This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer File: oNxs0zNOAmkDIjc8O1BuQYT67H8.cer (raw, json) Hash identifier: KZ9inaa9n99dGj8+TPPOddCLQKQNlu0wqlpBYZPWVAY= Subject key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECE92E970E21431E5E2853370A6B30 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.212.232.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e9:2e:97:0e:21:43:1e:5e:28:53:37:0a:6b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0dc6cd3334e02690322373c3b506e4184faec7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5d:6f:5b:7a:27:e9:40:e5:0e:04:81:d7:25: 20:a5:92:be:a1:e9:cd:dd:d9:54:2a:13:9e:62:3e: 93:29:71:2a:3b:33:e8:76:eb:95:fb:c7:0d:ef:17: 2c:c9:94:fe:d2:4a:f4:29:a0:47:33:2d:54:1d:32: 09:5e:93:dc:92:83:df:d5:b9:bb:2e:fa:d0:b8:bd: 20:dc:e5:b2:39:d7:e9:62:34:20:49:39:18:c3:71: 8f:7f:fa:6f:bb:f9:ba:1b:08:5e:84:9d:b0:b9:a5: 00:3d:b1:12:71:4e:68:78:67:2e:56:88:dc:d7:97: 13:c9:8d:3a:ae:57:b4:bd:88:fc:79:71:67:4a:ff: 44:f3:65:dd:3b:ba:8a:7d:ff:08:e0:04:42:34:5d: 2f:0a:66:da:55:1f:8b:9d:30:00:c4:23:57:95:db: d4:91:c7:f1:39:9e:51:c9:9e:66:ae:c2:33:42:69: 8b:f0:c2:4b:3a:e0:a9:66:a3:15:2d:df:62:05:f5: de:fe:7b:4d:65:fa:54:13:cc:21:5a:7f:8e:10:c9: c8:03:ca:e8:54:24:0a:77:ee:19:e8:46:1f:b4:e8: e7:76:69:5f:de:53:6a:37:ee:c3:14:46:28:24:77: 7c:43:6c:1e:97:aa:8b:96:14:cc:4f:80:58:b3:a4: 13:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.232.0/24 Signature Algorithm: sha256WithRSAEncryption 80:6c:db:7e:02:dd:e9:59:41:39:a4:44:0c:f6:e4:d6:4d:50: e7:eb:6d:b2:ef:e8:28:ed:1d:1f:4f:4e:32:b4:42:76:d4:9a: 76:26:bc:30:0f:7a:e9:ac:df:36:51:db:83:5c:73:0a:6e:f6: 53:f8:b8:09:af:e1:30:45:83:68:fe:ac:2b:c5:9e:cb:9f:87: 50:4b:81:3a:b9:dc:87:ba:e4:12:12:69:6e:73:47:63:79:d4: 43:25:8c:c4:ef:1c:08:ab:e1:bf:30:38:6d:cd:a0:1b:51:18: 71:7d:c8:ee:16:cf:43:24:db:0f:6e:fc:f2:9a:3c:cd:f0:b2: 15:63:a0:24:9f:45:fc:5f:bc:9b:ba:a6:f1:10:f9:03:e3:8c: f2:c8:0c:23:7e:c4:59:60:54:9c:6e:73:38:e1:cd:5f:f3:85: 9e:63:0f:a2:a9:1d:44:b5:f6:77:00:fb:11:e9:1b:16:b3:95: 00:10:38:b5:f9:5d:e7:51:50:56:03:44:b3:59:15:97:17:9c: ae:5e:5f:98:cc:73:4e:7a:58:5a:d4:4d:5d:91:ce:2f:08:67: ce:da:d9:27:37:37:ed:ec:d6:c2:b9:54:b6:e1:a9:f2:b4:6a: 2f:cb:0b:f9:c6:06:47:e1:10:9a:3f:ba:0b:2d:cf:7b:db:07: f9:ef:a3:0d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87Okulw4hQx5eKFM3CmswMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGRjNmNkMzMzNGUwMjY5MDMyMjM3M2MzYjUwNmU0MTg0ZmFlYzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV1vW3on6UDlDgSB1yUgpZK+oenN 3dlUKhOeYj6TKXEqOzPoduuV+8cN7xcsyZT+0kr0KaBHMy1UHTIJXpPckoPf1bm7 LvrQuL0g3OWyOdfpYjQgSTkYw3GPf/pvu/m6GwhehJ2wuaUAPbEScU5oeGcuVojc 15cTyY06rle0vYj8eXFnSv9E82XdO7qKff8I4ARCNF0vCmbaVR+LnTAAxCNXldvU kcfxOZ5RyZ5mrsIzQmmL8MJLOuCpZqMVLd9iBfXe/ntNZfpUE8whWn+OEMnIA8ro VCQKd+4Z6EYftOjndmlf3lNqN+7DFEYoJHd8Q2wel6qLlhTMT4BYs6QTbwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKDcbNMzTgJpAyI3PDtQbkGE+ux/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxL2MwMWY5 MC1kMGZhLTQ5NzYtYjFjMC1kMWZmNzVhN2EzNWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvYzAxZjkw LWQwZmEtNDk3Ni1iMWMwLWQxZmY3NWE3YTM1Yy8xL29OeHMwek5PQW1rRElqYzhP MUJ1UVlUNjdIOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9ToMA0GCSqGSIb3DQEBCwUAA4IBAQCAbNt+ At3pWUE5pEQM9uTWTVDn622y7+go7R0fT04ytEJ21Jp2JrwwD3rprN82UduDXHMK bvZT+LgJr+EwRYNo/qwrxZ7Ln4dQS4E6udyHuuQSEmluc0djedRDJYzE7xwIq+G/ MDhtzaAbURhxfcjuFs9DJNsPbvzymjzN8LIVY6Akn0X8X7ybuqbxEPkD44zyyAwj fsRZYFScbnM44c1f84WeYw+iqR1EtfZ3APsR6RsWs5UAEDi1+V3nUVBWA0SzWRWX F5yuXl+YzHNOelha1E1dkc4vCGfO2tknNzft7NbCuVS24anytGovywv5xgZH4RCa P7oLLc972wf576MN -----END CERTIFICATE-----Generated at Tue Jan 27 01:19:28 2026 by rpki-client