This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer File: oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer (raw, json) Hash identifier: Jgf0gz/cuZ9qigw+nkyGnW5bXRPcgYGZbCkpBr/ypdc= Subject key identifier: A0:06:CA:06:96:5B:EE:68:1C:35:31:B4:26:B5:99:A4:01:E1:A5:A4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B88E1D7FC1021E6278D93B1F2A0BE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.216.48.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:88:e1:d7:fc:10:21:e6:27:8d:93:b1:f2:a0:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a006ca06965bee681c3531b426b599a401e1a5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a7:01:c3:dc:54:94:6e:11:20:c5:43:2b:1f: d6:a4:e9:22:17:c2:d5:e3:e4:72:b8:2a:e4:a4:58: 5a:5b:8e:49:a0:6d:ab:20:41:a5:e3:dc:cc:10:5d: cb:84:21:55:fb:8f:9c:09:b4:3e:bf:b7:36:47:b7: ed:c1:22:ef:f7:c1:d2:d7:55:11:c9:51:b1:aa:20: 43:ec:25:75:a3:40:5e:a2:3f:37:b1:66:d5:ad:11: 7a:34:d9:22:95:49:31:af:cc:23:bd:03:6a:83:29: e3:a5:61:66:ce:5f:4b:dd:cf:f2:10:7a:1f:0d:8c: 42:75:e9:22:c7:03:d1:30:2a:e1:4b:4f:24:22:5e: d0:e3:4a:96:a0:41:73:7d:e6:1f:b0:13:2a:62:e7: 44:0e:1c:2f:bc:42:41:68:2f:07:32:f8:0c:61:7c: 99:69:da:40:3c:65:0b:37:91:3f:d5:31:2e:47:b0: 26:df:8e:a5:a1:5c:ea:81:b8:e4:4f:95:3c:0f:af: 01:e8:2c:60:0d:89:93:e7:2b:4a:ef:10:e1:22:42: e3:66:1b:76:03:34:65:1e:33:48:2b:f7:f4:29:37: dd:f2:ba:b1:6c:f9:8e:39:4f:e8:e7:f9:de:0c:50: 0d:16:81:80:b8:a7:cd:ed:7b:ae:85:62:d1:2c:58: 07:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:06:CA:06:96:5B:EE:68:1C:35:31:B4:26:B5:99:A4:01:E1:A5:A4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.48.0/24 Signature Algorithm: sha256WithRSAEncryption 18:b6:d5:1a:0a:a6:87:d2:8b:25:67:38:1a:6b:30:c8:a3:f1: 15:df:be:04:ac:bb:83:fc:b5:f9:a9:7f:14:cf:b2:7f:13:3e: fd:a8:f8:e0:9f:93:95:ae:3f:fe:3a:bc:3f:1f:ae:f1:86:57: d5:26:f3:f9:6c:fb:75:71:74:f9:e1:5a:91:e4:c9:ff:41:2a: 45:7f:6e:45:17:53:1d:e1:a3:7c:7c:ec:96:58:17:94:4d:38: fa:f1:04:21:0a:fa:ba:4e:5c:c8:a3:1f:86:0e:ac:b6:98:c1: 07:6a:fd:27:06:f2:15:14:32:73:32:f8:0a:70:53:00:5f:d5: 96:f6:c8:31:28:c9:32:bb:a9:51:a6:db:35:bc:09:c4:7a:9c: 3c:cc:f2:81:f0:38:00:1c:5d:b3:02:86:2f:d3:15:6a:13:95: 16:7f:a1:9b:6e:1b:a4:e2:b9:c3:4d:4b:e5:5f:af:aa:7f:46: ad:80:77:0b:15:5e:0e:ad:fd:8b:35:1d:4c:04:2d:e0:74:94: f4:60:dc:e7:93:a6:6c:be:08:b4:fd:20:b5:4a:b9:30:ad:87: c0:50:04:2a:a6:42:d9:45:7f:e9:05:e0:50:31:39:ba:90:61: ef:c8:db:45:03:35:ae:c0:ea:66:2e:e0:21:d6:ed:e6:56:40: 04:13:24:f2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6W4jh1/wQIeYnjZOx8qC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDA2Y2EwNjk2NWJlZTY4MWMzNTMxYjQyNmI1OTlhNDAxZTFhNWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKcBw9xUlG4RIMVDKx/WpOkiF8LV 4+RyuCrkpFhaW45JoG2rIEGl49zMEF3LhCFV+4+cCbQ+v7c2R7ftwSLv98HS11UR yVGxqiBD7CV1o0Beoj83sWbVrRF6NNkilUkxr8wjvQNqgynjpWFmzl9L3c/yEHof DYxCdekixwPRMCrhS08kIl7Q40qWoEFzfeYfsBMqYudEDhwvvEJBaC8HMvgMYXyZ adpAPGULN5E/1TEuR7Am346loVzqgbjkT5U8D68B6CxgDYmT5ytK7xDhIkLjZht2 AzRlHjNIK/f0KTfd8rqxbPmOOU/o5/neDFANFoGAuKfN7XuuhWLRLFgHtwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKAGygaWW+5oHDUxtCa1maQB4aWkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyLzdlMmIw YS1hOGVkLTQ3YjctOWQ3NC1hYjk3NWY3ZDM1MzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvN2UyYjBh LWE4ZWQtNDdiNy05ZDc0LWFiOTc1ZjdkMzUzMy8xL29BYktCcFpiN21nY05URzBK cldacEFIaHBhUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9gwMA0GCSqGSIb3DQEBCwUAA4IBAQAYttUa CqaH0oslZzgaazDIo/EV374ErLuD/LX5qX8Uz7J/Ez79qPjgn5OVrj/+Orw/H67x hlfVJvP5bPt1cXT54VqR5Mn/QSpFf25FF1Md4aN8fOyWWBeUTTj68QQhCvq6TlzI ox+GDqy2mMEHav0nBvIVFDJzMvgKcFMAX9WW9sgxKMkyu6lRpts1vAnEepw8zPKB 8DgAHF2zAoYv0xVqE5UWf6Gbbhuk4rnDTUvlX6+qf0atgHcLFV4Orf2LNR1MBC3g dJT0YNznk6Zsvgi0/SC1SrkwrYfAUAQqpkLZRX/pBeBQMTm6kGHvyNtFAzWuwOpm LuAh1u3mVkAEEyTy -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:35 2026 by rpki-client