This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer File: O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer (raw, json) Hash identifier: WK9W+RRbXTo49wVaTgVESk3bzKG2BmYfNv4hNW3ICG8= Subject key identifier: 3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED5A8BD708C40C92A7E483D2105760 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21406 AS: 213635 IP: 91.211.196.0/22 IP: 193.109.152.0/21 IP: 193.150.174.0 -- 193.150.179.255 IP: 193.164.234.0 -- 193.164.241.255 IP: 193.188.208.0/20 IP: 193.246.126.0/24 IP: 2001:67c:1110::/47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:5a:8b:d7:08:c4:0c:92:a7:e4:83:d2:10:57:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5b:5d:f4:ea:60:78:60:da:4a:39:c7:97:e4: 70:cf:2d:62:c9:7e:79:5a:61:d4:72:22:85:f0:6d: ff:42:3d:2b:ad:4c:a9:08:44:ae:ed:73:d3:23:5a: 92:04:6b:fd:be:12:2c:da:b7:fa:e6:37:f5:68:27: 65:82:c4:6c:d3:00:af:d5:96:0c:22:bd:85:a7:e4: f0:4f:15:26:b9:d2:03:5a:e3:5a:f2:da:da:3b:41: 80:e1:c2:f9:af:38:34:6d:82:a4:0c:ed:9d:e3:1e: 71:0d:91:1e:63:2e:b0:88:b2:11:0d:81:81:4a:c2: 8d:a9:81:30:1a:e5:38:7a:f8:ca:b7:6c:22:39:5e: 63:d8:e9:d5:bd:6d:4b:36:5a:3c:2d:d9:27:ae:37: 2b:e4:94:84:78:22:b8:92:14:c6:0b:48:20:d1:49: 35:e1:55:74:3a:e1:fd:ac:3b:36:87:e0:48:af:cb: 9b:42:7e:ac:f6:c5:88:55:ef:ef:80:75:51:06:45: 95:41:98:b7:8b:01:bf:51:9e:b4:f8:83:cd:74:91: 17:1b:45:ff:e1:f4:a3:5d:70:05:91:dc:34:41:c2: 87:ee:df:c0:ce:1e:eb:ca:63:c1:75:68:4b:c3:62: 20:f2:0b:51:88:19:61:8c:ee:ba:12:f8:13:06:83: e5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.196.0/22 193.109.152.0/21 193.150.174.0-193.150.179.255 193.164.234.0-193.164.241.255 193.188.208.0/20 193.246.126.0/24 IPv6: 2001:67c:1110::/47 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21406 213635 Signature Algorithm: sha256WithRSAEncryption 98:4f:9f:6f:e3:be:a2:86:a0:5f:45:d0:36:cf:1d:fb:82:91: a4:01:ab:66:e5:ff:50:61:58:51:4b:35:74:92:9a:02:eb:57: 01:4f:e6:94:82:2c:bb:9b:b9:f4:31:53:a9:7f:da:70:9f:87: 0b:b5:19:ef:8d:75:a7:1c:ea:e8:60:d9:d4:02:19:0b:2e:fc: d1:63:d3:11:14:56:60:41:bb:6f:f7:6f:25:9e:22:ff:9f:ae: c3:8e:e6:58:57:95:ef:af:47:1d:b9:40:eb:90:c4:90:a7:fc: e8:c5:41:13:eb:43:cd:c5:77:2c:09:f2:a8:5d:f0:30:2f:af: ca:33:85:05:4b:45:16:b5:cf:ed:ff:13:c8:44:6e:1a:38:4a: 9e:e1:7f:50:18:df:b0:27:78:66:57:f8:d6:22:48:67:2a:27: c1:09:7f:fe:f4:02:2f:ae:e5:66:ea:f6:e8:aa:e9:79:68:af: 73:dd:db:db:26:1b:d5:4a:d6:8f:35:e7:80:91:f5:f8:19:84: 75:6f:d5:f5:5b:a9:28:f6:9e:59:8e:eb:95:64:62:b8:ef:1f: 48:3a:0e:62:89:e6:a6:a9:19:15:c5:b6:5d:dc:1e:f2:96:37: 9b:09:da:d3:fd:a2:3a:72:52:18:f3:07:6c:db:93:e1:b3:61: e5:48:a9:a4 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgISAZt87VqL1wjEDJKn5IPSEFdgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjVmYzY5YjdjNmVlODY5OTMwY2UwYjgzOTFlZTVkODRjNTM0OTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVtd9OpgeGDaSjnHl+Rwzy1iyX55 WmHUciKF8G3/Qj0rrUypCESu7XPTI1qSBGv9vhIs2rf65jf1aCdlgsRs0wCv1ZYM Ir2Fp+TwTxUmudIDWuNa8traO0GA4cL5rzg0bYKkDO2d4x5xDZEeYy6wiLIRDYGB SsKNqYEwGuU4evjKt2wiOV5j2OnVvW1LNlo8Ldknrjcr5JSEeCK4khTGC0gg0Uk1 4VV0OuH9rDs2h+BIr8ubQn6s9sWIVe/vgHVRBkWVQZi3iwG/UZ60+IPNdJEXG0X/ 4fSjXXAFkdw0QcKH7t/Azh7rymPBdWhLw2Ig8gtRiBlhjO66EvgTBoPlEQIDAQAB o4IC4zCCAt8wHQYDVR0OBBYEFDtfxpt8buhpkwzguDke5dhMU0lKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzdjMTcy Ny05ZWFmLTQ5YzktYWFmYy1mOTk0NTNhOTVhOTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvN2MxNzI3 LTllYWYtNDljOS1hYWZjLWY5OTQ1M2E5NWE5OS8xL08xX0dtM3h1NkdtVERPQzRP UjdsMkV4VFNVby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTA6BAIAATA0AwQCW9PEAwQDwW2YMAwDBAHBlq4DBALBlrAwDAME AcGk6gMEAcGk8AMEBMG80AMEAMH2fjAPBAIAAjAJAwcBIAEGfBEQMB4GCCsGAQUF BwEIAQH/BA8wDaALMAkCAlOeAgMDQoMwDQYJKoZIhvcNAQELBQADggEBAJhPn2/j vqKGoF9F0DbPHfuCkaQBq2bl/1BhWFFLNXSSmgLrVwFP5pSCLLubufQxU6l/2nCf hwu1Ge+Ndacc6uhg2dQCGQsu/NFj0xEUVmBBu2/3byWeIv+frsOO5lhXle+vRx25 QOuQxJCn/OjFQRPrQ83FdywJ8qhd8DAvr8ozhQVLRRa1z+3/E8hEbho4Sp7hf1AY 37AneGZX+NYiSGcqJ8EJf/70Ai+u5Wbq9uiq6Xlor3Pd29smG9VK1o8154CR9fgZ hHVv1fVbqSj2nlmO65VkYrjvH0g6DmKJ5qapGRXFtl3cHvKWN5sJ2tP9ojpyUhjz B2zbk+GzYeVIqaQ= -----END CERTIFICATE-----Generated at Sun Jan 25 07:27:23 2026 by rpki-client