1M2ISYzRrIdSU3CFzxAnrgLcadGPt86xwPN9djXZwqLdY9tjlJfOQKmKDSt/Kar4 gzlD4TS45dZ0xWDuRY80xan4Ai4+ALmRzx8LAaDVe0+i8A1cN5Imjwdj1QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKPHHIZFnedLvTWjzL/Yrl2ctNLYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjL2NjOGU3 YS1lNDEzLTQzZmYtYWE1OS0wOTE0YWQyNGEzZTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvY2M4ZTdh LWU0MTMtNDNmZi1hYTU5LTA5MTRhZDI0YTNlNC8xL284Y2Noa1dkNTB1OU5hUE12 OWl1WFp5MDB0Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAubaeMA0EAgACMAcDBQMqEP9AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM4iDANBgkqhkiG9w0BAQsFAAOCAQEApdZo/OBUN4HX QOFjmwprWxC7Q4oI0gpX4YnrBymjVDm/MDiEHPE0AzpfD8pL64GFzbhL2NETqIaZ VIEUl2I3oydcPqUPIdg+8xRG8VGqltyU50Mat9Hl7fCVpM7x6+FHXDmCTxZezydh ylTezJYur6I8NvDLKajYb0hJduqT0c6WtFqkq40Y6tDZpIfcLbdquhZzIkg8rzg4 DZHo3h0qZcoPGKdYjtbGuT2cHgXIyzibrBmv4N+5EDwSlCpHjl5tes1OxNA6CV6/ bjIeQA3UN6WdgJHEXpT2SVm09oyd/Cus775fcvS73bc/ntqeCtgEVCNIREIC6ytn +v5wyCNmmA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:46 2026 by rpki-client