This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer File: osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer (raw, json) Hash identifier: dDbV24AoD+wLwVu7DjqX7UmZNJOy3t0Tc0efMIMuJZM= Subject key identifier: A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB65F06CFBCF28A023716B55352446 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.145.230.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:65:f0:6c:fb:cf:28:a0:23:71:6b:55:35:24:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2c56441d83df94bbd0e60144a554639e40e0535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:06:4d:39:61:13:69:f3:c2:54:16:16:0f:7b: 80:1b:b1:46:5d:2a:55:d8:6e:e6:a2:fc:51:79:be: 5f:87:40:a2:32:e5:a5:2b:15:98:3e:31:cb:a9:52: 18:6d:fc:ad:61:6a:02:4f:53:0d:de:95:65:5a:e8: 43:cb:1c:97:ff:7a:4e:03:ef:c3:83:96:89:33:02: a5:6c:51:0b:a2:6c:15:3a:31:0b:32:8f:d0:28:94: 96:17:27:ea:69:dc:33:60:03:28:4d:14:ec:14:c6: 0c:39:d1:4e:73:7a:f2:b5:f6:fd:8a:3c:8d:e5:17: c4:cc:06:51:bc:ae:f3:31:a5:10:aa:16:ec:e6:1e: 09:2c:db:18:38:77:d8:38:a8:34:8d:7d:a0:5c:27: 2c:ac:58:c2:d2:5f:a7:d0:19:99:09:56:4c:67:e6: 30:e1:93:b9:d4:ec:11:b0:42:ba:64:e3:7f:85:73: 19:1e:43:59:61:4e:3e:bb:07:5b:17:e0:d6:be:0c: f8:28:00:23:f3:8a:c8:42:7e:93:19:76:fb:8d:cf: bf:27:6e:c8:30:2f:f7:b0:a0:3d:06:b2:44:3c:9e: 6c:af:4a:80:6d:89:cb:88:3c:ab:8f:48:0c:0f:0d: fe:83:f4:b0:fa:d1:c4:d8:4f:e1:87:37:5a:0f:71: f3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.145.230.0/24 Signature Algorithm: sha256WithRSAEncryption 90:c5:d8:03:1d:00:8e:91:52:a4:76:21:5e:29:c0:da:aa:a8: 8a:4f:dd:78:75:de:b5:62:fb:b4:18:37:46:83:1c:d6:0b:b3: cd:8a:4c:d4:62:c2:4b:54:7e:a1:3f:9d:72:3e:70:7d:25:a4: 23:2f:c5:28:46:dd:8b:2b:90:4a:a2:18:0b:20:3e:d1:22:73: 27:4b:3c:91:cc:3c:17:d7:c6:4f:5f:3a:dc:dc:29:35:31:f4: 3b:05:43:97:2e:1f:bf:6e:9d:06:cd:d4:34:7f:0b:7f:a3:c9: f6:56:4d:a0:05:07:cb:f0:6b:4c:4d:90:66:2c:5d:fe:75:c4: 47:05:fc:57:c0:84:6b:02:e6:cc:f5:81:e7:d7:f5:9b:b4:1b: d2:b5:c8:12:4a:5b:a2:df:0a:ae:23:49:ea:c6:6e:18:46:e5: 12:eb:36:f3:a3:55:18:fd:f5:41:4f:d2:17:9b:87:81:3c:e0: 42:6c:8f:e2:3f:31:9b:cd:47:e4:2d:1b:0b:f0:80:e7:62:d3: d8:c7:45:c5:7a:24:d0:b5:0c:39:6b:64:33:28:ef:ba:c5:4b: cf:c4:df:01:ed:a1:4f:ac:98:2d:7e:4c:ca:56:65:60:49:62: ab:a3:e5:56:3e:dd:94:f4:e9:c3:9d:72:55:5f:8b:2f:1f:29: 94:79:27:ec -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9y2XwbPvPKKAjcWtVNSRGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmM1NjQ0MWQ4M2RmOTRiYmQwZTYwMTQ0YTU1NDYzOWU0MGUwNTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwZNOWETafPCVBYWD3uAG7FGXSpV 2G7movxReb5fh0CiMuWlKxWYPjHLqVIYbfytYWoCT1MN3pVlWuhDyxyX/3pOA+/D g5aJMwKlbFELomwVOjELMo/QKJSWFyfqadwzYAMoTRTsFMYMOdFOc3rytfb9ijyN 5RfEzAZRvK7zMaUQqhbs5h4JLNsYOHfYOKg0jX2gXCcsrFjC0l+n0BmZCVZMZ+Yw 4ZO51OwRsEK6ZON/hXMZHkNZYU4+uwdbF+DWvgz4KAAj84rIQn6TGXb7jc+/J27I MC/3sKA9BrJEPJ5sr0qAbYnLiDyrj0gMDw3+g/Sw+tHE2E/hhzdaD3HzqQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKLFZEHYPflLvQ5gFEpVRjnkDgU1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwLzYyMTFj NC01YTljLTQ0MWUtYjgwMC1mNjVkZGRmYTBlMWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvNjIxMWM0 LTVhOWMtNDQxZS1iODAwLWY2NWRkZGZhMGUxZC8xL29zVmtRZGc5LVV1OURtQVVT bFZHT2VRT0JUVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwpHmMA0GCSqGSIb3DQEBCwUAA4IBAQCQxdgD HQCOkVKkdiFeKcDaqqiKT914dd61Yvu0GDdGgxzWC7PNikzUYsJLVH6hP51yPnB9 JaQjL8UoRt2LK5BKohgLID7RInMnSzyRzDwX18ZPXzrc3Ck1MfQ7BUOXLh+/bp0G zdQ0fwt/o8n2Vk2gBQfL8GtMTZBmLF3+dcRHBfxXwIRrAubM9YHn1/WbtBvStcgS Slui3wquI0nqxm4YRuUS6zbzo1UY/fVBT9IXm4eBPOBCbI/iPzGbzUfkLRsL8IDn YtPYx0XFeiTQtQw5a2QzKO+6xUvPxN8B7aFPrJgtfkzKVmVgSWKro+VWPt2U9OnD nXJVX4svHymUeSfs -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:29 2026 by rpki-client