This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer File: oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer (raw, json) Hash identifier: sXo11aZlnNAh2AX0sglhQElj+NqXC7DyCe7hkoHdrAg= Subject key identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F817BA14D7489BDF7E2BCB6864798D8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198060 IP: 193.56.209.0/24 IP: 193.56.211.0/24 IP: 193.56.231.0/24 IP: 2001:67c:1108::/47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:7b:a1:4d:74:89:bd:f7:e2:bc:b6:86:47:98:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:93:9e:d6:79:93:cf:76:2a:46:4b:b2:5a:e9: 53:3d:8e:04:bb:68:40:8d:53:df:d5:50:7a:f6:f1: 04:56:7a:82:ae:f9:69:89:4f:37:5a:48:e1:b7:9c: 65:51:0f:62:9f:c8:0d:f3:ff:df:15:90:9f:6c:dc: 30:6c:1c:68:ba:00:06:f7:b4:e5:f6:35:72:2c:28: ff:d2:07:07:11:12:1f:a2:67:ac:50:e5:65:af:db: 49:67:7e:b4:1d:a2:aa:79:98:f2:47:5d:50:22:10: 90:4c:b0:05:16:5f:d9:1d:b1:7b:8a:85:0a:ed:de: 2a:72:2c:d0:1b:37:08:27:84:3d:45:5b:d6:c1:ab: 21:61:6d:9a:a2:2f:f1:77:0c:22:a6:d2:53:a8:69: aa:ff:32:43:1a:d7:ab:87:b2:7e:59:d7:db:5b:ad: 37:45:6f:f8:4a:a7:e9:20:08:8b:8e:37:96:57:ab: e1:e2:ea:2c:3b:2f:eb:8e:0c:49:dd:83:72:8f:a2: e4:e9:91:6a:2b:9e:da:ca:26:71:a8:64:db:33:f8: 3b:7e:ef:d6:eb:e7:9f:ec:1a:cc:b0:9a:83:2f:dc: 41:63:59:d9:ec:43:94:2d:25:9c:d7:45:92:b1:db: 88:3a:79:ed:7a:36:de:ec:e6:b9:f7:7b:e2:06:d1: d6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.56.209.0/24 193.56.211.0/24 193.56.231.0/24 IPv6: 2001:67c:1108::/47 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198060 Signature Algorithm: sha256WithRSAEncryption 67:26:a3:31:d3:46:34:28:8a:52:ba:ea:0b:d6:61:d1:69:0a: e7:05:f0:7c:6f:15:1f:57:07:14:37:bf:e4:0a:af:f4:91:24: 0b:ab:2a:8c:44:0a:87:28:8c:d3:ac:33:d5:66:1a:e7:a7:6c: 4b:64:4f:48:ba:61:d7:3e:86:c6:dd:b0:ee:47:9b:ac:ac:17: dc:c2:3d:2c:e6:4f:d8:21:35:20:e2:28:fa:92:4d:de:97:87: 04:d5:80:a9:54:f1:d6:48:bb:65:27:e3:ef:31:b2:58:c6:10: e9:5b:8d:96:a6:42:c9:ff:86:89:72:f4:82:ff:f0:db:2d:7b: 1a:f6:f8:31:d8:a2:47:09:7a:6c:3c:83:c6:9f:59:97:8e:b6: 46:b4:82:70:b6:be:c3:44:6f:a1:10:23:5f:20:ba:fe:70:f8: 3e:2a:98:e5:c5:db:28:ed:7c:0f:b4:10:a2:99:b9:96:ef:55: ef:2b:b0:91:b0:52:6f:f2:f9:be:52:db:0e:98:eb:cc:68:9a: 54:48:7c:26:23:05:23:ec:34:31:ef:19:78:23:5b:03:b7:2b: 10:47:b9:b2:6d:05:a0:bc:74:2d:88:f0:5c:05:be:26:a5:88: db:1a:4c:8d:51:47:7f:fe:fc:10:c2:64:99:58:c7:40:a0:d7: 5b:bc:67:1b -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt/gXuhTXSJvffivLaGR5jYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDBiNDI2MDRiM2Y4ZTllNWI3MmYyMzI5Mzg5YWYxOGZmYmQyMGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5Oe1nmTz3YqRkuyWulTPY4Eu2hA jVPf1VB69vEEVnqCrvlpiU83Wkjht5xlUQ9in8gN8//fFZCfbNwwbBxougAG97Tl 9jVyLCj/0gcHERIfomesUOVlr9tJZ360HaKqeZjyR11QIhCQTLAFFl/ZHbF7ioUK 7d4qcizQGzcIJ4Q9RVvWwashYW2aoi/xdwwiptJTqGmq/zJDGterh7J+WdfbW603 RW/4SqfpIAiLjjeWV6vh4uosOy/rjgxJ3YNyj6Lk6ZFqK57ayiZxqGTbM/g7fu/W 6+ef7BrMsJqDL9xBY1nZ7EOULSWc10WSsduIOnntejbe7Oa593viBtHWgwIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFKALQmBLP46eW3LyMpOJrxj/vSC4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzL2U5ZjMx My1jZDY4LTRmYjUtYmI4ZC03Mzk2ZDhiNjQwYWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvZTlmMzEz LWNkNjgtNGZiNS1iYjhkLTczOTZkOGI2NDBhZC8xL29BdENZRXNfanA1YmN2SXlr NG12R1AtOUlMZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAYBAIAATASAwQAwTjRAwQAwTjTAwQAwTjnMA8EAgACMAkDBwEg AQZ8EQgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAwWsMA0GCSqGSIb3DQEBCwUA A4IBAQBnJqMx00Y0KIpSuuoL1mHRaQrnBfB8bxUfVwcUN7/kCq/0kSQLqyqMRAqH KIzTrDPVZhrnp2xLZE9IumHXPobG3bDuR5usrBfcwj0s5k/YITUg4ij6kk3el4cE 1YCpVPHWSLtlJ+PvMbJYxhDpW42WpkLJ/4aJcvSC//DbLXsa9vgx2KJHCXpsPIPG n1mXjrZGtIJwtr7DRG+hECNfILr+cPg+Kpjlxdso7XwPtBCimbmW71XvK7CRsFJv 8vm+UtsOmOvMaJpUSHwmIwUj7DQx7xl4I1sDtysQR7mybQWgvHQtiPBcBb4mpYjb GkyNUUd//vwQwmSZWMdAoNdbvGcb -----END CERTIFICATE-----Generated at Mon Feb 9 15:03:00 2026 by rpki-client