This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer File: O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer (raw, json) Hash identifier: g3ndW96ZI5NG9EidxAiNlDY+CcyEn/8BpjgD+6A2eYo= Subject key identifier: 3B:F4:68:D1:51:5A:D6:F1:4C:A6:9C:F9:C7:72:E5:CB:57:D2:77:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3543C2D8DE976EB3B91275424EAC14 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199296 IP: 91.233.136.0/22 IP: 95.141.243.0/24 IP: 2a13:60c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:43:c2:d8:de:97:6e:b3:b9:12:75:42:4e:ac:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bf468d1515ad6f14ca69cf9c772e5cb57d277d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2e:fb:17:60:5b:64:6f:95:d1:c2:19:9d:9d: 6c:13:3d:dc:16:60:52:3a:aa:99:68:94:3f:b4:36: c5:66:c7:bc:8d:54:7d:21:1d:1b:73:c6:42:df:5a: 0e:c4:d6:bc:e8:10:cd:9a:61:e0:c5:d6:08:c8:64: 3f:06:33:77:75:32:0f:9c:df:bb:27:ac:41:cc:a5: 29:cc:d0:5b:34:af:f3:0b:73:1f:eb:2c:17:52:71: ed:be:e0:04:31:6e:5d:ff:04:83:7a:cc:20:da:de: 6f:c6:29:67:bd:6b:3e:6c:14:5d:bb:2c:61:78:c4: f7:e8:a9:ad:09:19:84:2f:8d:f3:af:10:2c:de:27: 92:fd:32:62:24:18:f1:27:2b:0b:b3:07:80:be:56: 73:5a:91:b7:2d:0d:43:61:93:72:e2:b6:5a:ac:3f: 74:3a:51:d7:a7:1d:30:6a:32:72:87:a9:1e:4c:c8: ef:28:60:de:b0:9f:d7:8f:ba:f8:02:25:5f:f9:5a: bb:87:cd:ee:1a:fe:6f:c3:46:9d:ea:b2:62:8c:56: 55:11:f1:d1:ee:5e:d3:93:df:f2:6b:b7:b8:6e:dd: 90:51:b3:9e:8c:ae:3e:6e:54:09:f7:64:89:af:75: f2:c4:67:d8:a9:69:fc:05:c8:68:43:3a:cc:b4:47: 63:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F4:68:D1:51:5A:D6:F1:4C:A6:9C:F9:C7:72:E5:CB:57:D2:77:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.136.0/22 95.141.243.0/24 IPv6: 2a13:60c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199296 Signature Algorithm: sha256WithRSAEncryption 39:2b:e7:28:6a:15:6f:1e:ba:99:ff:69:5f:5f:3f:4f:a5:f3: 9b:e2:9b:de:f7:c3:63:fd:f0:70:ea:31:38:3b:a9:1a:51:d6: 87:e0:ab:ab:a7:fa:f8:29:8a:7b:eb:09:14:7a:a4:d8:f4:9e: 7c:f6:b2:5c:34:b3:d7:7b:df:2a:a4:1a:a2:54:7d:a3:33:2d: 43:02:ba:d7:5e:52:ad:db:bf:e9:e3:f4:86:77:72:c2:a8:17: b1:07:a3:2f:01:d8:c1:3a:14:39:7f:23:7f:81:84:1b:c8:17: 01:ec:b6:85:14:d4:11:97:01:af:06:f7:8e:19:f4:e5:ab:f0: f4:48:1c:07:8a:d2:95:b8:21:36:75:06:fe:ca:d5:20:e5:47: 50:79:fb:26:2b:e6:c7:0f:fc:79:25:e9:d5:83:26:45:bb:16: 3d:e9:af:27:c4:bf:a2:d8:b5:39:22:87:ff:b9:d1:20:ac:47: c3:05:1e:7d:1a:7c:c5:31:c3:b6:47:02:6a:8c:7e:63:7f:54: 83:f3:ab:4f:6f:18:10:f6:1e:c6:97:2c:d5:9e:3d:29:97:fa: d8:59:c4:e9:6b:53:68:9b:3d:de:6f:9c:5a:d3:43:e9:98:ce: 7b:c4:20:14:dc:93:c9:bb:f1:ab:59:09:0b:f3:7b:9b:c7:c3: 24:02:e4:8e -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7NUPC2N6XbrO5EnVCTqwUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmY0NjhkMTUxNWFkNmYxNGNhNjljZjljNzcyZTVjYjU3ZDI3N2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly77F2BbZG+V0cIZnZ1sEz3cFmBS OqqZaJQ/tDbFZse8jVR9IR0bc8ZC31oOxNa86BDNmmHgxdYIyGQ/BjN3dTIPnN+7 J6xBzKUpzNBbNK/zC3Mf6ywXUnHtvuAEMW5d/wSDeswg2t5vxilnvWs+bBRduyxh eMT36KmtCRmEL43zrxAs3ieS/TJiJBjxJysLsweAvlZzWpG3LQ1DYZNy4rZarD90 OlHXpx0wajJyh6keTMjvKGDesJ/Xj7r4AiVf+Vq7h83uGv5vw0ad6rJijFZVEfHR 7l7Tk9/ya7e4bt2QUbOejK4+blQJ92SJr3XyxGfYqWn8BchoQzrMtEdjgQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFDv0aNFRWtbxTKac+cdy5ctX0nfWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0LzgyMWYz NS1hODgwLTRkNjQtYWRjMC00NjExMDQ2ZjFhNGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvODIxZjM1 LWE4ODAtNGQ2NC1hZGMwLTQ2MTEwNDZmMWE0ZS8xL09fUm8wVkZhMXZGTXBwejV4 M0xseTFmU2Q5WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCW+mIAwQAX43zMA0EAgACMAcDBQMqE2DAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMKgDANBgkqhkiG9w0BAQsFAAOCAQEAOSvn KGoVbx66mf9pX18/T6Xzm+Kb3vfDY/3wcOoxODupGlHWh+Crq6f6+CmKe+sJFHqk 2PSefPayXDSz13vfKqQaolR9ozMtQwK6115Srdu/6eP0hndywqgXsQejLwHYwToU OX8jf4GEG8gXAey2hRTUEZcBrwb3jhn05avw9EgcB4rSlbghNnUG/srVIOVHUHn7 Jivmxw/8eSXp1YMmRbsWPemvJ8S/oti1OSKH/7nRIKxHwwUefRp8xTHDtkcCaox+ Y39Ug/OrT28YEPYexpcs1Z49KZf62FnE6WtTaJs93m+cWtND6ZjOe8QgFNyTybvx q1kJC/N7m8fDJALkjg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:09:06 2026 by rpki-client