This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer File: oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer (raw, json) Hash identifier: EE8eTcFJZoxyoqckfbOXVgxmh+4rYkVs8VOyVuFGLWQ= Subject key identifier: A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E681106597A7D6A7CDA421A0E432C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 93.157.120.0/21 IP: 109.197.8.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:68:11:06:59:7a:7d:6a:7c:da:42:1a:0e:43:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1655282be419d21222b506fb7a368c3fe5db23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:39:1f:45:aa:35:80:5b:ef:81:30:fe:ec:aa: 1c:6f:6c:e5:e0:99:0e:0e:1c:f6:69:36:7d:6b:6b: 47:74:86:6f:2b:a6:f7:42:8e:1b:fb:7f:e9:d6:64: fa:a6:db:a6:90:08:71:54:bc:f5:74:b8:01:54:5e: d0:a6:bd:4c:3f:09:96:d4:a2:0e:0b:27:bf:ea:16: 43:63:70:d3:97:f6:1f:9f:62:fc:7b:f1:af:e3:c6: 5a:cb:8a:d8:ed:32:63:19:dd:ac:72:4a:ad:29:ed: 46:b4:4e:7e:01:05:df:60:ee:40:98:f0:01:a3:41: 0e:f5:c8:6b:81:2f:73:fd:32:61:85:8a:ab:ca:1a: 92:1b:8a:74:30:94:78:54:eb:b7:fd:8d:8c:17:66: f7:4f:c7:cd:11:3b:28:e1:f9:79:07:b4:b2:f7:e9: 7f:68:8a:3b:36:31:64:15:95:cd:f2:1f:ee:64:12: 26:5e:11:f2:94:40:a4:5a:ea:ab:c5:47:18:d6:b2: af:fb:7b:8a:c9:91:ff:1b:a7:e9:2b:88:60:6f:23: d1:74:87:71:20:4f:be:4d:34:b9:b6:eb:0b:e8:fa: 1c:b4:ec:c2:f2:65:52:2e:fb:d5:fb:2d:d2:c3:be: 27:0c:08:57:a4:86:19:ee:63:e3:8b:1c:e4:cd:7c: d5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.157.120.0/21 109.197.8.0/21 Signature Algorithm: sha256WithRSAEncryption 35:95:f6:5e:11:4a:9c:0c:d5:0a:e8:36:b9:ad:4c:fa:c6:ff: 6c:0f:de:e0:44:d0:52:52:52:5a:b1:7e:54:60:32:ba:f9:d6: 9c:c5:e6:f3:3c:32:8d:1e:0c:88:bd:6f:7b:59:42:09:18:a5: 43:b7:c2:93:e0:2c:92:01:3e:c5:17:67:53:bb:04:f7:d6:d1: 3e:5e:dd:d0:b9:9d:71:87:3a:0c:93:7f:60:13:8d:c6:d2:6c: 34:68:a5:05:04:5a:26:3e:39:8f:33:b4:4e:75:21:40:99:dc: 79:d3:8c:ad:7d:e6:64:0c:76:ee:eb:78:95:7e:63:26:2e:fa: a9:33:f2:3d:7d:82:c4:d8:0d:57:91:1f:dc:ca:ec:51:e1:6e: ab:6d:fe:cd:b5:1a:3a:22:c2:d5:8d:fd:31:66:c1:0b:d0:b2: 6f:df:bb:09:6d:4f:bf:0f:db:e0:54:ae:f8:09:39:dd:a8:e9: b6:cc:9d:4a:69:40:90:95:15:37:54:81:ec:f2:ea:b7:38:8a: e9:1c:d4:fc:3c:29:6c:31:99:f6:b8:ca:20:52:c2:f3:9e:83: 4f:97:3d:32:30:09:9a:e6:14:eb:ec:1a:19:40:04:71:f4:1f: b1:b4:6f:8b:99:5c:d2:f9:50:a4:df:33:bc:03:1c:f2:ab:06: 64:45:b4:7c -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt5fmgRBll6fWp82kIaDkMsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTY1NTI4MmJlNDE5ZDIxMjIyYjUwNmZiN2EzNjhjM2ZlNWRiMjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+zkfRao1gFvvgTD+7Kocb2zl4JkO Dhz2aTZ9a2tHdIZvK6b3Qo4b+3/p1mT6ptumkAhxVLz1dLgBVF7Qpr1MPwmW1KIO Cye/6hZDY3DTl/Yfn2L8e/Gv48Zay4rY7TJjGd2sckqtKe1GtE5+AQXfYO5AmPAB o0EO9chrgS9z/TJhhYqryhqSG4p0MJR4VOu3/Y2MF2b3T8fNETso4fl5B7Sy9+l/ aIo7NjFkFZXN8h/uZBImXhHylECkWuqrxUcY1rKv+3uKyZH/G6fpK4hgbyPRdIdx IE++TTS5tusL6PoctOzC8mVSLvvV+y3Sw74nDAhXpIYZ7mPjixzkzXzVAwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFKFlUoK+QZ0hIitQb7ejaMP+XbI9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1LzgwNjJh OS03ZjQ3LTQ0ZWEtYWJiNy05MWRiYzlmMGU4ZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvODA2MmE5 LTdmNDctNDRlYS1hYmI3LTkxZGJjOWYwZThkYi8xL29XVlNncjVCblNFaUsxQnZ0 Nk5vd181ZHNqMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQDXZ14AwQDbcUIMA0GCSqGSIb3DQEBCwUAA4IB AQA1lfZeEUqcDNUK6Da5rUz6xv9sD97gRNBSUlJasX5UYDK6+dacxebzPDKNHgyI vW97WUIJGKVDt8KT4CySAT7FF2dTuwT31tE+Xt3QuZ1xhzoMk39gE43G0mw0aKUF BFomPjmPM7ROdSFAmdx504ytfeZkDHbu63iVfmMmLvqpM/I9fYLE2A1XkR/cyuxR 4W6rbf7NtRo6IsLVjf0xZsEL0LJv37sJbU+/D9vgVK74CTndqOm2zJ1KaUCQlRU3 VIHs8uq3OIrpHNT8PClsMZn2uMogUsLznoNPlz0yMAma5hTr7BoZQARx9B+xtG+L mVzS+VCk3zO8AxzyqwZkRbR8 -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:03 2026 by rpki-client