This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer File: oInbclD9hHbImK7gpfvyqYg0Af4.cer (raw, json) Hash identifier: SqvJoaTUf+gjuli7w0QEC2hSnXuNKF2G6D0OvfnGVsQ= Subject key identifier: A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B0425A3FA48EF18600AA28682AB59 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200324 IP: 194.41.48.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:04:25:a3:fa:48:ef:18:60:0a:a2:86:82:ab:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a089db7250fd8476c898aee0a5fbf2a9883401fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e9:e2:93:85:57:c1:b5:2d:35:25:44:ef:50: 57:7e:df:05:cf:00:8f:5b:92:99:fe:57:d1:92:e8: 4a:f8:c6:04:68:8a:85:db:7e:a3:f8:1b:d8:c6:d5: 9b:55:55:ed:52:44:db:82:f8:32:67:65:74:03:c3: 56:1e:88:df:c7:ac:17:84:9d:41:ed:29:92:ed:5e: 7f:2a:87:3d:99:36:b0:dd:67:e0:9b:f0:b2:7f:c6: 55:67:ba:ce:76:a0:73:5b:a9:60:52:cb:61:16:1c: 3d:c0:be:2e:bc:a7:8a:b7:b7:8b:24:b5:76:f6:d3: a5:08:26:71:d6:b0:b2:8e:e2:d0:27:d4:8b:22:f1: ce:75:aa:b0:35:9b:9a:dc:0d:3c:91:7c:d1:4d:13: 06:bb:54:e6:6f:43:ac:b0:f0:54:1c:16:a6:44:29: 61:e2:be:45:a5:8d:17:dd:ed:14:03:56:de:f2:5a: d7:50:7f:74:cd:fd:6c:c8:ff:44:0a:2b:83:de:02: 0d:a0:70:03:70:2a:f6:15:70:4e:fa:b0:41:6b:df: 5f:72:1a:78:98:8c:a1:21:87:98:0f:16:a9:fd:32: c0:7f:00:2d:36:44:0b:a3:44:e4:84:e2:c8:4a:de: 47:1e:19:13:cc:7a:1d:3a:13:31:da:2b:44:22:1b: 4b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.41.48.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200324 Signature Algorithm: sha256WithRSAEncryption 2d:a2:b1:0a:3a:0e:4d:2f:1a:75:b4:8c:6f:f4:4f:c1:b6:69: 75:08:5f:13:9f:a7:6e:88:58:a7:c9:8b:6b:d8:8d:63:6a:15: fc:4c:a1:a3:48:28:a9:5d:c8:4a:d8:50:cd:b3:52:55:ac:f1: df:6a:03:76:dd:bf:df:8b:c0:8b:6b:ae:7f:ee:ef:33:d3:11: f9:be:e0:7e:af:89:3f:f1:50:dd:f3:4a:2b:2b:b2:06:a0:33: 50:65:21:1c:3f:51:af:ae:59:c3:ec:07:ce:4e:b7:6d:8c:3f: e6:b3:33:aa:9f:15:56:e3:69:45:d7:60:ee:36:28:7c:30:c5: c9:7b:2d:9d:c8:eb:68:e3:ac:40:22:46:8c:d4:53:a2:07:2f: bd:bd:ec:18:02:3e:ff:77:25:84:e4:14:8b:66:7c:3d:58:a7: d8:54:99:29:bb:f8:ef:7c:3b:6c:75:11:d5:0b:ca:e7:87:6f: 5a:39:3e:04:76:e5:4a:5d:7f:bb:55:52:e5:9c:f9:d4:ab:1d: 51:82:26:46:4b:5d:69:d4:bf:27:61:dd:dd:3f:b8:ed:1a:e6: 80:25:4c:9b:21:9f:8c:6b:9e:e5:3b:8d:d8:f5:17:83:7a:20: cd:59:79:03:28:f0:7a:d6:1c:00:bf:ef:79:14:f0:61:4e:e9: ac:d5:18:7c -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9WwQlo/pI7xhgCqKGgqtZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDg5ZGI3MjUwZmQ4NDc2Yzg5OGFlZTBhNWZiZjJhOTg4MzQwMWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Onik4VXwbUtNSVE71BXft8FzwCP W5KZ/lfRkuhK+MYEaIqF236j+BvYxtWbVVXtUkTbgvgyZ2V0A8NWHojfx6wXhJ1B 7SmS7V5/Koc9mTaw3Wfgm/Cyf8ZVZ7rOdqBzW6lgUsthFhw9wL4uvKeKt7eLJLV2 9tOlCCZx1rCyjuLQJ9SLIvHOdaqwNZua3A08kXzRTRMGu1Tmb0OssPBUHBamRClh 4r5FpY0X3e0UA1be8lrXUH90zf1syP9ECiuD3gINoHADcCr2FXBO+rBBa99fchp4 mIyhIYeYDxap/TLAfwAtNkQLo0TkhOLISt5HHhkTzHodOhMx2itEIhtL9wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKCJ23JQ/YR2yJiu4KX78qmINAH+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzJhODgz Mi1jZGQ2LTRkOGMtOTNmMy1kODI1ZDAzNjU3ODkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvMmE4ODMy LWNkZDYtNGQ4Yy05M2YzLWQ4MjVkMDM2NTc4OS8xL29JbmJjbEQ5aEhiSW1LN2dw ZnZ5cVlnMEFmNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwikwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMOhDANBgkqhkiG9w0BAQsFAAOCAQEALaKxCjoOTS8adbSMb/RPwbZpdQhfE5+n bohYp8mLa9iNY2oV/Eyho0goqV3ISthQzbNSVazx32oDdt2/34vAi2uuf+7vM9MR +b7gfq+JP/FQ3fNKKyuyBqAzUGUhHD9Rr65Zw+wHzk63bYw/5rMzqp8VVuNpRddg 7jYofDDFyXstncjraOOsQCJGjNRTogcvvb3sGAI+/3clhOQUi2Z8PVin2FSZKbv4 73w7bHUR1QvK54dvWjk+BHblSl1/u1VS5Zz51KsdUYImRktdadS/J2Hd3T+47Rrm gCVMmyGfjGue5TuN2PUXg3ogzVl5AyjwetYcAL/veRTwYU7prNUYfA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:24:48 2026 by rpki-client