This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer File: OIN-SKr1mLyrVKX8iuQ7F74lQik.cer (raw, json) Hash identifier: glgttCgfg8E+8j/TG+M0hOuAPP2bqCI9bKfPZ8Kk/UA= Subject key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36928FA23E9E522A9A019FC33D01B7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212816 IP: 46.18.108.0/24 IP: 2a11:8b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:92:8f:a2:3e:9e:52:2a:9a:01:9f:c3:3d:01:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38837e48aaf598bcab54a5fc8ae43b17be254229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fd:52:ef:dc:3c:db:78:da:6d:f4:66:01:d1: 1b:1f:86:7d:5c:c0:6b:c2:42:a3:9f:17:ab:ff:31: 4b:90:fc:92:cb:b5:25:45:16:7e:d1:cb:05:23:0d: 3b:c9:05:7b:f4:0a:8d:01:5c:0e:88:23:54:a4:53: a0:e1:6a:55:2e:56:80:67:df:ce:d3:1c:d6:80:a6: 4c:03:a5:f4:6c:78:f6:1a:8b:f1:1d:bb:32:eb:da: 22:ef:8f:9d:e5:04:e5:05:81:b3:d1:d3:cb:97:98: a8:d3:f0:d9:d8:49:73:78:b4:4d:11:9a:93:12:ac: 3f:86:b2:01:17:4f:d8:d0:42:c9:49:cc:8a:10:e5: 59:3c:4d:0a:e7:54:ed:a0:c0:46:d8:f3:65:c1:f3: 64:01:9e:0d:f4:3d:a2:34:eb:28:4e:3e:96:d5:81: e2:96:8c:5f:dc:48:ad:20:db:99:16:e3:c9:0d:cc: 4a:6d:3d:81:4e:55:88:77:54:70:1e:9a:7c:dc:c0: 4d:a7:8f:c3:aa:d0:b9:6f:26:b9:f1:b6:d5:4c:ad: 62:f1:ae:60:3d:52:b0:4b:85:6d:c6:ae:0e:a4:2e: 41:81:83:cb:1d:c3:d0:ff:c1:6c:9a:57:ca:ba:84: b0:6a:0a:a2:86:84:d5:01:85:e5:9e:02:5f:db:02: 87:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.18.108.0/24 IPv6: 2a11:8b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212816 Signature Algorithm: sha256WithRSAEncryption 35:ed:e2:34:d1:12:64:eb:bf:9c:3b:6e:62:e8:5a:6f:8c:9a: 5a:64:45:f1:78:c8:12:54:23:76:fb:30:87:0f:7b:24:c2:3d: 03:c6:51:ef:2e:20:09:81:c7:6a:55:4f:88:51:f6:58:2a:b4: a7:6d:ee:a9:71:17:7e:bd:2d:07:cb:fd:d4:3d:6f:dd:42:55: 1f:57:bb:e0:d1:18:5c:a2:92:71:25:60:81:e5:ac:e5:32:ea: 15:94:86:34:13:61:25:8b:ee:56:a3:82:18:87:44:c0:38:9c: 27:eb:de:a1:73:d1:0d:b0:4f:2b:05:73:41:87:c8:a5:0b:d8: 34:37:0a:a6:45:c8:74:84:bb:b6:0c:79:1c:39:1f:09:64:91: 00:cb:23:fc:58:23:fb:eb:41:b6:37:f5:2c:47:46:df:c4:6f: d4:46:17:30:b9:c8:3f:49:c5:01:90:54:d1:37:e7:49:03:df: e7:d7:de:c1:75:2c:6e:12:03:09:da:52:3c:aa:71:a0:c3:56: 83:04:5d:d0:47:70:69:43:1d:0a:39:b6:3e:08:90:45:5e:65: 39:22:a5:f0:bc:9f:9a:cf:2a:51:ca:60:28:fe:54:00:c6:93: b5:96:b7:ec:a2:b9:90:b5:ea:b8:2b:3a:2f:f9:5c:d5:98:42: 82:8e:8e:c0 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NpKPoj6eUiqaAZ/DPQG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODgzN2U0OGFhZjU5OGJjYWI1NGE1ZmM4YWU0M2IxN2JlMjU0MjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7f1S79w823jabfRmAdEbH4Z9XMBr wkKjnxer/zFLkPySy7UlRRZ+0csFIw07yQV79AqNAVwOiCNUpFOg4WpVLlaAZ9/O 0xzWgKZMA6X0bHj2GovxHbsy69oi74+d5QTlBYGz0dPLl5io0/DZ2ElzeLRNEZqT Eqw/hrIBF0/Y0ELJScyKEOVZPE0K51TtoMBG2PNlwfNkAZ4N9D2iNOsoTj6W1YHi loxf3EitINuZFuPJDcxKbT2BTlWId1RwHpp83MBNp4/DqtC5bya58bbVTK1i8a5g PVKwS4Vtxq4OpC5BgYPLHcPQ/8FsmlfKuoSwagqihoTVAYXlngJf2wKHdQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDiDfkiq9Zi8q1Sl/IrkOxe+JUIpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlL2RmZmJj OC1iMTQ5LTQ2YjQtYmJiOC0zMWVhMjA5NGI1NTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvZGZmYmM4 LWIxNDktNDZiNC1iYmI4LTMxZWEyMDk0YjU1Ny8xL09JTi1TS3IxbUx5clZLWDhp dVE3Rjc0bFFpay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQALhJsMA0EAgACMAcDBQMqEYsAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM/UDANBgkqhkiG9w0BAQsFAAOCAQEANe3iNNESZOu/ nDtuYuhab4yaWmRF8XjIElQjdvswhw97JMI9A8ZR7y4gCYHHalVPiFH2WCq0p23u qXEXfr0tB8v91D1v3UJVH1e74NEYXKKScSVggeWs5TLqFZSGNBNhJYvuVqOCGIdE wDicJ+veoXPRDbBPKwVzQYfIpQvYNDcKpkXIdIS7tgx5HDkfCWSRAMsj/Fgj++tB tjf1LEdG38Rv1EYXMLnIP0nFAZBU0TfnSQPf59fewXUsbhIDCdpSPKpxoMNWgwRd 0EdwaUMdCjm2PgiQRV5lOSKl8Lyfms8qUcpgKP5UAMaTtZa37KK5kLXquCs6L/lc 1ZhCgo6OwA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:00:34 2026 by rpki-client