This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer File: Ojz5kZosgUbJb1oUsVdFm3lLai4.cer (raw, json) Hash identifier: pjRKJBEXwR9Y13rrahp+G6Vo/RvU3+JbfedG6U9Id3k= Subject key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F20972F4BE28C3E4F3067761D8B17 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34825 IP: 147.75.208.0/20 IP: 185.89.216.0/22 IP: 2a03:83e0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:20:97:2f:4b:e2:8c:3e:4f:30:67:76:1d:8b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8f:15:f3:9a:bc:6b:78:ce:67:8c:2f:60:99: 6e:74:1a:c9:ca:fa:02:18:5d:eb:b1:9e:83:2e:63: 30:53:8b:94:c4:b4:63:27:df:7e:f9:3f:6b:43:2b: 4b:06:30:eb:d9:a3:ed:ea:5e:36:81:6a:3b:d3:9e: 85:b0:d3:57:63:5d:b8:87:ac:3c:89:40:f6:dd:62: 2e:a8:2e:15:44:d0:72:fe:68:49:4c:64:48:c0:ce: ad:ac:66:d5:b5:81:ee:34:46:7d:f8:8c:24:e8:b6: 93:dd:d8:98:82:04:ee:64:14:b6:71:0b:da:0c:42: 8e:1b:c9:90:4a:21:88:30:23:35:d0:0d:bc:3f:ab: 79:4f:54:01:ea:c8:f9:71:c6:99:11:57:ed:05:09: cb:d7:bc:f9:08:59:d5:11:d4:48:aa:4e:20:a8:a0: 48:59:03:e5:5a:94:7f:3c:04:80:3e:25:ab:8f:2f: ab:a4:4d:eb:40:cb:37:0a:b0:64:29:1a:2e:5b:21: a8:c7:c8:8a:5b:ce:07:9d:44:56:f8:58:01:67:69: 62:11:3c:ed:5d:15:56:25:81:cc:d8:a9:1d:0e:e8: ed:d6:2f:a0:02:5b:fc:17:3f:81:5a:63:4c:aa:c4: 73:bd:f0:03:d1:97:1d:47:3f:7b:fd:73:15:a1:75: 25:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.75.208.0/20 185.89.216.0/22 IPv6: 2a03:83e0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34825 Signature Algorithm: sha256WithRSAEncryption 27:7e:89:fc:13:a1:bf:fa:1e:ac:cf:b8:7d:45:6d:e9:53:80: 28:8b:b3:af:27:7d:91:06:8e:61:d6:73:a4:0b:bf:b9:2d:65: 9f:c0:88:16:60:30:d7:03:88:75:11:51:a7:28:f6:66:88:3a: 3b:96:b7:8c:56:e8:fd:08:1d:5b:c6:e3:e1:34:1d:39:db:e1: ab:be:6b:66:34:37:58:41:a5:81:de:83:bc:6a:0e:21:22:80: 4f:d9:6e:2a:83:1b:c7:b7:9c:f2:cb:0b:4d:e0:da:35:22:fc: ab:a9:34:36:3d:b2:82:ae:c8:1a:01:c5:a0:0b:84:88:b1:40: a4:5f:b6:af:04:a4:8f:42:f4:dc:9d:6f:e0:06:26:4f:4e:6f: fd:ad:a2:14:50:65:38:46:89:9f:33:8f:4a:7c:58:a6:9c:0b: bb:93:69:ad:03:2a:88:bc:7e:ba:57:ce:0e:37:1e:c0:44:81: 49:a1:bc:d9:a8:cd:61:c7:ef:2e:31:1a:86:04:20:c7:13:fb: c0:aa:a2:1b:b5:e9:61:de:c0:4c:37:f1:4b:31:7e:62:6b:c1: 0c:fb:0d:95:1a:d1:53:ca:78:95:4d:c6:0d:88:41:29:49:d2: d5:bb:f6:92:ab:d2:30:12:59:bd:78:d0:61:ce:ab:44:d1:7c: 2d:c1:ef:fc -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8fyCXL0vijD5PMGd2HYsXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTNjZjk5MTlhMmM4MTQ2Yzk2ZjVhMTRiMTU3NDU5Yjc5NGI2YTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI8V85q8a3jOZ4wvYJludBrJyvoC GF3rsZ6DLmMwU4uUxLRjJ99++T9rQytLBjDr2aPt6l42gWo7056FsNNXY124h6w8 iUD23WIuqC4VRNBy/mhJTGRIwM6trGbVtYHuNEZ9+Iwk6LaT3diYggTuZBS2cQva DEKOG8mQSiGIMCM10A28P6t5T1QB6sj5ccaZEVftBQnL17z5CFnVEdRIqk4gqKBI WQPlWpR/PASAPiWrjy+rpE3rQMs3CrBkKRouWyGox8iKW84HnURW+FgBZ2liETzt XRVWJYHM2KkdDujt1i+gAlv8Fz+BWmNMqsRzvfAD0ZcdRz97/XMVoXUl4wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFDo8+ZGaLIFGyW9aFLFXRZt5S2ouMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhLzllYTQ5 YS1jZjY3LTQ2NmEtYWI1Yy03MGNiZjUxNDlhNWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvOWVhNDlh LWNmNjctNDY2YS1hYjVjLTcwY2JmNTE0OWE1YS8xL09qejVrWm9zZ1ViSmIxb1Vz VmRGbTNsTGFpNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEk0vQAwQCuVnYMA0EAgACMAcDBQMqA4PgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCICTANBgkqhkiG9w0BAQsFAAOCAQEAJ36J /BOhv/oerM+4fUVt6VOAKIuzryd9kQaOYdZzpAu/uS1ln8CIFmAw1wOIdRFRpyj2 Zog6O5a3jFbo/QgdW8bj4TQdOdvhq75rZjQ3WEGlgd6DvGoOISKAT9luKoMbx7ec 8ssLTeDaNSL8q6k0Nj2ygq7IGgHFoAuEiLFApF+2rwSkj0L03J1v4AYmT05v/a2i FFBlOEaJnzOPSnxYppwLu5NprQMqiLx+ulfODjcewESBSaG82ajNYcfvLjEahgQg xxP7wKqiG7XpYd7ATDfxSzF+YmvBDPsNlRrRU8p4lU3GDYhBKUnS1bv2kqvSMBJZ vXjQYc6rRNF8LcHv/A== -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:04 2026 by rpki-client