This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer File: ogVTc5WopAMDh35p04kDP-N6ZPA.cer (raw, json) Hash identifier: uwfR0Dom6hQ0te/xft/F37wQWubECNiZFQ5IYpGTLTk= Subject key identifier: A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C04D10292926A3913A5B77457E14D0DB8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 28 Jan 2026 13:35:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50628 IP: 45.144.94.0/23 IP: 178.208.0.0/19 IP: 185.173.68.0/22 IP: 185.194.156.0/22 IP: 193.35.98.0/24 IP: 193.35.101.0/24 IP: 193.35.145.0/24 IP: 193.35.156.0/24 IP: 2a04:3d80::/29 IP: 2a0b:3b00::/29 IP: 2a0e:ebc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:d1:02:92:92:6a:39:13:a5:b7:74:57:e1:4d:0d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 28 13:35:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a205537395a8a40303877e69d389033fe37a64f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c9:c4:b3:0b:43:a6:64:97:02:9b:ef:a0:21: f1:4e:74:38:66:c2:e3:51:8d:6e:c0:e4:08:47:8a: 4a:96:50:36:34:f4:90:a8:b2:64:ef:f5:b5:4c:9b: 9c:5a:23:48:34:82:8b:3c:18:63:ec:af:c8:e8:b3: f2:4b:7f:a6:30:a0:2f:9c:71:a9:92:ea:d6:fe:ad: 4c:f6:ef:4f:dd:b8:05:30:5c:82:e6:29:2f:a5:b6: 5b:cc:de:1d:47:61:0e:07:fb:79:6b:cb:c7:f8:3a: 3a:88:76:3e:ae:6a:e7:fd:16:3c:4c:dd:da:f3:af: 80:44:7d:f5:da:80:93:a7:59:af:9d:96:a5:ea:49: 14:18:1a:41:44:dd:69:3e:52:ca:e2:f3:88:56:65: 5b:8a:d4:ca:58:86:3e:5f:66:3e:08:cd:09:61:8c: 05:21:3a:9a:fa:3c:8f:74:0c:87:0a:cf:aa:3e:7f: 9d:90:05:64:00:6c:2c:96:ea:9f:29:f4:69:37:82: 2a:f8:e5:be:e8:10:10:d8:74:38:19:6a:ed:40:fd: fc:35:80:c1:99:ff:4a:b0:cf:32:06:71:54:ae:ed: db:84:96:c9:97:86:ec:d3:11:d4:6f:d3:a6:83:03: b7:16:5f:93:b7:aa:df:b6:d6:42:5e:21:66:0b:de: 5d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.94.0/23 178.208.0.0/19 185.173.68.0/22 185.194.156.0/22 193.35.98.0/24 193.35.101.0/24 193.35.145.0/24 193.35.156.0/24 IPv6: 2a04:3d80::/29 2a0b:3b00::/29 2a0e:ebc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50628 Signature Algorithm: sha256WithRSAEncryption 58:bc:da:1c:29:07:33:3a:fc:d4:21:ed:df:94:b9:d5:19:1f: 81:45:3e:dc:60:ae:ab:69:e8:2e:6b:e5:b3:a6:f8:29:f0:17: 63:4f:5e:bb:16:00:4c:a7:e4:e1:db:2f:34:4c:c6:24:80:4c: da:35:d2:62:62:3e:3f:f7:b9:60:6e:b7:16:5a:2d:ff:9f:4f: 26:fa:6c:8d:37:26:02:d1:48:82:95:22:51:58:6f:73:be:38: a2:89:c0:2e:53:b9:bd:d4:86:9d:1b:69:6f:1e:22:6d:ec:c0: 62:7b:6a:97:96:da:ae:0c:03:1f:5d:96:1d:65:d0:ec:11:11: 64:60:63:c7:46:e2:dd:a8:9d:a0:1e:08:ec:d1:71:58:9f:00: 96:97:02:4c:26:5b:39:2b:2a:a1:3c:59:c0:24:39:62:b9:b3: 46:ab:cf:fe:62:b2:59:40:a1:b9:4f:62:6f:39:24:c6:5d:24: fc:69:9e:a1:0e:04:ae:ac:5a:cd:d8:13:4c:c2:f2:8d:73:3a: a3:a0:5f:5e:0c:d6:9e:00:62:5f:dc:a5:e4:51:ce:b4:0f:65: 9f:09:2d:6e:5d:95:bc:17:60:fb:af:b8:e5:be:67:5f:1a:d6: 84:d7:a3:ce:e4:43:49:2d:fb:aa:34:80:81:4f:4b:c3:34:fd: 47:77:52:69 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgISAZwE0QKSkmo5E6W3dFfhTQ24MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI4MTMzNTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjA1NTM3Mzk1YThhNDAzMDM4NzdlNjlkMzg5MDMzZmUzN2E2NGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8nEswtDpmSXApvvoCHxTnQ4ZsLj UY1uwOQIR4pKllA2NPSQqLJk7/W1TJucWiNINIKLPBhj7K/I6LPyS3+mMKAvnHGp kurW/q1M9u9P3bgFMFyC5ikvpbZbzN4dR2EOB/t5a8vH+Do6iHY+rmrn/RY8TN3a 86+ARH312oCTp1mvnZal6kkUGBpBRN1pPlLK4vOIVmVbitTKWIY+X2Y+CM0JYYwF ITqa+jyPdAyHCs+qPn+dkAVkAGwsluqfKfRpN4Iq+OW+6BAQ2HQ4GWrtQP38NYDB mf9KsM8yBnFUru3bhJbJl4bs0xHUb9OmgwO3Fl+Tt6rfttZCXiFmC95dWQIDAQAB o4IC5zCCAuMwHQYDVR0OBBYEFKIFU3OVqKQDA4d+adOJAz/jemTwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlL2FjNzRj Yy1hODk2LTQzMjYtYTAyMS02Yzc1YmNiZmI0YTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvYWM3NGNj LWE4OTYtNDMyNi1hMDIxLTZjNzViY2JmYjRhNi8xL29nVlRjNVdvcEFNRGgzNXAw NGtEUC1ONlpQQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGCCsGAQUF BwEHAQH/BFcwVTA2BAIAATAwAwQBLZBeAwQFstAAAwQCua1EAwQCucKcAwQAwSNi AwQAwSNlAwQAwSORAwQAwSOcMBsEAgACMBUDBQMqBD2AAwUDKgs7AAMFAyoO68Aw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAMXEMA0GCSqGSIb3DQEBCwUAA4IBAQBY vNocKQczOvzUIe3flLnVGR+BRT7cYK6raegua+Wzpvgp8BdjT167FgBMp+Th2y80 TMYkgEzaNdJiYj4/97lgbrcWWi3/n08m+myNNyYC0UiClSJRWG9zvjiiicAuU7m9 1IadG2lvHiJt7MBie2qXltquDAMfXZYdZdDsERFkYGPHRuLdqJ2gHgjs0XFYnwCW lwJMJls5KyqhPFnAJDliubNGq8/+YrJZQKG5T2JvOSTGXST8aZ6hDgSurFrN2BNM wvKNczqjoF9eDNaeAGJf3KXkUc60D2WfCS1uXZW8F2D7r7jlvmdfGtaE16PO5ENJ LfuqNICBT0vDNP1Hd1Jp -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:48 2026 by rpki-client