This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer File: oQIHcvYouPtR80dRNrd_60smmL4.cer (raw, json) Hash identifier: 033GoToSOF24ZwxFgN8EMchP1o70LnQc0cNP65fI9xo= Subject key identifier: A1:02:07:72:F6:28:B8:FB:51:F3:47:51:36:B7:7F:EB:4B:26:98:BE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6DC23812994F3C0C4E22B43D15C79 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.199.83.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:dc:23:81:29:94:f3:c0:c4:e2:2b:43:d1:5c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1020772f628b8fb51f3475136b77feb4b2698be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b8:a7:1f:88:c2:8f:b3:ef:13:7e:30:3e:59: 5d:41:21:43:77:0a:cc:02:a1:4c:c4:3c:a0:ed:d6: 97:cd:5d:d5:de:41:7e:44:e4:c4:73:b3:55:db:65: 28:14:75:6b:bd:b5:47:f0:ea:70:e1:84:f1:ad:aa: f3:06:e6:07:7b:c1:cd:de:f6:76:69:31:b7:5d:b2: 1b:9c:ec:d9:28:96:41:3f:5e:52:e2:4a:b5:24:8b: 0e:f5:1e:04:8c:31:81:86:e3:62:b5:74:96:ce:5a: 17:e5:13:a2:34:d2:b0:25:53:63:fa:f3:03:8f:87: d1:c4:51:75:b4:39:e0:d6:32:c0:7d:c4:03:dc:f9: e1:e5:46:76:b2:4c:3e:86:ff:dd:11:db:30:4a:63: b5:5f:f7:e2:61:44:95:fe:a5:ed:64:d2:06:e1:18: 88:29:25:39:6b:44:ed:b1:22:f5:0d:e6:7b:c2:12: 8f:d8:ec:5f:92:ee:42:ce:bb:d0:85:be:e0:31:34: f4:01:a8:1e:05:1f:72:7d:76:33:d0:a0:a4:c1:2e: 3f:d0:24:d8:dc:0a:52:29:4e:d6:0f:6c:67:d5:73: 44:74:a4:9c:60:8b:fd:82:65:b0:85:9e:41:91:df: 31:0a:88:42:4e:bc:ed:13:52:3c:1f:85:43:3b:5f: e6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:02:07:72:F6:28:B8:FB:51:F3:47:51:36:B7:7F:EB:4B:26:98:BE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.83.0/24 Signature Algorithm: sha256WithRSAEncryption a4:3a:41:84:60:a1:79:b4:d3:96:3d:cb:f7:83:0a:79:f1:39: fb:c2:b0:0c:94:20:97:19:04:3c:3a:a3:d6:3f:5f:aa:be:40: c2:4b:ea:19:0b:da:1a:2b:54:e6:47:b9:1f:cb:9f:4d:37:cc: ee:b6:d1:fd:5a:cd:f6:e5:ae:2e:b0:91:3e:8b:4b:14:5d:d9: cf:dc:84:d5:ce:65:df:60:87:1f:9d:2d:5c:31:fe:45:77:09: c9:70:91:41:bc:fd:cb:13:20:84:36:cb:f7:6d:74:6e:f9:a5: 72:cf:e3:4b:16:f7:de:b7:2f:54:ea:31:1b:b0:8f:80:5b:e0: 05:e9:ac:56:14:15:f9:ac:dd:e6:aa:6e:43:f8:df:95:06:49: 02:3c:41:32:18:7e:9d:be:71:8c:42:c3:f5:f3:41:38:98:81: c1:5a:5c:bf:1c:24:ca:20:cb:6f:83:5a:07:a5:19:8d:b3:5c: 24:e1:5a:fb:17:65:48:67:ac:5e:49:dc:11:99:49:7b:c0:2d: be:b1:ce:bf:6a:b2:20:be:fe:39:6c:cc:37:1b:1a:14:9e:3a: 8b:7b:e6:cd:f1:5a:02:91:7f:3a:8e:62:95:8a:2b:ee:d3:fb: e7:4b:71:f3:b9:bf:f7:5d:d7:45:da:9a:86:f4:e0:f9:14:12: 41:3f:d3:c4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3xtwjgSmU88DE4itD0Vx5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTAyMDc3MmY2MjhiOGZiNTFmMzQ3NTEzNmI3N2ZlYjRiMjY5OGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8binH4jCj7PvE34wPlldQSFDdwrM AqFMxDyg7daXzV3V3kF+ROTEc7NV22UoFHVrvbVH8Opw4YTxrarzBuYHe8HN3vZ2 aTG3XbIbnOzZKJZBP15S4kq1JIsO9R4EjDGBhuNitXSWzloX5ROiNNKwJVNj+vMD j4fRxFF1tDng1jLAfcQD3Pnh5UZ2skw+hv/dEdswSmO1X/fiYUSV/qXtZNIG4RiI KSU5a0TtsSL1DeZ7whKP2Oxfku5CzrvQhb7gMTT0AageBR9yfXYz0KCkwS4/0CTY 3ApSKU7WD2xn1XNEdKScYIv9gmWwhZ5Bkd8xCohCTrztE1I8H4VDO1/mbQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKECB3L2KLj7UfNHUTa3f+tLJpi+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5LzU1MDQz MS02MTc0LTQ3ZDItOGJhYi01MWFmODI5NjVlMzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvNTUwNDMx LTYxNzQtNDdkMi04YmFiLTUxYWY4Mjk2NWUzMy8xL29RSUhjdllvdVB0UjgwZFJO cmRfNjBzbW1MNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8dTMA0GCSqGSIb3DQEBCwUAA4IBAQCkOkGE YKF5tNOWPcv3gwp58Tn7wrAMlCCXGQQ8OqPWP1+qvkDCS+oZC9oaK1TmR7kfy59N N8zuttH9Ws325a4usJE+i0sUXdnP3ITVzmXfYIcfnS1cMf5FdwnJcJFBvP3LEyCE Nsv3bXRu+aVyz+NLFvfety9U6jEbsI+AW+AF6axWFBX5rN3mqm5D+N+VBkkCPEEy GH6dvnGMQsP180E4mIHBWly/HCTKIMtvg1oHpRmNs1wk4Vr7F2VIZ6xeSdwRmUl7 wC2+sc6/arIgvv45bMw3GxoUnjqLe+bN8VoCkX86jmKViivu0/vnS3Hzub/3XddF 2pqG9OD5FBJBP9PE -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:53 2026 by rpki-client