This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer File: od5FbU1AXG9CktY2iGds4VDn8H4.cer (raw, json) Hash identifier: sdvOq6NgkVXRl3F+zDUIEwh5fDQfbcDAr9ZmDkXhKg8= Subject key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F142F36F085742D147DDA5BF66630F6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41513 IP: 195.3.224.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:2f:36:f0:85:74:2d:14:7d:da:5b:f6:66:30:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1de456d4d405c6f4292d63688676ce150e7f07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e7:f8:61:0d:f2:e6:de:58:ca:30:07:28:7e: 30:3c:5d:e2:c2:6b:31:49:97:1c:a2:13:f6:7e:e5: ae:f3:f4:15:7e:28:87:33:5f:d2:df:39:5c:59:93: 93:0f:62:7b:86:9d:2d:49:c1:a5:89:55:9b:bd:92: 45:00:39:17:cc:34:a4:ab:1a:7d:fc:cc:39:74:14: b3:c8:74:6e:fc:05:5d:5d:94:c0:ed:28:bc:ce:5a: 61:b6:66:34:99:e9:47:6d:d7:71:24:90:5c:2c:33: 36:6d:6c:73:fc:6f:61:e1:51:9d:af:89:2d:c3:18: 5b:86:c4:f5:91:3a:b8:56:6f:cd:f1:e0:c2:45:17: 52:de:92:c6:14:df:1b:0b:fe:17:31:2f:bd:19:aa: bc:1f:a6:32:fe:24:3f:c1:a6:85:2c:04:d4:cb:ca: 31:37:e9:2f:9e:86:6f:bc:10:5a:67:b5:0f:2a:2c: 67:c5:5b:d5:97:93:ac:6d:e9:9e:f3:8e:0c:c1:42: ac:7a:4f:c1:3e:31:d6:b9:06:83:43:03:21:c6:66: 05:27:a6:19:51:ac:f7:b0:8a:eb:ed:eb:9d:f4:81: 42:7d:72:3e:7e:81:b5:d6:cd:d7:d3:34:32:4a:0f: 03:aa:a4:41:1a:9b:46:95:99:f7:9d:71:74:72:45: ea:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.3.224.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41513 Signature Algorithm: sha256WithRSAEncryption 32:4e:29:13:59:76:59:bd:4d:02:a3:05:43:e6:91:33:7b:e2: 5b:6a:1c:90:51:7c:f0:b9:c6:e3:60:6d:eb:23:68:a1:a1:a5: 5c:6b:ff:7b:61:06:ed:5d:90:e0:a5:d3:c8:3f:86:16:57:3a: 8a:e8:2b:46:c0:5f:a0:13:ad:6d:0b:2d:ee:25:46:9b:5c:8d: a1:fb:c0:90:88:2f:c5:9e:a5:6a:36:25:0f:c0:d0:0c:e0:73: d7:aa:de:dd:2b:4e:44:58:a9:d4:d1:42:b2:63:f9:89:b7:8b: 37:1e:2c:16:fc:64:ba:9e:99:c6:0c:1a:b9:7e:a9:a0:57:64: f2:0a:dc:f6:39:25:b0:43:04:ae:6e:b3:70:32:dd:b1:cc:26: c5:82:f0:21:7b:a7:b9:9d:c0:f3:45:2a:f6:10:7d:4e:f7:24: c9:66:e7:90:ec:59:a4:35:de:ad:48:99:0f:df:e7:8f:5b:3d: 9c:94:f7:98:97:18:87:41:d2:7d:5e:4d:08:eb:a7:19:9b:be: 09:aa:30:fb:b3:63:32:9f:4b:ac:e1:63:c4:32:97:5a:67:df: 2f:e8:1b:a3:ae:81:73:03:7d:e4:46:2f:e3:cc:b3:33:0e:ea: f8:37:b7:c1:48:55:d5:6f:c7:20:1a:92:9b:40:63:93:48:34: 17:30:7f:83 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/FC828IV0LRR92lv2ZjD2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWRlNDU2ZDRkNDA1YzZmNDI5MmQ2MzY4ODY3NmNlMTUwZTdmMDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Of4YQ3y5t5YyjAHKH4wPF3iwmsx SZccohP2fuWu8/QVfiiHM1/S3zlcWZOTD2J7hp0tScGliVWbvZJFADkXzDSkqxp9 /Mw5dBSzyHRu/AVdXZTA7Si8zlphtmY0melHbddxJJBcLDM2bWxz/G9h4VGdr4kt wxhbhsT1kTq4Vm/N8eDCRRdS3pLGFN8bC/4XMS+9Gaq8H6Yy/iQ/waaFLATUy8ox N+kvnoZvvBBaZ7UPKixnxVvVl5Osbeme844MwUKsek/BPjHWuQaDQwMhxmYFJ6YZ Uaz3sIrr7eud9IFCfXI+foG11s3X0zQySg8DqqRBGptGlZn3nXF0ckXqiwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKHeRW1NQFxvQpLWNohnbOFQ5/B+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2LzQwZTQw NS1hMzhmLTQ3ODEtOGQ1NS0wYzllMGNmN2U5ZmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvNDBlNDA1 LWEzOGYtNDc4MS04ZDU1LTBjOWUwY2Y3ZTlmYy8xL29kNUZiVTFBWEc5Q2t0WTJp R2RzNFZEbjhINC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwwPgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCiKTANBgkqhkiG9w0BAQsFAAOCAQEAMk4pE1l2Wb1NAqMFQ+aRM3viW2ockFF8 8LnG42Bt6yNooaGlXGv/e2EG7V2Q4KXTyD+GFlc6iugrRsBfoBOtbQst7iVGm1yN ofvAkIgvxZ6lajYlD8DQDOBz16re3StORFip1NFCsmP5ibeLNx4sFvxkup6Zxgwa uX6poFdk8grc9jklsEMErm6zcDLdscwmxYLwIXunuZ3A80Uq9hB9TvckyWbnkOxZ pDXerUiZD9/nj1s9nJT3mJcYh0HSfV5NCOunGZu+Caow+7NjMp9LrOFjxDKXWmff L+gbo66BcwN95EYv48yzMw7q+De3wUhV1W/HIBqSm0Bjk0g0FzB/gw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:34 2026 by rpki-client