This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer File: oyHD8vYVgRDoDpLioyIdaVwnp9g.cer (raw, json) Hash identifier: ItUMEeYweMzOzXNi4JKyW/Wy+2fXkZkwYAnmT8Ii8aY= Subject key identifier: A3:21:C3:F2:F6:15:81:10:E8:0E:92:E2:A3:22:1D:69:5C:27:A7:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C67728F64337BE3809E742B227B802 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203484 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:77:28:f6:43:37:be:38:09:e7:42:b2:27:b8:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a321c3f2f6158110e80e92e2a3221d695c27a7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:28:47:02:ed:c2:73:4c:b0:85:fd:1f:df:58: ad:88:3f:a7:6b:74:5f:50:7c:ee:78:2f:7f:9f:2f: ba:6a:6a:6b:b4:a9:6e:d3:73:10:f4:1b:6a:3c:ce: bb:85:62:d5:9f:9b:02:98:6e:64:0b:4f:19:d3:97: 2e:5d:4b:bd:66:25:b7:c7:5d:bd:1f:ed:a5:b2:e5: 98:0d:6c:62:90:f7:c4:bb:f6:e5:61:a9:27:9e:8b: 3d:42:3e:f7:a8:a0:70:da:e3:c1:c8:7e:8e:e5:4b: 8f:c1:2d:3a:49:dc:5f:89:0c:6c:f3:67:f1:7b:a4: a2:4d:b7:a0:d9:1a:b2:86:c8:cb:c4:06:49:81:1b: 08:d1:26:bc:d0:bd:05:ee:70:6b:ae:89:b6:31:49: 9e:c4:af:d4:30:51:69:4c:86:3f:97:ca:1f:90:f9: 97:88:c1:9f:3f:18:26:19:93:60:29:ac:3d:9f:cd: 8b:06:b5:8a:32:31:f7:63:98:d7:ee:25:d0:ae:fc: 49:3d:0e:72:5c:75:f5:f1:3c:20:49:9c:5e:c0:31: 6a:4e:10:6f:09:e1:4e:19:b1:99:f2:15:85:ab:20: 96:a1:6b:19:fb:e1:d2:18:46:d5:f4:af:fa:f1:80: 96:47:38:e1:42:35:fa:fa:18:52:86:05:b6:17:b8: 12:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:21:C3:F2:F6:15:81:10:E8:0E:92:E2:A3:22:1D:69:5C:27:A7:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 203484 Signature Algorithm: sha256WithRSAEncryption 08:b8:19:17:71:47:5e:7f:84:bc:1f:c7:1d:06:93:1f:26:1d: e5:d3:47:81:7f:25:f9:4f:1f:d1:f8:09:ed:17:96:dc:d7:c7: 86:cf:7c:20:bd:28:fb:82:fe:7a:82:54:bb:31:f2:b3:56:35: 13:55:b3:8d:d2:cf:c7:fa:d0:05:50:a1:78:20:17:1f:1e:fa: ef:65:4e:d1:f6:40:94:f1:c4:27:63:5e:96:53:0f:b2:53:f5: 39:b8:91:97:25:11:c5:3a:af:14:10:8a:50:ee:c2:a0:23:b2: d7:d5:c4:fa:ce:d9:36:e5:89:0c:0e:d8:ce:d2:56:f7:3d:40: 63:a0:9a:f5:36:28:e2:71:5a:28:48:da:61:3e:5b:fa:6a:64: d1:47:de:ec:31:9f:8e:54:51:29:8b:51:80:fc:4c:57:f5:5c: 09:c6:25:fa:e8:61:76:61:7e:c7:01:6c:09:1e:de:5d:10:ce: 73:fe:48:f6:f7:32:2f:3c:59:42:4b:4a:9c:ca:bc:5b:86:cf: e4:89:a4:85:ed:7b:2c:69:6a:85:5b:46:02:7a:2f:94:d4:30: 6e:ca:e7:fb:f1:07:75:3b:dc:74:9d:40:38:28:53:96:6d:53: a8:3a:64:6a:0d:0b:f4:42:41:af:44:f1:a5:0f:1e:8f:65:54: 67:12:99:f9 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3xnco9kM3vjgJ50KyJ7gCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzIxYzNmMmY2MTU4MTEwZTgwZTkyZTJhMzIyMWQ2OTVjMjdhN2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ChHAu3Cc0ywhf0f31itiD+na3Rf UHzueC9/ny+6amprtKlu03MQ9BtqPM67hWLVn5sCmG5kC08Z05cuXUu9ZiW3x129 H+2lsuWYDWxikPfEu/blYaknnos9Qj73qKBw2uPByH6O5UuPwS06SdxfiQxs82fx e6SiTbeg2RqyhsjLxAZJgRsI0Sa80L0F7nBrrom2MUmexK/UMFFpTIY/l8ofkPmX iMGfPxgmGZNgKaw9n82LBrWKMjH3Y5jX7iXQrvxJPQ5yXHX18TwgSZxewDFqThBv CeFOGbGZ8hWFqyCWoWsZ++HSGEbV9K/68YCWRzjhQjX6+hhShgW2F7gSUQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFKMhw/L2FYEQ6A6S4qMiHWlcJ6fYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxLzdkM2E1 NS1jY2I3LTRkMGMtYmQyNi1jZmY0NjFlMGRmMzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvN2QzYTU1 LWNjYjctNGQwYy1iZDI2LWNmZjQ2MWUwZGYzNC8xL295SEQ4dllWZ1JEb0RwTGlv eUlkYVZ3bnA5Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMa3DANBgkqhkiG9w0BAQsFAAOCAQEACLgZF3FHXn+E vB/HHQaTHyYd5dNHgX8l+U8f0fgJ7ReW3NfHhs98IL0o+4L+eoJUuzHys1Y1E1Wz jdLPx/rQBVCheCAXHx7672VO0fZAlPHEJ2NellMPslP1ObiRlyURxTqvFBCKUO7C oCOy19XE+s7ZNuWJDA7YztJW9z1AY6Ca9TYo4nFaKEjaYT5b+mpk0Ufe7DGfjlRR KYtRgPxMV/VcCcYl+uhhdmF+xwFsCR7eXRDOc/5I9vcyLzxZQktKnMq8W4bP5Imk he17LGlqhVtGAnovlNQwbsrn+/EHdTvcdJ1AOChTlm1TqDpkag0L9EJBr0TxpQ8e j2VUZxKZ+Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:09 2026 by rpki-client