This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer File: O1RMoOK-GOn9dOKBMkowsOotHVI.cer (raw, json) Hash identifier: IVG6hf9lxpaVPMyZHw9N2Vu+mjW+N9M+0dFbjTtppdo= Subject key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77591C74BC445C5AF844A8664BE622FC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210908 IP: 145.224.32.0/20 IP: 192.124.112.0/24 IP: 193.163.182.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1c:74:bc:44:5c:5a:f8:44:a8:66:4b:e6:22:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d1:64:3d:61:57:76:f6:20:3d:c1:9b:4f:c4: 6d:f6:d3:0d:db:c9:e6:27:f0:4a:fe:7d:e5:f5:b4: 88:27:60:4a:77:6d:7c:85:32:4a:fa:89:94:5c:48: 19:5e:d5:f3:ea:c9:b8:cf:53:0a:b8:28:ab:88:14: 3c:9e:fb:d1:bd:c5:dc:ef:9a:46:9d:46:6e:b6:e9: 86:61:ff:7b:f2:7b:bf:de:d1:f6:5d:bf:08:8f:fa: ba:b5:f1:64:ca:56:65:2b:b9:4d:c1:54:af:58:49: c4:e4:57:5e:c2:5c:6e:c3:bb:69:2c:af:1e:3f:57: 5f:56:6f:2a:ab:bb:0e:8e:f7:df:1f:b2:70:9a:98: 5f:00:d5:1e:eb:e8:47:a0:ab:92:1d:54:7a:65:b2: e6:82:61:75:fe:5e:57:c5:a3:ac:8d:d8:72:ff:af: 7d:f0:63:c7:33:c2:ff:46:96:0d:3d:c8:89:fc:b4: 73:77:3a:f0:de:43:bc:b7:b5:08:58:8f:57:4a:f1: eb:83:ca:a7:3b:96:89:9f:17:e4:76:4a:cb:d1:b7: 5e:9b:07:f7:69:43:ad:fe:33:ce:ab:e8:2d:6c:b9: e8:f1:50:ee:0d:4f:e3:d8:80:35:32:e8:a5:29:8e: d8:a7:f3:33:c3:ef:c4:c8:2d:d9:0c:4b:f9:20:fd: 06:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.224.32.0/20 192.124.112.0/24 193.163.182.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210908 Signature Algorithm: sha256WithRSAEncryption 87:41:d2:14:14:46:7e:02:c2:dc:f0:b6:de:90:fb:6b:1f:a3: 23:59:50:87:43:03:79:1b:97:e1:93:90:d6:d9:a0:35:27:c1: 42:5a:00:a6:67:58:70:22:9f:81:bb:bb:82:8c:73:1f:f1:b5: e1:3c:fd:c5:d0:df:67:7a:ba:8e:b2:37:22:71:e2:f0:35:70: 03:72:0e:87:ab:07:81:56:87:9d:43:e9:1d:85:66:2e:dd:05: 71:92:fe:2a:9d:6d:b8:2b:65:34:39:b3:cb:97:25:34:f3:a7: df:21:58:cc:6f:b7:0c:a0:da:8d:85:7b:5d:78:c8:60:be:07: 18:da:02:b9:b8:fb:d4:36:79:09:21:5b:86:7e:46:0d:32:ee: f9:43:20:b5:49:55:7f:10:2f:c9:27:6b:96:22:c6:59:68:e2: 9b:dc:50:e6:d6:b7:c6:d1:aa:73:26:4c:b6:c5:2e:78:00:25: 3d:a8:10:10:eb:d6:7c:83:a6:f3:aa:74:b2:a1:7e:e1:aa:2c: 4c:fb:8b:d9:da:a2:a8:c5:65:5c:0b:9e:0e:9c:3a:6f:c7:73: 96:11:25:6d:df:76:0f:c9:ce:e0:1d:b2:94:93:ff:4a:f6:ea: 36:25:73:c8:f2:f2:81:41:d6:e2:a6:ac:b6:37:23:c1:aa:87: 9b:d3:16:7f -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt3WRx0vERcWvhEqGZL5iL8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjU0NGNhMGUyYmUxOGU5ZmQ3NGUyODEzMjRhMzBiMGVhMmQxZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNFkPWFXdvYgPcGbT8Rt9tMN28nm J/BK/n3l9bSIJ2BKd218hTJK+omUXEgZXtXz6sm4z1MKuCiriBQ8nvvRvcXc75pG nUZutumGYf978nu/3tH2Xb8Ij/q6tfFkylZlK7lNwVSvWEnE5Fdewlxuw7tpLK8e P1dfVm8qq7sOjvffH7JwmphfANUe6+hHoKuSHVR6ZbLmgmF1/l5XxaOsjdhy/699 8GPHM8L/RpYNPciJ/LRzdzrw3kO8t7UIWI9XSvHrg8qnO5aJnxfkdkrL0bdemwf3 aUOt/jPOq+gtbLno8VDuDU/j2IA1MuilKY7Yp/Mzw+/EyC3ZDEv5IP0GPQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFDtUTKDivhjp/XTigTJKMLDqLR1SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzLzMwMzBi Yi00MmMyLTRlM2MtODU5YS04NzZhOWQ3NjI5ZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvMzAzMGJi LTQyYzItNGUzYy04NTlhLTg3NmE5ZDc2MjlmNi8xL08xUk1vT0stR09uOWRPS0JN a293c09vdEhWSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQEkeAgAwQAwHxwAwQAwaO2MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwM33DANBgkqhkiG9w0BAQsFAAOCAQEAh0HSFBRGfgLC3PC2 3pD7ax+jI1lQh0MDeRuX4ZOQ1tmgNSfBQloApmdYcCKfgbu7goxzH/G14Tz9xdDf Z3q6jrI3InHi8DVwA3IOh6sHgVaHnUPpHYVmLt0FcZL+Kp1tuCtlNDmzy5clNPOn 3yFYzG+3DKDajYV7XXjIYL4HGNoCubj71DZ5CSFbhn5GDTLu+UMgtUlVfxAvySdr liLGWWjim9xQ5ta3xtGqcyZMtsUueAAlPagQEOvWfIOm86p0sqF+4aosTPuL2dqi qMVlXAueDpw6b8dzlhElbd92D8nO4B2ylJP/SvbqNiVzyPLygUHW4qastjcjwaqH m9MWfw== -----END CERTIFICATE-----Generated at Sun Jan 25 07:38:07 2026 by rpki-client