This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer File: oBocfbuaFXGlv0kkqz_FBJMUX08.cer (raw, json) Hash identifier: cBuzHG7qrXYwbUpj9bF9q6uuMwIcBs5jPUqLZgNdnlw= Subject key identifier: A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78354F88E64BA03844BCEF1F267F5537 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5582 AS: 198788 IP: 91.239.90.0/24 IP: 185.113.32.0/22 IP: 185.182.224.0/22 IP: 2001:67c:2e50::/48 IP: 2a0a:fa80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4f:88:e6:4b:a0:38:44:bc:ef:1f:26:7f:55:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:22:9f:ef:96:10:d7:bb:29:4c:d4:9e:5d: d2:e8:1a:e7:7c:95:85:39:16:24:ad:9a:65:81:af: f5:45:4d:9f:c1:70:ed:7a:ab:0e:c0:73:cc:26:ad: 72:26:a7:3e:bf:7d:d1:d8:0b:79:52:b6:16:3c:f6: e2:2e:e8:f1:7f:27:05:c3:2a:9f:9e:b3:a4:2c:b5: b4:cf:4a:e4:2d:ed:ad:5d:c1:73:b1:e8:6b:af:c0: e9:2c:6a:d2:0c:3a:62:b0:91:1e:fd:15:bf:44:4f: 9f:97:51:4c:59:21:62:b1:bd:5d:dc:c5:9e:fe:90: cd:27:97:ad:06:6b:96:e7:3b:a3:03:1f:18:19:8d: 15:c7:bc:2f:1a:c9:71:dd:f9:8e:b1:8b:a1:b5:3d: f5:6b:02:48:f7:ad:bd:24:af:07:d2:9c:f1:cc:de: 71:88:72:1f:78:3c:87:26:31:e6:89:ad:78:48:7d: 0c:dc:16:1c:bc:6e:a1:94:86:71:84:81:24:1d:28: 00:69:21:e5:a7:8f:76:94:c9:cc:bb:aa:cf:be:fd: 9d:13:80:af:3b:9b:1a:78:94:2f:37:0c:f4:ea:9f: 40:58:30:f5:9d:a0:64:9a:2c:fb:24:63:67:11:33: 5c:1c:2d:92:68:0f:93:53:86:bc:36:0a:1d:e0:cc: c7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.90.0/24 185.113.32.0/22 185.182.224.0/22 IPv6: 2001:67c:2e50::/48 2a0a:fa80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5582 198788 Signature Algorithm: sha256WithRSAEncryption a6:9f:2e:d3:38:0c:3d:92:e5:17:94:84:03:6f:c7:d9:d9:54: 7b:5c:a8:ad:81:72:2d:bc:fe:6e:2f:67:0c:da:c0:41:df:f3: 07:fd:47:07:7c:ca:19:98:07:0b:9a:75:57:90:d8:45:dc:be: 23:92:22:c9:3b:b2:67:75:7f:21:e1:82:8d:c9:66:86:a3:02: d6:88:9b:66:de:5a:2c:d4:16:b5:fa:ec:e9:a4:73:29:b7:00: bb:39:84:a5:95:89:d1:6a:51:46:e6:0b:d9:69:18:f9:8c:7c: b5:4d:30:2a:7e:ed:75:98:10:e3:d5:b0:58:44:ee:48:e6:de: c4:c6:b9:03:b5:19:e3:88:e7:84:0b:c2:8d:d1:a5:48:64:8c: 29:86:29:f0:df:e7:3c:35:6e:db:14:00:a8:5c:3d:1c:f8:58: 8d:dd:73:db:79:e3:41:86:86:98:55:1f:19:b9:06:61:38:9a: d6:50:07:cc:95:9e:a2:f8:9e:ed:de:bb:b5:35:a4:a6:6f:6d: 7d:d8:de:97:e2:80:d8:3a:74:e4:af:d0:dc:23:66:b6:9c:eb: 29:f6:56:48:45:ed:10:ab:e2:8f:cb:53:18:9c:b0:2d:03:a2: a8:97:a2:48:23:81:63:fa:35:f0:b2:f9:c8:ef:34:12:9b:20: 92:3a:37:07 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgISAZt4NU+I5kugOES87x8mf1U3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDFhMWM3ZGJiOWExNTcxYTViZjQ5MjRhYjNmYzUwNDkzMTQ1ZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjMin++WENe7KUzUnl3S6BrnfJWF ORYkrZplga/1RU2fwXDteqsOwHPMJq1yJqc+v33R2At5UrYWPPbiLujxfycFwyqf nrOkLLW0z0rkLe2tXcFzsehrr8DpLGrSDDpisJEe/RW/RE+fl1FMWSFisb1d3MWe /pDNJ5etBmuW5zujAx8YGY0Vx7wvGslx3fmOsYuhtT31awJI9629JK8H0pzxzN5x iHIfeDyHJjHmia14SH0M3BYcvG6hlIZxhIEkHSgAaSHlp492lMnMu6rPvv2dE4Cv O5saeJQvNwz06p9AWDD1naBkmiz7JGNnETNcHC2SaA+TU4a8Ngod4MzHewIDAQAB o4ICyDCCAsQwHQYDVR0OBBYEFKAaHH27mhVxpb9JJKs/xQSTFF9PMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NlL2U4OTZi OC0wZWEwLTRiYmMtOGMzNS0yMjYyYzViZDdhMmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvZTg5NmI4 LTBlYTAtNGJiYy04YzM1LTIyNjJjNWJkN2EyYy8xL29Cb2NmYnVhRlhHbHYwa2tx el9GQkpNVVgwOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF BwEHAQH/BDQwMjAYBAIAATASAwQAW+9aAwQCuXEgAwQCubbgMBYEAgACMBADBwAg AQZ8LlADBQMqCvqAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAhXOAgMDCIQwDQYJ KoZIhvcNAQELBQADggEBAKafLtM4DD2S5ReUhANvx9nZVHtcqK2Bci28/m4vZwza wEHf8wf9Rwd8yhmYBwuadVeQ2EXcviOSIsk7smd1fyHhgo3JZoajAtaIm2beWizU FrX67Omkcym3ALs5hKWVidFqUUbmC9lpGPmMfLVNMCp+7XWYEOPVsFhE7kjm3sTG uQO1GeOI54QLwo3RpUhkjCmGKfDf5zw1btsUAKhcPRz4WI3dc9t540GGhphVHxm5 BmE4mtZQB8yVnqL4nu3eu7U1pKZvbX3Y3pfigNg6dOSv0NwjZrac6yn2VkhF7RCr 4o/LUxicsC0DoqiXokgjgWP6NfCy+cjvNBKbIJI6Nwc= -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:22 2026 by rpki-client