This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer File: oHejVvB-B0yubybn9Yk9zp2sitM.cer (raw, json) Hash identifier: bBgWInAAfBRrX6tIx/lK5VeL2pZJi5+10xRH6F8o1IM= Subject key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775888AC46D97F0241362C6EE0158E64 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209295 IP: 193.228.229.0/24 IP: 2001:678:ea8::/48 IP: 2001:678:eac::/48 IP: 2001:67c:1788::/48 IP: 2001:67c:2888::/48 IP: 2001:67c:288c::/48 IP: 2a11:900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:88:ac:46:d9:7f:02:41:36:2c:6e:e0:15:8e:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:18:a9:3e:a7:50:3c:6e:be:f8:1f:0f:08: ea:b0:cc:82:80:f9:b5:63:16:24:df:a4:c7:1e:44: 0c:ed:e3:03:03:cc:91:0e:2f:e5:6c:b4:e1:5e:8d: f1:cf:09:66:26:35:f3:83:f3:a9:2d:30:ab:ab:8b: 52:d2:24:9c:f2:1a:ca:a4:c6:fa:35:68:58:f5:3c: f2:48:94:ad:7c:e6:d7:0b:f0:de:69:b7:be:8c:82: 11:2a:d3:1d:ed:eb:4f:78:72:92:37:ed:48:01:30: 0f:fb:21:89:09:4b:cd:06:59:d2:a5:0e:02:42:d5: 59:e8:b3:d7:40:f6:12:ac:e9:6b:85:41:63:47:8f: 64:25:00:7d:62:aa:c0:f2:3a:68:a4:80:25:04:87: d7:14:50:d3:b5:32:66:45:97:ff:9f:b5:c6:30:4e: eb:7f:be:a4:23:00:f6:b0:b8:f8:5c:62:4f:da:91: 66:34:08:b0:f3:16:5c:67:b6:dc:87:d9:86:e8:84: df:ac:07:ac:5b:b1:08:4e:2e:8d:39:14:d2:9e:70: d7:34:cf:16:32:8f:7b:84:3c:85:96:3d:cb:30:b4: 2c:85:80:eb:a8:9a:86:0d:62:04:26:07:20:0e:a8: c1:c8:77:2f:00:7d:99:97:e7:d5:e2:6a:f2:1b:76: 35:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.228.229.0/24 IPv6: 2001:678:ea8::/48 2001:678:eac::/48 2001:67c:1788::/48 2001:67c:2888::/48 2001:67c:288c::/48 2a11:900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209295 Signature Algorithm: sha256WithRSAEncryption 9b:6f:3b:72:62:c4:1c:0c:ee:28:e5:65:73:d0:7a:48:90:1f: 74:8d:a6:32:c5:4a:61:76:2d:c4:1e:5f:da:73:77:85:c8:f3: db:a8:5f:c8:78:77:44:2d:19:c6:96:2e:db:85:b4:72:73:b0: a9:65:ca:4a:fb:44:fd:5f:10:75:b6:9e:85:b7:e0:99:cc:c8: 3c:c1:33:95:22:26:73:d6:04:bf:45:d3:ec:91:33:a5:e2:b3: 2d:b2:51:08:c7:73:21:a0:f7:a2:fe:04:4c:c2:4d:fa:7e:48: b0:71:45:85:88:b0:b5:29:7c:dc:08:a4:ea:41:ba:aa:c2:79: 45:cd:74:3e:24:98:5a:73:13:ed:f4:de:7b:87:a1:7d:59:ad: 42:13:8d:ef:fc:dd:f2:39:e9:51:94:07:79:ef:b2:d5:bd:aa: 00:53:89:2b:bd:b3:1b:38:f4:45:fa:c5:e9:70:ac:be:7f:66: 5f:01:5f:74:51:1c:c4:96:5b:1a:30:21:c5:9a:11:35:b3:bf: 74:8d:bb:58:a3:c9:4e:cb:ae:93:bb:8e:70:b4:51:97:8a:2e: ef:e5:be:18:f8:50:c5:bf:98:8a:9b:78:1d:5f:2f:f4:66:bf: f8:3f:96:99:bf:ba:66:58:63:fc:e5:06:36:70:64:b0:3c:24: b4:ea:f2:29 -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgISAZt3WIisRtl/AkE2LG7gFY5kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDc3YTM1NmYwN2UwNzRjYWU2ZjI2ZTdmNTg5M2RjZTlkYWM4YWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb0YqT6nUDxuvvgfDwjqsMyCgPm1 YxYk36THHkQM7eMDA8yRDi/lbLThXo3xzwlmJjXzg/OpLTCrq4tS0iSc8hrKpMb6 NWhY9TzySJStfObXC/Deabe+jIIRKtMd7etPeHKSN+1IATAP+yGJCUvNBlnSpQ4C QtVZ6LPXQPYSrOlrhUFjR49kJQB9YqrA8jpopIAlBIfXFFDTtTJmRZf/n7XGME7r f76kIwD2sLj4XGJP2pFmNAiw8xZcZ7bch9mG6ITfrAesW7EITi6NORTSnnDXNM8W Mo97hDyFlj3LMLQshYDrqJqGDWIEJgcgDqjByHcvAH2Zl+fV4mryG3Y1vQIDAQAB o4IC3DCCAtgwHQYDVR0OBBYEFKB3o1bwfgdMrm8m5/WJPc6drIrTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzIzYjNj ZS05OTIyLTQyZmItYTEyNC00ODA5M2ZiNmM2N2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvMjNiM2Nl LTk5MjItNDJmYi1hMTI0LTQ4MDkzZmI2YzY3Zi8xL29IZWpWdkItQjB5dWJ5Ym45 WWs5enAyc2l0TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGCCsGAQUF BwEHAQH/BEwwSjAMBAIAATAGAwQAweTlMDoEAgACMDQDBwAgAQZ4DqgDBwAgAQZ4 DqwDBwAgAQZ8F4gDBwAgAQZ8KIgDBwAgAQZ8KIwDBQMqEQkAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwMxjzANBgkqhkiG9w0BAQsFAAOCAQEAm287cmLEHAzuKOVl c9B6SJAfdI2mMsVKYXYtxB5f2nN3hcjz26hfyHh3RC0ZxpYu24W0cnOwqWXKSvtE /V8QdbaehbfgmczIPMEzlSImc9YEv0XT7JEzpeKzLbJRCMdzIaD3ov4ETMJN+n5I sHFFhYiwtSl83Aik6kG6qsJ5Rc10PiSYWnMT7fTee4ehfVmtQhON7/zd8jnpUZQH ee+y1b2qAFOJK72zGzj0RfrF6XCsvn9mXwFfdFEcxJZbGjAhxZoRNbO/dI27WKPJ Tsuuk7uOcLRRl4ou7+W+GPhQxb+Yipt4HV8v9Ga/+D+Wmb+6Zlhj/OUGNnBksDwk tOryKQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:34 2026 by rpki-client