This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer File: OFBtgKtZLee-CjMbv0-gBo1BQIo.cer (raw, json) Hash identifier: KC9kyd3hHWyhVuCkN7xXRAkbxnA6jAPMXtZkuojX88E= Subject key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED49F7AA6B96813D7E0CAF6A45B5A2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34501 AS: 57136 IP: 91.230.248.0/24 IP: 194.102.117.0/24 IP: 194.105.142.0/23 IP: 194.126.205.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:49:f7:aa:6b:96:81:3d:7e:0c:af:6a:45:b5:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38506d80ab592de7be0a331bbf4fa0068d41408a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:94:59:f9:12:86:51:bd:33:05:03:fc:c7:60: 66:78:95:f6:dc:55:20:ed:3b:41:1f:85:6d:af:3e: 02:4c:64:33:5c:5e:68:ee:f6:6b:17:6b:0f:98:42: 05:8b:ae:77:08:bb:96:f0:e6:3b:dc:a2:f1:1d:9e: 70:94:20:9f:58:3c:1f:64:fd:1a:9d:43:82:44:99: 10:b0:42:36:f1:38:bc:a2:b1:a7:21:81:c9:9e:20: bd:a4:11:00:d7:11:ee:86:32:f3:1d:c0:0f:05:e6: 9b:5c:1f:8d:f2:e3:69:c1:42:3b:c9:08:46:29:63: 33:c0:df:bc:6d:50:66:f4:6d:e7:02:13:d8:15:b8: 3b:c2:83:7c:ea:2c:ee:00:3c:21:a7:c8:bd:bc:e3: 7c:cf:3c:c2:53:23:f0:34:32:25:a7:03:bc:b2:38: 97:05:62:ac:48:12:68:e2:21:7f:a5:30:b2:47:22: 26:bc:0b:2a:63:9f:89:c1:2e:e4:c8:44:2a:73:df: da:57:0b:34:44:c5:7e:cc:e3:c1:b3:c1:57:23:8f: 09:a5:b9:bf:25:62:5a:0c:b3:41:93:5a:1a:ad:63: e2:b5:b9:c0:39:d7:5d:50:ad:38:bf:d1:96:52:dd: cc:fe:ea:cf:10:30:04:d6:aa:86:a8:01:a0:b2:f9: a2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.248.0/24 194.102.117.0/24 194.105.142.0/23 194.126.205.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34501 57136 Signature Algorithm: sha256WithRSAEncryption 9b:b6:ec:1f:9e:c6:02:53:97:d9:d4:1b:c5:22:2d:82:06:7a: 47:18:36:e9:c1:f2:7b:3f:b1:a8:b5:9b:10:cd:b4:92:8a:cc: 12:aa:73:cd:84:bd:62:51:74:a3:1f:e0:2c:cb:34:1d:17:e9: c2:22:ba:b6:1a:f7:34:a6:66:43:50:75:3d:c9:74:4f:eb:0a: a9:43:87:89:cf:d3:9f:4e:a3:bd:9d:3c:6a:ec:ad:cf:97:74: 81:fd:5e:b3:bf:1a:e4:85:57:47:4a:31:10:0c:f5:d4:c9:21: 9d:b7:d2:b4:6e:ec:7f:c1:03:bb:a4:77:25:5d:26:d8:ff:13: 2e:2f:5f:fa:e2:b7:97:21:9b:73:a8:8b:69:4e:b5:db:46:bd: 1e:2a:41:89:95:e9:64:a1:90:bc:81:fb:6a:a0:0f:07:06:13: 81:d3:56:54:05:5b:28:bf:65:b7:48:ae:2d:85:71:73:20:10: c9:35:3b:95:38:dd:64:76:3d:b9:4f:5f:ae:85:cf:4d:84:cb: 52:ee:26:83:d3:4e:3b:17:18:f6:9d:8d:25:a4:5c:f6:4d:ca: 0d:20:ed:65:1a:46:60:44:44:8d:52:0f:54:a4:cc:62:7f:25: 8c:29:11:b8:7a:65:43:87:ba:cd:f9:52:11:b9:01:fd:b8:5a: fa:ec:6e:fe -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt87Un3qmuWgT1+DK9qRbWiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODUwNmQ4MGFiNTkyZGU3YmUwYTMzMWJiZjRmYTAwNjhkNDE0MDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5RZ+RKGUb0zBQP8x2BmeJX23FUg 7TtBH4Vtrz4CTGQzXF5o7vZrF2sPmEIFi653CLuW8OY73KLxHZ5wlCCfWDwfZP0a nUOCRJkQsEI28Ti8orGnIYHJniC9pBEA1xHuhjLzHcAPBeabXB+N8uNpwUI7yQhG KWMzwN+8bVBm9G3nAhPYFbg7woN86izuADwhp8i9vON8zzzCUyPwNDIlpwO8sjiX BWKsSBJo4iF/pTCyRyImvAsqY5+JwS7kyEQqc9/aVws0RMV+zOPBs8FXI48Jpbm/ JWJaDLNBk1oarWPitbnAOdddUK04v9GWUt3M/urPEDAE1qqGqAGgsvmixwIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFDhQbYCrWS3nvgozG79PoAaNQUCKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmL2Y5NGY3 OC1mMjYyLTQyMDctOGYxOC04ZGY4YWYzMDAxYmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvZjk0Zjc4 LWYyNjItNDIwNy04ZjE4LThkZjhhZjMwMDFiYy8xL09GQnRnS3RaTGVlLUNqTWJ2 MC1nQm8xQlFJby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQAW+b4AwQAwmZ1AwQBwmmOAwQAwn7NMB8GCCsG AQUFBwEIAQH/BBAwDqAMMAoCAwCGxQIDAN8wMA0GCSqGSIb3DQEBCwUAA4IBAQCb tuwfnsYCU5fZ1BvFIi2CBnpHGDbpwfJ7P7GotZsQzbSSiswSqnPNhL1iUXSjH+As yzQdF+nCIrq2Gvc0pmZDUHU9yXRP6wqpQ4eJz9OfTqO9nTxq7K3Pl3SB/V6zvxrk hVdHSjEQDPXUySGdt9K0bux/wQO7pHclXSbY/xMuL1/64reXIZtzqItpTrXbRr0e KkGJlelkoZC8gftqoA8HBhOB01ZUBVsov2W3SK4thXFzIBDJNTuVON1kdj25T1+u hc9NhMtS7iaD0047Fxj2nY0lpFz2TcoNIO1lGkZgRESNUg9UpMxifyWMKRG4emVD h7rN+VIRuQH9uFr67G7+ -----END CERTIFICATE-----Generated at Mon Jan 26 09:00:49 2026 by rpki-client