This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer File: ov7n60DFpFQ5UC658zG-_qxPjQw.cer (raw, json) Hash identifier: zk+gXLBks9mTIqjBQzPpsg24g/tI231/hOG1/B6LOBk= Subject key identifier: A2:FE:E7:EB:40:C5:A4:54:39:50:2E:B9:F3:31:BE:FE:AC:4F:8D:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4D55CB413D0A15861294562CA5D72 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198020 IP: 95.133.252.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d5:5c:b4:13:d0:a1:58:61:29:45:62:ca:5d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2fee7eb40c5a45439502eb9f331befeac4f8d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:15:0c:f4:31:97:c2:11:b6:bf:85:fa:4b:2c: 67:79:34:80:7c:3a:6c:b8:80:c6:cb:cd:ca:c4:99: 11:44:96:00:1f:23:37:ed:58:c5:d4:fd:9c:8a:5d: 85:46:cd:4b:b1:93:15:fa:02:d4:3d:1d:ce:5f:d9: 10:80:4d:4b:43:69:2e:ed:35:08:f9:e9:fd:aa:8c: 5c:16:c6:4d:61:2a:7a:57:0c:d7:91:f5:44:6f:0a: aa:2d:f2:f6:0f:ee:0e:2c:a4:0b:6f:4f:f4:e9:c5: fa:49:58:5f:82:f6:16:a8:e0:30:d9:7c:4d:fe:af: 9c:cc:66:6c:93:97:ab:a6:fc:e8:50:7a:b8:f4:4d: ee:fa:c0:f0:6d:38:d7:b2:59:1a:8b:54:a6:10:2e: c4:7a:29:88:8b:cf:8e:eb:75:01:5f:1f:02:7a:76: 39:a7:4b:23:be:a5:7c:5f:0f:28:98:13:94:b4:69: ad:4b:c7:e5:0f:86:4b:c0:74:e9:4e:3b:01:e2:54: 33:43:05:1d:c5:fe:84:99:9c:37:0d:a3:18:65:bc: d1:bf:da:20:ae:ac:2f:c3:76:ab:4a:40:0d:7b:fd: 5a:5f:b5:87:ad:70:5f:14:e7:20:55:b7:88:48:c1: 42:55:eb:82:4a:62:c5:ad:28:7f:e6:cb:37:63:a1: 15:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FE:E7:EB:40:C5:A4:54:39:50:2E:B9:F3:31:BE:FE:AC:4F:8D:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.133.252.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198020 Signature Algorithm: sha256WithRSAEncryption 10:e3:14:37:4c:1c:ed:5c:fc:cf:80:5f:0f:97:94:b3:07:d1: fa:60:28:22:77:fa:bb:28:53:97:87:e4:f4:d4:bc:0a:09:f7: 36:fc:bf:2a:8c:22:45:52:83:5e:ce:2e:d6:55:87:c7:c6:64: 9a:36:41:b9:73:50:de:90:cf:c9:8a:83:51:d5:a9:b8:f1:f9: d2:88:ae:76:53:d1:c6:89:25:ca:e1:40:57:fb:52:fd:31:6c: f5:2b:07:1b:b3:40:d0:38:eb:bd:ed:d3:fe:2f:7b:1a:ea:71: 1a:a3:56:b9:27:bd:01:e0:7f:a3:9f:8e:39:88:5d:75:34:84: 3c:04:19:e3:39:4c:39:28:ac:e5:29:8c:d0:f1:fb:4b:88:f1: 46:85:62:65:a3:b1:04:63:b4:e9:28:23:19:44:37:28:e8:fb: 90:d3:76:e3:f4:06:df:66:b4:25:03:1f:b5:c6:1c:dc:f0:17: d7:82:2a:1c:18:85:75:b4:89:82:8b:76:1e:5f:1f:ab:73:6f: c9:4e:b5:b4:26:29:06:a7:ae:00:42:b5:7e:34:87:65:49:a4: 8f:95:44:3c:26:0d:77:c0:28:00:85:97:28:2a:bd:e6:a0:db: ae:d6:f4:8d:ee:27:a9:68:38:07:d2:32:be:27:e9:44:a4:a2: a9:c8:fb:04 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7pNVctBPQoVhhKUViyl1yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmZlZTdlYjQwYzVhNDU0Mzk1MDJlYjlmMzMxYmVmZWFjNGY4ZDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBUM9DGXwhG2v4X6SyxneTSAfDps uIDGy83KxJkRRJYAHyM37VjF1P2cil2FRs1LsZMV+gLUPR3OX9kQgE1LQ2ku7TUI +en9qoxcFsZNYSp6VwzXkfVEbwqqLfL2D+4OLKQLb0/06cX6SVhfgvYWqOAw2XxN /q+czGZsk5erpvzoUHq49E3u+sDwbTjXslkai1SmEC7EeimIi8+O63UBXx8CenY5 p0sjvqV8Xw8omBOUtGmtS8flD4ZLwHTpTjsB4lQzQwUdxf6EmZw3DaMYZbzRv9og rqwvw3arSkANe/1aX7WHrXBfFOcgVbeISMFCVeuCSmLFrSh/5ss3Y6EVIwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKL+5+tAxaRUOVAuufMxvv6sT40MMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzc2OTdm NS00NDhhLTRjOWEtOTU5YS03MDZkYWU1MWM0MDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvNzY5N2Y1 LTQ0OGEtNGM5YS05NTlhLTcwNmRhZTUxYzQwMS8xL292N242MERGcEZRNVVDNjU4 ekctX3F4UGpRdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCX4X8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMFhDANBgkqhkiG9w0BAQsFAAOCAQEAEOMUN0wc7Vz8z4BfD5eUswfR+mAoInf6 uyhTl4fk9NS8Cgn3Nvy/KowiRVKDXs4u1lWHx8ZkmjZBuXNQ3pDPyYqDUdWpuPH5 0oiudlPRxoklyuFAV/tS/TFs9SsHG7NA0Djrve3T/i97GupxGqNWuSe9AeB/o5+O OYhddTSEPAQZ4zlMOSis5SmM0PH7S4jxRoViZaOxBGO06SgjGUQ3KOj7kNN24/QG 32a0JQMftcYc3PAX14IqHBiFdbSJgot2Hl8fq3NvyU61tCYpBqeuAEK1fjSHZUmk j5VEPCYNd8AoAIWXKCq95qDbrtb0je4nqWg4B9IyvifpRKSiqcj7BA== -----END CERTIFICATE-----Generated at Thu Feb 5 15:07:11 2026 by rpki-client