This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer File: Ol1KMpcC4smDHNNiYru3-nuX3jc.cer (raw, json) Hash identifier: UanlaenLMDNMUhCTrIVal1TDn2TtikPXq7Y+G8N9FRk= Subject key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A81CB21DCF6145F6EE38A308E7069EDB2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 14 Nov 2025 09:56:04 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 47191 IP: 37.77.80.0/21 IP: 74.113.236.0/23 IP: 94.154.178.0/24 IP: 103.143.178.0/23 IP: 172.96.38.0/23 IP: 192.198.184.0/23 IP: 193.148.95.0/24 IP: 195.246.194.0/24 IP: 198.13.22.0/23 IP: 199.36.102.0/23 IP: 216.180.224.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:cb:21:dc:f6:14:5f:6e:e3:8a:30:8e:70:69:ed:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 14 09:56:04 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7c:e9:e4:32:2e:28:2d:ef:86:a9:5f:60:34: af:e0:9a:3f:c8:a2:5a:3a:36:d0:6c:cb:40:3e:9e: 39:58:86:25:fc:ff:22:d6:eb:d2:5d:8a:75:d5:b9: 45:7e:96:43:e4:83:d0:a4:3a:c8:d3:90:bd:8d:4b: 5d:3e:77:44:e0:ed:5a:d6:82:79:b1:d0:c1:11:ed: cd:fe:80:f1:8c:3a:69:59:40:83:7b:6e:39:74:0a: 0f:18:a7:98:9f:8a:96:b3:c6:5b:34:39:1d:12:ad: 55:5f:90:84:45:ac:01:bf:0e:1c:eb:36:54:b5:53: 91:c4:a2:1e:5f:b5:d5:49:55:4b:6b:dc:74:6a:c0: 6d:b4:10:37:e7:72:d4:f6:97:0f:9a:aa:77:9c:8f: 0a:1e:29:e2:a2:7a:ee:ea:37:45:45:97:33:47:94: d1:90:99:46:fd:7a:7e:16:73:cc:9e:53:a8:69:e9: 52:c9:43:e1:6f:06:76:35:e3:94:55:2f:7f:96:dc: 3b:07:1e:bd:7d:df:66:e5:fc:62:90:9d:78:ec:ce: 89:48:a4:30:76:4a:42:26:e5:8f:01:c5:f1:43:70: 82:98:e3:a6:42:9f:57:61:9c:8c:35:70:6a:57:4e: 18:e6:8c:65:2e:97:86:ff:9d:d7:e8:48:56:48:06: 48:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.80.0/21 74.113.236.0/23 94.154.178.0/24 103.143.178.0/23 172.96.38.0/23 192.198.184.0/23 193.148.95.0/24 195.246.194.0/24 198.13.22.0/23 199.36.102.0/23 216.180.224.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47191 Signature Algorithm: sha256WithRSAEncryption 74:81:7a:51:6d:26:63:42:c4:75:13:8e:33:d5:2e:1a:ce:f5: 29:5a:fd:65:32:6a:97:9c:c3:11:4b:cd:77:85:27:b4:64:64: 31:c2:db:00:5f:1e:93:b4:2c:06:28:0e:de:ca:81:c4:db:12: 7c:db:79:9e:5a:c7:8c:72:be:95:36:67:a8:a7:f5:aa:44:bb: 67:c4:29:52:d4:68:91:ad:15:75:80:98:7e:bb:25:d8:45:12: c4:92:a0:9a:62:b1:1c:1f:60:0f:33:9b:d0:99:3e:0c:33:a8: ff:3c:fb:9e:e9:50:1e:54:c2:81:2f:2a:c1:ae:64:cc:ae:66: 9c:39:83:9d:73:52:28:88:bf:31:a9:98:77:fc:6e:a8:9b:9b: aa:a0:af:2d:20:30:d1:bb:b9:04:95:df:1f:a8:8c:38:91:9f: 51:ec:3c:64:fa:15:07:01:aa:bd:c5:7e:92:7e:e3:6b:a0:7a: 2f:71:0f:1f:6c:cf:10:84:47:eb:c1:68:99:16:10:b7:c8:67: 7a:11:6d:2d:da:fd:31:c8:7c:8f:5f:0b:3c:43:3f:47:62:47: e1:38:2d:8c:61:0c:0c:9e:87:8f:89:e5:93:d3:f1:7f:a8:e4: 3e:28:17:2f:b6:92:0d:14:50:38:63:66:e9:9b:e8:18:0f:d2: 95:2d:ec:3e -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgISAZqByyHc9hRfbuOKMI5wae2yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE0MDk1NjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTVkNGEzMjk3MDJlMmM5ODMxY2QzNjI2MmJiYjdmYTdiOTdkZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHzp5DIuKC3vhqlfYDSv4Jo/yKJa OjbQbMtAPp45WIYl/P8i1uvSXYp11blFfpZD5IPQpDrI05C9jUtdPndE4O1a1oJ5 sdDBEe3N/oDxjDppWUCDe245dAoPGKeYn4qWs8ZbNDkdEq1VX5CERawBvw4c6zZU tVORxKIeX7XVSVVLa9x0asBttBA353LU9pcPmqp3nI8KHinionru6jdFRZczR5TR kJlG/Xp+FnPMnlOoaelSyUPhbwZ2NeOUVS9/ltw7Bx69fd9m5fxikJ147M6JSKQw dkpCJuWPAcXxQ3CCmOOmQp9XYZyMNXBqV04Y5oxlLpeG/53X6EhWSAZICQIDAQAB o4IC3DCCAtgwHQYDVR0OBBYEFDpdSjKXAuLJgxzTYmK7t/p7l943MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzRiZDY2 MS05YjBjLTQ1NjAtYjFkMS0yY2VhOGUxNTM2MzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvNGJkNjYx LTliMGMtNDU2MC1iMWQxLTJjZWE4ZTE1MzYzMi8xL09sMUtNcGNDNHNtREhOTmlZ cnUzLW51WDNqYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGCCsGAQUF BwEHAQH/BEwwSjBIBAIAATBCAwQDJU1QAwQBSnHsAwQAXpqyAwQBZ4+yAwQBrGAm AwQBwMa4AwQAwZRfAwQAw/bCAwQBxg0WAwQBxyRmAwQE2LTgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwC4VzANBgkqhkiG9w0BAQsFAAOCAQEAdIF6UW0mY0LEdROO M9UuGs71KVr9ZTJql5zDEUvNd4UntGRkMcLbAF8ek7QsBigO3sqBxNsSfNt5nlrH jHK+lTZnqKf1qkS7Z8QpUtRoka0VdYCYfrsl2EUSxJKgmmKxHB9gDzOb0Jk+DDOo /zz7nulQHlTCgS8qwa5kzK5mnDmDnXNSKIi/MamYd/xuqJubqqCvLSAw0bu5BJXf H6iMOJGfUew8ZPoVBwGqvcV+kn7ja6B6L3EPH2zPEIRH68FomRYQt8hnehFtLdr9 Mch8j18LPEM/R2JH4TgtjGEMDJ6Hj4nlk9Pxf6jkPigXL7aSDRRQOGNm6ZvoGA/S lS3sPg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:28 2025 by rpki-client