This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer File: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer (raw, json) Hash identifier: DvjjVlUFL/C/VbvTQZq2Lp+fYsdNbPxbw+ZJkP+Fqp8= Subject key identifier: A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834BC1C0EACC9EF486A2D581AC0786A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209434 IP: 91.212.99.0/24 IP: 194.24.231.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:bc:1c:0e:ac:c9:ef:48:6a:2d:58:1a:c0:78:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:1e:e1:4e:d9:f5:67:4f:74:9d:11:a3:c2: db:52:c8:d1:c9:1a:95:92:3c:b9:c0:0d:ea:3c:a5: 34:78:20:68:c7:db:53:a7:f2:83:5c:7c:75:35:60: 00:eb:7b:ce:52:98:15:26:c0:a2:40:54:80:fd:f4: 8d:73:3b:42:fb:78:bb:4b:e4:50:6f:f3:28:16:56: ee:ce:0b:f6:6a:d3:4c:50:4b:35:70:79:81:97:c4: f0:8d:ac:fc:67:12:e2:d8:55:02:9b:41:43:1a:89: ed:33:b9:9d:63:27:28:9a:b1:e2:99:23:4e:5e:73: b3:b9:6d:42:46:3f:77:fb:57:ac:71:00:44:5e:6d: 0b:a4:08:d0:e3:fd:4f:09:ba:eb:64:c7:7e:ab:a1: bd:ca:8c:81:3c:da:1b:c0:7b:ae:05:86:4b:ea:98: eb:91:63:9d:17:53:c1:a9:ba:56:45:fc:67:28:d0: 88:21:65:22:44:af:fb:5a:58:3d:1f:79:45:33:25: 4a:04:81:83:b4:d0:10:34:15:14:e4:74:bd:1c:11: f4:57:32:bb:a2:38:15:a6:37:a4:13:f9:a2:37:97: 1c:f7:26:f9:e9:a6:b8:79:64:4f:73:b6:2c:8f:15: 52:c6:96:65:24:0c:c4:b6:01:b5:b2:67:fc:41:49: 85:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.99.0/24 194.24.231.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209434 Signature Algorithm: sha256WithRSAEncryption 67:f4:1f:98:76:4a:fe:bd:6d:bd:f3:d8:cd:76:4a:c5:20:87: d8:1b:73:56:0c:45:43:a2:3d:b3:8b:c1:dc:9a:f9:32:7c:48: 41:c5:d2:f3:61:d0:2a:fb:51:e7:fd:97:06:fc:42:f8:d9:21: ba:c6:81:bc:8f:91:bb:5a:79:2e:cb:ed:29:97:e5:a6:67:2b: ee:16:5c:2d:49:e0:5d:34:b2:21:fb:d8:19:bd:4b:80:c4:71: 39:00:6f:9d:49:52:c7:d5:bb:ee:6b:86:4b:5e:79:83:37:69: 3b:e5:c6:0e:9a:ba:b9:0e:c1:62:b4:3b:01:fa:e5:2e:33:e9: 92:44:b8:81:50:f5:63:06:2a:a3:56:e4:da:65:d6:36:bf:b7: 96:bc:69:6b:4a:e0:c6:5d:1a:2e:8e:12:c0:74:6c:52:1d:8d: 4f:40:ce:5a:74:15:b0:e8:cb:69:93:76:ad:dd:34:7c:ef:66: 4b:a0:96:a3:ef:90:6c:55:32:16:fc:24:3f:c8:19:f5:52:06: 1b:1b:11:39:2b:bd:23:dc:68:1e:60:6b:16:9b:01:2c:8f:af: f4:ea:70:46:44:cb:5c:1b:e5:fd:06:43:85:8f:36:16:5e:1e: 7e:cc:79:6a:2e:f9:1b:03:fd:40:e4:d8:f5:ae:9c:d0:fd:6f: df:c4:fa:ce -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt4NLwcDqzJ70hqLVgawHhqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjk3N2MxZTRlNzAxMzk5MmQ0YzRkMGYzM2NjZDc3MmZhYzhkOTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2Qe4U7Z9WdPdJ0Ro8LbUsjRyRqV kjy5wA3qPKU0eCBox9tTp/KDXHx1NWAA63vOUpgVJsCiQFSA/fSNcztC+3i7S+RQ b/MoFlbuzgv2atNMUEs1cHmBl8Twjaz8ZxLi2FUCm0FDGontM7mdYycomrHimSNO XnOzuW1CRj93+1escQBEXm0LpAjQ4/1PCbrrZMd+q6G9yoyBPNobwHuuBYZL6pjr kWOdF1PBqbpWRfxnKNCIIWUiRK/7Wlg9H3lFMyVKBIGDtNAQNBUU5HS9HBH0VzK7 ojgVpjekE/miN5cc9yb56aa4eWRPc7YsjxVSxpZlJAzEtgG1smf8QUmFYQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFKKXfB5OcBOZLUxNDzPM13L6yNk7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwLzY5ZDA3 Mi0zMmRkLTQzMmQtOWVhMi0yNjNlNDY2ZTRhZDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvNjlkMDcy LTMyZGQtNDMyZC05ZWEyLTI2M2U0NjZlNGFkNi8xL29wZDhIazV3RTVrdFRFMFBN OHpYY3ZySTJUcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW9RjAwQAwhjnMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMyGjANBgkqhkiG9w0BAQsFAAOCAQEAZ/QfmHZK/r1tvfPYzXZKxSCH 2BtzVgxFQ6I9s4vB3Jr5MnxIQcXS82HQKvtR5/2XBvxC+NkhusaBvI+Ru1p5Lsvt KZflpmcr7hZcLUngXTSyIfvYGb1LgMRxOQBvnUlSx9W77muGS155gzdpO+XGDpq6 uQ7BYrQ7AfrlLjPpkkS4gVD1YwYqo1bk2mXWNr+3lrxpa0rgxl0aLo4SwHRsUh2N T0DOWnQVsOjLaZN2rd00fO9mS6CWo++QbFUyFvwkP8gZ9VIGGxsROSu9I9xoHmBr FpsBLI+v9OpwRkTLXBvl/QZDhY82Fl4efsx5ai75GwP9QOTY9a6c0P1v38T6zg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:17 2026 by rpki-client