This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer File: O-LwFktmp2eVhgtOo1hvrVY7rEc.cer (raw, json) Hash identifier: 5z1YBqqxo4y3KJIaLmc0Da+ELbnilncb71yba6Ec/QY= Subject key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA37307BC1DCCDA0F1CEF3F1821AABB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206264 IP: 2.57.214.0/23 IP: 5.61.208.0/23 IP: 5.183.209.0/24 IP: 5.187.35.0/24 IP: 45.129.84.0/24 IP: 45.139.122.0/24 IP: 80.251.152.0/23 IP: 89.42.231.0/24 IP: 89.249.49.0/24 IP: 93.123.72.0/24 IP: 94.156.33.0/24 IP: 185.177.74.0/23 IP: 185.191.124.0/22 IP: 195.182.16.0/24 IP: 2a0d:1000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:73:07:bc:1d:cc:da:0f:1c:ef:3f:18:21:aa:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3be2f0164b66a76795860b4ea3586fad563bac47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:62:7b:13:e7:cd:b0:ef:04:06:05:c2:05:40: 4d:7a:80:ab:d5:e6:7b:97:e2:e9:84:4b:a9:12:a6: 66:3d:15:c1:95:a2:97:00:92:49:e1:1b:63:a0:31: 2e:0d:15:45:ee:61:92:16:01:da:c1:c4:a6:86:68: 47:f8:cf:4c:5b:27:f3:d8:cb:10:3a:d6:e3:4f:d9: c3:82:54:cb:17:c4:cd:07:60:1e:17:fa:c2:5d:03: 96:1e:70:f5:6b:68:4c:2b:b8:ba:1e:9d:d0:61:03: 79:54:2c:8a:42:d3:1b:49:9b:47:2e:3a:f1:6f:19: d2:25:a2:e7:4f:da:aa:b2:e0:4c:14:d3:02:3f:7d: a3:05:54:18:ce:73:4c:2b:3c:c8:9b:df:38:5a:dd: 65:d9:00:46:08:fe:05:f5:cf:9c:3b:2d:b2:f0:c6: 8d:33:67:e2:bd:7e:61:e4:a9:9b:a6:de:2a:b6:33: 4f:5b:fd:51:1d:a2:a1:d2:d4:42:2b:2c:ef:63:00: 5c:75:59:82:b3:6a:32:b7:0d:fe:dd:2c:5d:90:f2: 16:6c:de:db:87:30:52:99:a2:47:ea:87:1a:e8:28: 8a:d3:28:be:6f:e7:bd:a6:83:f9:e1:d8:d0:31:ae: 94:13:d8:99:b0:1d:f0:1e:7a:dc:22:96:c7:4c:23: a2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.214.0/23 5.61.208.0/23 5.183.209.0/24 5.187.35.0/24 45.129.84.0/24 45.139.122.0/24 80.251.152.0/23 89.42.231.0/24 89.249.49.0/24 93.123.72.0/24 94.156.33.0/24 185.177.74.0/23 185.191.124.0/22 195.182.16.0/24 IPv6: 2a0d:1000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206264 Signature Algorithm: sha256WithRSAEncryption 2c:95:ac:a0:30:33:76:b9:50:15:f4:66:e9:ec:f1:6c:1c:60: fc:c8:e3:48:84:af:3d:80:0c:4b:5a:16:fb:1b:7b:9a:a8:12: ff:ec:4b:ca:ca:42:f2:7f:44:bc:c8:50:0f:77:de:68:68:59: 