This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer File: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer (raw, json) Hash identifier: FAzlescsiqxYFhKinzRaUJGfKPhfcLKCLpT0+bx49zw= Subject key identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79114A78AE8B3BBCA2747147823088CD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207975 IP: 194.32.166.0/23 IP: 194.32.204.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 15:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:4a:78:ae:8b:3b:bc:a2:74:71:47:82:30:88:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcee32279c16dacdb5349f1b87c57d74c50ea539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:82:7f:03:b7:b9:94:e4:06:9e:03:16:5a: 08:c3:80:30:cd:bb:46:4e:65:c9:16:09:1a:16:31: fd:c0:7b:e9:3b:28:b0:61:5d:d6:d5:e2:76:ce:c3: 51:24:de:8e:4b:90:00:86:af:51:55:b3:4f:29:f1: f5:94:94:cd:d4:5f:ca:b8:ee:b0:76:eb:ff:c1:eb: 02:01:2c:26:0a:8d:43:cf:00:68:2d:86:65:75:d5: 14:26:80:ea:a6:0b:74:85:8e:f8:4a:77:39:cb:d2: 4b:5b:bc:83:23:5b:21:44:d3:5a:76:5e:97:8a:44: d4:84:c8:10:fd:40:b2:bc:6c:88:e4:b8:df:e2:63: 57:11:86:67:b8:41:29:1b:73:1a:b6:49:41:0f:94: 8a:21:4e:4a:3c:2a:ea:b3:62:c5:db:b1:3c:e4:87: c6:8e:64:33:e3:92:61:23:e9:a0:6c:7b:34:9c:bf: 33:dc:c5:58:70:f7:5d:15:f3:e8:39:60:24:0f:20: d0:1e:98:09:00:9d:6b:08:74:f7:c2:ef:a4:0e:af: c6:91:8c:57:00:98:ad:75:21:c5:a4:69:2a:6f:3c: 27:4a:e4:b2:72:4a:82:b9:3b:7b:2a:3e:b9:ff:bb: d9:4a:c7:f3:2e:63:b1:d0:57:7c:41:51:81:ec:a3: 59:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.32.166.0/23 194.32.204.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207975 Signature Algorithm: sha256WithRSAEncryption 5e:7b:ab:a1:4a:9c:fa:d9:62:c9:6c:b6:c5:9f:25:40:0d:97: 7b:31:4f:d6:cb:25:e8:e3:f0:22:5c:5b:c8:72:b4:29:be:46: c4:ac:bf:7e:48:6c:3a:f7:f6:29:47:ad:ce:85:ae:8d:6b:11: e2:a2:7f:55:b5:eb:fa:c2:ea:d5:03:43:9a:8b:f0:c1:4e:ae: d0:ec:67:bd:72:25:34:d3:6e:b7:8b:4f:13:c8:68:b8:08:77: 49:0d:e4:7d:fd:d3:8c:b3:6c:e6:58:94:be:40:10:bd:dd:38: 5c:b2:fd:e0:d2:05:29:29:37:fe:d9:ae:28:c4:a5:f4:2b:0a: 0e:86:55:97:ee:84:a7:a7:7f:42:a8:ca:51:fc:fb:44:06:2a: da:81:39:14:13:23:f7:54:a8:b6:ea:40:48:34:0a:d2:b7:9a: f9:72:ae:b0:e1:0a:35:1d:90:d6:73:c4:c3:f7:c7:3c:c0:13: 23:a2:32:ab:3f:94:1d:5a:d7:bc:ab:dc:e7:a3:71:da:35:ab: 84:4e:2f:5d:7f:81:64:10:92:a3:3f:6d:55:b3:15:b6:5c:98: 02:ba:a6:20:02:5c:1d:3e:7f:8a:56:50:34:80:8b:c9:de:ac: 1b:d6:72:9a:54:8a:02:f7:ab:55:06:d8:fb:26:81:c1:f8:20: 79:ae:96:08 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt5EUp4ros7vKJ0cUeCMIjNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2VlMzIyNzljMTZkYWNkYjUzNDlmMWI4N2M1N2Q3NGM1MGVhNTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmOCfwO3uZTkBp4DFloIw4AwzbtG TmXJFgkaFjH9wHvpOyiwYV3W1eJ2zsNRJN6OS5AAhq9RVbNPKfH1lJTN1F/KuO6w duv/wesCASwmCo1DzwBoLYZlddUUJoDqpgt0hY74Snc5y9JLW7yDI1shRNNadl6X ikTUhMgQ/UCyvGyI5Ljf4mNXEYZnuEEpG3MatklBD5SKIU5KPCrqs2LF27E85IfG jmQz45JhI+mgbHs0nL8z3MVYcPddFfPoOWAkDyDQHpgJAJ1rCHT3wu+kDq/GkYxX AJitdSHFpGkqbzwnSuSyckqCuTt7Kj65/7vZSsfzLmOx0Fd8QVGB7KNZtQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFPzuMiecFtrNtTSfG4fFfXTFDqU5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxL2Y2MDUw Mi0yNzA0LTQ4MzQtOWQ2OC0zMDQ2NmRlYzM5MDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvZjYwNTAy LTI3MDQtNDgzNC05ZDY4LTMwNDY2ZGVjMzkwNS8xL19PNHlKNXdXMnMyMU5KOGJo OFY5ZE1VT3BUay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwiCmAwQBwiDMMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMsZzANBgkqhkiG9w0BAQsFAAOCAQEAXnuroUqc+tliyWy2xZ8lQA2X ezFP1ssl6OPwIlxbyHK0Kb5GxKy/fkhsOvf2KUetzoWujWsR4qJ/VbXr+sLq1QND movwwU6u0OxnvXIlNNNut4tPE8houAh3SQ3kff3TjLNs5liUvkAQvd04XLL94NIF KSk3/tmuKMSl9CsKDoZVl+6Ep6d/QqjKUfz7RAYq2oE5FBMj91SotupASDQK0rea +XKusOEKNR2Q1nPEw/fHPMATI6Iyqz+UHVrXvKvc56Nx2jWrhE4vXX+BZBCSoz9t VbMVtlyYArqmIAJcHT5/ilZQNICLyd6sG9ZymlSKAverVQbY+yaBwfggea6WCA== -----END CERTIFICATE-----Generated at Mon Jan 12 17:33:17 2026 by rpki-client