This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer (raw, json) Hash identifier: cgAqZIN/9XvylZug2kadnJIvn1o70RqYW4u616HqWgw= Subject key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB8C4B5B1070EFFBB928128DA86A78 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.158.230.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8c:4b:5b:10:70:ef:fb:b9:28:12:8d:a8:6a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0e:2f:11:39:21:9e:ec:63:69:e2:32:e2:a9: b0:36:80:ea:80:ec:c9:32:15:a9:6a:b8:d9:5e:68: a0:a5:88:d9:13:5a:0c:6b:50:ff:fa:86:ee:00:ba: 2b:4f:76:c7:60:e5:47:69:b8:0c:76:76:f7:f3:f2: 81:e1:5d:62:a6:40:ed:77:05:ff:10:32:cd:31:7b: aa:22:91:7b:be:bb:53:bc:e2:e8:fe:9b:c2:da:ec: f4:31:6a:d0:23:14:05:50:2a:bd:20:80:08:88:52: 02:3e:3c:c5:c2:5d:d3:9b:fd:ed:31:02:70:7b:5d: d2:36:d3:08:32:7c:95:b2:3f:91:10:62:75:ae:e4: cd:a8:29:b5:03:c5:1c:ff:24:12:18:a7:51:cf:2b: 59:29:76:16:3f:cf:c6:96:75:7b:67:6d:87:da:39: 71:1c:95:e1:7d:c0:59:3f:5c:7b:d7:62:c0:36:4a: fc:1d:b5:55:a2:6f:21:1f:d5:da:f8:3d:ac:3a:bd: 1b:09:e2:9e:70:9a:23:0d:52:2c:4f:4b:36:52:41: 51:c6:f8:ce:cb:15:b6:81:13:ed:f4:8f:08:78:ea: 7f:21:37:05:0b:12:32:de:70:bf:c0:f2:60:66:6e: 0b:36:a5:06:b1:9d:69:89:dc:e5:39:9d:bf:da:ae: 5f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.158.230.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:2e:51:43:e5:89:2b:7e:82:9d:72:0e:34:c3:c5:da:f8:25: 58:34:96:43:5e:f5:0f:ef:45:77:3d:43:44:73:49:53:2e:1d: 7a:a8:fe:1e:c3:57:d8:fd:27:d5:7c:52:a7:e9:0b:b9:e8:98: 1d:db:28:2d:8c:db:27:c8:1a:db:a5:f4:6f:da:3f:fc:20:ea: e6:3a:4e:b7:3a:0a:d5:b7:4b:b1:74:a6:cc:57:2f:9b:57:9d: c2:a6:cb:0e:9c:f0:b7:c4:d4:db:6d:92:d9:6c:5e:bd:51:03: 3f:f7:6a:51:5b:d1:5f:c8:bf:5c:c5:1b:f6:c7:7a:bf:59:71: fa:fe:ab:5d:c3:19:9c:6e:9a:b5:55:58:88:c0:2e:b0:22:d0: 62:f8:af:bb:8e:5d:01:c7:9f:c9:92:92:59:43:7e:42:77:a1: 00:63:a5:d9:de:7f:da:d1:fd:9f:10:aa:39:4c:e8:ae:9e:7b: a5:4b:55:f4:6b:85:d1:3b:88:12:4f:41:e3:f1:21:03:77:05: c8:60:ef:33:9b:81:a9:5b:bd:c3:a4:2b:04:cf:9c:18:b8:8e: 56:d7:b5:5a:74:e2:7f:97:e1:42:0b:22:2c:5a:27:bb:f1:79: ec:d5:60:bf:63:00:2e:c1:76:97:59:a5:0c:e3:5c:f9:25:22: c9:1b:04:36 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt264xLWxBw7/u5KBKNqGp4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTViMTk2Mzg2MTFmM2UxZjc2NDRhN2UzYmI3MWQwY2EzNzQ5MTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA4vETkhnuxjaeIy4qmwNoDqgOzJ MhWparjZXmigpYjZE1oMa1D/+obuALorT3bHYOVHabgMdnb38/KB4V1ipkDtdwX/ EDLNMXuqIpF7vrtTvOLo/pvC2uz0MWrQIxQFUCq9IIAIiFICPjzFwl3Tm/3tMQJw e13SNtMIMnyVsj+REGJ1ruTNqCm1A8Uc/yQSGKdRzytZKXYWP8/GlnV7Z22H2jlx HJXhfcBZP1x712LANkr8HbVVom8hH9Xa+D2sOr0bCeKecJojDVIsT0s2UkFRxvjO yxW2gRPt9I8IeOp/ITcFCxIy3nC/wPJgZm4LNqUGsZ1pidzlOZ2/2q5fCQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKFbGWOGEfPh92RKfju3HQyjdJGeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkL2I1Nzg1 Mi0xZmQ3LTQwZmQtOTFmZi0xMjUxODQyOWZhNjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvYjU3ODUy LTFmZDctNDBmZC05MWZmLTEyNTE4NDI5ZmE2My8xL29Wc1pZNFlSOC1IM1pFcC1P N2NkREtOMGtaNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw57mMA0GCSqGSIb3DQEBCwUAA4IBAQAfLlFD 5YkrfoKdcg40w8Xa+CVYNJZDXvUP70V3PUNEc0lTLh16qP4ew1fY/SfVfFKn6Qu5 6Jgd2ygtjNsnyBrbpfRv2j/8IOrmOk63OgrVt0uxdKbMVy+bV53CpssOnPC3xNTb bZLZbF69UQM/92pRW9FfyL9cxRv2x3q/WXH6/qtdwxmcbpq1VViIwC6wItBi+K+7 jl0Bx5/JkpJZQ35Cd6EAY6XZ3n/a0f2fEKo5TOiunnulS1X0a4XRO4gST0Hj8SED dwXIYO8zm4GpW73DpCsEz5wYuI5W17VadOJ/l+FCCyIsWie78Xns1WC/YwAuwXaX WaUM41z5JSLJGwQ2 -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:04 2026 by rpki-client