This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer File: oKFURB35Yj7rWhlhONIb71gktEE.cer (raw, json) Hash identifier: fAPElQKoKZGQ0zBNIIXzCI5CLpJB48/50mvW1PFQi+s= Subject key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F842AA4264653556DEA3E8F5AC1151D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24641 AS: 35613 AS: 206601 IP: 77.240.176.0/20 IP: 81.19.0.0/20 IP: 85.132.144.0/20 IP: 95.129.96.0/21 IP: 176.74.128.0/19 IP: 185.146.4.0/22 IP: 193.200.244.0/24 IP: 193.200.246.0/24 IP: 193.200.251.0 -- 193.200.252.255 IP: 2a00:9c80::/32 IP: 2a02:e98::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:2a:a4:26:46:53:55:6d:ea:3e:8f:5a:c1:15:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0a154441df9623eeb5a196138d21bef5824b441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:58:5b:9b:38:f2:4b:48:7e:68:4c:fd:f5: d5:81:4c:80:e8:f1:99:31:c8:56:47:4f:f6:54:60: 1b:f5:d0:e7:34:eb:0c:3b:fe:bb:f8:69:54:f0:c8: 66:2c:3c:01:ed:3c:4b:18:e1:3d:21:9f:32:4d:e7: e4:c5:a5:8a:e1:7c:60:89:68:5c:7b:aa:62:62:25: 12:6d:5d:0e:d2:8a:62:da:47:7d:66:eb:b2:03:8b: 70:59:9c:c1:65:d9:4f:62:5e:0b:bd:9e:1a:5c:9d: eb:c9:79:60:c3:cb:89:8a:93:c3:f1:c6:80:0f:8e: ea:f8:ff:d5:6a:0a:3f:58:ef:ce:c6:67:a7:1a:2d: f9:bb:c1:48:bb:e3:05:53:7e:db:9c:13:04:c7:d4: cd:a4:53:1a:52:64:6c:23:98:eb:b1:7f:df:53:b5: 71:18:b4:f3:fc:48:2a:6a:f0:d7:f9:0d:8b:d5:e4: b3:7d:a2:00:84:09:32:30:63:2c:3d:8b:cc:c7:01: 43:d2:c8:fd:33:59:9a:ac:2c:c9:c6:c9:37:41:53: eb:89:e7:ce:92:a6:6c:1d:a9:1a:37:3a:d8:f2:13: 27:73:6b:53:d5:ec:1c:5a:53:27:b7:05:a1:70:89: da:cd:19:e7:13:a6:34:3c:b1:b2:af:73:36:5e:4d: 85:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.240.176.0/20 81.19.0.0/20 85.132.144.0/20 95.129.96.0/21 176.74.128.0/19 185.146.4.0/22 193.200.244.0/24 193.200.246.0/24 193.200.251.0-193.200.252.255 IPv6: 2a00:9c80::/32 2a02:e98::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24641 35613 206601 Signature Algorithm: sha256WithRSAEncryption 2e:e6:d1:98:e7:48:7d:a2:dd:ab:cd:18:55:19:4c:d6:f4:37: fa:65:5e:a5:a7:c6:7b:cf:e3:91:b4:1c:ff:e6:0e:95:0b:fe: 3b:b7:09:22:77:33:fc:1c:b3:f4:b2:f5:8e:02:79:cd:91:31: 97:f3:5a:16:2d:7a:56:e2:b4:79:da:2e:5a:e8:2e:fd:b5:e0: 76:9a:6a:0b:20:be:f4:d1:e7:02:3f:e7:0a:1c:5c:80:d8:ac: 88:1f:b9:12:3b:3b:d7:24:d9:e4:02:d7:67:dc:d4:df:fa:63: dc:17:10:11:ea:15:f7:a2:84:48:6d:e7:52:7c:fe:ac:f6:3b: f0:22:f5:25:4f:28:f4:43:19:18:21:94:7e:ce:c2:0f:14:ed: a2:88:d7:cc:e0:a6:a9:4e:74:c2:56:71:2f:78:0e:53:c8:5d: 13:52:36:b4:7b:59:b5:e1:33:72:ad:ef:d7:13:b4:02:73:ff: 04:7e:a4:d5:5b:2b:fa:e0:9a:c7:ed:fd:69:da:d1:f5:b3:16: 33:10:ac:b2:2e:8e:8a:b6:9c:7c:f1:3d:d1:01:a1:1b:1a:79: 37:8a:da:b2:89:ed:ee:65:39:da:1c:04:5f:ae:a0:16:67:88: 57:6b:0f:5e:56:f4:f8:1b:83:2a:ee:72:4a:be:4a:cd:ea:62: 4a:83:db:bd -----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgISAZt/hCqkJkZTVW3qPo9awRUdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGExNTQ0NDFkZjk2MjNlZWI1YTE5NjEzOGQyMWJlZjU4MjRiNDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg1YW5s48ktIfmhM/fXVgUyA6PGZ MchWR0/2VGAb9dDnNOsMO/67+GlU8MhmLDwB7TxLGOE9IZ8yTefkxaWK4XxgiWhc e6piYiUSbV0O0opi2kd9ZuuyA4twWZzBZdlPYl4LvZ4aXJ3ryXlgw8uJipPD8caA D47q+P/Vago/WO/OxmenGi35u8FIu+MFU37bnBMEx9TNpFMaUmRsI5jrsX/fU7Vx GLTz/EgqavDX+Q2L1eSzfaIAhAkyMGMsPYvMxwFD0sj9M1marCzJxsk3QVPriefO kqZsHakaNzrY8hMnc2tT1ewcWlMntwWhcInazRnnE6Y0PLGyr3M2Xk2FEwIDAQAB o4IC9zCCAvMwHQYDVR0OBBYEFKChVEQd+WI+61oZYTjSG+9YJLRBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzViM2Q2 ZC1lNmYxLTQ3YWQtYjUyYi05ZDk0MzY3MWE4YTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvNWIzZDZk LWU2ZjEtNDdhZC1iNTJiLTlkOTQzNjcxYThhMy8xL29LRlVSQjM1WWo3cldobGhP TkliNzFna3RFRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMG0GCCsGAQUF BwEHAQH/BF4wXDBEBAIAATA+AwQETfCwAwQEURMAAwQEVYSQAwQDX4FgAwQFsEqA AwQCuZIEAwQAwcj0AwQAwcj2MAwDBADByPsDBADByPwwFAQCAAIwDgMFACoAnIAD BQMqAg6YMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4CAmBBAgMAix0CAwMnCTANBgkq hkiG9w0BAQsFAAOCAQEALubRmOdIfaLdq80YVRlM1vQ3+mVepafGe8/jkbQc/+YO lQv+O7cJIncz/Byz9LL1jgJ5zZExl/NaFi16VuK0edouWugu/bXgdppqCyC+9NHn Aj/nChxcgNisiB+5Ejs71yTZ5ALXZ9zU3/pj3BcQEeoV96KESG3nUnz+rPY78CL1 JU8o9EMZGCGUfs7CDxTtoojXzOCmqU50wlZxL3gOU8hdE1I2tHtZteEzcq3v1xO0 AnP/BH6k1Vsr+uCax+39adrR9bMWMxCssi6OiracfPE90QGhGxp5N4rasont7mU5 2hwEX66gFmeIV2sPXlb0+BuDKu5ySr5KzepiSoPbvQ== -----END CERTIFICATE-----Generated at Mon Jan 12 14:26:09 2026 by rpki-client