This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer File: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer (raw, json) Hash identifier: UJ9mYCZP8I2tdcKEM82vVO76kjI/zLJ1YQNZgsnEANI= Subject key identifier: A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B67C2B800EAEAB3755099440C3C68 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51739 IP: 91.223.0.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:67:c2:b8:00:ea:ea:b3:75:50:99:44:0c:3c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a011a02e929c43f0199c8326302e24899c4a4151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:c6:c3:e5:64:7c:cf:db:ab:79:33:a4:aa: 24:61:ad:c7:ac:94:55:e1:ff:ab:c9:f4:f5:87:e4: 95:b9:16:d3:14:a9:ca:ae:9d:a6:e1:89:bd:0a:7d: c7:c4:e3:f9:c7:45:b9:c3:7a:21:87:9c:c0:c1:74: 45:af:36:cd:8d:55:53:72:06:5e:76:e4:75:a0:23: 53:8c:f9:40:a6:b3:14:63:04:2b:fe:a4:fd:32:4a: c9:4f:60:7f:5e:c0:45:77:a3:07:eb:58:44:fd:b6: cd:19:ee:72:1b:48:5c:44:f1:68:dc:1f:dc:89:d8: b0:c3:39:ed:0e:7d:ad:1d:7f:f8:7e:1e:ab:15:75: cd:7e:86:56:64:ca:ac:c2:7c:25:0b:4c:e4:af:de: e5:5d:26:a2:71:9f:7b:75:dd:52:73:e9:41:6d:92: 5d:f8:53:94:ee:51:74:35:ac:02:68:17:e7:42:1b: 12:55:bb:28:26:69:80:bc:06:99:af:26:a9:7b:0c: ce:bc:1f:be:bf:e0:5d:60:c1:f9:a7:69:f1:2c:43: 6f:80:1a:7b:57:8f:32:28:dc:5e:c1:79:de:36:6c: 41:2d:28:e1:e3:d1:6d:20:76:fe:39:6a:32:f6:2a: 9b:a2:28:e1:a9:19:4a:90:dc:b0:62:4d:01:df:f9: be:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.0.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51739 Signature Algorithm: sha256WithRSAEncryption aa:b4:a3:64:df:48:56:58:9f:87:51:97:6d:f8:09:f4:1d:a8: 46:ca:4c:6e:58:3c:a5:99:34:e0:29:5e:5e:9e:f0:dd:a2:b0: de:7b:11:68:75:d7:08:7a:c9:6b:a4:cb:ab:2d:12:9f:06:f2: fe:a2:a2:b0:4a:7b:d0:68:67:80:aa:cc:62:ed:36:ca:1c:3f: 30:f8:f2:c1:06:15:84:a5:1f:fd:f7:ae:ca:ee:5a:6f:f9:65: 79:b4:98:47:45:7d:50:6d:dc:11:12:64:aa:c0:98:b8:82:ea: 51:3f:50:cd:13:34:68:78:7b:17:b0:b4:f8:23:67:e1:b6:62: 00:48:12:2a:89:7f:3b:e2:c3:76:50:99:65:15:3e:9c:f8:c1: 51:ae:c3:67:4b:a9:bc:c0:27:63:31:9d:57:36:c2:dc:37:90: 70:7c:4d:21:9f:33:5e:0e:72:4a:29:5f:06:b5:52:fe:65:23: 34:94:ac:81:a7:c5:47:4e:58:45:4b:a4:71:eb:ca:1f:94:11: 90:3f:78:1c:52:6c:6b:f1:96:ee:b6:b3:da:eb:c3:c2:93:ff: 5a:f8:40:75:4a:90:87:a6:eb:fc:60:26:ab:63:1c:92:8d:a9: 7c:cb:af:e8:78:42:f5:b8:91:5c:52:79:71:ca:90:59:81:a2: 68:b2:bb:6a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6W2fCuADq6rN1UJlEDDxoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDExYTAyZTkyOWM0M2YwMTk5YzgzMjYzMDJlMjQ4OTljNGE0MTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6jGw+VkfM/bq3kzpKokYa3HrJRV 4f+ryfT1h+SVuRbTFKnKrp2m4Ym9Cn3HxOP5x0W5w3ohh5zAwXRFrzbNjVVTcgZe duR1oCNTjPlAprMUYwQr/qT9MkrJT2B/XsBFd6MH61hE/bbNGe5yG0hcRPFo3B/c idiwwzntDn2tHX/4fh6rFXXNfoZWZMqswnwlC0zkr97lXSaicZ97dd1Sc+lBbZJd +FOU7lF0NawCaBfnQhsSVbsoJmmAvAaZryapewzOvB++v+BdYMH5p2nxLENvgBp7 V48yKNxewXneNmxBLSjh49FtIHb+OWoy9iqboijhqRlKkNywYk0B3/m+kwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKARoC6SnEPwGZyDJjAuJImcSkFRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhL2Y5N2Q3 ZS04MDc4LTRjZWUtYWY3Ni05ZjZkMGJmZDIwNTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvZjk3ZDdl LTgwNzgtNGNlZS1hZjc2LTlmNmQwYmZkMjA1OC8xL29CR2dMcEtjUV9BWm5JTW1N QzRraVp4S1FWRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW98AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDKGzANBgkqhkiG9w0BAQsFAAOCAQEAqrSjZN9IVlifh1GXbfgJ9B2oRspMblg8 pZk04CleXp7w3aKw3nsRaHXXCHrJa6TLqy0Snwby/qKisEp70GhngKrMYu02yhw/ MPjywQYVhKUf/feuyu5ab/llebSYR0V9UG3cERJkqsCYuILqUT9QzRM0aHh7F7C0 +CNn4bZiAEgSKol/O+LDdlCZZRU+nPjBUa7DZ0upvMAnYzGdVzbC3DeQcHxNIZ8z Xg5ySilfBrVS/mUjNJSsgafFR05YRUukcevKH5QRkD94HFJsa/GW7raz2uvDwpP/ WvhAdUqQh6br/GAmq2Mcko2pfMuv6HhC9biRXFJ5ccqQWYGiaLK7ag== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:15 2026 by rpki-client