This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer File: ouRVapV54gL1TBWTRUWLySRfkOQ.cer (raw, json) Hash identifier: IA3/zjs42daS+IWrS2EhpYOBmObDnDpXdMdSMUPWY58= Subject key identifier: A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E39364E3957696EA34A174174202909 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.249.156.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:36:4e:39:57:69:6e:a3:4a:17:41:74:20:29:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2e4556a9579e202f54c159345458bc9245f90e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b9:25:7c:0e:34:2d:e8:cc:84:77:5f:3e:e7: 2f:75:56:6c:87:b1:ad:2e:fb:95:27:6b:aa:fb:0d: 1e:94:24:9a:78:55:32:ad:37:fe:85:0b:81:d2:d8: 95:27:3d:55:04:bd:6a:8e:3b:f2:95:70:a8:b0:66: 9c:f9:1f:e0:a6:87:b4:1d:90:41:4b:23:25:24:84: 50:ad:de:30:cf:d5:4c:65:a2:34:52:ef:d4:ce:b3: 82:ef:a7:77:04:d7:ea:0a:a7:6f:e6:31:91:e4:ec: 1f:21:c4:3e:aa:2a:eb:16:c8:9a:ec:b5:f9:88:d7: 1d:dd:cd:d6:ef:e7:f7:13:38:7e:4d:21:81:5c:06: a7:60:40:c6:aa:49:c4:e1:79:f9:5c:92:fc:1a:36: 14:6f:f0:fa:3b:aa:e6:c1:a5:17:a9:fa:b9:8f:21: fb:58:5e:19:90:59:7b:65:b6:c8:6e:88:af:48:74: b7:6d:96:b9:bb:9a:62:37:2d:41:38:9c:2a:a6:49: 17:c9:8c:46:90:f9:09:7a:13:71:36:de:f5:a7:5b: 3d:b5:00:36:9a:29:bb:44:11:3f:32:08:ec:73:81: ae:bd:d2:86:c0:94:26:bf:0f:53:d3:c1:44:9a:8e: be:b7:20:7f:6a:10:68:99:c4:9c:f4:a6:0e:f9:81: 2b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.156.0/24 Signature Algorithm: sha256WithRSAEncryption a7:45:cf:56:ce:3f:f3:98:df:b1:64:90:cd:ef:67:46:5b:3a: e1:cd:c2:32:68:75:fa:d4:2c:80:a2:af:ca:61:97:8c:58:7e: 62:6b:a2:b5:ae:09:d8:22:33:cc:1f:9f:d8:9d:71:db:13:8f: cb:af:22:c9:20:47:68:70:c4:42:f6:4f:a5:b4:56:af:32:2f: fb:47:96:25:79:03:0a:e6:97:f3:9e:ed:6f:36:be:72:09:c4: c5:0b:36:a1:45:c8:f7:d3:65:44:ad:38:ba:42:2b:33:1b:86: 2b:5b:bb:6d:4a:c6:6c:b5:2a:d0:47:16:a1:da:2a:1e:71:14: eb:f2:7f:7b:f8:89:08:83:db:f1:68:c2:ac:ba:10:42:4c:f1: 7e:a0:91:a8:74:84:35:72:de:66:b3:dc:a3:49:20:89:aa:4b: 3b:21:6f:34:74:18:e3:65:a8:02:6d:32:28:d0:11:88:bf:9d: db:34:09:ba:7d:f7:33:43:db:28:d2:2f:37:a3:e6:45:38:73: 97:10:8b:81:12:c6:a6:c1:8a:bf:d4:b1:57:59:f9:51:f1:d5: e0:9e:e3:98:78:02:c7:f9:f2:53:c9:3d:43:40:9a:d8:89:97: 85:87:0b:8c:7b:0b:89:40:a8:a7:93:4f:b6:ef:a0:bf:db:8d: b7:8d:59:48 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+OTZOOVdpbqNKF0F0ICkJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmU0NTU2YTk1NzllMjAyZjU0YzE1OTM0NTQ1OGJjOTI0NWY5MGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrklfA40LejMhHdfPucvdVZsh7Gt LvuVJ2uq+w0elCSaeFUyrTf+hQuB0tiVJz1VBL1qjjvylXCosGac+R/gpoe0HZBB SyMlJIRQrd4wz9VMZaI0Uu/UzrOC76d3BNfqCqdv5jGR5OwfIcQ+qirrFsia7LX5 iNcd3c3W7+f3Ezh+TSGBXAanYEDGqknE4Xn5XJL8GjYUb/D6O6rmwaUXqfq5jyH7 WF4ZkFl7ZbbIboivSHS3bZa5u5piNy1BOJwqpkkXyYxGkPkJehNxNt71p1s9tQA2 mim7RBE/Mgjsc4GuvdKGwJQmvw9T08FEmo6+tyB/ahBomcSc9KYO+YErQwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKLkVWqVeeIC9UwVk0VFi8kkX5DkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3Lzg2ZTlj Yy0zNmEwLTQ2ZjUtYmExZS1jNTU5ZTA5NzFlZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvODZlOWNj LTM2YTAtNDZmNS1iYTFlLWM1NTllMDk3MWVlMC8xL291UlZhcFY1NGdMMVRCV1RS VVdMeVNSZmtPUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAufmcMA0GCSqGSIb3DQEBCwUAA4IBAQCnRc9W zj/zmN+xZJDN72dGWzrhzcIyaHX61CyAoq/KYZeMWH5ia6K1rgnYIjPMH5/YnXHb E4/LryLJIEdocMRC9k+ltFavMi/7R5YleQMK5pfznu1vNr5yCcTFCzahRcj302VE rTi6QiszG4YrW7ttSsZstSrQRxah2ioecRTr8n97+IkIg9vxaMKsuhBCTPF+oJGo dIQ1ct5ms9yjSSCJqks7IW80dBjjZagCbTIo0BGIv53bNAm6ffczQ9so0i83o+ZF OHOXEIuBEsamwYq/1LFXWflR8dXgnuOYeALH+fJTyT1DQJrYiZeFhwuMewuJQKin k0+276C/2423jVlI -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:59 2026 by rpki-client