This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer File: oJRwOdnwgKQn91JcXQZvbPYhNPM.cer (raw, json) Hash identifier: 75kboMXjAzrQw+cFyUZwZKdCQdvhUqjzJhyKDuhstlg= Subject key identifier: A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82205D9A0EE946A138B36FC1B619B7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213099 IP: 94.124.113.0/24 IP: 2a10:5840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:20:5d:9a:0e:e9:46:a1:38:b3:6f:c1:b6:19:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0947039d9f080a427f7525c5d066f6cf62134f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:69:60:fc:94:2c:2b:58:a9:68:6a:35:2e: 8f:a2:db:e8:c7:69:9e:3a:01:a3:06:6d:65:08:eb: 59:e3:bf:37:33:2a:f8:af:30:ef:c8:bd:e8:5b:96: d3:4b:c9:37:2a:89:ff:76:1f:c6:8f:14:d3:de:ba: 48:89:ae:de:48:91:ed:dc:71:60:eb:24:69:e9:2b: 95:48:9a:8e:34:e7:31:d1:80:79:85:50:53:34:dc: 4b:57:89:45:b1:05:9b:ee:5c:31:78:73:36:eb:12: 35:a7:2c:38:1d:98:ab:db:c8:c6:3c:6f:a6:fb:79: 27:1f:93:92:9c:b7:62:85:de:13:44:a5:95:88:ae: 83:3f:cc:a5:37:3d:2d:5a:15:78:33:5d:68:ff:b1: 99:4c:46:34:60:ce:74:fb:a2:58:5c:8f:1a:96:10: 56:22:c1:e2:4f:be:84:d2:17:19:a5:65:3d:18:79: a2:ee:8f:3d:94:3d:24:90:b7:84:94:55:6c:06:6e: 03:b6:93:b9:79:c0:41:75:38:70:5d:d0:68:1e:57: da:fd:49:05:0d:4a:ee:90:3d:e7:a9:c1:f3:f0:19: 2e:3d:27:de:e3:f5:11:dc:94:da:14:32:2f:b3:6a: e6:4a:4f:96:64:a1:b1:b9:1a:3e:a6:5a:54:ed:6b: a7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.124.113.0/24 IPv6: 2a10:5840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213099 Signature Algorithm: sha256WithRSAEncryption 6e:21:dd:37:46:ff:33:97:e9:28:f1:07:e1:1a:d2:00:f4:64: eb:e7:10:6d:d9:a6:08:2c:08:05:1e:54:f9:06:40:da:db:c5: 5b:87:58:05:c7:46:08:1c:7e:b4:d7:a8:fc:70:35:ae:25:82: 43:57:54:3e:10:ba:92:3a:d0:f5:5e:f9:27:c9:24:ae:c9:9d: 3c:07:12:07:07:b5:3d:0c:74:62:66:01:75:a5:03:36:99:c8: af:8d:de:07:99:8c:4e:1a:7a:94:b9:a5:eb:93:f7:49:da:39: 27:c2:54:38:fa:c2:6b:aa:77:a3:3b:4a:02:f9:56:18:b1:f0: 5f:73:0c:67:17:05:86:83:5d:cc:23:e3:64:75:17:c4:0f:93: a4:6e:2e:11:93:cd:b3:bb:a6:00:2c:fe:ca:4a:2b:c1:e4:28: d7:e2:9e:25:6c:72:d4:3e:4b:bd:94:bf:77:8e:c5:a2:93:3c: 7f:4a:ac:8c:19:9d:ee:1d:2c:fd:d8:5f:3e:37:c3:d9:d6:49: 80:21:17:98:52:3c:b3:79:48:8b:2a:ca:e4:61:24:c6:66:04: bd:2d:64:1e:eb:18:f3:04:66:a8:9a:11:c1:48:bb:54:10:d7: 3a:27:3d:c6:c4:16:c0:f4:dd:34:9b:eb:55:1d:60:da:07:0c: 1d:e6:65:a0 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/giBdmg7pRqE4s2/Bthm3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDk0NzAzOWQ5ZjA4MGE0MjdmNzUyNWM1ZDA2NmY2Y2Y2MjEzNGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2hpYPyULCtYqWhqNS6Potvox2me OgGjBm1lCOtZ4783Myr4rzDvyL3oW5bTS8k3Kon/dh/GjxTT3rpIia7eSJHt3HFg 6yRp6SuVSJqONOcx0YB5hVBTNNxLV4lFsQWb7lwxeHM26xI1pyw4HZir28jGPG+m +3knH5OSnLdihd4TRKWViK6DP8ylNz0tWhV4M11o/7GZTEY0YM50+6JYXI8alhBW IsHiT76E0hcZpWU9GHmi7o89lD0kkLeElFVsBm4DtpO5ecBBdThwXdBoHlfa/UkF DUrukD3nqcHz8BkuPSfe4/UR3JTaFDIvs2rmSk+WZKGxuRo+plpU7WunPQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKCUcDnZ8ICkJ/dSXF0Gb2z2ITTzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1L2UzYjky MS1hNzZiLTQxZjAtYjI0NC1jOGIzYWMwYmVmY2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvZTNiOTIx LWE3NmItNDFmMC1iMjQ0LWM4YjNhYzBiZWZjYi8xL29KUndPZG53Z0tRbjkxSmNY UVp2YlBZaE5QTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAXnxxMA0EAgACMAcDBQMqEFhAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNAazANBgkqhkiG9w0BAQsFAAOCAQEAbiHdN0b/M5fp KPEH4RrSAPRk6+cQbdmmCCwIBR5U+QZA2tvFW4dYBcdGCBx+tNeo/HA1riWCQ1dU PhC6kjrQ9V75J8kkrsmdPAcSBwe1PQx0YmYBdaUDNpnIr43eB5mMThp6lLml65P3 Sdo5J8JUOPrCa6p3oztKAvlWGLHwX3MMZxcFhoNdzCPjZHUXxA+TpG4uEZPNs7um ACz+ykorweQo1+KeJWxy1D5LvZS/d47FopM8f0qsjBmd7h0s/dhfPjfD2dZJgCEX mFI8s3lIiyrK5GEkxmYEvS1kHusY8wRmqJoRwUi7VBDXOic9xsQWwPTdNJvrVR1g 2gcMHeZloA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:45 2026 by rpki-client