This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer File: OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer (raw, json) Hash identifier: GesJEnV0dCjZDZKsIlQ36LcaBUgHnh8pug5v0aptsK0= Subject key identifier: 38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A35C2B7D91AB8CB0560B12DF2341BE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204973 IP: 185.184.108.0/22 IP: 2a0b:2680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5c:2b:7d:91:ab:8c:b0:56:0b:12:df:23:41:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38728e9bd37399df9ffae587bd06884b350a65b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:bc:f3:75:d9:05:af:65:57:97:14:96:f1: c8:8b:1b:61:6a:15:01:23:0a:40:07:92:fd:11:74: 8f:7c:1b:a3:b6:ed:48:81:69:bc:06:7e:49:69:d7: 48:07:8e:97:af:12:24:3a:4f:99:8b:81:6b:f5:68: 7a:93:a4:fb:54:86:42:b5:34:81:2d:37:5b:60:b7: 88:75:3a:05:07:39:52:f2:ab:d4:ca:a7:aa:30:10: b6:dd:c9:9a:36:1c:67:33:2f:c1:c9:be:2c:c8:ab: b9:0f:da:d3:72:07:a9:b3:9d:26:77:e9:d4:82:6c: 71:cb:77:07:9b:f4:74:09:ba:fd:64:d2:df:b6:2b: 4a:d8:e6:a6:42:bb:91:58:68:7b:4d:59:15:e6:90: f8:f0:e3:db:61:e8:0c:2c:cf:0b:0a:c9:43:c3:69: 7d:36:01:8c:bd:18:74:bc:46:7f:df:0a:e8:29:0b: a7:bb:d8:e3:e3:86:e2:4f:77:fa:ce:2e:2a:25:ea: 79:2c:f1:62:8a:73:c9:ab:56:31:e4:fb:fd:85:59: 59:c9:3c:c2:b9:57:aa:26:fa:91:a3:95:27:80:13: ea:76:27:96:07:78:31:44:fc:c0:93:a5:7e:0d:fb: da:90:82:51:2f:d1:9e:3d:00:d4:3d:53:e0:81:98: 7f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.184.108.0/22 IPv6: 2a0b:2680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204973 Signature Algorithm: sha256WithRSAEncryption 6e:58:73:70:d0:aa:35:08:7e:a4:57:87:de:d8:2a:e4:d6:ce: c1:54:b2:20:d9:b8:bf:98:0c:f9:ac:d3:d4:80:0c:70:4d:69: 01:55:a6:60:28:c7:b5:c1:35:51:c8:f9:55:7c:5c:cd:63:4b: a8:e3:49:12:c4:c1:6a:6d:21:74:ca:ed:9f:4d:ae:44:7f:c1: 35:6b:68:92:fe:f1:8c:91:2d:ed:2d:15:91:53:41:cc:a2:fe: 7e:07:74:28:22:b3:55:b3:11:1a:70:0f:00:14:af:58:db:02: ce:ab:55:8c:65:f2:30:0a:f2:34:93:ad:df:93:5b:85:b6:b0: 50:9f:9a:dc:f6:1f:be:eb:3c:4c:68:f0:f5:00:77:ec:e6:21: 06:b2:22:07:06:e2:ee:14:79:b4:0e:c7:91:90:03:49:46:4a: d5:e6:4a:ba:18:f7:75:09:c3:c4:c7:a3:6e:98:f5:7b:d7:e3: 5e:f6:a4:28:3f:39:f2:06:1d:cc:bc:48:3f:c5:2e:cc:7b:b2: 63:7b:6e:dc:e2:8a:33:08:09:b6:48:f0:c3:aa:24:fa:00:31: 31:f1:1a:63:b1:fb:73:c6:47:e1:ac:8b:d6:d4:22:2b:f9:0a: 60:28:1c:d0:2c:b3:81:fa:aa:91:de:bd:a4:d2:85:8a:25:94: 9d:aa:ef:02 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4o1wrfZGrjLBWCxLfI0G+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODcyOGU5YmQzNzM5OWRmOWZmYWU1ODdiZDA2ODg0YjM1MGE2NWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzi883XZBa9lV5cUlvHIixthahUB IwpAB5L9EXSPfBujtu1IgWm8Bn5JaddIB46XrxIkOk+Zi4Fr9Wh6k6T7VIZCtTSB LTdbYLeIdToFBzlS8qvUyqeqMBC23cmaNhxnMy/Byb4syKu5D9rTcgeps50md+nU gmxxy3cHm/R0Cbr9ZNLftitK2OamQruRWGh7TVkV5pD48OPbYegMLM8LCslDw2l9 NgGMvRh0vEZ/3wroKQunu9jj44biT3f6zi4qJep5LPFiinPJq1Yx5Pv9hVlZyTzC uVeqJvqRo5UngBPqdieWB3gxRPzAk6V+DfvakIJRL9GePQDUPVPggZh/fwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDhyjpvTc5nfn/rlh70GiEs1CmW3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3L2JlM2Uy NS04ODFjLTRhZWMtYTkzMi1mOGNmYTMzZDY4NGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvYmUzZTI1 LTg4MWMtNGFlYy1hOTMyLWY4Y2ZhMzNkNjg0ZS8xL09IS09tOU56bWQtZi11V0h2 UWFJU3pVS1piYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubhsMA0EAgACMAcDBQMqCyaAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMgrTANBgkqhkiG9w0BAQsFAAOCAQEAblhzcNCqNQh+ pFeH3tgq5NbOwVSyINm4v5gM+azT1IAMcE1pAVWmYCjHtcE1Ucj5VXxczWNLqONJ EsTBam0hdMrtn02uRH/BNWtokv7xjJEt7S0VkVNBzKL+fgd0KCKzVbMRGnAPABSv WNsCzqtVjGXyMAryNJOt35NbhbawUJ+a3PYfvus8TGjw9QB37OYhBrIiBwbi7hR5 tA7HkZADSUZK1eZKuhj3dQnDxMejbpj1e9fjXvakKD858gYdzLxIP8UuzHuyY3tu 3OKKMwgJtkjww6ok+gAxMfEaY7H7c8ZH4ayL1tQiK/kKYCgc0Cyzgfqqkd69pNKF iiWUnarvAg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:53:22 2026 by rpki-client