This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer File: obtQVKF8yU__wrwpWhW_74qQQwo.cer (raw, json) Hash identifier: KGWppBWR30aInUssHb0Oo7Sxd0OHW/OnHUxDxvZp6HE= Subject key identifier: A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1270360423EFF243964493C8884673 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215820 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:70:36:04:23:ef:f2:43:96:44:93:c8:88:46:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1bb5054a17cc94fffc2bc295a15bfef8a90430a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:30:79:96:9a:6c:1e:ec:52:14:8e:75:74: a0:ba:6a:2f:c6:77:b2:06:df:7b:91:ba:45:3a:f6: d4:34:b5:1e:fb:74:86:bc:93:e2:32:01:19:e2:df: 8f:d4:52:25:2b:43:fb:09:48:28:42:e0:cd:45:27: 10:57:c7:e5:d4:26:17:95:a8:5c:5d:69:d7:37:40: cc:7a:b2:ca:96:fd:9a:d3:30:cc:12:d1:3f:10:26: 39:58:14:53:46:b3:43:0c:c9:91:96:45:5f:cf:1f: 55:8a:f8:25:34:89:ae:73:08:ba:11:e4:3f:9f:aa: 07:d4:c2:5a:fa:52:00:68:0f:f3:92:69:92:bb:60: e0:1d:50:22:be:76:d4:90:7b:05:7c:10:2f:5d:5d: 03:71:d5:21:81:c7:74:d3:df:fb:a0:22:54:f2:ac: 59:1d:35:5c:4e:97:50:0a:51:08:ce:f2:9f:f0:7a: a0:ed:3e:2e:3a:26:44:d7:31:04:91:33:9a:68:9f: c1:b4:a3:e5:e8:a6:d6:19:32:35:49:dd:e8:21:6c: dc:d0:63:f2:8e:71:09:7c:86:81:89:c8:7c:20:d4: 10:92:49:5f:77:a0:14:85:1a:af:5e:73:11:9a:69: 87:7c:04:58:3c:60:ce:df:79:f8:94:ce:79:fb:d5: f4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215820 Signature Algorithm: sha256WithRSAEncryption af:31:ea:90:64:35:60:96:0a:af:89:6e:8d:f2:ea:e8:ba:97: a0:f8:bb:d7:2d:bd:ac:ff:f7:1b:fc:47:8f:d4:47:c1:77:45: 8a:5e:9e:cf:19:c9:23:e2:06:5d:07:2e:a4:aa:3e:af:43:ae: 5b:60:5c:8e:84:78:44:d4:f0:a1:7a:93:5d:e0:2a:da:8b:50: e7:61:d7:5d:56:76:02:e7:fe:a0:a7:ca:41:c1:d4:6b:6c:d4: de:59:10:c5:07:97:12:5e:3a:fb:95:a1:94:32:5d:4b:d0:33: a5:e7:cf:f0:52:56:ce:b9:49:3a:76:cf:6e:d0:5a:96:eb:e9: 20:62:27:b8:16:c1:b6:60:44:62:89:68:50:43:49:15:0e:e4: bc:2e:e0:39:4d:34:31:0d:e3:04:a6:3a:e5:0c:8e:98:82:70: 9b:d3:a8:80:b5:a3:41:e9:ac:9c:23:b4:26:cf:ee:3e:7f:85: bf:e7:50:71:03:36:0c:25:fb:18:68:ee:70:bb:c9:ec:3f:71: fa:2a:b9:06:db:8b:eb:8c:be:42:ea:46:ab:f0:09:7e:18:2d: dc:b6:b1:20:9f:a8:64:67:35:ba:36:cb:d7:b7:5f:0d:1b:0c: 84:57:3c:17:08:04:d4:8b:09:17:f9:1e:cc:17:b3:3d:26:af: ac:7d:6b:db -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8EnA2BCPv8kOWRJPIiEZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWJiNTA1NGExN2NjOTRmZmZjMmJjMjk1YTE1YmZlZjhhOTA0MzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudcweZaabB7sUhSOdXSgumovxney Bt97kbpFOvbUNLUe+3SGvJPiMgEZ4t+P1FIlK0P7CUgoQuDNRScQV8fl1CYXlahc XWnXN0DMerLKlv2a0zDMEtE/ECY5WBRTRrNDDMmRlkVfzx9VivglNImucwi6EeQ/ n6oH1MJa+lIAaA/zkmmSu2DgHVAivnbUkHsFfBAvXV0DcdUhgcd009/7oCJU8qxZ HTVcTpdQClEIzvKf8Hqg7T4uOiZE1zEEkTOaaJ/BtKPl6KbWGTI1Sd3oIWzc0GPy jnEJfIaBich8INQQkklfd6AUhRqvXnMRmmmHfARYPGDO33n4lM55+9X0OQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFKG7UFShfMlP/8K8KVoVv++KkEMKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5L2EzMGMx MC0xYzJkLTQ3OGMtOWNmOC03MjI1NWQyNDljNWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvYTMwYzEw LTFjMmQtNDc4Yy05Y2Y4LTcyMjU1ZDI0OWM1ZC8xL29idFFWS0Y4eVVfX3dyd3BX aFdfNzRxUVF3by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNLDDANBgkqhkiG9w0BAQsFAAOCAQEArzHqkGQ1YJYK r4lujfLq6LqXoPi71y29rP/3G/xHj9RHwXdFil6ezxnJI+IGXQcupKo+r0OuW2Bc joR4RNTwoXqTXeAq2otQ52HXXVZ2Auf+oKfKQcHUa2zU3lkQxQeXEl46+5WhlDJd S9AzpefP8FJWzrlJOnbPbtBaluvpIGInuBbBtmBEYoloUENJFQ7kvC7gOU00MQ3j BKY65QyOmIJwm9OogLWjQemsnCO0Js/uPn+Fv+dQcQM2DCX7GGjucLvJ7D9x+iq5 BtuL64y+QupGq/AJfhgt3LaxIJ+oZGc1ujbL17dfDRsMhFc8FwgE1IsJF/kezBez PSavrH1r2w== -----END CERTIFICATE-----Generated at Mon Jan 5 03:02:37 2026 by rpki-client