This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer File: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer (raw, json) Hash identifier: 46TUQaZAeaPiF22pPzc/zgWL6dPg22oJ8jFph079fZ4= Subject key identifier: A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A35FA1B79EF2D6FF5129AD304BE243 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200750 IP: 91.227.63.0 -- 91.227.67.255 IP: 194.180.108.0/23 IP: 194.180.170.0/23 IP: 2a0f:4640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5f:a1:b7:9e:f2:d6:ff:51:29:ad:30:4b:e2:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:64:99:3e:54:e7:1c:22:40:06:4b:93:cf:8c: 45:85:7d:3b:63:29:40:b7:ae:f2:ec:19:06:dc:fc: 9a:6a:21:ff:66:67:55:09:97:47:a1:00:fa:6d:87: dd:f9:41:e6:93:d5:19:97:94:28:5e:04:2b:75:f2: 0d:52:cc:ca:da:22:9c:d7:10:20:12:ac:d6:ef:56: 6e:05:de:46:9a:1a:4d:0c:d6:24:e6:28:31:db:a9: 22:c8:56:d8:58:4a:b3:8b:ab:9f:77:59:16:c3:71: 5b:2e:72:42:b6:cb:ec:e9:1a:b0:40:5c:60:95:63: 93:60:41:c8:f0:dc:ea:f8:76:99:06:dd:f2:6c:09: 6d:d9:f6:f4:97:9b:68:d3:9c:3d:58:53:6c:5d:4d: b9:42:f5:10:38:fb:67:47:4e:f6:db:1f:6f:ef:1b: e7:ff:e7:67:88:34:63:d0:89:29:fd:2a:14:b5:58: ec:89:e3:5b:49:b0:4d:51:aa:d0:c6:8a:82:dd:6e: 79:2f:2f:6f:08:97:cc:16:4c:25:d3:f7:f7:bb:94: 0b:da:04:37:13:83:7a:a3:28:2e:e5:6e:8f:65:fd: cb:a9:94:5f:87:26:cd:0b:bd:89:97:7e:fb:fd:9f: 71:e9:ee:d8:72:06:de:3c:6d:f5:de:47:0c:9c:e3: 53:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.63.0-91.227.67.255 194.180.108.0/23 194.180.170.0/23 IPv6: 2a0f:4640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200750 Signature Algorithm: sha256WithRSAEncryption 6f:11:12:75:7b:6f:e2:70:ad:1e:d5:e9:75:b8:66:9c:79:2e: 84:c1:06:3c:ec:4a:a5:88:b8:c4:eb:a9:99:fa:e3:db:cd:bf: 6f:07:e7:4c:95:31:12:2a:81:e8:2d:18:78:38:4e:93:0d:bd: 35:d3:ae:71:c6:ea:1a:20:83:97:88:17:24:4e:fe:f9:26:65: cf:2d:51:33:f4:ba:12:a8:f4:ad:40:bf:f4:55:5c:fe:b9:4b: b5:4d:04:8e:14:63:48:32:5e:9a:d6:1a:19:16:8e:5f:c0:7b: e1:3e:cf:26:f4:8f:f9:90:68:f4:a2:7e:db:f1:81:fe:b1:60: cf:be:6c:53:7c:41:d5:98:16:04:67:22:cc:20:f2:28:c4:23: d4:89:ef:ec:e7:fc:ba:15:a2:2f:10:0c:d7:db:17:30:24:1b: 3c:d0:24:a0:c8:91:49:5a:ed:8c:a3:d7:a7:3d:b9:62:f6:86: 73:8a:e1:39:16:67:9b:c5:1e:77:8c:ae:0e:d9:3b:94:59:97: a6:36:4f:5d:d4:77:50:35:4b:2a:62:ee:8d:53:7f:40:dc:2d: f5:17:a4:ce:7e:de:18:68:c6:6d:35:7c:8e:1e:f3:9f:d6:a0: 23:b2:43:68:db:53:09:56:a5:b9:e6:76:57:f8:a1:d7:cf:32: e5:95:47:61 -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt4o1+ht57y1v9RKa0wS+JDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmUzYzRlYzdiMzYxMTJmY2U1MjFmNWJlZjI4NzNjN2I0Y2M4OGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2SZPlTnHCJABkuTz4xFhX07YylA t67y7BkG3PyaaiH/ZmdVCZdHoQD6bYfd+UHmk9UZl5QoXgQrdfINUszK2iKc1xAg EqzW71ZuBd5GmhpNDNYk5igx26kiyFbYWEqzi6ufd1kWw3FbLnJCtsvs6RqwQFxg lWOTYEHI8Nzq+HaZBt3ybAlt2fb0l5to05w9WFNsXU25QvUQOPtnR0722x9v7xvn /+dniDRj0Ikp/SoUtVjsieNbSbBNUarQxoqC3W55Ly9vCJfMFkwl0/f3u5QL2gQ3 E4N6oygu5W6PZf3LqZRfhybNC72Jl377/Z9x6e7YcgbePG313kcMnONT8wIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFKLjxOx7NhEvzlIfW+8oc8e0zIjRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQxL2Y0MDM4 Ny0yZDg0LTQwNjItYmVjNi1kYTUxM2NjNjk4MzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvZjQwMzg3 LTJkODQtNDA2Mi1iZWM2LWRhNTEzY2M2OTgzOS8xL291UEU3SHMyRVNfT1VoOWI3 eWh6eDdUTWlORS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaMAwDBABb4z8DBAJb40ADBAHCtGwDBAHCtKowDQQC AAIwBwMFAyoPRkAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAxAuMA0GCSqGSIb3 DQEBCwUAA4IBAQBvERJ1e2/icK0e1el1uGaceS6EwQY87EqliLjE66mZ+uPbzb9v B+dMlTESKoHoLRh4OE6TDb01065xxuoaIIOXiBckTv75JmXPLVEz9LoSqPStQL/0 VVz+uUu1TQSOFGNIMl6a1hoZFo5fwHvhPs8m9I/5kGj0on7b8YH+sWDPvmxTfEHV mBYEZyLMIPIoxCPUie/s5/y6FaIvEAzX2xcwJBs80CSgyJFJWu2Mo9enPbli9oZz iuE5FmebxR53jK4O2TuUWZemNk9d1HdQNUsqYu6NU39A3C31F6TOft4YaMZtNXyO HvOf1qAjskNo21MJVqW55nZX+KHXzzLllUdh -----END CERTIFICATE-----Generated at Fri Jan 2 09:59:26 2026 by rpki-client