This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer File: OSR_d6OuCvcerAMlZEn10pLP_XQ.cer (raw, json) Hash identifier: 4+eiitDDZt0ZyllB7xJqgB4wSltMKsEvu0HkUO21XsQ= Subject key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B353D6600259752E9836E7E56521B19 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 45037 IP: 31.207.88.0/21 IP: 93.189.32.0/21 IP: 109.70.128.0/21 IP: 185.56.108.0/22 IP: 2a03:d300::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:3d:66:00:25:97:52:e9:83:6e:7e:56:52:1b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39247f77a3ae0af71eac03256449f5d292cffd74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:48:2b:76:7c:75:2d:54:70:a7:63:e6:6a:ca: b7:3f:be:5e:af:a6:54:0f:33:6f:0f:f1:63:3d:c4: 92:99:55:1a:31:77:d1:50:66:e5:d6:4e:74:d1:a5: 0c:62:1b:37:ca:7a:46:12:09:6e:62:d2:4c:1a:a6: 6b:f1:cf:47:42:a5:1a:22:6c:df:31:78:f0:98:bc: e4:46:bf:d4:1d:b1:2a:c1:48:cd:21:49:05:76:ce: 69:c7:eb:77:33:64:94:61:65:38:19:7e:16:28:40: 61:6f:b1:9c:ba:df:49:00:34:ac:86:67:78:68:29: f7:96:6d:12:3c:4a:77:02:e0:72:bb:c3:3f:fc:bc: d2:4a:9a:f7:6d:ee:85:99:90:ee:5f:21:29:f1:57: 6c:0a:9a:26:91:3a:ba:f1:b8:f9:6e:b6:0d:fb:ff: dd:f8:4b:b0:35:2e:36:6e:ab:b4:70:78:70:d9:ef: 96:89:b5:a0:ed:62:c6:f9:c8:93:5c:1f:7f:4e:48: c4:72:43:cc:d0:20:2d:8a:bf:c6:6a:ec:68:67:5c: 70:43:7c:4a:ff:6d:3b:27:d8:a8:fa:71:b3:fd:95: df:28:79:c0:87:18:dd:ca:17:84:45:42:11:5d:6d: 61:89:9d:d8:b1:a4:9f:f5:3e:0a:38:02:1f:cb:b4: f8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.207.88.0/21 93.189.32.0/21 109.70.128.0/21 185.56.108.0/22 IPv6: 2a03:d300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 45037 Signature Algorithm: sha256WithRSAEncryption 89:9c:bf:b6:f0:33:ed:8f:f8:67:ae:f2:78:00:ea:e2:c4:a3: c3:1f:1a:f7:f5:51:37:5c:55:87:6d:e4:ba:7f:a5:4d:20:1c: d4:b1:93:e8:db:09:6e:0b:d2:27:19:ff:9b:a4:a6:aa:67:ab: cb:3b:50:3f:5f:b3:d3:42:2f:0d:0d:1a:90:31:e7:10:30:24: 58:64:da:fb:1e:67:11:d7:af:7e:68:13:21:ca:2b:ec:5e:f8: 29:f8:3e:0a:06:aa:6f:cd:1c:9f:20:75:33:13:32:31:0f:a3: ef:5e:49:97:8b:91:50:69:d1:e3:ee:c0:cb:66:51:47:2d:32: d9:e8:e5:bb:17:f8:a4:e5:5d:df:d8:3d:5f:90:eb:23:69:f0: ed:85:2d:a4:cf:3e:83:97:56:0b:a3:3a:f1:e7:c2:3b:5f:49: cf:05:dc:79:3a:92:ea:34:a3:e2:38:9b:bc:43:59:c3:65:d8: ce:8c:a4:40:5a:80:e3:f4:e8:5f:13:d4:66:e6:92:e1:d4:c1: 90:fe:41:63:06:eb:a5:bc:27:2a:92:69:e9:aa:7e:5f:c4:1f: a3:03:d4:f3:c3:ef:7a:db:dc:a6:87:d1:b4:a7:7a:a6:15:1b: 37:17:b7:a1:7f:0f:a0:a9:a1:cb:30:88:a6:db:4b:56:ab:91: a8:2d:6e:cd -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt7NT1mACWXUumDbn5WUhsZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTI0N2Y3N2EzYWUwYWY3MWVhYzAzMjU2NDQ5ZjVkMjkyY2ZmZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUgrdnx1LVRwp2Pmasq3P75er6ZU DzNvD/FjPcSSmVUaMXfRUGbl1k500aUMYhs3ynpGEgluYtJMGqZr8c9HQqUaImzf MXjwmLzkRr/UHbEqwUjNIUkFds5px+t3M2SUYWU4GX4WKEBhb7Gcut9JADSshmd4 aCn3lm0SPEp3AuByu8M//LzSSpr3be6FmZDuXyEp8VdsCpomkTq68bj5brYN+//d +EuwNS42bqu0cHhw2e+WibWg7WLG+ciTXB9/TkjEckPM0CAtir/GauxoZ1xwQ3xK /207J9io+nGz/ZXfKHnAhxjdyheERUIRXW1hiZ3YsaSf9T4KOAIfy7T48QIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFDkkf3ejrgr3HqwDJWRJ9dKSz/10MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzgyZWQ5 Yy03YzEzLTQ4YjktYTg4Ni1jZDY2YWQ1MzQ4MTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvODJlZDlj LTdjMTMtNDhiOS1hODg2LWNkNjZhZDUzNDgxMi8xL09TUl9kNk91Q3ZjZXJBTWxa RW4xMHBMUF9YUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDH89YAwQDXb0gAwQDbUaAAwQCuThsMA0EAgAC MAcDBQAqA9MAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCv7TANBgkqhkiG9w0B AQsFAAOCAQEAiZy/tvAz7Y/4Z67yeADq4sSjwx8a9/VRN1xVh23kun+lTSAc1LGT 6NsJbgvSJxn/m6SmqmeryztQP1+z00IvDQ0akDHnEDAkWGTa+x5nEdevfmgTIcor 7F74Kfg+Cgaqb80cnyB1MxMyMQ+j715Jl4uRUGnR4+7Ay2ZRRy0y2ejluxf4pOVd 39g9X5DrI2nw7YUtpM8+g5dWC6M68efCO19JzwXceTqS6jSj4jibvENZw2XYzoyk QFqA4/ToXxPUZuaS4dTBkP5BYwbrpbwnKpJp6ap+X8QfowPU88PvetvcpofRtKd6 phUbNxe3oX8PoKmhyzCIpttLVquRqC1uzQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:10 2026 by rpki-client