This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer File: oZstcCM-Dlve9tv72pGIbSe2pa4.cer (raw, json) Hash identifier: MirOkZc4wXNbWpEvYvcjy3JyT3SrT+wrZVTd1+V6+vw= Subject key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12C38A89BDD2A7AEFDF1FD9661EB60 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199563 AS: 216114 IP: 185.174.104.0/22 IP: 185.181.24.0/22 IP: 2a14:5180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c3:8a:89:bd:d2:a7:ae:fd:f1:fd:96:61:eb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:84:56:31:77:13:66:f6:08:d1:b1:84:72:ee: 8f:bb:3c:f2:6d:36:47:99:70:67:82:9c:01:72:8c: 5e:9e:4b:99:97:da:4d:6a:6f:4e:47:f2:55:2c:ed: fe:fd:42:33:ba:fc:ed:07:e5:53:73:5e:53:13:84: 60:69:98:6c:49:c3:71:ba:a6:8a:b2:2f:44:89:68: 80:ee:2e:de:50:16:d1:88:59:26:06:11:da:eb:f1: b9:58:f0:6c:79:5b:6b:ac:e7:83:0e:15:bf:7b:a7: a0:60:c5:d6:bd:d9:ee:c6:bf:43:d3:8c:a3:f4:31: af:e4:50:9e:95:1e:59:0d:76:e4:b1:8f:94:96:82: 97:0e:cc:26:91:ff:ad:18:20:5b:13:90:81:34:d2: 6d:62:50:a0:72:fd:85:be:3f:85:b2:ba:8b:e0:42: 81:a9:ed:1c:d8:ce:15:77:1c:ef:30:b5:3d:17:a9: ef:9c:9c:54:9e:73:86:b2:49:71:83:f5:9a:57:26: df:a3:6e:42:d4:4a:62:39:2f:ca:d1:df:02:27:29: ab:a5:d4:4c:71:36:8f:bb:0e:32:74:8e:ee:b2:e6: 4f:da:b2:24:e7:38:b1:b5:cc:21:2c:f6:08:c1:8d: d5:6d:b9:ec:4b:41:f6:d3:7b:85:0a:32:c3:13:2e: 2b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.174.104.0/22 185.181.24.0/22 IPv6: 2a14:5180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199563 216114 Signature Algorithm: sha256WithRSAEncryption 32:76:64:70:bc:ea:22:42:f6:07:dd:d6:9e:68:47:2c:e2:cf: fd:b2:9f:bc:a5:e0:da:15:17:07:a5:c3:dc:82:92:5b:d2:b2: 65:8a:ae:81:74:1f:32:e1:e5:7b:20:a0:1b:43:e6:ba:32:3d: 13:d0:c0:85:db:c7:6a:06:62:98:72:de:10:d2:d7:80:a8:f3: ea:cd:39:f7:ae:7d:74:46:e5:95:aa:89:d2:cb:59:be:0e:9f: 1c:fd:70:f6:10:f8:90:03:87:fe:6f:17:a1:bd:ea:17:b8:52: 50:ed:af:1e:f2:87:ae:44:ea:25:d0:6f:87:fa:60:25:17:3e: 74:2a:f1:5f:75:86:b6:ab:24:7d:2c:db:ac:ca:73:51:73:16: 4b:fd:ff:7a:e8:34:a5:ed:cf:ad:6a:18:fe:e9:09:21:b9:1b: 1d:bc:a9:fa:fa:7e:e4:28:1a:8b:62:ac:a0:42:ac:57:51:2c: 3e:e6:09:9c:1d:dc:18:fa:fe:f0:87:47:24:ec:5a:0d:e8:12: 33:ed:f9:c1:b7:e0:3b:59:f8:96:6e:4d:b3:6a:a5:4d:65:72: b9:ee:73:a8:4f:f6:ab:25:25:ce:15:f5:b9:e2:d9:36:62:c2: ac:22:77:74:3b:3c:0f:ac:b4:17:38:06:d0:b2:a3:5a:9a:b4: eb:31:6a:b3 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt8EsOKib3Sp6798f2WYetgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTliMmQ3MDIzM2UwZTViZGVmNmRiZmJkYTkxODg2ZDI3YjZhNWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoRWMXcTZvYI0bGEcu6PuzzybTZH mXBngpwBcoxenkuZl9pNam9OR/JVLO3+/UIzuvztB+VTc15TE4RgaZhsScNxuqaK si9EiWiA7i7eUBbRiFkmBhHa6/G5WPBseVtrrOeDDhW/e6egYMXWvdnuxr9D04yj 9DGv5FCelR5ZDXbksY+UloKXDswmkf+tGCBbE5CBNNJtYlCgcv2Fvj+FsrqL4EKB qe0c2M4VdxzvMLU9F6nvnJxUnnOGsklxg/WaVybfo25C1EpiOS/K0d8CJymrpdRM cTaPuw4ydI7usuZP2rIk5zixtcwhLPYIwY3VbbnsS0H203uFCjLDEy4ruQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFKGbLXAjPg5b3vbb+9qRiG0ntqWuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlL2MxYzEx Yy0yMTYxLTRhZmMtOTdhNS0zZjFhN2M0ZjUxYjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvYzFjMTFj LTIxNjEtNGFmYy05N2E1LTNmMWE3YzRmNTFiNS8xL29ac3RjQ00tRGx2ZTl0djcy cEdJYlNlMnBhNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCua5oAwQCubUYMA0EAgACMAcDBQMqFFGAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMLiwIDA0wyMA0GCSqGSIb3DQEBCwUAA4IB AQAydmRwvOoiQvYH3daeaEcs4s/9sp+8peDaFRcHpcPcgpJb0rJliq6BdB8y4eV7 IKAbQ+a6Mj0T0MCF28dqBmKYct4Q0teAqPPqzTn3rn10RuWVqonSy1m+Dp8c/XD2 EPiQA4f+bxehveoXuFJQ7a8e8oeuROol0G+H+mAlFz50KvFfdYa2qyR9LNusynNR cxZL/f966DSl7c+tahj+6QkhuRsdvKn6+n7kKBqLYqygQqxXUSw+5gmcHdwY+v7w h0ck7FoN6BIz7fnBt+A7WfiWbk2zaqVNZXK57nOoT/arJSXOFfW54tk2YsKsInd0 OzwPrLQXOAbQsqNamrTrMWqz -----END CERTIFICATE-----Generated at Thu Jan 8 23:59:37 2026 by rpki-client