This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer File: oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer (raw, json) Hash identifier: 2khUAvEiFSFDg3KlxxvE981iJucBt853fPRDZcta6b8= Subject key identifier: A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791112F801CF5558503B9FB9220D556A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.14.124.0/22 IP: 2a0e:e80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:12:f8:01:cf:55:58:50:3b:9f:b9:22:0d:55:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0f:4d:8b:d5:d5:9d:6d:b3:18:19:09:92:2b: 3a:4e:ce:f6:de:41:90:83:bd:a4:70:73:55:2d:8e: 71:23:31:f3:8d:02:60:43:7d:46:8e:5c:4b:83:3a: 2a:54:57:27:c2:cc:15:b4:9e:64:aa:c4:65:01:da: f5:0c:02:23:55:2c:f0:21:10:64:ed:a0:21:5c:84: 30:a7:7b:f6:9b:8d:a4:79:60:e1:36:4c:50:ed:25: 30:94:c3:01:28:53:5b:b3:d3:0e:40:a7:05:1f:5f: 26:97:37:ee:e5:c8:2f:f0:ea:8e:ba:2c:64:0d:aa: 86:50:de:88:95:ed:67:0b:ac:80:d4:83:6b:5a:5b: 20:c9:bd:69:cd:ae:08:c9:1a:be:4c:c6:87:8a:d8: 2d:4e:c8:17:bf:cf:71:4a:56:13:7f:bf:2f:1d:36: 26:b5:8f:ff:13:82:37:ab:f6:9d:9d:46:b1:df:08: e3:97:5d:78:58:7c:d2:39:54:0d:10:d7:82:13:cb: 7b:8e:10:74:42:6f:22:11:34:2c:d9:43:19:69:8b: e8:33:ab:d8:8b:97:27:b0:e5:d7:b6:9f:d2:4e:ca: bb:26:e4:46:d2:7f:3c:18:8f:39:77:e3:7f:52:b8: bb:5f:b5:4d:b3:90:c5:58:dd:8a:06:3d:e6:65:d2: 42:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.124.0/22 IPv6: 2a0e:e80::/29 Signature Algorithm: sha256WithRSAEncryption 28:81:f2:2f:3b:ec:35:f7:ad:f5:c1:bc:d1:79:e8:f9:42:a3: a7:2f:c3:e5:ef:2d:c3:ea:ed:78:53:94:9c:58:de:0c:ae:1b: f3:f2:aa:53:74:9f:78:80:98:3a:f6:91:1c:d0:13:8a:f9:3b: 13:bb:13:0f:71:3b:3b:7a:a3:63:e9:ff:f8:42:4e:4a:1b:83: 9e:78:30:8e:c5:a8:6a:78:67:a0:66:4d:66:a7:49:f1:f2:8f: 39:75:cc:4c:d0:2b:da:61:6c:8a:d4:0b:07:97:24:71:88:25: 91:f3:63:85:f5:ae:8c:c4:0c:c2:05:d5:e0:33:42:96:b8:d5: 4b:32:e0:27:8a:bc:03:47:17:57:b4:c2:3a:73:b0:4e:b9:48: 03:1d:1c:ab:ed:3b:79:f6:24:92:20:7f:ba:a7:fd:4e:aa:55: fd:51:dd:27:5a:5f:d1:55:1b:88:e3:52:a3:fc:6e:01:7e:01: 15:31:7e:00:3d:bb:47:84:83:b1:3c:24:b0:6e:9a:3c:8c:b8: e0:69:36:2e:b8:5b:b8:62:a9:71:71:39:7a:8f:a5:7a:19:1e: 32:5a:37:2d:51:5c:59:b2:fd:c4:73:12:d8:3f:f4:85:02:52: e9:81:f7:71:58:52:66:b3:ae:1b:53:1a:9e:02:c3:ac:3f:d0: ce:bf:80:71 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5ERL4Ac9VWFA7n7kiDVVqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGUzMTI4ZmQwOWRjMThlNjZlZTQyMTJhN2U2NGYzZTRlNzRhODE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg9Ni9XVnW2zGBkJkis6Ts723kGQ g72kcHNVLY5xIzHzjQJgQ31GjlxLgzoqVFcnwswVtJ5kqsRlAdr1DAIjVSzwIRBk 7aAhXIQwp3v2m42keWDhNkxQ7SUwlMMBKFNbs9MOQKcFH18mlzfu5cgv8OqOuixk DaqGUN6Ile1nC6yA1INrWlsgyb1pza4IyRq+TMaHitgtTsgXv89xSlYTf78vHTYm tY//E4I3q/adnUax3wjjl114WHzSOVQNENeCE8t7jhB0Qm8iETQs2UMZaYvoM6vY i5cnsOXXtp/STsq7JuRG0n88GI85d+N/Uri7X7VNs5DFWN2KBj3mZdJCyQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFKDjEo/QncGOZu5CEqfmTz5OdKgUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyLzBiNGU3 My1hMTU0LTQwNTktYjYyMi04ZmQ1Y2FiYTU0ZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvMGI0ZTcz LWExNTQtNDA1OS1iNjIyLThmZDVjYWJhNTRlOS8xL29PTVNqOUNkd1k1bTdrSVNw LVpQUGs1MHFCUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLQ58MA0EAgACMAcDBQMqDg6AMA0GCSqGSIb3 DQEBCwUAA4IBAQAogfIvO+w19631wbzReej5QqOnL8Pl7y3D6u14U5ScWN4Mrhvz 8qpTdJ94gJg69pEc0BOK+TsTuxMPcTs7eqNj6f/4Qk5KG4OeeDCOxahqeGegZk1m p0nx8o85dcxM0CvaYWyK1AsHlyRxiCWR82OF9a6MxAzCBdXgM0KWuNVLMuAnirwD RxdXtMI6c7BOuUgDHRyr7Tt59iSSIH+6p/1OqlX9Ud0nWl/RVRuI41Kj/G4BfgEV MX4APbtHhIOxPCSwbpo8jLjgaTYuuFu4YqlxcTl6j6V6GR4yWjctUVxZsv3EcxLY P/SFAlLpgfdxWFJms64bUxqeAsOsP9DOv4Bx -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:05 2026 by rpki-client