This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer File: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer (raw, json) Hash identifier: G5FyIUK7Le64DVioGcWx7RNTDKZYHG+uKhFdk5MF/3E= Subject key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3A4A764C0BED4E48312D55696A71E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51773 IP: 46.28.208.0/21 IP: 2a00:ce00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:a4:a7:64:c0:be:d4:e4:83:12:d5:56:96:a7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0f27d4f067614bcbc270346fa0d44b15f805163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:db:48:e3:6e:cd:e4:5d:8d:93:f0:20:3b:11: db:46:65:ef:09:ee:58:1d:3c:20:41:99:a2:8a:48: 24:20:28:a9:4b:a1:36:af:c9:7f:76:87:b9:5a:9f: 6d:b8:07:a4:ff:f9:7a:b1:44:41:b1:8a:a0:e0:fc: a5:57:d3:5a:6f:12:51:96:79:a3:4c:c2:58:ee:5d: e8:0d:a6:21:25:6a:28:bc:6e:6d:c0:83:3d:d4:d1: 6c:29:c4:f5:de:d1:bd:c4:ed:28:8a:3e:9f:4b:29: c6:00:e8:a6:58:bb:84:90:29:55:ec:79:20:51:b0: 87:a7:8a:8a:d5:12:de:9c:26:bc:9a:f4:fe:9f:94: 39:8e:2d:af:bc:a3:ca:74:2d:bb:81:e4:cd:6b:19: ab:a3:67:d6:8f:6e:81:6e:57:84:85:94:56:87:fd: 1f:49:b8:2d:15:95:43:b6:66:36:ae:16:a6:7e:60: 64:4c:f5:12:4a:84:16:4e:6d:55:bb:a3:d5:ab:b4: 04:1f:b4:51:e6:3a:f7:28:1e:5a:66:38:77:96:ee: 99:6e:4a:18:3f:eb:f3:71:fd:da:1f:32:6a:1c:82: 8d:6c:be:6e:b6:a7:66:4d:d4:23:82:3a:b3:d1:b8: d2:1b:1f:fa:90:44:a3:ae:a7:e9:7f:69:b1:cb:c5: ba:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.208.0/21 IPv6: 2a00:ce00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51773 Signature Algorithm: sha256WithRSAEncryption a2:ef:2b:d5:7d:41:46:37:1d:7e:93:0e:f4:a6:6c:4c:60:73: 15:31:12:2e:60:ea:c7:e0:1b:4c:f4:6b:91:83:a6:7f:6b:a5: e5:ca:d7:e1:dc:ec:ed:60:da:09:30:54:c5:21:40:04:9b:b3: b4:09:37:d0:9d:9e:60:9f:c3:59:22:e5:e6:99:77:99:0a:64: ce:79:38:7c:4b:50:81:bd:c7:53:78:02:15:66:47:78:b7:2a: 9e:16:84:9f:7f:11:94:ae:e2:16:88:52:95:07:19:98:b9:df: b4:de:90:2b:f6:1a:c0:f6:94:77:26:39:16:31:5d:93:76:ee: 14:1c:17:25:ec:f5:24:09:08:54:3f:31:b6:5d:81:42:82:4f: ba:ce:cf:f7:57:9c:c0:e0:72:d2:6c:8e:a7:68:06:43:c8:c1: 51:65:8a:58:e2:86:85:48:16:69:eb:54:71:a6:b1:60:cd:61: 32:e6:73:75:20:87:12:c4:5c:e1:e8:8f:a5:7e:0a:25:3f:82: 41:26:8e:b0:7d:5d:fb:d2:e3:c0:f7:4b:41:62:05:31:fb:42: 1a:ff:ba:4f:66:6a:47:fd:f4:62:68:6d:67:49:17:b9:3d:d9: 0d:19:20:cd:d1:4d:0f:28:ff:c8:09:bf:48:7a:8e:d1:85:b3: 6a:57:49:f9 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7o6SnZMC+1OSDEtVWlqceMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGYyN2Q0ZjA2NzYxNGJjYmMyNzAzNDZmYTBkNDRiMTVmODA1MTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNtI427N5F2Nk/AgOxHbRmXvCe5Y HTwgQZmiikgkICipS6E2r8l/doe5Wp9tuAek//l6sURBsYqg4PylV9NabxJRlnmj TMJY7l3oDaYhJWoovG5twIM91NFsKcT13tG9xO0oij6fSynGAOimWLuEkClV7Hkg UbCHp4qK1RLenCa8mvT+n5Q5ji2vvKPKdC27geTNaxmro2fWj26BbleEhZRWh/0f SbgtFZVDtmY2rhamfmBkTPUSSoQWTm1Vu6PVq7QEH7RR5jr3KB5aZjh3lu6ZbkoY P+vzcf3aHzJqHIKNbL5utqdmTdQjgjqz0bjSGx/6kESjrqfpf2mxy8W6nQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKDyfU8GdhS8vCcDRvoNRLFfgFFjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1L2Y3MzJh MC1kYzYyLTQzMjYtODVlMi05MzY1OThlMDBjZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvZjczMmEw LWRjNjItNDMyNi04NWUyLTkzNjU5OGUwMGNmZS8xL29QSjlUd1oyRkx5OEp3Tkct ZzFFc1YtQVVXTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDLhzQMA0EAgACMAcDBQAqAM4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDKPTANBgkqhkiG9w0BAQsFAAOCAQEAou8r1X1BRjcd fpMO9KZsTGBzFTESLmDqx+AbTPRrkYOmf2ul5crX4dzs7WDaCTBUxSFABJuztAk3 0J2eYJ/DWSLl5pl3mQpkznk4fEtQgb3HU3gCFWZHeLcqnhaEn38RlK7iFohSlQcZ mLnftN6QK/YawPaUdyY5FjFdk3buFBwXJez1JAkIVD8xtl2BQoJPus7P91ecwOBy 0myOp2gGQ8jBUWWKWOKGhUgWaetUcaaxYM1hMuZzdSCHEsRc4eiPpX4KJT+CQSaO sH1d+9LjwPdLQWIFMftCGv+6T2ZqR/30YmhtZ0kXuT3ZDRkgzdFNDyj/yAm/SHqO 0YWzaldJ+Q== -----END CERTIFICATE-----Generated at Mon Jan 12 22:24:45 2026 by rpki-client