This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer File: v3Oj8hoZREIbTdun7LyDYMyl5vw.cer (raw, json) Hash identifier: 2Fh0WmW9xU2Pl6TKGEMXW6+q6ZYhiikbbGOT0YZ7rMc= Subject key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C804472BF5C9E64F67D82D749EA9728 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8757 IP: 185.146.124.0/22 IP: 212.58.128.0/19 IP: 2a07:7b80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:44:72:bf:5c:9e:64:f6:7d:82:d7:49:ea:97:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:35:97:78:83:8a:a6:f0:4c:80:49:58:eb:80: 22:4e:f9:17:6b:f9:2b:18:e9:bc:05:30:da:97:ea: b9:e1:bc:b8:a2:f6:5d:4e:a5:df:c0:74:e8:54:41: 83:65:ea:e9:27:90:67:5c:1c:4b:50:75:b6:c1:c7: d7:42:3e:fc:f8:5d:38:e7:bb:ef:da:09:26:cb:b6: ee:35:4f:a1:97:d5:7d:d2:81:fb:b5:2d:d4:7a:25: f4:78:04:e4:1d:58:16:41:fb:3c:89:58:d4:d1:47: 18:15:94:6b:2b:e7:80:28:db:0f:ea:f8:71:f1:3e: ca:29:51:5c:d1:60:a1:f4:ee:91:71:fe:ef:d2:16: ef:b5:cb:b4:ac:49:1b:bd:5c:08:3e:a3:3f:0e:e1: d4:f0:59:32:d0:58:44:95:78:c7:b0:9f:04:17:39: b5:a0:dc:52:b1:1c:46:e5:28:50:88:7d:f5:e6:3a: b7:23:f4:38:3f:90:01:5c:c0:88:7e:db:8a:77:c3: 2c:4f:39:16:36:e2:86:4b:68:0e:37:ec:24:7d:f2: d1:5b:6a:72:84:a7:31:b0:30:48:97:34:90:be:8b: f5:51:e4:28:aa:2f:10:6a:89:84:ef:05:1b:11:4a: 7d:d2:9d:ac:f7:e7:34:a8:ab:d7:1e:95:37:17:63: ba:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.146.124.0/22 212.58.128.0/19 IPv6: 2a07:7b80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8757 Signature Algorithm: sha256WithRSAEncryption 92:89:88:07:bc:fe:a5:e5:c9:03:68:73:0e:1f:d1:8d:89:76: ee:bb:d3:4f:6e:9d:0e:67:8b:6a:68:e3:16:37:81:1b:da:99: 52:4c:55:cd:a3:73:97:ea:38:e1:74:e6:f6:cb:f3:92:50:cb: d5:e2:a3:d7:53:01:a1:ab:fe:7d:49:81:fe:d8:65:e1:53:a9: f8:84:4c:11:38:d7:ee:81:66:7e:ab:77:66:9d:1a:df:01:fe: 86:cb:e3:1a:b3:93:f1:79:e7:68:8b:97:d2:c8:1a:26:cd:90: d5:32:8c:3b:34:e6:b1:81:d6:fd:3d:8b:1f:5d:a8:72:c8:7f: 0d:6a:da:79:5a:e8:de:93:7f:c2:ee:0e:38:b6:31:3e:3b:bf: a0:7f:6a:9e:3b:1a:31:f0:56:50:0a:88:c3:b4:34:2c:20:5a: 1a:de:09:d5:1f:43:ac:a6:2e:7d:c2:12:d0:7b:ae:e8:77:26: bb:78:a3:bb:b8:b9:ff:24:1f:3f:ad:74:20:6b:31:9b:be:f5: 50:2f:13:7a:99:a8:d0:cb:36:22:8d:f4:48:b3:2a:9e:a4:4c: 3d:d6:ab:e8:0b:11:4d:75:30:4e:9a:fe:92:45:65:8e:a5:4b: 44:7f:d3:fc:98:9a:02:0b:e5:2c:3e:92:60:d4:45:69:e7:e8: 8f:f4:d5:bb -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt8gERyv1yeZPZ9gtdJ6pcoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjczYTNmMjFhMTk0NDQyMWI0ZGRiYTdlY2JjODM2MGNjYTVlNmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjWXeIOKpvBMgElY64AiTvkXa/kr GOm8BTDal+q54by4ovZdTqXfwHToVEGDZerpJ5BnXBxLUHW2wcfXQj78+F0457vv 2gkmy7buNU+hl9V90oH7tS3UeiX0eATkHVgWQfs8iVjU0UcYFZRrK+eAKNsP6vhx 8T7KKVFc0WCh9O6Rcf7v0hbvtcu0rEkbvVwIPqM/DuHU8Fky0FhElXjHsJ8EFzm1 oNxSsRxG5ShQiH315jq3I/Q4P5ABXMCIftuKd8MsTzkWNuKGS2gON+wkffLRW2py hKcxsDBIlzSQvov1UeQoqi8QaomE7wUbEUp90p2s9+c0qKvXHpU3F2O6awIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFL9zo/IaGURCG03bp+y8g2DMpeb8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxLzQwMDY4 Ni04Yzc1LTQyZDAtOGJkMS0wMDA0NDc1N2ZlOGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvNDAwNjg2 LThjNzUtNDJkMC04YmQxLTAwMDQ0NzU3ZmU4YS8xL3YzT2o4aG9aUkVJYlRkdW43 THlEWU15bDV2dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuZJ8AwQF1DqAMA0EAgACMAcDBQMqB3uAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAiI1MA0GCSqGSIb3DQEBCwUAA4IBAQCSiYgH vP6l5ckDaHMOH9GNiXbuu9NPbp0OZ4tqaOMWN4Eb2plSTFXNo3OX6jjhdOb2y/OS UMvV4qPXUwGhq/59SYH+2GXhU6n4hEwRONfugWZ+q3dmnRrfAf6Gy+Mas5Pxeedo i5fSyBomzZDVMow7NOaxgdb9PYsfXahyyH8Natp5Wujek3/C7g44tjE+O7+gf2qe Oxox8FZQCojDtDQsIFoa3gnVH0Ospi59whLQe67odya7eKO7uLn/JB8/rXQgazGb vvVQLxN6majQyzYijfRIsyqepEw91qvoCxFNdTBOmv6SRWWOpUtEf9P8mJoCC+Us PpJg1EVp5+iP9NW7 -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:47 2026 by rpki-client