This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer File: oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer (raw, json) Hash identifier: mFiD0uBlOrKY7H6d3HyFuPRmq9IiDcf3rDCiYDepw84= Subject key identifier: A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA74B4519E33D6F0F372B63A5C2068D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24944 IP: 194.50.84.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4b:45:19:e3:3d:6f:0f:37:2b:63:a5:c2:06:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0937525577cb2af1b285c96431dbd600f57cbe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c7:12:cf:c5:4f:d5:2c:05:c7:73:7a:f1:93: 81:bb:89:ea:00:65:e7:f3:48:8c:bd:fb:d3:f6:5d: 8c:3b:f9:2b:56:70:6e:64:cd:b3:d0:60:1d:23:ad: 93:9c:7a:aa:db:52:7f:5e:8d:10:af:8d:ed:f9:3e: 5f:3d:0b:c7:a4:d3:58:5d:78:11:e5:a4:fc:4a:38: aa:46:fd:4d:bb:9c:08:88:2f:08:c3:de:81:3d:ba: bd:93:0b:18:b4:8d:2a:9d:58:d0:ba:83:55:03:8c: 26:0b:82:46:61:f2:05:18:18:58:89:46:0a:89:40: f7:69:13:1b:d7:57:dd:00:c3:72:47:26:92:86:71: e5:12:cb:92:7a:98:5d:48:a7:12:e2:1c:81:26:22: 3e:9f:e3:0d:98:f9:02:53:71:ae:e4:a0:18:10:ee: 2f:3e:89:84:eb:6b:6a:8f:1f:ca:6a:01:f7:ec:3c: 67:8f:fb:ab:9b:07:d9:73:be:62:48:73:77:a6:b0: 19:78:61:b1:ed:46:5b:a5:46:44:b4:08:07:09:37: cf:1f:1d:6c:1d:85:cb:a8:41:66:69:ca:ff:ef:be: 8e:08:cd:ff:86:bf:7b:d7:f0:6c:99:c6:c9:38:4e: 47:dc:5c:5c:dc:23:3f:30:ab:8f:6c:99:dc:19:4c: 1d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.84.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24944 Signature Algorithm: sha256WithRSAEncryption 64:b9:b4:8d:ba:9b:d7:b0:a8:70:1c:60:b2:53:a9:52:74:14: fc:92:c3:bf:65:82:03:c4:11:47:78:3a:48:e5:52:9a:5b:fc: 1e:ec:26:03:14:a6:7d:ad:1e:04:41:df:ae:7f:3d:f1:18:5d: 22:07:7b:00:ad:f2:11:03:8b:93:28:4d:7e:5d:d0:e4:b2:7c: 2b:1e:44:91:80:c4:02:27:9a:c9:85:0c:66:0e:60:e9:27:7f: 5e:eb:9d:4d:f2:d5:85:af:ef:b5:41:a7:f8:a3:df:e4:73:52: 18:00:8d:90:48:98:d8:2c:e5:e1:47:49:31:1a:b0:32:bb:fa: 86:f0:e1:97:53:eb:6f:22:e1:9a:4e:9f:65:60:f1:14:35:54: 3f:d7:0e:ba:c2:a7:88:4f:bb:40:c7:69:44:5b:74:47:4a:fb: 4e:09:bb:41:35:b8:eb:67:29:90:85:81:6e:ee:4f:ae:e4:3d: e9:2a:71:8f:0a:1f:65:91:bf:21:3d:eb:c1:86:93:65:84:02: b6:c7:6b:da:ba:19:ef:c6:18:4f:53:1c:7e:f9:22:94:bc:c6: 3a:1a:25:89:8f:0b:46:7e:66:4f:4f:72:e2:5c:64:43:ee:52: 90:cb:e2:31:11:e9:77:15:bf:b7:5c:6c:a2:4d:b8:f5:38:b1: 84:a2:83:ed -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt+p0tFGeM9bw83K2OlwgaNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDkzNzUyNTU3N2NiMmFmMWIyODVjOTY0MzFkYmQ2MDBmNTdjYmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMcSz8VP1SwFx3N68ZOBu4nqAGXn 80iMvfvT9l2MO/krVnBuZM2z0GAdI62TnHqq21J/Xo0Qr43t+T5fPQvHpNNYXXgR 5aT8SjiqRv1Nu5wIiC8Iw96BPbq9kwsYtI0qnVjQuoNVA4wmC4JGYfIFGBhYiUYK iUD3aRMb11fdAMNyRyaShnHlEsuSephdSKcS4hyBJiI+n+MNmPkCU3Gu5KAYEO4v PomE62tqjx/KagH37Dxnj/urmwfZc75iSHN3prAZeGGx7UZbpUZEtAgHCTfPHx1s HYXLqEFmacr/776OCM3/hr971/BsmcbJOE5H3Fxc3CM/MKuPbJncGUwdaQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFKCTdSVXfLKvGyhclkMdvWAPV8voMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjL2QyN2Rh Mi0yNzU0LTRkN2ItYWY5MC02ZTAyYWYwYTQ5OTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvZDI3ZGEy LTI3NTQtNGQ3Yi1hZjkwLTZlMDJhZjBhNDk5NC8xL29KTjFKVmQ4c3E4YktGeVdR eDI5WUE5WHktZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwjJUMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AmFwMA0GCSqGSIb3DQEBCwUAA4IBAQBkubSNupvXsKhwHGCyU6lSdBT8ksO/ZYID xBFHeDpI5VKaW/we7CYDFKZ9rR4EQd+ufz3xGF0iB3sArfIRA4uTKE1+XdDksnwr HkSRgMQCJ5rJhQxmDmDpJ39e651N8tWFr++1Qaf4o9/kc1IYAI2QSJjYLOXhR0kx GrAyu/qG8OGXU+tvIuGaTp9lYPEUNVQ/1w66wqeIT7tAx2lEW3RHSvtOCbtBNbjr ZymQhYFu7k+u5D3pKnGPCh9lkb8hPevBhpNlhAK2x2vauhnvxhhPUxx++SKUvMY6 GiWJjwtGfmZPT3LiXGRD7lKQy+IxEel3Fb+3XGyiTbj1OLGEooPt -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:16 2026 by rpki-client