This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OC-G8tvQd2xOUZycmuT60EJvOf8.cer File: OC-G8tvQd2xOUZycmuT60EJvOf8.cer (raw, json) Hash identifier: JZ7JxshVdTJ8n+xz8GeR6ACZBxTAVRESzvCUyqHgoz8= Subject key identifier: 38:2F:86:F2:DB:D0:77:6C:4E:51:9C:9C:9A:E4:FA:D0:42:6F:39:FF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8E30DD969BB554384026B1C164316 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50621 IP: 45.157.44.0/22 IP: 109.239.192.0/20 IP: 2a00:1b58::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e3:0d:d9:69:bb:55:43:84:02:6b:1c:16:43:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=382f86f2dbd0776c4e519c9c9ae4fad0426f39ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f2:8b:e4:42:20:88:77:c6:6a:b9:26:8e:9b: c7:5e:e9:26:02:da:3a:8e:f7:45:e2:e4:5c:9c:4f: 48:ce:35:4f:8d:bd:2a:1e:98:1e:84:d7:ed:e6:8f: ed:6e:be:9d:67:4f:fc:50:14:e4:9c:32:f7:a3:ce: f5:69:b9:cd:5c:9e:06:ad:89:49:20:f7:8a:99:88: 1f:86:ea:b9:bc:d3:da:58:65:8c:8a:45:30:44:ff: b9:ad:a1:7d:52:2d:cb:43:5c:b4:4a:dd:fd:3a:ea: b0:d6:d6:07:95:39:73:6c:d4:9e:57:eb:21:c6:bf: f4:d6:48:a1:9a:8c:78:82:80:d3:65:61:9a:bf:b0: 67:2f:d4:3e:5f:81:a2:70:9e:57:41:45:9f:95:d8: 38:a5:f5:56:05:db:a8:25:df:46:9a:d0:e9:28:e5: da:43:1d:44:e9:cd:5c:ec:ea:3e:57:af:31:8f:53: 7c:c8:09:3c:4e:1d:fc:65:32:8b:a4:01:5e:ea:fb: 85:3e:17:b1:d5:bb:a2:7b:9a:56:70:93:6a:e4:cf: 07:8b:b2:ab:a3:cd:6c:01:48:7a:c2:8b:71:27:c2: 7c:c6:87:92:72:78:2c:0f:70:f3:5a:b4:00:a6:a1: ee:3b:f9:35:95:af:52:5a:d5:f7:a4:b4:74:8a:62: 43:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2F:86:F2:DB:D0:77:6C:4E:51:9C:9C:9A:E4:FA:D0:42:6F:39:FF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/04748d-923b-4284-9628-203563f845bb/1/OC-G8tvQd2xOUZycmuT60EJvOf8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.44.0/22 109.239.192.0/20 IPv6: 2a00:1b58::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50621 Signature Algorithm: sha256WithRSAEncryption 5e:c8:45:19:a4:30:23:11:f1:a0:23:60:4d:e9:15:ce:39:4f: 08:6e:41:a3:65:9b:13:e5:7d:0b:a5:58:bb:38:fb:85:d1:00: 3a:05:e3:0a:6a:39:13:9a:f3:ac:91:0c:1b:a9:7c:96:84:05: 3d:d8:29:55:f6:9d:f6:d1:8c:7f:f7:0a:4c:62:43:53:9d:19: 9c:81:1e:a4:c6:aa:a6:fe:3a:45:ae:a9:36:ad:6a:60:a5:b4: bf:fa:09:a1:83:c2:16:66:70:30:cf:0b:1d:a2:76:19:59:04: cf:cb:6d:65:aa:db:9a:d9:5d:53:ae:48:20:31:15:1a:02:b3: c9:0c:95:de:47:b2:48:b8:9d:cd:93:47:24:83:b3:d4:1e:15: ad:46:45:05:a5:de:f2:18:4a:9d:8a:12:67:de:34:2c:0a:8c: c0:75:67:1e:c7:2d:4e:0f:d6:4f:4e:5c:1e:ab:69:68:2f:de: c4:bd:32:d7:3b:52:44:08:a7:98:7a:c0:37:6c:a3:2f:1b:76: 8c:ce:9e:bc:4e:cf:44:b9:3b:27:81:ca:59:23:2e:a0:49:08: 0d:4a:12:0a:dc:11:67:da:12:dc:74:44:e4:27:f9:8d:78:ae: 1d:8a:08:56:99:8d:e9:88:5b:71:bc:dc:5e:4e:13:3d:b0:24: 1e:a3:33:78 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6yOMN2Wm7VUOEAmscFkMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODJmODZmMmRiZDA3NzZjNGU1MTljOWM5YWU0ZmFkMDQyNmYzOWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fKL5EIgiHfGarkmjpvHXukmAto6 jvdF4uRcnE9IzjVPjb0qHpgehNft5o/tbr6dZ0/8UBTknDL3o871abnNXJ4GrYlJ IPeKmYgfhuq5vNPaWGWMikUwRP+5raF9Ui3LQ1y0St39Ouqw1tYHlTlzbNSeV+sh xr/01kihmox4goDTZWGav7BnL9Q+X4GicJ5XQUWfldg4pfVWBduoJd9GmtDpKOXa Qx1E6c1c7Oo+V68xj1N8yAk8Th38ZTKLpAFe6vuFPhex1buie5pWcJNq5M8Hi7Kr o81sAUh6wotxJ8J8xoeScngsD3DzWrQApqHuO/k1la9SWtX3pLR0imJD0wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFDgvhvLb0HdsTlGcnJrk+tBCbzn/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1LzA0NzQ4 ZC05MjNiLTQyODQtOTYyOC0yMDM1NjNmODQ1YmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvMDQ3NDhk LTkyM2ItNDI4NC05NjI4LTIwMzU2M2Y4NDViYi8xL09DLUc4dHZRZDJ4T1VaeWNt dVQ2MEVKdk9mOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLZ0sAwQEbe/AMA0EAgACMAcDBQAqABtYMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDFvTANBgkqhkiG9w0BAQsFAAOCAQEAXshF GaQwIxHxoCNgTekVzjlPCG5Bo2WbE+V9C6VYuzj7hdEAOgXjCmo5E5rzrJEMG6l8 loQFPdgpVfad9tGMf/cKTGJDU50ZnIEepMaqpv46Ra6pNq1qYKW0v/oJoYPCFmZw MM8LHaJ2GVkEz8ttZarbmtldU65IIDEVGgKzyQyV3keySLidzZNHJIOz1B4VrUZF BaXe8hhKnYoSZ940LAqMwHVnHsctTg/WT05cHqtpaC/exL0y1ztSRAinmHrAN2yj Lxt2jM6evE7PRLk7J4HKWSMuoEkIDUoSCtwRZ9oS3HRE5Cf5jXiuHYoIVpmN6Yhb cbzcXk4TPbAkHqMzeA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:20:01 2026 by rpki-client