This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer File: oab8cmK6eC3V9kMIWYK102cD2_s.cer (raw, json) Hash identifier: qWMUEtdjv+aGvO6qVNggx5jZ7EUYsuJha5gygrKeTx0= Subject key identifier: A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6DF4B0D79EC17B0D0FD563B16C434 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.41.124.0/23 IP: 195.110.26.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:df:4b:0d:79:ec:17:b0:d0:fd:56:3b:16:c4:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:40:49:ca:9c:8a:b7:51:0c:32:c2:91:0b:23: d8:cc:1a:d4:02:04:6c:e3:f2:31:43:72:7f:9b:36: 7c:e2:2b:1d:87:58:ec:1d:73:60:dc:5c:7b:b2:93: 8e:ad:67:99:b9:d7:6e:74:90:0f:fa:5d:e6:5d:2a: b9:9c:af:b2:b9:2a:67:f6:c5:81:1c:e6:ff:bb:29: 10:cb:4d:fa:1b:ff:ba:82:7a:e0:6a:4c:41:9b:2c: 93:bb:7b:18:33:f0:5f:48:b1:b0:27:6f:38:a3:6b: 66:7b:8f:fe:f7:11:99:c5:14:8c:4e:79:82:29:16: 29:4a:ff:2f:dd:91:29:a2:19:c9:55:c5:66:83:52: 80:a1:0b:2c:4b:85:da:0e:ee:ad:10:95:5b:47:f6: c9:a0:18:90:d4:0d:cd:8b:78:0e:0d:15:a3:fd:a4: 69:aa:91:47:63:e8:90:60:c0:be:00:cb:2a:7f:5b: 3e:39:d7:bd:72:9b:7e:e3:22:0f:7c:68:3b:14:c6: 4d:c8:77:7a:37:2d:dd:a2:bf:bc:26:f3:c9:1f:d3: a4:3b:17:54:63:30:cd:c8:8b:ea:a7:48:1c:20:97: 02:e1:c8:ae:28:ba:37:86:9b:ec:93:de:b8:b1:26: f9:e8:4c:60:52:5d:53:28:8d:4f:d8:6e:42:89:1d: a5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.124.0/23 195.110.26.0/23 Signature Algorithm: sha256WithRSAEncryption 90:c5:5c:73:1d:7c:3f:b6:27:85:0c:f1:48:2e:bb:cf:8c:82: e2:bc:a8:44:19:17:86:5c:ce:f8:82:29:d4:3f:fb:3c:39:e7: 68:36:43:48:20:a0:bf:e8:d2:a1:14:a8:61:fc:9e:f6:e7:4c: 8c:87:b5:31:b1:4b:bc:68:4f:76:bd:df:ee:88:18:e6:84:05: 69:1e:1b:eb:26:54:c9:24:61:0d:1e:5e:24:3f:ae:5a:94:2e: 76:47:52:1f:c4:ed:40:6a:66:42:4f:7b:e9:94:6b:27:40:98: 18:c3:ba:a8:89:66:fd:51:91:01:40:6b:9e:fb:bf:8b:01:77: 5c:8f:59:8a:fa:97:40:95:6f:6c:6e:1a:7d:bb:46:29:76:8b: 9b:2a:50:0a:c2:2e:12:88:ef:a4:dd:e1:a5:2a:89:d6:91:85: a9:80:bd:16:1e:14:e6:fc:e5:9f:5d:28:3a:be:ab:7a:19:12: 8b:19:b3:16:b4:b0:18:d5:d4:ae:e4:ff:60:36:ab:d1:98:74: 3c:96:1f:c2:f2:ad:4c:32:6f:30:15:79:8a:12:e5:06:79:92: a8:91:f1:45:84:aa:dc:b9:cb:7a:73:43:49:4f:63:9c:42:e9: 3e:57:02:cf:1a:8a:48:d0:18:70:5a:55:a5:79:f5:75:f8:b6: fb:85:40:7e -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt3xt9LDXnsF7DQ/VY7FsQ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWE2ZmM3MjYyYmE3ODJkZDVmNjQzMDg1OTgyYjVkMzY3MDNkYmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0BJypyKt1EMMsKRCyPYzBrUAgRs 4/IxQ3J/mzZ84isdh1jsHXNg3Fx7spOOrWeZuddudJAP+l3mXSq5nK+yuSpn9sWB HOb/uykQy036G/+6gnrgakxBmyyTu3sYM/BfSLGwJ284o2tme4/+9xGZxRSMTnmC KRYpSv8v3ZEpohnJVcVmg1KAoQssS4XaDu6tEJVbR/bJoBiQ1A3Ni3gODRWj/aRp qpFHY+iQYMC+AMsqf1s+Ode9cpt+4yIPfGg7FMZNyHd6Ny3dor+8JvPJH9OkOxdU YzDNyIvqp0gcIJcC4ciuKLo3hpvsk964sSb56ExgUl1TKI1P2G5CiR2lHQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFKGm/HJiungt1fZDCFmCtdNnA9v7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzVmMTNh NS1hOGRiLTRjMzctYjdhNy1jNTM3ODU4MWIwZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvNWYxM2E1 LWE4ZGItNGMzNy1iN2E3LWM1Mzc4NTgxYjBlMS8xL29hYjhjbUs2ZUMzVjlrTUlX WUsxMDJjRDJfcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwSl8AwQBw24aMA0GCSqGSIb3DQEBCwUAA4IB AQCQxVxzHXw/tieFDPFILrvPjILivKhEGReGXM74ginUP/s8OedoNkNIIKC/6NKh FKhh/J7250yMh7UxsUu8aE92vd/uiBjmhAVpHhvrJlTJJGENHl4kP65alC52R1If xO1AamZCT3vplGsnQJgYw7qoiWb9UZEBQGue+7+LAXdcj1mK+pdAlW9sbhp9u0Yp doubKlAKwi4SiO+k3eGlKonWkYWpgL0WHhTm/OWfXSg6vqt6GRKLGbMWtLAY1dSu 5P9gNqvRmHQ8lh/C8q1MMm8wFXmKEuUGeZKokfFFhKrcuct6c0NJT2OcQuk+VwLP GopI0BhwWlWlefV1+Lb7hUB+ -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:44 2026 by rpki-client