This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer File: O_xkMfUzO23dMeg7aWgtjo7gb8E.cer (raw, json) Hash identifier: ZGE1ZMdrPjzqwMoDohLx8cJTNw9d39rmfwiO5F3pJuI= Subject key identifier: 3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F809856B9AE56051E92913AD48FFC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29423 IP: 45.12.48.0/22 IP: 45.144.132.0/22 IP: 185.102.92.0/22 IP: 185.201.144.0/22 IP: 185.241.32.0/22 IP: 2a06:2380::/29 IP: 2a0a:c5c0::/29 IP: 2a0e:9700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:80:98:56:b9:ae:56:05:1e:92:91:3a:d4:8f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:74:09:16:3a:c3:8b:69:95:a3:99:25:80:94: 3a:b7:68:4a:ac:e7:49:9f:3a:fc:c7:e6:9c:f1:1c: b9:be:1e:ac:83:c5:ea:4a:35:40:e3:6f:3b:b3:33: 47:62:55:14:88:f6:c5:a7:23:ef:97:12:05:05:00: 54:ba:12:a0:b6:05:53:60:75:6b:18:da:93:db:6e: fe:d9:01:2b:46:f3:32:cf:aa:d8:66:a8:e6:40:7d: ff:97:8b:e9:e2:1e:40:e6:00:31:56:a4:77:b6:59: 0d:1c:37:b9:b1:68:62:9e:a7:d2:aa:55:12:6a:d2: 42:dc:e2:b4:b9:aa:77:0e:07:4b:f4:78:5b:13:e1: 51:f9:ef:74:46:4b:be:84:33:c9:5a:fd:b9:d7:3b: 52:37:aa:f8:cc:25:d4:a7:45:22:0c:20:f8:00:3d: af:00:75:16:ac:d4:03:8e:44:9b:fc:56:c1:ec:0c: be:24:2f:9b:5e:55:52:60:6a:43:1a:e9:bb:d6:cc: df:41:56:d8:23:45:86:55:0f:91:f6:a1:f8:c7:1a: 2a:1b:3e:d0:b0:8a:9a:d0:31:b7:60:19:01:71:fa: 42:5b:69:de:71:ad:c9:4e:ca:3d:19:12:2c:5c:92: dd:1a:fe:54:de:8c:fe:b2:96:97:fb:86:8a:e7:f0: 8c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.48.0/22 45.144.132.0/22 185.102.92.0/22 185.201.144.0/22 185.241.32.0/22 IPv6: 2a06:2380::/29 2a0a:c5c0::/29 2a0e:9700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29423 Signature Algorithm: sha256WithRSAEncryption 16:92:a8:cb:ab:16:87:f0:ab:d5:aa:fa:fc:e5:0d:52:1c:cf: 24:b8:3e:ad:7a:0a:7f:20:14:aa:10:67:f6:61:24:0e:9f:41: 03:60:fe:b6:6a:bb:f3:e7:ba:41:da:12:28:fb:1d:6d:4c:75: 63:57:41:7e:76:9b:cb:3f:5e:db:84:0f:59:a6:07:27:78:a2: 38:41:2a:93:73:69:27:ff:a2:41:7e:9f:e6:9f:7a:be:df:22: 97:71:14:54:25:81:55:96:a7:d3:eb:72:2e:b9:00:99:de:e1: a4:5a:7a:f4:60:33:15:10:20:74:df:9b:59:18:c4:80:32:e7: da:26:2a:c2:32:04:84:f9:f2:63:8a:0c:cd:77:39:ef:97:bb: d4:a1:70:64:fc:b7:ce:cb:4a:54:85:fc:bf:00:48:2d:28:0a: 63:56:20:75:78:b9:88:9d:22:3d:3a:01:c8:97:6e:f0:5a:f2: d9:49:11:11:eb:75:b9:7c:fe:57:ff:0b:41:d4:08:77:31:ab: 63:1d:ed:95:dd:fd:6a:fe:51:f6:37:34:1d:b6:c0:17:07:27: f0:8d:d8:87:dc:7e:17:94:92:58:6f:9a:8e:77:39:e0:1b:f2: 0d:f3:9d:e7:81:61:e2:08:84:4e:b9:36:d7:5d:41:97:47:03: b0:66:64:f8 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgISAZt8f4CYVrmuVgUekpE61I/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmZjNjQzMWY1MzMzYjZkZGQzMWU4M2I2OTY4MmQ4ZThlZTA2ZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XQJFjrDi2mVo5klgJQ6t2hKrOdJ nzr8x+ac8Ry5vh6sg8XqSjVA4287szNHYlUUiPbFpyPvlxIFBQBUuhKgtgVTYHVr GNqT227+2QErRvMyz6rYZqjmQH3/l4vp4h5A5gAxVqR3tlkNHDe5sWhinqfSqlUS atJC3OK0uap3DgdL9HhbE+FR+e90Rku+hDPJWv251ztSN6r4zCXUp0UiDCD4AD2v AHUWrNQDjkSb/FbB7Ay+JC+bXlVSYGpDGum71szfQVbYI0WGVQ+R9qH4xxoqGz7Q sIqa0DG3YBkBcfpCW2neca3JTso9GRIsXJLdGv5U3oz+spaX+4aK5/CM9wIDAQAB o4IC1DCCAtAwHQYDVR0OBBYEFDv8ZDH1Mztt3THoO2loLY6O4G/BMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyL2Y1YThi MS02ZTIyLTQ5NjEtYjM4Yi1mZTAxZWVjNDBlYzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvZjVhOGIx LTZlMjItNDk2MS1iMzhiLWZlMDFlZWM0MGVjMS8xL09feGtNZlV6TzIzZE1lZzdh V2d0am83Z2I4RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF BwEHAQH/BEUwQzAkBAIAATAeAwQCLQwwAwQCLZCEAwQCuWZcAwQCucmQAwQCufEg MBsEAgACMBUDBQMqBiOAAwUDKgrFwAMFAyoOlwAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICcu8wDQYJKoZIhvcNAQELBQADggEBABaSqMurFofwq9Wq+vzlDVIczyS4 Pq16Cn8gFKoQZ/ZhJA6fQQNg/rZqu/PnukHaEij7HW1MdWNXQX52m8s/XtuED1mm Byd4ojhBKpNzaSf/okF+n+afer7fIpdxFFQlgVWWp9Prci65AJne4aRaevRgMxUQ IHTfm1kYxIAy59omKsIyBIT58mOKDM13Oe+Xu9ShcGT8t87LSlSF/L8ASC0oCmNW IHV4uYidIj06AciXbvBa8tlJERHrdbl8/lf/C0HUCHcxq2Md7ZXd/Wr+UfY3NB22 wBcHJ/CN2IfcfheUklhvmo53OeAb8g3zneeBYeIIhE65NtddQZdHA7BmZPg= -----END CERTIFICATE-----Generated at Mon Jan 26 14:24:10 2026 by rpki-client