This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer File: oisfTQq0ODaycVOQgo2QdyzJ2No.cer (raw, json) Hash identifier: sf7W4w81q1Symjs6+kdnzs/pxFuFW2VbDi/dRzbzNHU= Subject key identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB7CAFF3BFBA27887E16F8A01D40C2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28995 IP: 62.140.160.0/19 IP: 2a02:2670::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7c:af:f3:bf:ba:27:88:7e:16:f8:a0:1d:40:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:9a:78:04:bb:f8:16:fe:bd:2f:64:bb:e7: ce:8f:18:4f:09:ea:de:15:3b:fc:44:77:07:23:c3: a1:20:c0:ab:ad:41:49:51:95:e4:aa:0f:09:f0:4c: 22:c9:14:25:ff:4b:a0:94:b5:a8:fa:91:61:3a:7a: 68:75:a4:aa:a1:bb:9f:de:2f:c2:73:6e:37:38:ea: 73:92:64:89:01:b6:11:25:db:64:7a:0c:da:2f:1d: 27:2f:98:f4:73:ab:75:cf:c8:69:34:4c:83:07:0f: 90:99:c9:f9:9b:8e:96:2f:ab:7c:0a:6d:f1:dd:63: 89:b2:59:5a:46:02:02:5b:ad:70:2f:f4:6a:0e:52: 81:93:bb:a3:de:cf:8d:78:f0:95:c5:ee:9c:1e:42: fb:6a:e1:e3:32:19:f1:f4:88:75:c6:f2:00:b7:64: 1e:52:24:4f:ca:ea:a6:62:9e:4d:77:07:19:6c:d7: d7:3d:28:36:3c:fb:30:c8:0e:a9:7a:dc:92:cb:b2: 18:ee:d7:bd:84:e3:be:e0:e0:df:04:6f:a7:07:46: 30:dd:70:79:27:6a:a4:29:47:7a:af:eb:d6:ca:16: 40:13:2a:92:df:6f:77:4b:dc:cd:d2:de:64:db:82: 2a:4d:c7:9d:46:9a:14:51:e5:c9:52:1a:c4:bd:29: 6a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.140.160.0/19 IPv6: 2a02:2670::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28995 Signature Algorithm: sha256WithRSAEncryption 25:8e:46:74:f0:13:a4:37:83:70:fc:d8:3b:39:0c:e7:b1:e5: 85:0f:83:11:af:0b:5c:18:6c:0c:2a:db:1b:f2:e3:a8:cd:24: 3a:d5:b5:90:e0:40:05:eb:66:71:7b:47:aa:85:77:19:72:a3: 9e:74:15:dd:9c:6f:0c:1a:d8:32:28:7c:fa:63:15:c8:cf:fc: 17:50:5a:77:22:0f:1f:cc:a5:d0:ae:d3:63:8c:37:af:73:38: 96:38:da:8c:74:e9:f5:04:65:fe:bc:6b:c8:bd:be:23:f1:82: c3:49:22:e6:80:64:53:f7:c8:5e:7a:b9:52:55:c1:89:cc:7b: 3b:8a:84:d2:18:ad:4c:bf:8b:f8:4d:ea:1e:72:cc:e6:2f:30: 89:ab:59:2d:92:bf:68:c3:a8:1d:72:7f:de:43:17:fc:4b:35: 60:63:4f:02:8e:37:d3:0b:c3:2b:49:19:8a:e0:01:1f:2e:60: 2d:74:35:2d:75:0f:9a:1e:44:b2:72:72:22:0c:4d:0b:ca:a8: 02:fd:3c:c0:1e:9f:04:1d:e2:d8:24:0d:15:2b:b7:dc:f6:fc: 79:1a:2e:1a:bb:89:3e:99:26:b6:fa:a0:89:42:04:90:7a:ef: 01:9b:e2:e3:90:d4:83:70:91:ca:59:c4:24:88:e2:73:79:60: 79:4d:21:cd -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt263yv87+6J4h+FvigHUDCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjJiMWY0ZDBhYjQzODM2YjI3MTUzOTA4MjhkOTA3NzJjYzlkOGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbeaeAS7+Bb+vS9ku+fOjxhPCere FTv8RHcHI8OhIMCrrUFJUZXkqg8J8EwiyRQl/0uglLWo+pFhOnpodaSqobuf3i/C c243OOpzkmSJAbYRJdtkegzaLx0nL5j0c6t1z8hpNEyDBw+Qmcn5m46WL6t8Cm3x 3WOJsllaRgICW61wL/RqDlKBk7uj3s+NePCVxe6cHkL7auHjMhnx9Ih1xvIAt2Qe UiRPyuqmYp5NdwcZbNfXPSg2PPswyA6petySy7IY7te9hOO+4ODfBG+nB0Yw3XB5 J2qkKUd6r+vWyhZAEyqS3293S9zN0t5k24IqTcedRpoUUeXJUhrEvSlqHwIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFKIrH00KtDg2snFTkIKNkHcsydjaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzBlZjQw My05ZWZmLTQwNDgtODcyZS00ZjQzMTk1ZDE5NmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvMGVmNDAz LTllZmYtNDA0OC04NzJlLTRmNDMxOTVkMTk2Zi8xL29pc2ZUUXEwT0RheWNWT1Fn bzJRZHl6SjJOby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQFPoygMA0EAgACMAcDBQAqAiZwMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAnFDMA0GCSqGSIb3DQEBCwUAA4IBAQAljkZ08BOkN4Nw /Ng7OQznseWFD4MRrwtcGGwMKtsb8uOozSQ61bWQ4EAF62Zxe0eqhXcZcqOedBXd nG8MGtgyKHz6YxXIz/wXUFp3Ig8fzKXQrtNjjDevcziWONqMdOn1BGX+vGvIvb4j 8YLDSSLmgGRT98heerlSVcGJzHs7ioTSGK1Mv4v4TeoecszmLzCJq1ktkr9ow6gd cn/eQxf8SzVgY08CjjfTC8MrSRmK4AEfLmAtdDUtdQ+aHkSycnIiDE0LyqgC/TzA Hp8EHeLYJA0VK7fc9vx5Gi4au4k+mSa2+qCJQgSQeu8Bm+LjkNSDcJHKWcQkiOJz eWB5TSHN -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:14 2026 by rpki-client