This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer File: OAsoOgUTlA1SCmgLiz0U28Nndw0.cer (raw, json) Hash identifier: UHG+Rx5UbEVYmZakmCXhd+DdZ31/gejiRufgJRjAebw= Subject key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAB78A52F98404FD7679417DF54427 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57771 AS: 203993 IP: 37.77.56.0/21 IP: 185.54.92.0/22 IP: 2a00:8640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b7:8a:52:f9:84:04:fd:76:79:41:7d:f5:44:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=380b283a0513940d520a680b8b3d14dbc367770d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0c:aa:fb:62:ae:1d:e8:40:73:6c:41:bf:b7: 3a:0d:77:06:b5:e3:dc:28:e4:bd:61:ac:ba:55:de: e6:95:9b:42:99:29:79:9b:25:ef:d0:dc:42:8e:06: 65:6a:95:30:05:1c:91:54:82:6f:44:cf:b2:58:99: ce:11:7b:83:cb:bc:c2:9b:93:8f:34:b8:5d:fd:31: f3:f3:01:9c:4c:d0:c7:71:4b:ca:0d:3e:5f:fe:25: 7a:9c:6d:aa:e4:5c:08:76:59:ab:7e:a6:1a:24:3a: 59:77:78:d5:31:78:20:38:59:ec:05:46:32:8c:c7: ae:09:1d:47:ca:ad:d5:6d:a2:b2:28:a2:b2:8f:cf: 26:f9:be:8d:fe:6a:44:df:cd:34:58:34:79:6a:2e: 80:46:4d:35:e5:6f:d8:17:46:f7:a1:48:00:83:fd: 48:51:85:b1:ff:34:bf:ce:b2:82:f8:10:a1:a4:86: 20:87:4c:0e:5e:d0:d6:96:05:40:31:06:63:9e:ee: 1e:69:67:d0:d8:da:1f:a5:85:23:40:cb:df:b0:0c: 0f:76:21:98:4c:44:8a:f0:31:e4:7a:7a:9f:67:9b: 94:7b:3b:d2:1d:27:7d:de:ee:3a:cc:fd:a3:4f:d3: 53:1f:1e:ca:96:31:8a:aa:88:4d:53:59:2a:f5:58: 50:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.56.0/21 185.54.92.0/22 IPv6: 2a00:8640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57771 203993 Signature Algorithm: sha256WithRSAEncryption 81:7a:fd:f7:87:6f:96:0d:58:14:ee:f0:db:36:07:b1:41:b9: d8:e3:4d:75:1c:44:04:80:f4:08:dc:ed:51:04:f6:20:75:1f: 22:0c:0c:5c:33:53:55:18:e2:ad:a8:bb:c7:fd:08:e4:68:fa: 91:16:6b:cb:4d:eb:2e:1f:96:02:e1:20:4e:7a:e4:f4:60:78: 53:f1:1e:3e:5e:39:98:5b:b3:05:7f:0b:6b:19:b3:7e:c6:ad: 51:b4:ad:c8:ab:5a:09:01:59:30:a4:f2:43:d4:cc:2c:a6:fc: 29:8a:a1:99:6c:77:f8:3a:59:1f:61:b0:3c:84:be:ab:54:80: 32:9c:64:19:f6:6a:16:4f:3f:47:d4:d4:5e:0d:2a:3f:eb:ae: da:0f:22:3e:eb:bb:f1:4d:34:0d:c8:e6:e7:c2:f2:4e:3e:c8: 5b:f5:4e:54:ec:98:e8:29:52:86:25:fc:c8:f5:ed:fa:d8:6c: 98:26:f3:33:89:f4:ed:d4:72:a9:31:cf:04:37:e3:1d:41:a7: 0d:14:e0:26:a7:53:1f:9c:6c:f4:77:f8:d4:1f:2b:80:cb:13: e7:1b:4e:db:09:96:d9:51:fd:7c:a7:ab:69:80:f3:d3:b1:82: 8f:a9:a7:e3:0a:2a:e8:32:51:7c:b2:4f:43:da:26:be:0d:dc: 1d:8f:42:21 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt26reKUvmEBP12eUF99UQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODBiMjgzYTA1MTM5NDBkNTIwYTY4MGI4YjNkMTRkYmMzNjc3NzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Qyq+2KuHehAc2xBv7c6DXcGtePc KOS9Yay6Vd7mlZtCmSl5myXv0NxCjgZlapUwBRyRVIJvRM+yWJnOEXuDy7zCm5OP NLhd/THz8wGcTNDHcUvKDT5f/iV6nG2q5FwIdlmrfqYaJDpZd3jVMXggOFnsBUYy jMeuCR1Hyq3VbaKyKKKyj88m+b6N/mpE3800WDR5ai6ARk015W/YF0b3oUgAg/1I UYWx/zS/zrKC+BChpIYgh0wOXtDWlgVAMQZjnu4eaWfQ2NofpYUjQMvfsAwPdiGY TESK8DHkenqfZ5uUezvSHSd93u46zP2jT9NTHx7KljGKqohNU1kq9VhQ9QIDAQAB o4ICujCCArYwHQYDVR0OBBYEFDgLKDoFE5QNUgpoC4s9FNvDZ3cNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5L2MwOGUx ZS1mNWJkLTRhMWEtOGFiYS1jY2Y2NDU0YmIyNGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvYzA4ZTFl LWY1YmQtNGExYS04YWJhLWNjZjY0NTRiYjI0Yy8xL09Bc29PZ1VUbEExU0NtZ0xp ejBVMjhObmR3MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDJU04AwQCuTZcMA0EAgACMAcDBQMqAIZAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDhqwIDAxzZMA0GCSqGSIb3DQEBCwUAA4IB AQCBev33h2+WDVgU7vDbNgexQbnY4011HEQEgPQI3O1RBPYgdR8iDAxcM1NVGOKt qLvH/QjkaPqRFmvLTesuH5YC4SBOeuT0YHhT8R4+XjmYW7MFfwtrGbN+xq1RtK3I q1oJAVkwpPJD1MwspvwpiqGZbHf4OlkfYbA8hL6rVIAynGQZ9moWTz9H1NReDSo/ 667aDyI+67vxTTQNyObnwvJOPshb9U5U7JjoKVKGJfzI9e362GyYJvMzifTt1HKp Mc8EN+MdQacNFOAmp1MfnGz0d/jUHyuAyxPnG07bCZbZUf18p6tpgPPTsYKPqafj CiroMlF8sk9D2ia+Ddwdj0Ih -----END CERTIFICATE-----Generated at Sun Jan 25 16:44:26 2026 by rpki-client