This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer File: os0snkthAHq1W8aePuP_zmJi2BE.cer (raw, json) Hash identifier: UoPG/AcD6+Q5tBKypSKEkew9xbkkx+TOkfcI4OFHtmc= Subject key identifier: A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80BC7FC183205879E1495F46C1F910 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201415 IP: 185.70.248.0/22 IP: 185.161.108.0/23 IP: 185.248.226.0/24 IP: 2a03:3720::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:bc:7f:c1:83:20:58:79:e1:49:5f:46:c1:f9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5d:c4:73:8f:47:f0:5c:7d:d3:6f:14:85:a4: 28:79:5a:3e:4a:27:84:24:e0:0c:87:fc:a5:d9:c1: ed:0a:74:00:17:42:39:ee:26:d8:9f:c4:64:7b:bf: 63:40:52:6c:b0:2d:9a:26:5a:d9:7b:91:92:45:e0: 43:a6:79:c9:1a:b8:99:54:ea:90:f8:df:b8:5a:30: ba:81:4f:1e:51:6b:28:34:41:a3:ca:de:51:fa:0b: 6a:1a:89:7c:15:48:4b:f6:7c:fc:6b:6f:26:27:1c: da:d3:df:71:cd:99:0e:fb:14:44:09:96:da:53:8c: cc:15:51:1d:77:17:04:ea:a1:0c:d1:98:4c:54:3b: 72:af:59:37:5b:6f:fb:52:9f:5a:d1:78:ca:e1:bd: df:56:e1:12:24:c8:6a:7f:d7:cb:26:be:60:fd:55: a3:32:6b:66:50:2a:cc:51:ba:50:3c:df:0a:23:21: 5f:8b:96:e3:ba:df:40:01:cc:7c:84:db:80:0b:e5: fa:85:fd:36:e2:42:0c:90:ea:14:3a:00:e9:58:c4: 81:10:6b:38:47:2f:03:79:46:4d:f0:35:2b:ce:ee: 67:c0:cc:da:46:86:b4:40:27:cb:f8:92:80:dc:32: 6d:fe:84:99:c2:c6:ee:ed:22:1b:fb:9f:1d:4d:df: 4f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.70.248.0/22 185.161.108.0/23 185.248.226.0/24 IPv6: 2a03:3720::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201415 Signature Algorithm: sha256WithRSAEncryption 22:ea:ea:9b:a2:d2:ad:f7:5b:44:04:98:23:7f:97:d3:6a:86: 4e:ac:56:0b:dc:bc:81:88:a6:6f:ad:dc:93:db:d3:98:0b:b6: 8a:03:7b:11:e1:c4:44:0e:fd:d5:75:5b:98:9b:0d:44:0a:82: 4c:4c:e7:f0:b2:35:24:dc:63:62:59:d2:9a:d5:f7:7b:9a:74: ba:11:6c:28:53:55:86:21:2a:2a:a1:c0:b1:18:b2:da:3b:b9: 4b:4d:c8:e5:12:70:42:12:ef:c3:07:e8:b9:3c:ba:aa:6e:b4: 90:2d:81:8c:be:5a:7f:fd:64:0c:38:ac:6a:47:bb:2c:43:6e: e7:0c:91:33:87:2b:04:3a:31:e2:bd:db:e6:63:30:92:8f:fa: 01:a2:7c:f5:bf:0d:2b:2f:86:bd:3e:af:79:6a:24:32:59:c2: b5:cf:ae:4e:4d:ed:70:27:21:21:99:e2:cc:d5:4a:67:00:d2: 79:fd:e0:ce:ec:68:ea:93:6e:52:97:a5:f1:cc:bd:8f:7b:45: 3a:8a:75:54:1a:d9:4f:bc:47:4d:1e:cf:93:0e:06:97:45:7b: 7e:39:1f:c1:50:5b:d9:1f:ca:7f:3c:61:22:1b:51:f6:8c:2f: 52:45:c9:eb:97:00:86:45:56:18:ec:0a:6c:8c:3a:7d:3f:f7: c3:00:9b:2a -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt8gLx/wYMgWHnhSV9GwfkQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmNkMmM5ZTRiNjEwMDdhYjU1YmM2OWUzZWUzZmZjZTYyNjJkODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt13Ec49H8Fx9028UhaQoeVo+SieE JOAMh/yl2cHtCnQAF0I57ibYn8Rke79jQFJssC2aJlrZe5GSReBDpnnJGriZVOqQ +N+4WjC6gU8eUWsoNEGjyt5R+gtqGol8FUhL9nz8a28mJxza099xzZkO+xRECZba U4zMFVEddxcE6qEM0ZhMVDtyr1k3W2/7Up9a0XjK4b3fVuESJMhqf9fLJr5g/VWj MmtmUCrMUbpQPN8KIyFfi5bjut9AAcx8hNuAC+X6hf024kIMkOoUOgDpWMSBEGs4 Ry8DeUZN8DUrzu5nwMzaRoa0QCfL+JKA3DJt/oSZwsbu7SIb+58dTd9PrQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFKLNLJ5LYQB6tVvGnj7j/85iYtgRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllLzZjNGM2 Yy1hZjIyLTQwYTQtYWUyYy00YTAyZjA5N2NkYjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvNmM0YzZj LWFmMjItNDBhNC1hZTJjLTRhMDJmMDk3Y2RiMS8xL29zMHNua3RoQUhxMVc4YWVQ dVBfem1KaTJCRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuUb4AwQBuaFsAwQAufjiMA0EAgACMAcDBQAq AzcgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMSxzANBgkqhkiG9w0BAQsFAAOC AQEAIurqm6LSrfdbRASYI3+X02qGTqxWC9y8gYimb63ck9vTmAu2igN7EeHERA79 1XVbmJsNRAqCTEzn8LI1JNxjYlnSmtX3e5p0uhFsKFNVhiEqKqHAsRiy2ju5S03I 5RJwQhLvwwfouTy6qm60kC2BjL5af/1kDDisake7LENu5wyRM4crBDox4r3b5mMw ko/6AaJ89b8NKy+GvT6veWokMlnCtc+uTk3tcCchIZnizNVKZwDSef3gzuxo6pNu Upel8cy9j3tFOop1VBrZT7xHTR7Pkw4Gl0V7fjkfwVBb2R/KfzxhIhtR9owvUkXJ 65cAhkVWGOwKbIw6fT/3wwCbKg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:03 2026 by rpki-client