This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer File: oR8gWXnS-96VdWpGoPJznXgW1Fk.cer (raw, json) Hash identifier: Hqob36vLv18IWJ9z4LZ+FBV1e4EsWV4Eih7/3iNcidY= Subject key identifier: A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1252FAFB05C933DF0A363C9A96A36C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60414 IP: 85.194.238.0/23 IP: 89.44.211.0/24 IP: 185.31.136.0/22 IP: 2a00:bbe0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:52:fa:fb:05:c9:33:df:0a:36:3c:9a:96:a3:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a11f205979d2fbde95756a46a0f2739d7816d459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0e:b4:a8:c1:8a:db:44:76:24:7e:0d:80:0b: 42:29:13:31:12:eb:02:29:cb:69:88:d6:cf:7e:bb: 53:80:39:aa:26:6e:d6:3e:52:ee:92:e2:b4:25:07: dc:e0:86:4d:a8:2d:32:4b:60:f8:c8:05:b0:4e:13: 37:89:fa:7a:71:ad:1e:06:ba:b1:2c:ff:b5:f3:49: d4:76:59:b6:f5:28:7a:b8:d1:1b:8d:90:0f:f6:dd: 70:7e:19:2d:fa:4c:c3:74:4c:11:c4:b3:bb:e9:a0: 79:63:b2:73:e7:13:18:60:f3:37:f7:85:1f:a0:09: 10:50:cb:7d:1a:d6:15:7d:71:ef:7a:d2:d1:28:88: 0f:e7:6a:ae:57:ad:a1:5c:cd:e2:ac:fd:3b:56:40: a4:58:52:92:3c:55:b0:62:11:25:fe:58:55:9d:96: ec:6e:69:9a:66:b6:0a:94:f3:7f:80:f1:0f:71:1a: 97:4a:c3:a8:a9:de:07:4c:17:6b:d9:a3:74:8a:85: 4d:fb:6b:ab:10:64:8e:ac:62:01:16:2e:70:94:21: 92:25:74:ab:c4:46:05:22:9f:6a:37:1c:f7:d4:3b: fd:7e:27:62:f6:5c:83:ef:e1:41:47:d4:9c:eb:76: d1:8b:3d:71:04:05:bd:bd:95:10:2c:33:0c:02:98: 9a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.194.238.0/23 89.44.211.0/24 185.31.136.0/22 IPv6: 2a00:bbe0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60414 Signature Algorithm: sha256WithRSAEncryption 57:db:e8:20:fc:d0:a5:09:54:6b:43:2c:87:01:57:1a:37:17: fc:aa:81:4c:56:9c:82:74:4f:80:01:a7:69:89:c1:2b:34:7e: 6d:86:f8:49:39:1c:b6:27:0f:57:f6:5b:85:eb:17:9e:f1:66: 4a:13:f5:99:85:2e:6a:d6:ec:af:19:61:3e:84:b2:27:42:d7: d6:3a:0b:d2:29:05:a9:6e:a0:29:3f:9d:94:bf:00:6e:ac:a7: e7:18:30:7a:b8:f1:c0:98:14:9e:09:72:13:58:9f:09:54:23: 0f:65:69:56:c5:db:fa:3a:5b:fe:80:57:b3:72:f9:b1:7c:e0: 6f:d5:f0:d5:bb:db:16:10:e9:3c:09:29:da:53:13:50:b0:cd: 78:79:64:b8:32:c7:05:fd:1c:a3:61:dd:09:15:62:d2:9f:c2: c5:d8:ca:65:91:6d:55:c0:8c:a4:a6:99:95:ff:08:ea:76:13: f2:19:85:0c:de:32:1d:55:10:45:4e:a2:d2:0b:eb:3e:d3:7a: 66:84:4e:0c:a6:3b:2b:8c:cf:38:e8:1c:8c:2a:22:c1:48:b6: eb:af:10:f0:38:99:a6:83:10:7f:08:5e:54:04:05:02:ed:eb: 1f:69:c0:30:45:fc:de:3e:e4:8f:e5:17:71:34:73:7f:3a:36: 5b:05:1a:8e -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt8ElL6+wXJM98KNjyalqNsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTFmMjA1OTc5ZDJmYmRlOTU3NTZhNDZhMGYyNzM5ZDc4MTZkNDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA60qMGK20R2JH4NgAtCKRMxEusC KctpiNbPfrtTgDmqJm7WPlLukuK0JQfc4IZNqC0yS2D4yAWwThM3ifp6ca0eBrqx LP+180nUdlm29Sh6uNEbjZAP9t1wfhkt+kzDdEwRxLO76aB5Y7Jz5xMYYPM394Uf oAkQUMt9GtYVfXHvetLRKIgP52quV62hXM3irP07VkCkWFKSPFWwYhEl/lhVnZbs bmmaZrYKlPN/gPEPcRqXSsOoqd4HTBdr2aN0ioVN+2urEGSOrGIBFi5wlCGSJXSr xEYFIp9qNxz31Dv9fidi9lyD7+FBR9Sc63bRiz1xBAW9vZUQLDMMApia7QIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFKEfIFl50vvelXVqRqDyc514FtRZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxLzE5ZjIy OS1hOTBmLTQyYzQtOTgwYi0xNTUwZjJhYzg3YjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvMTlmMjI5 LWE5MGYtNDJjNC05ODBiLTE1NTBmMmFjODdiMy8xL29SOGdXWG5TLTk2VmRXcEdv UEp6blhnVzFGay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQBVcLuAwQAWSzTAwQCuR+IMA0EAgACMAcDBQMq ALvgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDr/jANBgkqhkiG9w0BAQsFAAOC AQEAV9voIPzQpQlUa0MshwFXGjcX/KqBTFacgnRPgAGnaYnBKzR+bYb4STkcticP V/ZbhesXnvFmShP1mYUuatbsrxlhPoSyJ0LX1joL0ikFqW6gKT+dlL8Abqyn5xgw erjxwJgUnglyE1ifCVQjD2VpVsXb+jpb/oBXs3L5sXzgb9Xw1bvbFhDpPAkp2lMT ULDNeHlkuDLHBf0co2HdCRVi0p/CxdjKZZFtVcCMpKaZlf8I6nYT8hmFDN4yHVUQ RU6i0gvrPtN6ZoRODKY7K4zPOOgcjCoiwUi2668Q8DiZpoMQfwheVAQFAu3rH2nA MEX83j7kj+UXcTRzfzo2WwUajg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:01 2026 by rpki-client