This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer File: 0OgEFLlH8ZMfIrych4wXt9IweOs.cer (raw, json) Hash identifier: trR8hMGZAsZF5C6dsI55F13McwsC0ubgu2blFm+RjWo= Subject key identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C666374CA61A054DCE89F233343F58 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204947 IP: 185.63.100.0/22 IP: 185.234.172.0/22 IP: 2a0d:2100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:66:37:4c:a6:1a:05:4d:ce:89:f2:33:34:3f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0e80414b947f1931f22bc9c878c17b7d23078eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:67:63:21:a6:23:6a:db:9a:c2:f3:6c:c7:2e: 4d:d6:e8:f0:f4:68:90:4e:c2:fd:b3:0c:86:70:0b: a8:e6:d9:c9:73:05:11:fa:4c:2d:41:57:08:3e:62: 1e:95:a1:05:e0:ae:25:1e:f6:3a:f8:34:1e:0d:8b: f5:f4:82:f5:93:6d:0d:59:56:1b:78:49:f7:59:03: 90:d5:95:d6:e9:8f:61:4c:c6:73:cd:e0:1a:a6:db: 44:a9:85:20:b1:f8:67:77:8d:d9:fd:12:a5:8e:6e: 8d:6b:05:f8:3f:73:6e:d8:40:16:84:a7:5a:87:2c: a7:24:8e:75:dc:42:02:96:e8:5e:92:53:07:f3:d7: 1b:3f:86:07:11:6b:fa:a1:1f:0c:21:49:8c:80:03: c9:48:e7:d4:05:44:de:d5:7e:54:86:ea:c7:9d:d4: 38:80:b0:63:1b:81:a5:01:b2:ff:a5:65:43:7a:66: 2a:b6:d4:5f:69:3f:47:af:e5:8d:08:02:45:e0:c8: a9:d6:3d:65:49:d2:f7:d3:5b:7b:22:e2:d9:f1:9f: b5:a1:ce:9c:72:8b:17:d8:ff:7a:df:cc:91:04:7e: 55:2c:99:1d:e7:78:4e:a0:97:53:ba:cc:4a:85:01: 45:0a:04:df:1b:af:32:e7:ec:85:05:79:ee:f8:65: be:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.100.0/22 185.234.172.0/22 IPv6: 2a0d:2100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204947 Signature Algorithm: sha256WithRSAEncryption 70:5e:cf:fd:df:05:9a:2c:f2:88:9c:2f:0a:5b:e9:08:0a:44: 60:23:f3:f2:06:17:aa:08:53:ba:e8:c4:ff:aa:3b:fd:6b:aa: d5:a9:f3:00:f0:33:6a:49:17:4c:21:8b:a7:a2:83:2d:49:dc: e0:fd:de:b7:b9:a4:66:a1:5d:a1:33:a8:60:94:00:dd:7b:49: 5c:6f:08:9c:56:f0:be:ce:b4:28:73:e0:08:03:ab:2e:68:1b: d9:43:43:1b:ae:20:fe:35:6f:4c:25:61:d3:b8:13:45:2c:fd: 21:ca:b6:6f:4e:af:38:7b:f7:01:38:e2:0c:b2:ce:83:15:96: 0d:2c:f5:fe:97:a0:01:25:3e:eb:06:8a:5f:dd:4c:98:1d:c3: 51:b6:34:f1:fa:06:b9:e5:20:6a:17:76:bd:e6:64:3e:30:59: 5d:df:f8:13:c5:a6:e9:61:36:fb:69:69:58:dd:44:fa:60:c1: c8:a4:97:ed:92:40:c3:45:7b:e7:4b:9b:9b:fb:1c:7d:0e:7b: 39:b6:6c:1e:54:c7:b9:e5:30:24:13:1c:3c:98:a3:f5:ca:38: 47:73:74:8b:ee:6b:da:9f:a7:f3:11:ed:cc:1f:f3:46:e5:0c: 38:90:a3:2d:3d:df:2f:ef:cd:8a:69:69:63:0b:88:d9:48:b1: e3:c5:df:6f -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3xmY3TKYaBU3OifIzND9YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGU4MDQxNGI5NDdmMTkzMWYyMmJjOWM4NzhjMTdiN2QyMzA3OGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWdjIaYjatuawvNsxy5N1ujw9GiQ TsL9swyGcAuo5tnJcwUR+kwtQVcIPmIelaEF4K4lHvY6+DQeDYv19IL1k20NWVYb eEn3WQOQ1ZXW6Y9hTMZzzeAapttEqYUgsfhnd43Z/RKljm6NawX4P3Nu2EAWhKda hyynJI513EICluheklMH89cbP4YHEWv6oR8MIUmMgAPJSOfUBUTe1X5UhurHndQ4 gLBjG4GlAbL/pWVDemYqttRfaT9Hr+WNCAJF4Mip1j1lSdL301t7IuLZ8Z+1oc6c cosX2P9638yRBH5VLJkd53hOoJdTusxKhQFFCgTfG68y5+yFBXnu+GW+twIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFNDoBBS5R/GTHyK8nIeMF7fSMHjrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3LzM2ZmQ0 My1iNWYzLTQwY2YtODYzMS01MThlN2EzNTY2MGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvMzZmZDQz LWI1ZjMtNDBjZi04NjMxLTUxOGU3YTM1NjYwYS8xLzBPZ0VGTGxIOFpNZklyeWNo NHdYdDlJd2VPcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuT9kAwQCueqsMA0EAgACMAcDBQMqDSEAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMgkzANBgkqhkiG9w0BAQsFAAOCAQEAcF7P /d8FmizyiJwvClvpCApEYCPz8gYXqghTuujE/6o7/Wuq1anzAPAzakkXTCGLp6KD LUnc4P3et7mkZqFdoTOoYJQA3XtJXG8InFbwvs60KHPgCAOrLmgb2UNDG64g/jVv TCVh07gTRSz9Icq2b06vOHv3ATjiDLLOgxWWDSz1/pegASU+6waKX91MmB3DUbY0 8foGueUgahd2veZkPjBZXd/4E8Wm6WE2+2lpWN1E+mDByKSX7ZJAw0V750ubm/sc fQ57ObZsHlTHueUwJBMcPJij9co4R3N0i+5r2p+n8xHtzB/zRuUMOJCjLT3fL+/N imlpYwuI2Uix48Xfbw== -----END CERTIFICATE-----Generated at Mon Jan 12 10:29:02 2026 by rpki-client