This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer File: obgXVrYRDyp1SVx0yCDg5zTuimw.cer (raw, json) Hash identifier: mvo4FTIlVw/MxnmqFBoIiuORm/O41r0nMOI5ThygHhM= Subject key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B366078E8BFC5A682268CDBD409B0D2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202007 IP: 91.238.60.0/24 IP: 91.247.147.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:60:78:e8:bf:c5:a6:82:26:8c:db:d4:09:b0:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:74:22:c1:73:41:9e:cb:05:e1:57:b3:62: 19:51:55:b4:f7:cb:55:aa:a7:27:85:0d:e9:b9:b3: 87:3b:aa:36:c2:1f:78:b4:41:c6:4d:48:c2:ef:1b: 60:a1:0b:3a:30:88:38:02:cf:ef:c2:aa:25:7f:a4: ee:e2:73:5f:78:b6:70:25:31:cd:4e:41:f1:aa:2e: 06:f5:36:14:e9:a8:bc:f9:f8:68:a7:a0:ef:a2:e2: 99:43:f8:b1:de:8e:e3:94:ba:6d:2c:8c:a5:af:21: 44:9d:8d:40:95:c9:2f:83:65:c1:23:26:24:d0:59: a6:f5:52:bc:b6:18:19:fd:82:07:1e:55:72:93:d0: 07:cc:81:de:f1:4f:46:85:7a:1f:24:39:80:68:0b: 69:ce:dd:5f:25:e2:f0:b3:1a:22:25:4c:19:79:a6: 42:7d:97:12:3e:ee:dc:72:0e:29:e8:3e:f1:dc:56: 44:9e:a7:0f:a8:b2:e7:9a:7f:27:56:db:cb:fb:6b: e8:87:0b:20:91:f3:31:97:10:d1:cd:b3:85:ee:0a: fe:1c:a8:5d:ee:fc:0a:e0:ae:41:c9:0f:2e:ad:ce: bc:dd:3d:58:05:41:5c:17:99:91:1c:a2:ad:17:b6: 67:ea:bb:6b:b2:03:1a:f3:3d:f5:ae:33:51:3c:35: 83:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.60.0/24 91.247.147.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202007 Signature Algorithm: sha256WithRSAEncryption 83:65:a9:42:d2:86:5c:92:a2:e5:49:ec:1e:44:95:87:cc:dd: cb:77:ba:51:5e:73:8b:3e:51:e5:d9:38:2d:54:40:70:88:2d: 49:2f:5a:b3:05:2b:06:3a:1e:9a:e8:63:d5:3e:70:48:1e:aa: 08:35:3b:b1:d6:22:51:75:75:07:96:b4:da:10:e5:c2:92:76: 88:3c:2f:6e:86:44:b8:05:35:d1:03:68:bb:67:14:24:8c:0f: 4c:2e:53:6e:b1:7f:da:3a:30:d2:17:68:48:7a:65:c0:43:bb: 9b:7d:4b:0a:54:b0:08:fb:41:b6:36:14:a7:88:d9:0f:4c:50: 01:71:93:67:13:61:52:16:1e:a8:8c:10:86:db:69:d5:02:1e: fc:cf:1c:2f:78:d9:55:9f:a0:f9:f5:9b:ab:36:5d:95:ad:fd: 28:ae:d4:4d:a0:58:0a:16:68:df:2e:18:7d:e4:aa:bb:ec:a2: b5:51:bb:f3:12:0f:d4:b6:27:be:0e:65:81:d8:7c:51:8d:ec: 81:65:5b:f6:bf:6b:45:73:04:96:97:e6:60:26:fb:22:5e:0b: 34:2f:87:58:c7:20:9b:9c:0e:10:c9:4e:cc:5c:50:84:3f:fa: 98:c9:43:93:84:81:2e:f0:4b:73:4c:8e:b5:17:75:c6:eb:ef: cd:1d:5d:8c -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt7NmB46L/FpoImjNvUCbDSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWI4MTc1NmI2MTEwZjJhNzU0OTVjNzRjODIwZTBlNzM0ZWU4YTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1B0IsFzQZ7LBeFXs2IZUVW098tV qqcnhQ3pubOHO6o2wh94tEHGTUjC7xtgoQs6MIg4As/vwqolf6Tu4nNfeLZwJTHN TkHxqi4G9TYU6ai8+fhop6DvouKZQ/ix3o7jlLptLIylryFEnY1Alckvg2XBIyYk 0Fmm9VK8thgZ/YIHHlVyk9AHzIHe8U9GhXofJDmAaAtpzt1fJeLwsxoiJUwZeaZC fZcSPu7ccg4p6D7x3FZEnqcPqLLnmn8nVtvL+2vohwsgkfMxlxDRzbOF7gr+HKhd 7vwK4K5ByQ8urc683T1YBUFcF5mRHKKtF7Zn6rtrsgMa8z31rjNRPDWDawIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFKG4F1a2EQ8qdUlcdMgg4Oc07opsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyLzA4MTdj Yi02ZGQyLTRmNzUtOGJiNS1hYmNjYTJiNDRlOWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvMDgxN2Ni LTZkZDItNGY3NS04YmI1LWFiY2NhMmI0NGU5Zi8xL29iZ1hWcllSRHlwMVNWeDB5 Q0RnNXpUdWltdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW+48AwQAW/eTMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMVFzANBgkqhkiG9w0BAQsFAAOCAQEAg2WpQtKGXJKi5UnsHkSVh8zd y3e6UV5ziz5R5dk4LVRAcIgtSS9aswUrBjoemuhj1T5wSB6qCDU7sdYiUXV1B5a0 2hDlwpJ2iDwvboZEuAU10QNou2cUJIwPTC5TbrF/2jow0hdoSHplwEO7m31LClSw CPtBtjYUp4jZD0xQAXGTZxNhUhYeqIwQhttp1QIe/M8cL3jZVZ+g+fWbqzZdla39 KK7UTaBYChZo3y4YfeSqu+yitVG78xIP1LYnvg5lgdh8UY3sgWVb9r9rRXMElpfm YCb7Il4LNC+HWMcgm5wOEMlOzFxQhD/6mMlDk4SBLvBLc0yOtRd1xuvvzR1djA== -----END CERTIFICATE-----Generated at Mon Jan 12 22:25:17 2026 by rpki-client