This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer (raw, json) Hash identifier: F/tKQQ0MhZUdNCT1A5i9H1tb36xaQMr6P2VeauFsav8= Subject key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80411F65A5238FC43B84ADBA50D5D3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.165.32.0/22 IP: 2a0b:dc00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:41:1f:65:a5:23:8f:c4:3b:84:ad:ba:50:d5:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cc:e9:46:91:de:9b:4c:b7:f1:ab:1e:43:d2: dd:96:0b:19:fe:20:5f:8e:63:c0:46:ae:df:4b:e1: 52:f7:a0:ec:1e:13:45:9f:37:d5:d0:c0:61:80:66: e3:40:3f:67:e5:e7:37:db:e6:a6:58:b5:5b:4f:95: f0:da:26:e0:75:22:79:4b:0a:79:e5:45:f8:bb:cf: cf:95:8d:cb:11:a7:e4:66:6f:97:6a:3b:f9:40:b5: 3c:cf:0c:13:db:ec:f1:37:3a:dc:1c:a4:91:71:d0: d3:59:34:c8:83:55:31:31:24:2d:3d:e0:6b:2b:e8: 69:89:f5:56:7f:9f:fa:4b:35:77:98:76:d5:2e:3f: fb:1c:dd:ea:3f:78:41:5c:7a:e8:d1:a6:69:f7:d7: df:e6:e4:f1:1a:c3:52:e4:7a:14:ca:13:a8:cd:db: a3:86:73:65:1f:c2:db:85:ea:1a:82:93:d9:88:58: ef:a4:9e:14:7d:38:42:fc:64:1a:5c:5b:6d:d0:77: 51:44:ca:3b:4a:51:df:05:cb:bf:13:c9:34:cd:ea: e5:72:06:28:56:93:47:0c:a9:46:9c:ac:fd:74:72: 6b:8d:96:4f:dc:ad:5a:ae:77:d6:eb:91:04:85:e0: ea:8c:c6:bd:fd:f7:12:db:70:97:6b:65:26:d0:93: 92:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.32.0/22 IPv6: 2a0b:dc00::/29 Signature Algorithm: sha256WithRSAEncryption 54:cd:2e:46:e1:68:52:82:2a:d9:95:30:f6:b5:c8:92:6e:1c: 71:5e:54:98:0a:72:ba:5a:74:44:dc:6c:34:4b:ba:48:75:bc: 12:4e:fd:45:0a:ef:d1:96:1d:b4:81:25:70:cb:7c:b4:0a:9c: ec:d4:1f:5c:59:e0:a5:f3:55:25:ec:fc:65:61:ff:30:08:01: 12:48:62:5c:6e:af:c1:eb:76:cd:8a:52:6a:05:59:c4:24:c4: 2d:6b:83:9e:6a:e7:77:23:9a:47:a8:aa:39:89:ef:ac:24:6d: 69:a0:86:98:14:e1:20:e3:ec:17:ef:b7:c7:20:dd:a0:21:d4: f6:97:fd:7b:79:e9:e1:6b:fa:ff:42:9a:d6:f2:94:f0:44:4f: 21:bd:c2:e8:0f:93:e4:0c:33:fd:22:e7:d4:e7:9c:7d:48:61: 5e:98:0b:10:69:11:e6:d2:8f:4e:96:4b:3f:68:5a:b5:3d:6a: b2:2a:eb:bd:ab:bd:69:cf:2f:c2:e6:3d:fc:ce:63:0f:3e:08: 2a:90:e5:df:f1:e9:87:f0:c6:f6:cf:59:43:7b:cb:a0:0e:62: 0a:81:39:30:15:36:97:ce:04:12:68:f3:c3:28:3f:e8:48:ed: 1f:3c:35:9f:d5:87:60:1f:30:83:bc:f4:51:90:65:63:07:df: 9f:aa:4e:8c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8gEEfZaUjj8Q7hK26UNXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjkxNjUyN2ZkOTFlOWIzY2Y4ZTA2MmJjZTA2ZGY1Y2JkNGM0YjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8zpRpHem0y38aseQ9LdlgsZ/iBf jmPARq7fS+FS96DsHhNFnzfV0MBhgGbjQD9n5ec32+amWLVbT5Xw2ibgdSJ5Swp5 5UX4u8/PlY3LEafkZm+Xajv5QLU8zwwT2+zxNzrcHKSRcdDTWTTIg1UxMSQtPeBr K+hpifVWf5/6SzV3mHbVLj/7HN3qP3hBXHro0aZp99ff5uTxGsNS5HoUyhOozduj hnNlH8LbheoagpPZiFjvpJ4UfThC/GQaXFtt0HdRRMo7SlHfBcu/E8k0zerlcgYo VpNHDKlGnKz9dHJrjZZP3K1arnfW65EEheDqjMa9/fcS23CXa2Um0JOSpwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFKKRZSf9kemzz44GK84G31y9TEsaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmLzg2YzUz OS02MjFlLTQ0NjAtYTA2Ny1lMGRjMThlODgyMjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvODZjNTM5 LTYyMWUtNDQ2MC1hMDY3LWUwZGMxOGU4ODIyOS8xL29wRmxKXzJSNmJQUGpnWXJ6 Z2JmWEwxTVN4by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuaUgMA0EAgACMAcDBQMqC9wAMA0GCSqGSIb3 DQEBCwUAA4IBAQBUzS5G4WhSgirZlTD2tciSbhxxXlSYCnK6WnRE3Gw0S7pIdbwS Tv1FCu/Rlh20gSVwy3y0Cpzs1B9cWeCl81Ul7PxlYf8wCAESSGJcbq/B63bNilJq BVnEJMQta4Oeaud3I5pHqKo5ie+sJG1poIaYFOEg4+wX77fHIN2gIdT2l/17eenh a/r/QprW8pTwRE8hvcLoD5PkDDP9IufU55x9SGFemAsQaRHm0o9Olks/aFq1PWqy Kuu9q71pzy/C5j38zmMPPggqkOXf8emH8Mb2z1lDe8ugDmIKgTkwFTaXzgQSaPPD KD/oSO0fPDWf1YdgHzCDvPRRkGVjB9+fqk6M -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:51 2026 by rpki-client