This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer File: Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer (raw, json) Hash identifier: Sc3xJ1knx2Uhlwv/2qGpTy72+iDlko7RraUBlWv7PJs= Subject key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8A2E181AE8AC6755943B108A32696 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.161.148.0/22 IP: 185.180.192.0/22 IP: 185.238.176.0/22 IP: 2a07:c580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a2:e1:81:ae:8a:c6:75:59:43:b1:08:a3:26:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:89:34:45:22:77:23:f7:9b:ec:46:b8:13:93: e3:0c:d9:63:14:0b:4a:5b:81:3c:40:68:ab:d7:f0: e2:79:77:09:22:82:cb:72:51:15:36:6e:6d:31:15: 2a:64:d4:8e:48:a1:81:c8:fa:9a:ba:b0:c7:04:e9: 11:78:1b:d1:d8:5e:c9:a0:31:1e:4d:4c:33:16:78: 2b:27:43:74:63:6e:92:8a:3d:37:28:38:b8:6f:0e: 44:c1:a7:1f:ec:22:d0:36:03:d9:7c:d8:43:c4:cc: 91:d1:ce:cd:3f:b6:96:99:b3:76:89:20:7c:a4:60: 7a:0e:9f:4a:8f:54:44:e0:d9:d7:f5:c7:98:6a:8a: 09:30:9d:14:1d:f8:09:49:30:5e:83:50:8c:63:08: 36:52:2a:56:c7:29:57:db:39:2a:15:74:3d:4a:73: 0e:b1:a9:b1:60:90:f4:f8:7a:50:cb:a0:33:11:d5: e1:d2:78:3a:ac:e6:88:7c:66:a1:7a:ef:57:fd:85: 86:bb:f4:9e:66:cf:bb:9c:06:85:f0:b1:8c:a6:59: 01:f0:69:f3:ce:fc:5f:dc:cc:a4:8f:39:60:fc:7a: 7c:1b:b2:c9:a9:cc:fe:f3:3c:63:50:5d:ac:77:17: 18:07:db:a8:c9:6e:d2:48:34:16:18:2e:87:73:8e: ee:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.148.0/22 185.180.192.0/22 185.238.176.0/22 IPv6: 2a07:c580::/29 Signature Algorithm: sha256WithRSAEncryption 96:a0:e4:fa:3a:f6:1c:80:ea:e8:6f:53:62:9f:48:6d:2b:e7: 04:66:37:c9:ad:32:11:3c:da:2d:75:db:38:fa:a0:4e:27:98: 65:41:69:04:25:b1:a1:c9:a3:12:9a:53:97:52:48:ad:af:0f: f7:64:b8:de:f4:48:e8:4d:de:ed:32:20:33:95:06:2a:e8:fa: 94:9d:21:6c:ac:3a:81:28:f9:ec:58:98:2b:55:61:86:1f:de: e7:ef:65:0b:b2:e2:15:27:de:60:4f:18:8b:24:43:39:41:70: b8:c0:2d:a4:0f:b9:99:cc:60:52:27:9e:75:d6:07:c7:e9:11: cd:ae:6f:92:47:f2:66:57:a9:f3:f8:f4:ac:4a:85:bf:ee:99: 0a:b3:6a:fd:81:59:c1:a6:cd:77:02:01:b7:0e:47:c7:d9:c4: 4d:bf:fc:0a:6f:c2:04:5c:0c:04:08:72:a2:2c:ed:7f:f6:c3: ac:da:9e:50:4a:47:c7:55:cb:1b:a8:b3:d4:cc:e9:59:fb:af: 83:c8:e5:bf:d5:3c:14:b7:12:eb:d8:4e:06:ca:59:a2:89:bf: ef:0d:f1:25:2a:eb:db:0e:f0:45:ab:39:9b:c9:cb:d0:e8:6c: 4c:94:5b:b1:3c:a8:2e:58:6c:8b:a6:3b:20:ed:8c:8d:50:84: d2:96:8c:7b -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt6yKLhga6KxnVZQ7EIoyaWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTVlYzI4ZTg0MWYyOWYzODBhN2NlMmNiNWNkNTY3MzcwMDgyMWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlok0RSJ3I/eb7Ea4E5PjDNljFAtK W4E8QGir1/DieXcJIoLLclEVNm5tMRUqZNSOSKGByPqaurDHBOkReBvR2F7JoDEe TUwzFngrJ0N0Y26Sij03KDi4bw5Ewacf7CLQNgPZfNhDxMyR0c7NP7aWmbN2iSB8 pGB6Dp9Kj1RE4NnX9ceYaooJMJ0UHfgJSTBeg1CMYwg2UipWxylX2zkqFXQ9SnMO samxYJD0+HpQy6AzEdXh0ng6rOaIfGaheu9X/YWGu/SeZs+7nAaF8LGMplkB8Gnz zvxf3Mykjzlg/Hp8G7LJqcz+8zxjUF2sdxcYB9uoyW7SSDQWGC6Hc47u2QIDAQAB o4ICnzCCApswHQYDVR0OBBYEFDpewo6EHynzgKfOLLXNVnNwCCH9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5L2MxMjAy MC1hMWExLTQwMGUtOTFmMy04MzU1OTkyNjBmZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvYzEyMDIw LWExYTEtNDAwZS05MWYzLTgzNTU5OTI2MGZmNi8xL09sN0Nqb1FmS2ZPQXA4NHN0 YzFXYzNBSUlmMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuaGUAwQCubTAAwQCue6wMA0EAgACMAcDBQMq B8WAMA0GCSqGSIb3DQEBCwUAA4IBAQCWoOT6OvYcgOrob1Nin0htK+cEZjfJrTIR PNotdds4+qBOJ5hlQWkEJbGhyaMSmlOXUkitrw/3ZLje9EjoTd7tMiAzlQYq6PqU nSFsrDqBKPnsWJgrVWGGH97n72ULsuIVJ95gTxiLJEM5QXC4wC2kD7mZzGBSJ551 1gfH6RHNrm+SR/JmV6nz+PSsSoW/7pkKs2r9gVnBps13AgG3DkfH2cRNv/wKb8IE XAwECHKiLO1/9sOs2p5QSkfHVcsbqLPUzOlZ+6+DyOW/1TwUtxLr2E4Gylmiib/v DfElKuvbDvBFqzmbycvQ6GxMlFuxPKguWGyLpjsg7YyNUITSlox7 -----END CERTIFICATE-----Generated at Sun Jan 25 05:39:06 2026 by rpki-client