17:68:09:3c:f3:18:3d:ab:a2:d4:ae:1c:79:b0:af:f8:b1:be: 83:f0:a6:a6:85:6a:0b:52:98:e9:1a:13:0c:a4:05:67:1d:d7: 68:4b:ab:5a:e1:e3:8d:03:e0:0d:c6:71:53:c9:07:f5:ae:7b: 80:bf:2d:da:4e:e5:80:5a:86:71:07:7e:7a:37:8c:f8:fc:60: 16:3f:5e:0b:db:51:e2:2d:73:b0:16:ec:94:23:46:0f:bc:f3: fd:e2:31:f1:4c:af:0f:a2:7b:eb:65:f2:83:e7:16:b4:0e:f6: 89:1e:d5:3b:3b:2c:c2:96:e7:75:d6:48:e5:9c:99:1c:69:62: 29:8f:5a:c0:ad:c3:59:b9:f2:8d:9e:96:1b:e4:46:16:36:44: 0d:92:21:d6:d7:c1:89:a5:e6:73:f3:10:ea:22:ba:15:b1:ba: 04:00:36:62:54:ba:33:25:d5:86:e3:fb:f7:52:c8:73:59:29: 03:d8:0a:24:28:35:ac:2c:e8:43:1a:5d:05:f9:cf:bb:bc:55: 7d:3b:07:3c -----BEGIN CERTIFICATE----- MIIF8TCCBNmgAwIBAgISAZt7o3MHvB3M2g8c7z8YIaq7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmUyZjAxNjRiNjZhNzY3OTU4NjBiNGVhMzU4NmZhZDU2M2JhYzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGJ7E+fNsO8EBgXCBUBNeoCr1eZ7 l+LphEupEqZmPRXBlaKXAJJJ4RtjoDEuDRVF7mGSFgHawcSmhmhH+M9MWyfz2MsQ OtbjT9nDglTLF8TNB2AeF/rCXQOWHnD1a2hMK7i6Hp3QYQN5VCyKQtMbSZtHLjrx bxnSJaLnT9qqsuBMFNMCP32jBVQYznNMKzzIm984Wt1l2QBGCP4F9c+cOy2y8MaN M2fivX5h5Kmbpt4qtjNPW/1RHaKh0tRCKyzvYwBcdVmCs2oytw3+3SxdkPIWbN7b hzBSmaJH6oca6CiK0yi+b+e9poP54djQMa6UE9iZsB3wHnrcIpbHTCOilwIDAQAB o4IC/TCCAvkwHQYDVR0OBBYEFDvi8BZLZqdnlYYLTqNYb61WO6xHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwL2M3MmI2 Ny03NmVjLTRhZmEtYjM3Ni1mOWFkMzgwNTEyMjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvYzcyYjY3 LTc2ZWMtNGFmYS1iMzc2LWY5YWQzODA1MTIyMC8xL08tTHdGa3RtcDJlVmhndE9v MWh2clZZN3JFYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHwGCCsGAQUF BwEHAQH/BG0wazBaBAIAATBUAwQBAjnWAwQBBT3QAwQABbfRAwQABbsjAwQALYFU AwQALYt6AwQBUPuYAwQAWSrnAwQAWfkxAwQAXXtIAwQAXpwhAwQBubFKAwQCub98 AwQAw7YQMA0EAgACMAcDBQMqDRAAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMl uDANBgkqhkiG9w0BAQsFAAOCAQEALJWsoDAzdrlQFfRm6ezxbBxg/MjjSISvPYAM S1oW+xt7mqgS/+xLyspC8n9EvMhQD3feaGhZF2gJPPMYPaui1K4cebCv+LG+g/Cm poVqC1KY6RoTDKQFZx3XaEurWuHjjQPgDcZxU8kH9a57gL8t2k7lgFqGcQd+ejeM +PxgFj9eC9tR4i1zsBbslCNGD7zz/eIx8UyvD6J762Xyg+cWtA72iR7VOzsswpbn ddZI5ZyZHGliKY9awK3DWbnyjZ6WG+RGFjZEDZIh1tfBiaXmc/MQ6iK6FbG6BAA2 YlS6MyXVhuP791LIc1kpA9gKJCg1rCzoQxpdBfnPu7xVfTsHPA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:49 2026 by rpki-client