This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ogqr6NvAhXg0PCW4xomHpevAOMk.cer File: ogqr6NvAhXg0PCW4xomHpevAOMk.cer (raw, json) Hash identifier: anyHIJGxhTOh9nITWUP5blSGsfnV1fME87+l9QME6xw= Subject key identifier: A2:0A:AB:E8:DB:C0:85:78:34:3C:25:B8:C6:89:87:A5:EB:C0:38:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2656F73F68F9EF009A8BC16DC77B8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/87cd33-d623-4f11-ac26-71d649c3fd35/1/ogqr6NvAhXg0PCW4xomHpevAOMk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/87cd33-d623-4f11-ac26-71d649c3fd35/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61096 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:65:6f:73:f6:8f:9e:f0:09:a8:bc:16:dc:77:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a20aabe8dbc08578343c25b8c68987a5ebc038c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:93:61:13:6c:18:9f:3d:68:cb:c6:66:f2:70: 1a:21:a0:bf:64:d2:45:b9:82:29:14:0f:b0:18:f5: 74:f3:a7:2c:c0:41:d9:9d:c0:ae:19:f5:a0:60:12: c0:20:37:6d:35:fe:24:87:1e:ce:09:79:22:91:4c: ef:72:40:d4:ed:63:d7:21:73:9b:ec:ec:f9:6f:d0: 5f:f6:34:ae:76:70:3c:30:b9:ff:ad:9a:42:6f:d4: 9d:de:10:40:53:da:5f:fc:4b:3d:e2:95:5b:ca:a1: e6:fe:f0:0a:4f:56:c9:35:2c:b7:31:6f:fd:62:89: 4f:9d:84:0d:fd:87:52:79:39:a3:69:f7:1f:1c:dc: f6:5c:17:87:61:b9:5b:3e:24:40:a3:ce:fa:5f:37: 7c:47:7a:a1:25:f9:26:26:a1:32:be:90:c8:d2:dc: 51:41:fd:6a:ca:81:92:0e:94:63:9e:99:ec:ce:d7: e3:3d:3c:68:e2:66:32:0a:6f:cd:83:7c:c0:58:cb: f6:23:dc:7d:5f:3d:63:48:93:fb:c4:eb:22:bc:d8: 07:25:0d:15:52:20:7b:2b:57:ec:7c:9e:d9:6b:3a: 49:bb:83:1d:66:26:5e:05:a0:2e:32:65:28:48:39: c8:ef:62:ec:11:74:d9:ce:1b:78:d3:40:0c:e8:d6: 14:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0A:AB:E8:DB:C0:85:78:34:3C:25:B8:C6:89:87:A5:EB:C0:38:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/87cd33-d623-4f11-ac26-71d649c3fd35/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/87cd33-d623-4f11-ac26-71d649c3fd35/1/ogqr6NvAhXg0PCW4xomHpevAOMk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 61096 Signature Algorithm: sha256WithRSAEncryption 7e:74:78:7e:91:93:9b:3b:d0:ac:78:db:ab:47:e0:25:14:32: 51:bf:72:11:d1:e7:f4:4c:90:d4:76:9f:6e:b6:23:89:54:4c: ed:bb:b9:11:db:fc:8e:ea:f4:eb:8c:4e:53:f3:92:c0:65:65: 9d:17:c3:ac:9d:6b:71:bc:90:b2:1e:76:fa:41:16:1b:f2:f8: 7b:1f:b0:07:a2:12:29:b0:02:60:db:9a:64:32:1e:1d:b6:e9: c0:8e:85:17:1b:73:50:ed:ba:e9:ef:90:43:fc:2c:25:6d:94: 12:d1:8c:40:f0:d2:86:d2:89:d2:66:f0:14:93:e4:d7:5b:d3: 85:42:f8:06:d8:d7:72:5f:da:83:08:c6:46:61:a7:07:b6:eb: ae:75:a8:6d:87:06:23:34:a8:22:74:3c:35:b0:d4:ad:2a:37: 47:1e:8d:67:5c:f5:2f:b9:e5:d4:57:bd:cf:43:c8:e5:f5:2b: bd:9c:37:11:1c:fd:0b:b8:33:62:aa:f9:54:15:86:a9:e6:13: 2f:69:5f:b2:e7:a4:6e:85:7c:19:8f:23:fd:47:1d:87:63:2c: 60:fc:c1:cb:b0:c0:5d:79:d3:c1:b1:e1:87:c2:15:12:f5:3e: df:90:73:ec:4a:8d:17:34:24:70:d6:83:15:fd:82:45:a0:f7: 45:9d:ab:12 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4omVvc/aPnvAJqLwW3He4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjBhYWJlOGRiYzA4NTc4MzQzYzI1YjhjNjg5ODdhNWViYzAzOGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZNhE2wYnz1oy8Zm8nAaIaC/ZNJF uYIpFA+wGPV086cswEHZncCuGfWgYBLAIDdtNf4khx7OCXkikUzvckDU7WPXIXOb 7Oz5b9Bf9jSudnA8MLn/rZpCb9Sd3hBAU9pf/Es94pVbyqHm/vAKT1bJNSy3MW/9 YolPnYQN/YdSeTmjafcfHNz2XBeHYblbPiRAo876Xzd8R3qhJfkmJqEyvpDI0txR Qf1qyoGSDpRjnpnsztfjPTxo4mYyCm/Ng3zAWMv2I9x9Xz1jSJP7xOsivNgHJQ0V UiB7K1fsfJ7ZazpJu4MdZiZeBaAuMmUoSDnI72LsEXTZzht400AM6NYUfwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFKIKq+jbwIV4NDwluMaJh6XrwDjJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzg3Y2Qz My1kNjIzLTRmMTEtYWMyNi03MWQ2NDljM2ZkMzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvODdjZDMz LWQ2MjMtNGYxMS1hYzI2LTcxZDY0OWMzZmQzNS8xL29ncXI2TnZBaFhnMFBDVzR4 b21IcGV2QU9Nay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDuqDANBgkqhkiG9w0BAQsFAAOCAQEAfnR4fpGTmzvQ rHjbq0fgJRQyUb9yEdHn9EyQ1HafbrYjiVRM7bu5Edv8jur064xOU/OSwGVlnRfD rJ1rcbyQsh52+kEWG/L4ex+wB6ISKbACYNuaZDIeHbbpwI6FFxtzUO266e+QQ/ws JW2UEtGMQPDShtKJ0mbwFJPk11vThUL4BtjXcl/agwjGRmGnB7brrnWobYcGIzSo InQ8NbDUrSo3Rx6NZ1z1L7nl1Fe9z0PI5fUrvZw3ERz9C7gzYqr5VBWGqeYTL2lf suekboV8GY8j/Ucdh2MsYPzBy7DAXXnTwbHhh8IVEvU+35Bz7EqNFzQkcNaDFf2C RaD3RZ2rEg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:20 2026 by rpki-client