This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer File: oJzYxxpuMygsBF2PiMOzeKz0G9k.cer (raw, json) Hash identifier: uva+egvePFuDzuIvLR8v1q99jOmmQxBLFaU7qQmGNAA= Subject key identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CABC2CFB2E67A649A1D75134177FF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21419 IP: 178.21.160.0/21 IP: 185.4.0.0/22 IP: 2a02:6440::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ab:c2:cf:b2:e6:7a:64:9a:1d:75:13:41:77:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7e:28:d5:fc:1e:e8:24:93:a7:8a:c1:38:e0: 7e:9a:da:da:0b:59:e9:38:15:bb:1a:07:47:01:46: 58:f7:5c:bb:2a:c4:8d:60:82:ef:c3:ed:11:f6:1e: c7:97:99:01:37:90:0f:18:71:79:63:35:a4:f0:9e: 2a:0e:df:80:02:af:e8:6f:f6:8e:17:29:3c:3c:d5: 70:00:9c:96:34:38:81:1b:eb:bb:c2:e8:aa:85:97: 4c:62:46:3a:9e:20:46:a1:28:20:a7:df:02:cb:75: 4a:44:27:e7:e3:c0:b1:dc:c7:6d:9b:93:86:5e:21: 91:35:68:67:4c:14:ef:e7:48:8f:cf:10:50:d2:c4: 37:9c:e5:e7:86:52:46:03:b4:11:c7:1f:8b:53:51: 94:9f:08:26:79:61:6e:19:81:9c:15:d7:40:a9:f5: 85:da:9e:e1:46:f8:c3:69:7d:14:0e:0a:f8:c3:8d: e2:a9:aa:c0:d7:f0:e3:45:30:19:03:aa:82:9a:9f: c4:ff:39:e9:8c:50:9a:45:ac:7f:06:87:d4:fe:66: 4f:0e:f9:41:c7:bd:33:f1:ed:26:11:27:aa:14:2f: 53:d6:46:95:cd:c4:00:00:0a:19:b0:bb:28:8c:61: 9d:9a:56:fb:01:f1:fc:bc:43:05:ca:ab:1d:95:d2: 61:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.21.160.0/21 185.4.0.0/22 IPv6: 2a02:6440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21419 Signature Algorithm: sha256WithRSAEncryption 36:b1:1a:8e:da:ed:81:e1:7a:7e:9f:21:d9:5d:c3:70:51:c9: 2f:55:09:fe:3a:3c:16:59:e8:77:81:50:a3:34:99:75:47:78: 68:3b:0a:d0:2e:04:06:eb:7b:7a:0d:8f:13:49:f8:86:17:2a: 62:7c:aa:81:e7:6a:6c:b2:5e:51:46:34:8d:34:73:bc:d3:de: 23:49:e1:a8:9d:c5:b3:73:dc:2e:3d:45:c1:bd:2f:ca:30:8f: 9d:01:05:f5:63:8a:4a:d1:13:7b:ab:b3:8b:68:f9:f1:50:bf: e2:d8:dd:db:6a:a9:b7:a2:fe:8a:79:32:17:c6:2f:aa:38:80: d3:04:33:e8:a4:0b:f9:9e:21:f4:0e:65:ed:9f:7e:fe:01:df: 29:fb:3d:de:db:87:62:b7:8c:06:e7:71:2f:7d:90:ff:e3:1b: ab:56:ba:5a:fd:7b:67:f8:70:15:fc:ac:11:1c:ec:a3:7c:12: 12:85:66:e4:8d:77:ea:62:dc:26:bb:56:0d:c8:d8:7f:66:1d: e5:49:9f:da:8a:4a:d7:32:6b:13:e5:fd:0b:b8:93:3e:05:ee: 29:81:f3:8b:fd:43:15:94:da:31:67:8c:a8:d3:f1:ce:2c:05: d7:5e:d4:2a:8f:d9:eb:0a:98:fd:50:52:95:0c:ee:5b:b7:58: 9a:7b:62:82 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt9XKvCz7LmemSaHXUTQXf/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDljZDhjNzFhNmUzMzI4MmMwNDVkOGY4OGMzYjM3OGFjZjQxYmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn4o1fwe6CSTp4rBOOB+mtraC1np OBW7GgdHAUZY91y7KsSNYILvw+0R9h7Hl5kBN5APGHF5YzWk8J4qDt+AAq/ob/aO Fyk8PNVwAJyWNDiBG+u7wuiqhZdMYkY6niBGoSggp98Cy3VKRCfn48Cx3Mdtm5OG XiGRNWhnTBTv50iPzxBQ0sQ3nOXnhlJGA7QRxx+LU1GUnwgmeWFuGYGcFddAqfWF 2p7hRvjDaX0UDgr4w43iqarA1/DjRTAZA6qCmp/E/znpjFCaRax/BofU/mZPDvlB x70z8e0mESeqFC9T1kaVzcQAAAoZsLsojGGdmlb7AfH8vEMFyqsdldJhSQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFKCc2McabjMoLARdj4jDs3is9BvZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1LzBkNjM3 NS00NzY1LTRlMGUtOTM2My02ZThlMDdkNjZjOWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvMGQ2Mzc1 LTQ3NjUtNGUwZS05MzYzLTZlOGUwN2Q2NmM5Yi8xL29Kell4eHB1TXlnc0JGMlBp TU96ZUt6MEc5ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDshWgAwQCuQQAMA0EAgACMAcDBQAqAmRAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAlOrMA0GCSqGSIb3DQEBCwUAA4IBAQA2sRqO 2u2B4Xp+nyHZXcNwUckvVQn+OjwWWeh3gVCjNJl1R3hoOwrQLgQG63t6DY8TSfiG FypifKqB52pssl5RRjSNNHO8094jSeGoncWzc9wuPUXBvS/KMI+dAQX1Y4pK0RN7 q7OLaPnxUL/i2N3baqm3ov6KeTIXxi+qOIDTBDPopAv5niH0DmXtn37+Ad8p+z3e 24dit4wG53EvfZD/4xurVrpa/Xtn+HAV/KwRHOyjfBIShWbkjXfqYtwmu1YNyNh/ Zh3lSZ/aikrXMmsT5f0LuJM+Be4pgfOL/UMVlNoxZ4yo0/HOLAXXXtQqj9nrCpj9 UFKVDO5bt1iae2KC -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:40 2026 by rpki-client