This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer File: ozMRTL_Gv2aDccVofumKRC_Y6jY.cer (raw, json) Hash identifier: YZ4UNNXZSE7mdg8RJ8WoaziJqk3KFyfXzgrrFeCzmD8= Subject key identifier: A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B357EB99B10241C88BBCC39584E88A1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35228 IP: 87.194.0.0/16 IP: 93.97.0.0/16 IP: 2a00:14c8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:7e:b9:9b:10:24:1c:88:bb:cc:39:58:4e:88:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a333114cbfc6bf668371c5687ee98a442fd8ea36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:aa:68:b7:0e:59:5b:a3:0d:02:01:46:fe:d4: 66:de:1b:e6:31:7a:0d:71:6f:1a:c6:81:e9:10:8f: bd:07:d6:82:ab:7e:67:8b:7c:55:c6:bb:aa:83:ec: bf:21:78:72:cb:65:eb:09:ec:3d:60:bf:c1:e4:43: 03:c6:a0:9c:a5:6a:93:bf:ca:51:6b:97:d1:72:17: 35:8c:b2:07:1f:b5:ce:fc:f0:f0:b6:79:1a:0b:67: b0:3f:75:21:b3:60:bc:79:59:98:d1:6a:e7:e8:55: 63:c0:31:05:6c:8d:24:2a:cb:45:d3:03:8d:e5:24: 73:80:8f:15:c8:05:f3:de:01:a7:0a:15:aa:5e:f8: 4d:a6:e6:3c:2d:c7:6e:5d:38:05:af:53:24:e8:31: 63:8e:ba:46:69:eb:e2:7c:e9:49:fd:c8:ae:66:db: 85:1c:09:79:e8:3f:29:62:ac:85:84:c9:c5:df:af: f0:98:0e:cb:c5:49:2b:de:d1:59:40:e6:0f:bf:1b: c9:ce:e7:86:16:15:58:40:65:92:02:45:23:58:13: 74:2a:61:6a:c0:a1:d4:d8:88:90:e5:fb:df:fa:dc: 73:ad:14:38:ca:78:44:58:22:23:1d:21:e4:8b:3d: 85:54:66:af:2d:e4:6d:b9:e4:94:50:51:b6:85:dd: d5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.194.0.0/16 93.97.0.0/16 IPv6: 2a00:14c8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35228 Signature Algorithm: sha256WithRSAEncryption 44:25:a1:52:b0:93:be:5f:6d:de:38:11:78:25:47:76:6d:6e: b1:6f:86:a2:45:ae:50:0f:7e:a8:18:cf:06:94:0d:4d:6b:a5: 7f:e7:1f:75:26:79:22:35:da:9a:79:e1:69:4b:41:02:d5:dd: 57:f0:21:98:a8:53:37:22:df:ec:e3:30:e2:98:03:22:6d:f5: 6a:e9:14:02:41:ec:d4:5d:0c:e7:7e:f1:28:f2:92:2c:5e:7a: 59:79:25:55:5c:0f:e0:b9:1d:71:7c:e9:f8:33:8c:9e:e6:03: 90:69:6c:0a:cd:f7:bd:45:76:1b:67:d7:ae:ea:ae:d4:b3:18: b9:42:d0:7e:06:97:04:9f:c2:43:70:a2:98:35:a5:5b:04:fd: fb:ab:23:85:7b:ca:bf:2a:38:78:1a:2f:d0:a7:ba:e3:ac:ee: 11:8a:3a:7b:b2:84:28:3d:d8:a8:92:b0:c9:f0:6a:d9:34:45: 3b:6e:12:50:2a:08:f3:ed:4e:bf:85:45:e3:96:25:22:fc:11: 8b:93:4d:af:dc:ea:14:fe:f3:6a:20:c3:f3:0c:07:b8:b8:0b: 89:3d:80:af:80:9b:90:a0:87:78:a3:4e:61:1a:0d:8a:c3:9c: 19:92:db:ae:ea:4f:af:e3:de:51:00:08:bc:c7:5c:2e:7e:c8: de:3f:69:93 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgISAZt7NX65mxAkHIi7zDlYToihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzMzMTE0Y2JmYzZiZjY2ODM3MWM1Njg3ZWU5OGE0NDJmZDhlYTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqpotw5ZW6MNAgFG/tRm3hvmMXoN cW8axoHpEI+9B9aCq35ni3xVxruqg+y/IXhyy2XrCew9YL/B5EMDxqCcpWqTv8pR a5fRchc1jLIHH7XO/PDwtnkaC2ewP3Uhs2C8eVmY0Wrn6FVjwDEFbI0kKstF0wON 5SRzgI8VyAXz3gGnChWqXvhNpuY8LcduXTgFr1Mk6DFjjrpGaevifOlJ/ciuZtuF HAl56D8pYqyFhMnF36/wmA7LxUkr3tFZQOYPvxvJzueGFhVYQGWSAkUjWBN0KmFq wKHU2IiQ5fvf+txzrRQ4ynhEWCIjHSHkiz2FVGavLeRtueSUUFG2hd3VRwIDAQAB o4ICszCCAq8wHQYDVR0OBBYEFKMzEUy/xr9mg3HFaH7pikQv2Oo2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzUzMDYy NS00ZTQ2LTQ1NjMtYWUyYy1jZDQ5MjY0ZWFmMGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvNTMwNjI1 LTRlNDYtNDU2My1hZTJjLWNkNDkyNjRlYWYwYi8xL296TVJUTF9HdjJhRGNjVm9m dW1LUkNfWTZqWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDIGCCsGAQUF BwEHAQH/BCMwITAQBAIAATAKAwMAV8IDAwBdYTANBAIAAjAHAwUAKgAUyDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMAiZwwDQYJKoZIhvcNAQELBQADggEBAEQloVKw k75fbd44EXglR3ZtbrFvhqJFrlAPfqgYzwaUDU1rpX/nH3UmeSI12pp54WlLQQLV 3VfwIZioUzci3+zjMOKYAyJt9WrpFAJB7NRdDOd+8Sjykixeell5JVVcD+C5HXF8 6fgzjJ7mA5BpbArN971Fdhtn167qrtSzGLlC0H4GlwSfwkNwopg1pVsE/furI4V7 yr8qOHgaL9CnuuOs7hGKOnuyhCg92KiSsMnwatk0RTtuElAqCPPtTr+FReOWJSL8 EYuTTa/c6hT+82ogw/MMB7i4C4k9gK+Am5Cgh3ijTmEaDYrDnBmS267qT6/j3lEA CLzHXC5+yN4/aZM= -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:45 2026 by rpki-client