This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer File: oGqOPGol1GOfOUWtFszF6Yo6kqY.cer (raw, json) Hash identifier: 1gDIzjrb5mxPrzBPWSxz/G63nmtU1V9anJ43TAhCwQ8= Subject key identifier: A0:6A:8E:3C:6A:25:D4:63:9F:39:45:AD:16:CC:C5:E9:8A:3A:92:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910A762E2534F58E851FC4FE5F5F819 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60871 IP: 185.24.32.0/22 IP: 2a00:73a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a7:62:e2:53:4f:58:e8:51:fc:4f:e5:f5:f8:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a06a8e3c6a25d4639f3945ad16ccc5e98a3a92a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:06:ce:1a:51:e9:00:50:5a:58:b0:6e:1e:ad: 65:19:e1:fd:38:d3:c9:0e:80:9d:26:f7:3e:f9:9e: 67:3a:bf:f7:c4:9b:45:e5:77:dd:19:d9:f0:24:73: cf:c2:39:6a:17:d5:69:3c:d4:8d:4a:0c:da:2e:56: 92:42:47:88:27:b8:ec:e3:fb:30:4c:2e:f9:cf:a4: 87:fa:a4:d6:9b:83:83:14:78:86:6e:35:9e:c2:69: 8d:1d:ee:a8:84:14:e2:3a:57:3f:5f:0f:02:a8:50: 27:71:be:78:86:f0:2c:39:6d:2c:d2:f1:0f:ed:10: f1:78:67:f2:8c:19:a0:ac:e0:4e:e3:b8:97:c2:35: 0a:2a:7c:59:5b:18:eb:68:df:bf:99:d4:cd:41:57: 84:63:d9:37:de:b2:22:76:99:11:f0:3e:8c:85:1c: a3:14:b5:5b:e0:2a:30:e3:c0:f4:81:18:8d:d3:cf: 73:85:6c:dd:41:4b:7a:8d:c3:a0:2f:90:ef:8b:75: 7e:39:23:cb:8c:45:29:b9:44:43:78:bb:e3:51:9f: b1:18:0d:55:33:d5:b0:d5:be:54:1a:09:09:a8:eb: dc:97:96:7e:b6:c6:5e:39:9e:5c:cd:79:8d:44:34: 4d:a4:e5:20:08:5b:04:9f:5d:a2:df:f6:30:ee:80: 1a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6A:8E:3C:6A:25:D4:63:9F:39:45:AD:16:CC:C5:E9:8A:3A:92:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.24.32.0/22 IPv6: 2a00:73a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60871 Signature Algorithm: sha256WithRSAEncryption b0:d9:ae:35:1f:36:b9:69:b6:3d:f9:26:18:18:9a:7d:88:1a: 2b:c0:95:34:40:95:c5:11:3a:02:e1:bb:16:92:9c:d5:d9:98: 07:db:14:8e:4b:fa:b9:08:f8:73:07:21:bc:f7:9c:a6:fb:f1: ff:96:46:da:c4:95:b6:f1:19:18:cf:60:49:c1:9e:69:6c:cd: 93:f5:67:92:dd:a5:5a:9b:1e:5b:8b:b6:0d:ec:ec:28:02:52: 70:cc:f1:76:ed:3c:e8:5a:85:1c:3c:9e:c2:e8:fd:f4:59:4e: 73:56:dc:83:99:e7:fb:10:72:05:9b:cd:cb:48:a3:47:e2:91: cc:79:4a:3e:1b:d2:ca:ca:e5:98:30:37:6d:89:70:b6:8f:87: e9:fc:f1:f0:0d:39:3b:42:af:9b:fa:31:a3:fa:b7:e5:bd:25: 58:61:8a:f0:73:0f:53:eb:2d:77:e7:16:55:7b:c6:08:db:6d: 75:1b:3e:f7:7b:01:80:f0:c0:78:db:08:24:36:68:4c:67:49: 50:0a:26:93:a9:4d:86:6d:a9:8a:9c:4a:53:db:e6:19:88:5f: 4e:0e:0e:8f:43:f5:c0:68:17:97:8d:98:a6:2e:1a:aa:d6:e2: 04:2f:d4:aa:32:13:dc:7e:c2:c6:24:77:f4:c0:9f:bb:61:4a: bf:b1:8e:2b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EKdi4lNPWOhR/E/l9fgZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDZhOGUzYzZhMjVkNDYzOWYzOTQ1YWQxNmNjYzVlOThhM2E5MmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQbOGlHpAFBaWLBuHq1lGeH9ONPJ DoCdJvc++Z5nOr/3xJtF5XfdGdnwJHPPwjlqF9VpPNSNSgzaLlaSQkeIJ7js4/sw TC75z6SH+qTWm4ODFHiGbjWewmmNHe6ohBTiOlc/Xw8CqFAncb54hvAsOW0s0vEP 7RDxeGfyjBmgrOBO47iXwjUKKnxZWxjraN+/mdTNQVeEY9k33rIidpkR8D6MhRyj FLVb4Cow48D0gRiN089zhWzdQUt6jcOgL5Dvi3V+OSPLjEUpuURDeLvjUZ+xGA1V M9Ww1b5UGgkJqOvcl5Z+tsZeOZ5czXmNRDRNpOUgCFsEn12i3/Yw7oAarQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKBqjjxqJdRjnzlFrRbMxemKOpKmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxL2QyNDMw NS1jNTUxLTQ1MGQtYjY5Ny05YWMyZDUzNmYxMmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvZDI0MzA1 LWM1NTEtNDUwZC1iNjk3LTlhYzJkNTM2ZjEyZC8xL29HcU9QR29sMUdPZk9VV3RG c3pGNllvNmtxWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuRggMA0EAgACMAcDBQAqAHOgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDtxzANBgkqhkiG9w0BAQsFAAOCAQEAsNmuNR82uWm2 PfkmGBiafYgaK8CVNECVxRE6AuG7FpKc1dmYB9sUjkv6uQj4cwchvPecpvvx/5ZG 2sSVtvEZGM9gScGeaWzNk/Vnkt2lWpseW4u2DezsKAJScMzxdu086FqFHDyewuj9 9FlOc1bcg5nn+xByBZvNy0ijR+KRzHlKPhvSysrlmDA3bYlwto+H6fzx8A05O0Kv m/oxo/q35b0lWGGK8HMPU+std+cWVXvGCNttdRs+93sBgPDAeNsIJDZoTGdJUAom k6lNhm2pipxKU9vmGYhfTg4Oj0P1wGgXl42Ypi4aqtbiBC/UqjIT3H7CxiR39MCf u2FKv7GOKw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:53 2026 by rpki-client