This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer File: o8p7HBOn17MSMUErj7aUehdH250.cer (raw, json) Hash identifier: lI6aXR7SSo2qsdkzEo00LfcbgL474pQuWgkZ5gv0Z1Y= Subject key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB97F6CA74C13339F37F5286FD5361 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.197.242.0/24 IP: 2a14:1c40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:97:f6:ca:74:c1:33:39:f3:7f:52:86:fd:53:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:94:60:6e:cb:3b:7a:cb:56:40:08:40:b1:b0: cd:6e:ac:7d:c9:5c:2c:75:38:14:bc:4d:14:ef:7f: b7:02:f3:83:0d:ad:9a:f3:c4:85:1d:ed:91:04:86: 18:fa:2c:ca:21:91:62:78:b9:c2:3e:de:45:4a:7e: 2d:5b:f5:8f:ff:7b:d8:14:94:72:32:1f:d7:df:b6: c6:81:36:03:c3:c8:2f:44:0d:d5:c3:bf:f9:9f:4a: e3:71:c8:af:c5:5f:13:19:ed:02:79:ae:83:3f:27: 94:a2:3e:4a:bc:41:9a:e6:60:34:1e:e7:f4:5e:e3: b4:5d:12:63:cb:a9:04:69:fa:8b:47:39:0d:42:66: 51:b4:42:e3:f0:3e:89:36:8e:4c:43:24:e7:a2:9f: 6b:37:c0:c8:98:a3:b2:63:c5:c1:7c:59:a9:82:c7: b2:ff:c8:3b:a1:70:60:f3:4f:ad:37:00:16:be:a8: de:79:f9:85:b4:a9:2b:8c:10:5b:c2:47:26:ca:41: b5:11:79:54:b3:2e:1e:d3:73:d9:4e:f9:31:53:b5: 02:d6:e2:68:94:53:46:66:17:34:a9:82:3e:cc:b4: e0:95:82:da:e1:bb:d3:27:7e:1b:61:00:63:27:25: 6a:10:7a:c9:53:f2:e2:12:3d:f7:b8:a6:1c:bb:c7: 5a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.242.0/24 IPv6: 2a14:1c40::/29 Signature Algorithm: sha256WithRSAEncryption 20:fc:13:f2:3f:2b:23:43:61:84:34:86:73:d7:bf:f7:4c:9c: d2:a2:ba:96:f6:52:5c:58:34:81:28:58:43:64:c8:a5:ee:e5: 80:cc:ae:99:cf:d3:65:27:9e:84:b8:fc:71:68:22:1e:01:12: 64:34:39:8a:0e:00:6b:44:1c:fd:3b:a6:fe:c3:e4:1c:90:8b: 47:1c:2a:3b:cb:85:7a:da:c0:70:b9:8a:38:2f:6e:e6:51:69: f0:5a:f7:6a:6e:25:50:28:6f:5a:f3:a1:62:de:0e:41:2c:fc: f6:1e:ec:17:0c:86:e1:e1:b2:55:05:ac:a7:a9:6b:46:6d:93: d5:0b:24:19:97:14:48:34:8a:2f:af:c4:7a:6d:f5:ea:ca:0f: 55:18:c0:1c:1d:2e:1b:7d:4c:5d:07:c2:cc:99:8b:57:cf:f4: 37:2e:25:d5:43:d2:22:9c:f4:78:0b:65:da:7d:67:44:f3:8e: 60:a2:d5:9e:6e:62:1b:b7:7c:3f:38:c3:f1:14:30:a3:de:18: 96:ba:8d:ae:ca:55:1d:ee:d8:e4:56:b8:31:b8:66:de:74:75: 38:68:ec:ad:7f:0b:44:e7:87:a5:6e:c5:b3:d5:70:21:31:2b: 18:ea:2d:93:bf:de:02:cb:bf:17:73:96:45:2f:8c:0e:97:39: fb:18:de:10 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt265f2ynTBMznzf1KG/VNhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2NhN2IxYzEzYTdkN2IzMTIzMTQxMmI4ZmI2OTQ3YTE3NDdkYjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZRgbss7estWQAhAsbDNbqx9yVws dTgUvE0U73+3AvODDa2a88SFHe2RBIYY+izKIZFieLnCPt5FSn4tW/WP/3vYFJRy Mh/X37bGgTYDw8gvRA3Vw7/5n0rjccivxV8TGe0Cea6DPyeUoj5KvEGa5mA0Huf0 XuO0XRJjy6kEafqLRzkNQmZRtELj8D6JNo5MQyTnop9rN8DImKOyY8XBfFmpgsey /8g7oXBg80+tNwAWvqjeefmFtKkrjBBbwkcmykG1EXlUsy4e03PZTvkxU7UC1uJo lFNGZhc0qYI+zLTglYLa4bvTJ34bYQBjJyVqEHrJU/LiEj33uKYcu8daZwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFKPKexwTp9ezEjFBK4+2lHoXR9udMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjL2JjZGNj YS1mMDZiLTQwY2YtOGUyMS0yMTQ1MjIwOTk0Y2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvYmNkY2Nh LWYwNmItNDBjZi04ZTIxLTIxNDUyMjA5OTRjZS8xL284cDdIQk9uMTdNU01VRXJq N2FVZWhkSDI1MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW8XyMA0EAgACMAcDBQMqFBxAMA0GCSqGSIb3 DQEBCwUAA4IBAQAg/BPyPysjQ2GENIZz17/3TJzSorqW9lJcWDSBKFhDZMil7uWA zK6Zz9NlJ56EuPxxaCIeARJkNDmKDgBrRBz9O6b+w+QckItHHCo7y4V62sBwuYo4 L27mUWnwWvdqbiVQKG9a86Fi3g5BLPz2HuwXDIbh4bJVBaynqWtGbZPVCyQZlxRI NIovr8R6bfXqyg9VGMAcHS4bfUxdB8LMmYtXz/Q3LiXVQ9IinPR4C2XafWdE845g otWebmIbt3w/OMPxFDCj3hiWuo2uylUd7tjkVrgxuGbedHU4aOytfwtE54elbsWz 1XAhMSsY6i2Tv94Cy78Xc5ZFL4wOlzn7GN4Q -----END CERTIFICATE-----Generated at Mon Jan 5 03:02:47 2026 by rpki-client