This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ohdDGM-v51Xxg6l_t7lXq-71Pzc.cer File: ohdDGM-v51Xxg6l_t7lXq-71Pzc.cer (raw, json) Hash identifier: S7hZhgzNEB136K9awfSIsrYW1eSRbQKZsP+4UQZCuso= Subject key identifier: A2:17:43:18:CF:AF:E7:55:F1:83:A9:7F:B7:B9:57:AB:EE:F5:3F:37 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C3E4CB0B20BA26663E29B68E78E6FE3EC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d9af9-0829-411b-b76e-e26567f2aee1/1/ohdDGM-v51Xxg6l_t7lXq-71Pzc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d9af9-0829-411b-b76e-e26567f2aee1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sun 08 Feb 2026 17:28:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.39.8.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:3e:4c:b0:b2:0b:a2:66:63:e2:9b:68:e7:8e:6f:e3:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 8 17:28:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2174318cfafe755f183a97fb7b957abeef53f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f7:1b:ee:14:7f:2f:0a:f2:23:cd:fc:ef:9f: dc:bc:0b:d0:dc:3e:00:45:82:8e:e3:ae:f9:d0:ae: 1b:7d:3e:b1:21:ad:d8:92:0b:36:29:f7:73:b1:a0: 87:42:53:68:1c:1d:27:6e:fa:3d:68:6d:01:4e:e9: 38:5a:3a:bc:41:fa:a4:80:2d:9f:c6:84:23:b3:d5: c1:84:22:b7:6c:ce:a2:f4:6b:70:23:31:fd:3b:8e: 31:81:8e:6b:6b:a1:4f:25:33:63:0d:ba:7b:20:5c: 40:72:70:8f:e3:1c:5c:ea:cc:be:6d:0d:28:21:9b: 1c:38:9c:62:15:6d:85:0d:9f:8d:e0:e3:e6:d3:3b: 20:83:57:b2:03:bc:3e:cf:03:70:a2:e4:f3:72:97: 39:65:99:48:37:fe:39:90:38:a9:15:80:66:a0:0e: 5f:24:f2:d6:29:3c:a6:fd:ca:d6:95:c6:b0:d3:4b: 49:cd:55:3d:49:ca:69:45:ee:1d:45:34:1f:e5:94: 56:12:91:47:36:b1:2e:e4:60:a5:fe:62:bd:f6:a6: 1a:79:ed:57:ff:73:91:aa:78:60:3b:e4:de:90:c5: 7c:4e:63:9f:f8:f9:2b:92:17:6f:2b:d8:c5:56:af: f7:10:d4:56:26:72:7b:2c:4a:d3:22:44:85:14:7a: 83:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:17:43:18:CF:AF:E7:55:F1:83:A9:7F:B7:B9:57:AB:EE:F5:3F:37 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d9af9-0829-411b-b76e-e26567f2aee1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d9af9-0829-411b-b76e-e26567f2aee1/1/ohdDGM-v51Xxg6l_t7lXq-71Pzc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.39.8.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:8b:b4:6a:67:f5:7e:be:be:1e:ea:6c:f9:c3:25:ee:59:5b: 86:b8:5e:b7:66:3e:09:99:d3:fb:48:b0:0d:65:b9:20:53:e4: ba:77:70:f0:34:12:4a:48:ff:31:cf:4f:45:21:34:92:53:78: 8c:23:72:9d:4a:16:5c:39:6d:31:d4:59:5a:b4:4e:7a:a7:a6: c0:ab:dd:53:81:b8:94:60:f8:a4:b7:f9:e6:3a:ea:e2:16:01: 66:39:3a:7f:93:af:b2:62:68:4b:14:41:05:4c:cb:42:cb:54: df:66:77:a6:68:23:7b:e4:96:da:17:72:27:f2:2f:de:bd:fe: a5:4a:eb:3c:77:e4:26:69:e4:a6:2d:37:58:43:da:24:3a:43: 8d:2a:db:9f:18:39:4a:28:d0:12:45:d9:87:76:3f:65:5c:e6: 00:4e:39:70:9a:c8:47:7b:e7:18:5e:fe:cc:37:b3:00:2a:73: 54:d4:e4:6f:3f:72:ef:98:59:1a:68:6a:ae:bc:52:98:8d:ba: 2b:79:5f:59:77:89:87:ae:2d:c2:a5:5d:4e:09:d2:da:f0:bb: 51:6f:0b:3a:b0:e4:19:16:08:25:42:0b:f3:56:b9:71:83:a8: 34:46:d7:3e:6f:e6:8c:fb:d8:12:10:f5:b5:13:24:f7:58:0e: 5f:67:ac:00 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZw+TLCyC6JmY+KbaOeOb+PsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA4MTcyODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjE3NDMxOGNmYWZlNzU1ZjE4M2E5N2ZiN2I5NTdhYmVlZjUzZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/cb7hR/LwryI83875/cvAvQ3D4A RYKO46750K4bfT6xIa3Ykgs2KfdzsaCHQlNoHB0nbvo9aG0BTuk4Wjq8QfqkgC2f xoQjs9XBhCK3bM6i9GtwIzH9O44xgY5ra6FPJTNjDbp7IFxAcnCP4xxc6sy+bQ0o IZscOJxiFW2FDZ+N4OPm0zsgg1eyA7w+zwNwouTzcpc5ZZlIN/45kDipFYBmoA5f JPLWKTym/crWlcaw00tJzVU9ScppRe4dRTQf5ZRWEpFHNrEu5GCl/mK99qYaee1X /3ORqnhgO+TekMV8TmOf+PkrkhdvK9jFVq/3ENRWJnJ7LErTIkSFFHqD2wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKIXQxjPr+dV8YOpf7e5V6vu9T83MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzNkOWFm OS0wODI5LTQxMWItYjc2ZS1lMjY1NjdmMmFlZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvM2Q5YWY5 LTA4MjktNDExYi1iNzZlLWUyNjU2N2YyYWVlMS8xL29oZERHTS12NTFYeGc2bF90 N2xYcS03MVB6Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwScIMA0GCSqGSIb3DQEBCwUAA4IBAQA8i7Rq Z/V+vr4e6mz5wyXuWVuGuF63Zj4JmdP7SLANZbkgU+S6d3DwNBJKSP8xz09FITSS U3iMI3KdShZcOW0x1FlatE56p6bAq91TgbiUYPikt/nmOuriFgFmOTp/k6+yYmhL FEEFTMtCy1TfZnemaCN75JbaF3In8i/evf6lSus8d+QmaeSmLTdYQ9okOkONKtuf GDlKKNASRdmHdj9lXOYATjlwmshHe+cYXv7MN7MAKnNU1ORvP3LvmFkaaGquvFKY jboreV9Zd4mHri3CpV1OCdLa8LtRbws6sOQZFgglQgvzVrlxg6g0Rtc+b+aM+9gS EPW1EyT3WA5fZ6wA -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:29 2026 by rpki-client