This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Oh7rvRjfqoBV4TVRugJBZV2qo1I.cer File: Oh7rvRjfqoBV4TVRugJBZV2qo1I.cer (raw, json) Hash identifier: m6rG+DP0sTPSlgizEQD5uC1q5JKHlkeaT9LwDsdVDV8= Subject key identifier: 3A:1E:EB:BD:18:DF:AA:80:55:E1:35:51:BA:02:41:65:5D:AA:A3:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019ACA345AE0FAC43E8DD1BCEB1369595CB3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/Oh7rvRjfqoBV4TVRugJBZV2qo1I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 28 Nov 2025 11:23:40 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 49431 IP: 91.212.249.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:34:5a:e0:fa:c4:3e:8d:d1:bc:eb:13:69:59:5c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 28 11:23:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3a1eebbd18dfaa8055e13551ba0241655daaa352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:55:c8:5c:27:3c:a0:87:2e:c0:85:84:19:a8: 90:1b:c5:21:3e:60:bd:37:9e:88:d2:e4:32:c5:b8: 8d:bd:24:52:88:46:60:7a:e9:ae:f1:54:84:7c:84: 46:50:77:a2:6f:28:e3:4e:91:20:15:07:c6:8c:00: dd:07:23:d1:86:c7:8f:9c:ce:72:be:4d:b1:33:f3: 14:5e:9c:b4:be:5c:4a:e8:02:20:ca:e7:6a:0e:50: 8d:fd:65:8b:2c:fd:12:0c:a7:17:ab:6a:01:ea:89: 38:c0:c2:a8:41:8c:7f:d9:1f:70:9d:8b:fc:5d:03: 35:5e:c0:ae:3f:d8:41:a9:4d:bc:1e:1e:78:fb:66: 83:b6:e8:59:01:82:17:52:75:2d:47:3e:67:2f:ed: 3c:c1:50:c4:00:0c:66:0e:90:f7:09:be:4c:e9:7b: 0b:7a:b5:5f:79:a4:01:6a:30:18:99:06:fd:47:b4: 13:87:d5:f8:a5:a8:9b:d1:77:68:61:f6:de:52:5d: 32:b7:02:d8:de:0f:7e:1d:79:42:9c:86:f4:fc:90: 0a:43:45:d5:90:d9:f5:31:55:6c:14:96:43:20:f6: d3:0d:47:ab:0c:45:75:10:e7:d0:4b:a9:d7:62:fe: 4f:dd:e3:fb:f4:a9:80:87:f6:ce:01:5d:01:dc:11: a8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1E:EB:BD:18:DF:AA:80:55:E1:35:51:BA:02:41:65:5D:AA:A3:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/Oh7rvRjfqoBV4TVRugJBZV2qo1I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.249.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49431 Signature Algorithm: sha256WithRSAEncryption 12:39:91:45:cf:f3:b3:98:2c:23:20:99:a8:2f:17:d3:93:2e: 00:9d:54:27:64:ca:ea:e9:de:7d:e1:a7:57:ef:9c:16:d6:b0: 44:64:e0:74:08:bb:34:d3:0b:d0:cb:31:cf:36:cb:fc:da:c5: ff:d9:f6:fb:22:01:38:8d:e5:ca:dc:b3:c1:02:d4:07:27:af: d6:b7:12:16:b1:51:df:77:81:1a:13:b1:51:1c:b6:87:f6:be: b4:19:c2:d6:01:d0:70:7d:1f:25:04:47:ca:e0:10:cd:05:08: 26:f7:ed:53:16:07:9e:24:0a:d4:19:4e:da:f4:4e:84:5a:00: 42:fe:53:8c:c9:bc:4f:5f:a7:28:ed:2c:d4:89:4a:06:36:f7: 78:12:b9:9c:19:01:c0:bb:6b:c5:f6:73:3a:ec:54:a2:79:11: 70:15:49:75:3f:e0:08:a4:d3:b1:34:bc:7d:de:99:66:9a:f3: 69:f2:fe:74:63:6f:b0:1e:bd:17:ff:cf:bf:4a:f4:1b:9f:d2: 6b:ee:53:81:5d:b5:6a:d6:95:b5:77:bf:c5:9d:46:a5:46:be: 05:e8:7a:cc:34:de:44:b7:07:4a:63:ab:d0:ec:f1:6c:0a:cd: 82:b2:24:44:89:86:fc:15:01:64:ad:9f:5e:38:ee:91:c7:22: df:e0:65:a1 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZrKNFrg+sQ+jdG86xNpWVyzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI4MTEyMzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTFlZWJiZDE4ZGZhYTgwNTVlMTM1NTFiYTAyNDE2NTVkYWFhMzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFXIXCc8oIcuwIWEGaiQG8UhPmC9 N56I0uQyxbiNvSRSiEZgeumu8VSEfIRGUHeibyjjTpEgFQfGjADdByPRhsePnM5y vk2xM/MUXpy0vlxK6AIgyudqDlCN/WWLLP0SDKcXq2oB6ok4wMKoQYx/2R9wnYv8 XQM1XsCuP9hBqU28Hh54+2aDtuhZAYIXUnUtRz5nL+08wVDEAAxmDpD3Cb5M6XsL erVfeaQBajAYmQb9R7QTh9X4paib0XdoYfbeUl0ytwLY3g9+HXlCnIb0/JAKQ0XV kNn1MVVsFJZDIPbTDUerDEV1EOfQS6nXYv5P3eP79KmAh/bOAV0B3BGoCQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDoe670Y36qAVeE1UboCQWVdqqNSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2Lzk5OWVh Zi0xY2YwLTRmNDgtODc5MS1kMWU0YTUzNzY1MTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvOTk5ZWFm LTFjZjAtNGY0OC04NzkxLWQxZTRhNTM3NjUxMC8xL09oN3J2UmpmcW9CVjRUVlJ1 Z0pCWlYycW8xSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9T5MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDBFzANBgkqhkiG9w0BAQsFAAOCAQEAEjmRRc/zs5gsIyCZqC8X05MuAJ1UJ2TK 6unefeGnV++cFtawRGTgdAi7NNML0MsxzzbL/NrF/9n2+yIBOI3lytyzwQLUByev 1rcSFrFR33eBGhOxURy2h/a+tBnC1gHQcH0fJQRHyuAQzQUIJvftUxYHniQK1BlO 2vROhFoAQv5TjMm8T1+nKO0s1IlKBjb3eBK5nBkBwLtrxfZzOuxUonkRcBVJdT/g CKTTsTS8fd6ZZprzafL+dGNvsB69F//Pv0r0G5/Sa+5TgV21ataVtXe/xZ1GpUa+ Beh6zDTeRLcHSmOr0OzxbArNgrIkRImG/BUBZK2fXjjukcci3+BloQ== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:17 2025 by rpki-client