This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer File: odFVKaRRyVzNk0rFbsCdUYdQZss.cer (raw, json) Hash identifier: mMVVRV1TghNoTNF6+WAy6I4JhKpbKBtcdDSq01Hbsj0= Subject key identifier: A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE709B9C026AA92A9EEC7338A55B12 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213568 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:70:9b:9c:02:6a:a9:2a:9e:ec:73:38:a5:5b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1d15529a451c95ccd934ac56ec09d51875066cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:53:88:fc:10:d4:6f:6a:4c:33:69:60:2f:13: 9e:a3:bc:87:f0:ca:73:f5:a0:51:56:21:25:58:6e: 99:7b:ba:95:d0:7d:95:f4:df:fc:cf:24:f6:e5:be: 67:46:17:36:11:8d:4c:73:3f:dd:3c:f9:df:83:1f: 1a:ef:77:7e:ee:06:be:3d:a4:4b:f5:d0:48:6f:db: ad:d4:eb:45:10:73:fa:72:e4:8e:a3:a5:20:50:96: 9c:0b:24:94:da:3e:5e:fb:98:2e:f2:83:91:17:05: ea:cc:8d:65:e5:b8:d8:56:d2:61:af:bd:43:cd:62: 49:b2:53:03:73:c1:82:b2:be:0c:a2:6c:46:f6:38: 07:73:ef:70:00:b5:75:74:85:c7:d0:03:b9:80:aa: 36:ef:07:4e:52:dd:1d:79:52:8a:74:b2:b5:a3:4f: 0e:6c:61:c2:bb:5f:94:62:18:9e:98:8c:8f:d8:f8: db:37:fa:a5:6e:f4:22:d6:5d:af:c9:3b:4a:d4:11: ad:26:e1:04:89:0b:ed:67:56:6f:a9:f6:a0:03:67: cb:3e:16:ef:c7:68:15:3b:0f:e0:da:94:e1:63:71: 9b:9b:f1:d2:06:fd:9b:7f:91:23:af:2d:04:fc:94: ef:59:fd:94:77:be:39:8a:6a:63:b4:d0:50:89:18: a3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213568 Signature Algorithm: sha256WithRSAEncryption 6b:67:30:33:8d:b3:14:7a:36:fe:bb:77:b6:1a:f8:9e:ee:ce: d8:31:90:3f:e4:09:11:02:d5:ec:84:08:f0:1d:45:78:48:a8: 26:6a:b7:03:55:8e:a1:6a:59:43:59:36:81:05:68:94:de:a3: 8d:75:74:a4:2a:07:ac:59:0f:d1:95:64:ef:5e:aa:6b:e5:0e: 44:d3:f4:c0:f6:89:47:03:bb:b4:a5:54:e3:bf:c6:f1:1c:7f: 13:20:74:57:48:67:b8:49:3d:fa:cc:e3:59:c8:32:e6:c8:f7: 86:5d:58:6a:dd:5f:64:24:a9:c7:2e:74:cd:f7:89:95:5e:bf: 06:a4:d0:8c:33:fd:a4:e8:ff:47:7f:3d:cb:80:58:06:bf:4b: 5b:09:17:e5:12:95:de:3c:bf:b0:f6:6f:74:64:ca:89:03:b2: 29:91:af:ca:30:bd:61:b9:d9:48:37:ae:af:4c:72:f0:b6:42: bf:a6:eb:7a:c7:07:e5:26:82:64:74:c6:38:9b:9c:47:e3:2d: 6b:55:bc:c0:e5:f9:38:ff:df:99:fc:e2:69:43:8e:3c:f6:27: 49:b0:d3:57:80:ff:8a:a2:9b:d4:92:3e:1a:46:39:f1:67:88: 14:c5:9a:e0:7a:ce:c2:fc:2a:2e:96:49:34:01:28:ed:60:7e: b1:9a:76:2b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt87nCbnAJqqSqe7HM4pVsSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWQxNTUyOWE0NTFjOTVjY2Q5MzRhYzU2ZWMwOWQ1MTg3NTA2NmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVOI/BDUb2pMM2lgLxOeo7yH8Mpz 9aBRViElWG6Ze7qV0H2V9N/8zyT25b5nRhc2EY1Mcz/dPPnfgx8a73d+7ga+PaRL 9dBIb9ut1OtFEHP6cuSOo6UgUJacCySU2j5e+5gu8oORFwXqzI1l5bjYVtJhr71D zWJJslMDc8GCsr4MomxG9jgHc+9wALV1dIXH0AO5gKo27wdOUt0deVKKdLK1o08O bGHCu1+UYhiemIyP2PjbN/qlbvQi1l2vyTtK1BGtJuEEiQvtZ1ZvqfagA2fLPhbv x2gVOw/g2pThY3Gbm/HSBv2bf5Ejry0E/JTvWf2Ud745impjtNBQiRijGwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFKHRVSmkUclczZNKxW7AnVGHUGbLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjLzU5MzFl My03ZDEwLTQzNWMtYWY2OS1kNmRkYWNmNmEzZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvNTkzMWUz LTdkMTAtNDM1Yy1hZjY5LWQ2ZGRhY2Y2YTNlYy8xL29kRlZLYVJSeVZ6TmswckZi c0NkVVlkUVpzcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNCQDANBgkqhkiG9w0BAQsFAAOCAQEAa2cwM42zFHo2 /rt3thr4nu7O2DGQP+QJEQLV7IQI8B1FeEioJmq3A1WOoWpZQ1k2gQVolN6jjXV0 pCoHrFkP0ZVk716qa+UORNP0wPaJRwO7tKVU47/G8Rx/EyB0V0hnuEk9+szjWcgy 5sj3hl1Yat1fZCSpxy50zfeJlV6/BqTQjDP9pOj/R389y4BYBr9LWwkX5RKV3jy/ sPZvdGTKiQOyKZGvyjC9YbnZSDeur0xy8LZCv6brescH5SaCZHTGOJucR+Mta1W8 wOX5OP/fmfziaUOOPPYnSbDTV4D/iqKb1JI+GkY58WeIFMWa4HrOwvwqLpZJNAEo 7WB+sZp2Kw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:10 2026 by rpki-client