This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer File: oheIwIqkN9EWXOy9aP2xlaFd-gg.cer (raw, json) Hash identifier: Q+NPpJQKRFeXM0AGrV2WNrGWxG6jJ+7HtDntIslJmz4= Subject key identifier: A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF2A436D867F7C28B9B1E03C10869AA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207916 IP: 37.26.74.0 -- 37.26.79.255 IP: 83.229.20.0/23 IP: 93.174.80.0/21 IP: 185.80.116.0/22 IP: 2a00:1350::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:a4:36:d8:67:f7:c2:8b:9b:1e:03:c1:08:69:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a21788c08aa437d1165cecbd68fdb195a15dfa08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:77:2b:a7:ae:93:6b:74:65:90:dd:a5:99:46: 12:48:a0:a4:01:36:b4:48:dd:64:b1:b1:6d:b6:e6: 93:c4:5a:09:57:b3:5a:e7:aa:9c:9d:e4:d3:38:1e: e7:28:dc:ea:0e:6c:5b:c3:53:69:2a:5b:d5:df:fb: 70:41:22:17:ad:19:26:0b:d3:76:7d:61:de:89:6f: a4:75:c1:08:e2:d4:59:65:c6:02:85:63:a4:9a:48: 1c:37:3e:81:a1:81:74:91:f8:4c:9c:7a:14:06:cd: 02:33:be:df:97:17:82:a5:25:b9:62:be:d9:b5:37: 7f:75:e8:39:da:3f:1f:9e:9d:52:ea:91:58:c0:df: cb:75:a5:00:d1:9a:27:80:c7:ee:1d:d4:58:0d:cf: 20:1b:f4:3b:76:5e:4a:a1:88:95:ad:0e:1f:93:07: a4:f3:9c:40:e1:d4:9a:6c:2e:38:02:2e:c9:41:de: 3f:5d:f5:ec:95:7c:0a:9c:c8:c6:df:87:86:e0:0a: e8:ff:46:cb:3b:30:97:12:8b:f8:34:13:f3:10:a8: f1:ae:5c:b5:89:4f:d6:d9:c8:96:f9:ad:89:76:52: 36:22:e3:16:18:59:20:b5:4c:e1:43:2f:a4:38:af: de:47:c3:0c:e8:c8:c2:de:a8:4e:3f:44:de:1b:36: 4a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.26.74.0-37.26.79.255 83.229.20.0/23 93.174.80.0/21 185.80.116.0/22 IPv6: 2a00:1350::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207916 Signature Algorithm: sha256WithRSAEncryption ad:db:63:3a:a8:1f:7d:ba:70:a0:02:d6:5c:3b:83:5b:b9:c3: 97:00:08:ac:2d:fb:50:dc:0e:4e:f1:f4:21:d1:f7:80:9c:80: 32:d9:cb:cc:09:3a:08:7c:fc:c3:e5:e8:52:34:cb:e9:d2:60: 5c:5e:27:53:1d:81:9e:c9:1c:de:b1:1c:5a:48:2c:5d:19:21: 88:bf:a2:33:80:fb:8b:e8:72:da:49:83:07:44:fb:d9:b9:fa: b2:80:c0:3d:04:f8:71:82:d7:62:04:58:22:6a:43:38:6f:25: 6c:c3:e2:ca:44:34:75:44:14:2c:51:4b:7d:bd:f1:31:11:34: 62:9b:8d:79:4c:7f:4d:ad:89:1e:36:98:b6:68:44:e5:79:fd: a9:6f:8f:dc:99:16:b6:f6:06:62:fb:a7:d0:4b:96:e8:a3:96: f6:90:ce:c9:b9:28:8e:e5:ee:bf:22:67:16:d1:70:ac:f9:ae: 56:62:d8:9a:94:8e:d7:ce:38:53:bb:ff:b5:81:ed:f4:83:1c: 70:e8:4e:72:83:d3:65:48:f6:01:27:3d:45:fa:db:1b:ad:c7: e0:ed:2d:c2:89:d6:fb:5e:1d:cb:35:d0:10:e5:af:aa:3e:34: 4f:ba:f3:71:a9:ce:6d:81:99:05:74:35:e9:72:be:7a:e8:87: c4:65:38:bc -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt/8qQ22Gf3woubHgPBCGmqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjE3ODhjMDhhYTQzN2QxMTY1Y2VjYmQ2OGZkYjE5NWExNWRmYTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3crp66Ta3RlkN2lmUYSSKCkATa0 SN1ksbFttuaTxFoJV7Na56qcneTTOB7nKNzqDmxbw1NpKlvV3/twQSIXrRkmC9N2 fWHeiW+kdcEI4tRZZcYChWOkmkgcNz6BoYF0kfhMnHoUBs0CM77flxeCpSW5Yr7Z tTd/deg52j8fnp1S6pFYwN/LdaUA0ZongMfuHdRYDc8gG/Q7dl5KoYiVrQ4fkwek 85xA4dSabC44Ai7JQd4/XfXslXwKnMjG34eG4Aro/0bLOzCXEov4NBPzEKjxrly1 iU/W2ciW+a2JdlI2IuMWGFkgtUzhQy+kOK/eR8MM6MjC3qhOP0TeGzZKBwIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFKIXiMCKpDfRFlzsvWj9sZWhXfoIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzdhMGM3 Yy1mMmNhLTRhYTktODdjNS03N2Y0ZmQ1MzQyNWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvN2EwYzdj LWYyY2EtNGFhOS04N2M1LTc3ZjRmZDUzNDI1ZS8xL29oZUl3SXFrTjlFV1hPeTlh UDJ4bGFGZC1nZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAmBAIAATAgMAwDBAElGkoDBAQlGkADBAFT5RQDBANdrlADBAK5 UHQwDQQCAAIwBwMFACoAE1AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAywsMA0G CSqGSIb3DQEBCwUAA4IBAQCt22M6qB99unCgAtZcO4NbucOXAAisLftQ3A5O8fQh 0feAnIAy2cvMCToIfPzD5ehSNMvp0mBcXidTHYGeyRzesRxaSCxdGSGIv6IzgPuL 6HLaSYMHRPvZufqygMA9BPhxgtdiBFgiakM4byVsw+LKRDR1RBQsUUt9vfExETRi m415TH9NrYkeNpi2aETlef2pb4/cmRa29gZi+6fQS5boo5b2kM7JuSiO5e6/ImcW 0XCs+a5WYtialI7XzjhTu/+1ge30gxxw6E5yg9NlSPYBJz1F+tsbrcfg7S3Cidb7 Xh3LNdAQ5a+qPjRPuvNxqc5tgZkFdDXpcr566IfEZTi8 -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:36 2026 by rpki-client