This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.cer File: oJ_aBHs6CxyCBDXmmTiGYNoyxj8.cer (raw, json) Hash identifier: VYiKxoCPjRkg+sLkBDdDpvfT21iDfcZie5VDD2TQIMc= Subject key identifier: A0:9F:DA:04:7B:3A:0B:1C:82:04:35:E6:99:38:86:60:DA:32:C6:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EF709956BD317EBB368761C375E50 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.18.222.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f7:09:95:6b:d3:17:eb:b3:68:76:1c:37:5e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a09fda047b3a0b1c820435e699388660da32c63f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c7:e5:5d:58:68:ce:f4:b4:e3:96:d6:5f:80: a8:f7:39:b4:21:26:d0:84:e8:d8:26:c6:35:ef:91: 26:cc:62:b1:a8:28:a8:9d:b9:53:a9:4a:8f:cd:bb: fe:aa:6d:77:71:0c:c9:20:97:be:3d:a4:73:e6:68: c6:08:4a:5a:7d:57:af:91:88:f2:2d:1c:f6:41:14: 2c:13:0b:1b:12:f5:de:74:d6:c5:ee:b6:2d:04:6b: 45:6d:9d:3d:05:ff:f0:bf:08:89:2a:2b:3a:2f:84: 29:6e:b5:d5:53:64:83:d4:67:c6:57:e2:91:d7:61: 6b:1e:35:6e:f9:40:bd:f6:a7:1d:a9:63:51:f3:cf: 7d:54:db:ba:b3:77:ad:d4:11:0a:09:21:f5:33:ba: b9:ae:60:98:b5:3d:ab:eb:3b:1e:8e:3d:0c:51:fa: f8:12:22:85:6f:2b:dd:2e:87:94:c0:45:2e:2e:bb: 21:4a:93:ed:6f:2c:bb:1c:d8:a4:b6:a3:4d:0e:41: 46:ed:7a:e4:0e:52:31:b8:4e:b3:7d:02:5c:0c:37: e2:8c:73:52:43:3f:97:9e:86:da:26:ef:d1:ea:fe: f8:14:7f:46:d4:a6:a8:61:b4:30:cb:e0:03:11:72: d1:1a:82:68:09:0c:89:7c:07:3f:3a:43:f1:2a:71: dd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9F:DA:04:7B:3A:0B:1C:82:04:35:E6:99:38:86:60:DA:32:C6:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.18.222.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:77:da:7a:98:39:4a:8d:0c:8a:b7:c4:d1:dd:49:6f:76:6e: 59:61:85:b8:60:6e:9c:17:ed:e3:b4:12:25:46:72:df:4e:06: a6:27:79:20:11:3d:b3:3d:36:ac:91:8e:68:4f:c2:cd:e9:f8: 1c:2d:a3:06:1a:15:ff:7b:f3:b8:15:56:2e:73:a1:2e:e1:a5: 2e:10:ee:49:10:65:25:ec:81:e8:20:db:85:f4:24:54:a3:d3: 2c:be:1a:68:63:b7:dd:33:26:51:38:ba:e8:5b:8b:f5:db:77: e9:96:ee:00:ee:a2:a2:b9:c3:52:20:c7:75:c1:ce:b6:18:73: 25:26:04:15:3f:11:72:99:3d:4a:1a:3a:7d:2b:79:f3:1e:2a: 0c:b8:3d:cf:7a:09:84:58:f4:70:b4:a4:84:18:5b:4a:96:b5: 7b:87:18:ad:cf:e9:89:63:65:8e:0b:e1:74:ef:be:86:f5:d3: 77:1f:46:3e:b2:39:15:a4:97:5d:3d:26:2e:d9:ff:d5:3f:4a: 8f:d2:ca:eb:18:e9:ed:69:5e:75:17:c2:43:aa:ff:07:56:1d: a2:1e:0f:d9:17:a2:1b:78:95:58:72:87:2e:0e:ad:c9:b2:9a: 33:30:64:17:5c:fe:39:ec:d3:df:10:89:05:fe:6b:f1:d8:68: df:f0:a7:21 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5fvcJlWvTF+uzaHYcN15QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDlmZGEwNDdiM2EwYjFjODIwNDM1ZTY5OTM4ODY2MGRhMzJjNjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMflXVhozvS045bWX4Co9zm0ISbQ hOjYJsY175EmzGKxqCionblTqUqPzbv+qm13cQzJIJe+PaRz5mjGCEpafVevkYjy LRz2QRQsEwsbEvXedNbF7rYtBGtFbZ09Bf/wvwiJKis6L4QpbrXVU2SD1GfGV+KR 12FrHjVu+UC99qcdqWNR8899VNu6s3et1BEKCSH1M7q5rmCYtT2r6zsejj0MUfr4 EiKFbyvdLoeUwEUuLrshSpPtbyy7HNiktqNNDkFG7XrkDlIxuE6zfQJcDDfijHNS Qz+XnobaJu/R6v74FH9G1KaoYbQwy+ADEXLRGoJoCQyJfAc/OkPxKnHd5wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKCf2gR7OgscggQ15pk4hmDaMsY/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2LzhiNGQz Mi0wMzY1LTRkYWEtOWQ1Yi0yOTkyMGU1MTY3ZDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvOGI0ZDMy LTAzNjUtNGRhYS05ZDViLTI5OTIwZTUxNjdkOS8xL29KX2FCSHM2Q3h5Q0JEWG1t VGlHWU5veXhqOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuRLeMA0GCSqGSIb3DQEBCwUAA4IBAQA+d9p6 mDlKjQyKt8TR3Ulvdm5ZYYW4YG6cF+3jtBIlRnLfTgamJ3kgET2zPTaskY5oT8LN 6fgcLaMGGhX/e/O4FVYuc6Eu4aUuEO5JEGUl7IHoINuF9CRUo9MsvhpoY7fdMyZR OLroW4v123fplu4A7qKiucNSIMd1wc62GHMlJgQVPxFymT1KGjp9K3nzHioMuD3P egmEWPRwtKSEGFtKlrV7hxitz+mJY2WOC+F0776G9dN3H0Y+sjkVpJddPSYu2f/V P0qP0srrGOntaV51F8JDqv8HVh2iHg/ZF6IbeJVYcocuDq3JspozMGQXXP457NPf EIkF/mvx2Gjf8Kch -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:58 2026 by rpki-client