This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer File: sO8ZvLI6LwTFhqwTEakbx8oql2U.cer (raw, json) Hash identifier: UcEkABU1ADYTyETCQMQX4Rv61s0B1RYzYPWKNjVWqBs= Subject key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC23126A2C0B9A2C0585D9AC3CADCF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.213.4.0/24 IP: 91.214.168.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:23:12:6a:2c:0b:9a:2c:05:85:d9:ac:3c:ad:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:55:a3:eb:aa:08:04:f7:3f:6c:72:33:a6:bc: 43:a5:f6:06:30:9e:3b:dc:8c:40:8d:ec:76:25:19: 70:32:42:6d:3e:c4:ea:48:21:58:c2:ea:e4:65:f1: 31:73:3a:97:4f:d6:6c:df:ed:77:3c:85:0e:39:83: 61:9d:22:08:63:74:1d:f5:9b:9b:b1:7a:94:d0:08: d3:de:d5:4f:d1:be:9a:1c:b4:66:a9:23:14:d0:f5: 6e:15:ad:bb:79:c7:70:a1:f0:d7:a3:83:47:39:0d: 41:22:56:c2:88:0a:00:b7:a3:4f:2c:0d:86:3c:fd: f0:f0:2c:9d:92:84:10:a9:8d:9b:b3:7e:71:d5:c5: 20:ec:ec:c0:a8:fd:7c:85:e2:97:6e:c7:3a:b9:de: 5b:28:fa:00:ad:79:b1:0b:2d:1a:23:9e:6e:8b:af: af:72:ca:a5:68:d9:a0:6f:5f:0f:5b:3d:15:91:31: bd:74:7f:43:f6:3a:ee:d6:7a:a1:05:6b:6e:5d:5a: 4f:b6:d0:63:6f:5d:47:8c:48:4a:7b:67:be:65:5d: c4:65:ba:a9:b1:08:e6:9d:b7:19:c1:85:46:0d:62: 09:5c:88:7a:71:24:61:91:85:f9:48:2f:de:d7:47: 0c:dd:69:f9:f5:20:72:bb:16:a6:7a:b0:88:59:44: 04:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.4.0/24 91.214.168.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:39:2d:b8:7d:fb:24:7b:50:bb:50:39:f0:50:93:c9:31:db: 22:6a:6d:1d:e4:61:0a:6a:17:0a:9e:2f:e9:09:e2:aa:61:9b: 26:a4:6a:11:ad:e4:bf:1e:6b:4b:80:b3:85:59:a1:a1:50:7a: 20:38:45:68:34:9d:a6:3b:53:c3:23:1b:68:f9:04:69:98:aa: d4:4c:16:24:c7:7a:91:65:7d:5c:5e:8a:a6:e9:62:d4:df:66: a1:99:38:4a:b3:84:b3:9f:d2:dc:dd:fb:6d:bf:30:d5:34:33: f2:6d:33:a5:15:91:e0:ec:85:04:bd:33:70:c4:b0:f7:91:fd: 48:72:79:86:f9:72:26:da:6b:53:c3:59:53:e1:cd:aa:46:97: 82:bf:8f:98:16:53:8c:a7:e9:f1:56:ec:07:a8:1f:6f:0b:ec: 22:d8:d0:f8:79:87:2a:11:37:23:4a:a1:52:0b:28:52:8d:04: 53:c0:3f:b6:a8:f8:f8:07:37:e5:c6:64:ef:e5:25:9a:8c:aa: aa:c8:95:04:9b:73:65:dd:21:f7:cb:be:69:b4:ae:f3:17:76: 7c:84:68:55:5c:19:90:ca:9c:b1:02:74:75:c0:a8:6b:66:28: 6a:5c:c4:13:82:87:d8:59:d6:75:ea:41:83:12:76:e9:e5:42: fb:6f:73:1a -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt57CMSaiwLmiwFhdmsPK3PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGVmMTliY2IyM2EyZjA0YzU4NmFjMTMxMWE5MWJjN2NhMmE5NzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1Wj66oIBPc/bHIzprxDpfYGMJ47 3IxAjex2JRlwMkJtPsTqSCFYwurkZfExczqXT9Zs3+13PIUOOYNhnSIIY3Qd9Zub sXqU0AjT3tVP0b6aHLRmqSMU0PVuFa27ecdwofDXo4NHOQ1BIlbCiAoAt6NPLA2G PP3w8CydkoQQqY2bs35x1cUg7OzAqP18heKXbsc6ud5bKPoArXmxCy0aI55ui6+v csqlaNmgb18PWz0VkTG9dH9D9jru1nqhBWtuXVpPttBjb11HjEhKe2e+ZV3EZbqp sQjmnbcZwYVGDWIJXIh6cSRhkYX5SC/e10cM3Wn59SByuxamerCIWUQE1wIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFLDvGbyyOi8ExYasExGpG8fKKpdlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmL2FmM2U1 MS03OWQ2LTQwNzgtYTU2OS1kMDAwM2E2YjUyMjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvYWYzZTUx LTc5ZDYtNDA3OC1hNTY5LWQwMDAzYTZiNTIyNC8xL3NPOFp2TEk2THdURmhxd1RF YWtieDhvcWwyVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW9UEAwQCW9aoMA0GCSqGSIb3DQEBCwUAA4IB AQAOOS24ffske1C7UDnwUJPJMdsiam0d5GEKahcKni/pCeKqYZsmpGoRreS/HmtL gLOFWaGhUHogOEVoNJ2mO1PDIxto+QRpmKrUTBYkx3qRZX1cXoqm6WLU32ahmThK s4Szn9Lc3fttvzDVNDPybTOlFZHg7IUEvTNwxLD3kf1IcnmG+XIm2mtTw1lT4c2q RpeCv4+YFlOMp+nxVuwHqB9vC+wi2ND4eYcqETcjSqFSCyhSjQRTwD+2qPj4Bzfl xmTv5SWajKqqyJUEm3Nl3SH3y75ptK7zF3Z8hGhVXBmQypyxAnR1wKhrZihqXMQT gofYWdZ16kGDEnbp5UL7b3Ma -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:20 2026 by rpki-client