This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer File: osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer (raw, json) Hash identifier: VRn/ojOE8SOmWfCOGJUGl+e8p1BVqCp7ZzaeB+YEGZ8= Subject key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E40A0A518A1E0CB9EAFC44B0204DC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39741 AS: 209361 IP: 31.25.240.0/21 IP: 185.234.116.0/22 IP: 2a02:6c80::/32 IP: 2a09:8640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:40:a0:a5:18:a1:e0:cb:9e:af:c4:4b:02:04:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7d:28:b8:e5:b9:da:1a:e5:7f:96:98:9b:39: a5:ff:6d:d8:9c:9c:b4:28:8a:46:45:77:18:6e:2b: f7:f2:09:86:24:d2:6a:02:3e:52:67:e1:5d:ca:0a: e2:3e:6a:b1:67:12:ba:33:1f:b9:92:99:aa:bf:1a: 58:5a:9a:3e:97:98:1e:74:2e:13:4a:33:f2:9e:62: ce:8e:95:f8:ac:e8:b9:99:8f:48:b3:62:a3:21:e4: a0:ba:0d:08:60:36:fc:e9:61:d2:65:80:89:2e:8c: b8:cc:71:41:7c:4c:34:90:71:d7:76:ab:25:34:34: aa:4c:c7:1f:f0:5a:1f:5a:f9:bc:4f:bd:9a:50:bf: e3:14:10:43:23:90:9d:c3:da:67:41:cb:72:e7:8e: ee:12:8d:5e:8e:03:54:f4:58:54:ea:45:52:6e:51: 80:68:6a:d9:e8:3c:74:ca:8d:c4:7d:90:dd:5c:29: 42:7f:49:53:08:6e:8c:74:c0:4f:08:9c:d6:ce:5b: 2b:68:d6:05:a5:04:08:8c:08:b4:a3:19:9f:33:8e: 89:e9:c4:e5:30:d1:f3:d2:1e:c2:12:de:45:76:da: 48:0b:14:30:4c:b0:42:e5:ea:55:f3:4e:0a:17:c7: c3:88:95:92:8b:cb:cc:56:76:d3:fa:22:bf:7d:43: e6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.240.0/21 185.234.116.0/22 IPv6: 2a02:6c80::/32 2a09:8640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39741 209361 Signature Algorithm: sha256WithRSAEncryption 93:24:33:2f:b6:29:98:88:5b:70:5e:17:05:65:ca:3e:b4:18: 0e:cc:39:db:a6:58:d2:a7:f6:ea:e0:12:f7:e5:5c:82:6c:81: ea:ff:a4:d7:19:64:7a:f5:3c:22:97:5f:ce:76:94:60:a5:3e: 25:23:9e:d8:2c:d6:de:20:33:bc:dd:96:71:d9:1c:2a:37:64: b5:e3:c3:42:35:4b:22:0d:0f:3b:60:61:56:f5:68:99:18:a2: 29:a1:4a:52:7a:08:f6:3a:36:5b:b9:e7:89:91:14:82:1e:00: 24:c6:3d:43:bb:77:a5:ff:18:b9:94:b3:13:cd:1e:a6:00:b7: 5f:a9:89:cd:5b:47:c5:c2:2b:de:86:45:7d:cd:7f:12:89:ba: 63:0e:db:8d:79:29:b1:0e:1c:a7:61:5b:a5:99:13:ed:35:44: f7:8b:16:e6:8c:27:d5:db:00:81:fc:5c:73:d2:06:c4:67:cd: 12:6e:cf:4f:38:02:3b:b9:d6:96:ce:60:e0:9d:54:1d:cf:75: 2d:10:61:9a:52:aa:4d:9c:c3:ac:91:d2:de:b7:5f:c6:17:50: 80:18:92:f1:fd:c4:a8:8b:a4:27:c1:32:5d:83:fe:11:1a:43: 45:2b:dd:f7:c8:2f:b5:8e:4a:df:05:73:11:9b:29:bd:45:5a: 22:d3:32:02 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt5fkCgpRih4Muer8RLAgTcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmNiZTlhYmExZmY3NTY0ZDkxM2VkNzg2NzJlMzM3MWI3ZjM1ODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH0ouOW52hrlf5aYmzml/23YnJy0 KIpGRXcYbiv38gmGJNJqAj5SZ+FdygriPmqxZxK6Mx+5kpmqvxpYWpo+l5gedC4T SjPynmLOjpX4rOi5mY9Is2KjIeSgug0IYDb86WHSZYCJLoy4zHFBfEw0kHHXdqsl NDSqTMcf8FofWvm8T72aUL/jFBBDI5Cdw9pnQcty547uEo1ejgNU9FhU6kVSblGA aGrZ6Dx0yo3EfZDdXClCf0lTCG6MdMBPCJzWzlsraNYFpQQIjAi0oxmfM46J6cTl MNHz0h7CEt5FdtpICxQwTLBC5epV804KF8fDiJWSi8vMVnbT+iK/fUPm+wIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFKLL6auh/3Vk2RPteGcuM3G381gkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzQwOGU4 My01MzBkLTQ0NjItYjFjOS1kZjMyNGM0YzZlZWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvNDA4ZTgz LTUzMGQtNDQ2Mi1iMWM5LWRmMzI0YzRjNmVlZC8xL29zdnBxNkhfZFdUWkUtMTRa eTR6Y2JmeldDUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQDHxnwAwQCuep0MBQEAgACMA4DBQAqAmyAAwUD KgmGQDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAmz0CAwMx0TANBgkqhkiG9w0B AQsFAAOCAQEAkyQzL7YpmIhbcF4XBWXKPrQYDsw526ZY0qf26uAS9+VcgmyB6v+k 1xlkevU8IpdfznaUYKU+JSOe2CzW3iAzvN2WcdkcKjdktePDQjVLIg0PO2BhVvVo mRiiKaFKUnoI9jo2W7nniZEUgh4AJMY9Q7t3pf8YuZSzE80epgC3X6mJzVtHxcIr 3oZFfc1/Eom6Yw7bjXkpsQ4cp2FbpZkT7TVE94sW5own1dsAgfxcc9IGxGfNEm7P TzgCO7nWls5g4J1UHc91LRBhmlKqTZzDrJHS3rdfxhdQgBiS8f3EqIukJ8EyXYP+ ERpDRSvd98gvtY5K3wVzEZspvUVaItMyAg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:51 2026 by rpki-client