This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer File: OtL3zCdTMJgzAxuolGSagM_7E-g.cer (raw, json) Hash identifier: EAMRS4IPohEgfootS3IZtc93mwj4IEKfogvy1xyIpaY= Subject key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37CBE52956EFCEDD8DA2215FDAFC5C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.38.76.0/22 IP: 2a01:4060::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:cb:e5:29:56:ef:ce:dd:8d:a2:21:5f:da:fc:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ad2f7cc2753309833031ba894649a80cffb13e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:eb:81:2a:e1:5a:db:88:0a:e5:f3:5d:b0:c1: 58:00:27:03:3e:81:91:0e:3e:5f:e2:c8:d1:ed:63: b6:32:fe:ae:c1:2c:ef:27:90:8e:49:90:3c:70:75: 79:4f:fa:83:6a:32:de:3a:2a:87:6d:70:2b:05:14: 2a:10:db:1a:74:b2:d2:37:7c:ed:c1:6e:e2:6d:d4: 36:fa:2d:51:2e:b0:c4:c1:f7:03:9a:e5:af:8e:d3: fe:72:dc:24:8b:75:65:39:29:3b:55:ac:cb:61:32: a8:72:7d:19:6c:33:7e:26:24:cd:2b:6c:b6:94:c5: 57:b5:7f:86:55:52:72:d4:41:54:18:a3:78:7c:8c: 2f:fe:de:e6:09:40:1d:2a:48:3e:16:76:61:22:de: a2:ea:73:f2:8c:31:6b:54:23:92:da:f7:fc:71:1a: b9:c4:d9:0a:0f:22:6f:c0:3b:c6:31:0b:26:35:2a: 6e:bb:89:39:fc:85:47:e8:b3:c5:01:f9:ab:95:2d: d2:4d:94:01:5c:52:42:d1:ce:c2:00:83:d5:eb:0c: da:a7:fa:e2:44:20:04:bf:03:e9:12:22:7a:97:04: 95:c2:14:e6:64:f1:49:a0:df:98:dd:eb:bd:94:1d: ef:f2:dc:5f:43:4c:0f:0e:66:57:ca:d9:01:a1:54: af:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.76.0/22 IPv6: 2a01:4060::/32 Signature Algorithm: sha256WithRSAEncryption 39:9d:74:6e:54:98:1d:0f:e3:57:d7:92:1b:25:e0:ad:c4:29: 1f:ec:9a:a5:76:92:96:d8:60:58:87:4f:c6:e8:2e:b6:54:93: dc:32:30:62:02:4b:a0:53:78:bb:48:8d:fa:31:80:ab:fe:10: d8:c0:fb:99:68:cf:09:ee:22:f8:c4:a1:b0:30:50:8b:d0:eb: 35:5d:71:62:6b:9b:60:32:99:9d:c3:83:e9:8c:9e:5d:36:2c: ce:9a:9a:ea:ce:ba:ad:b8:ff:f7:d7:5f:48:4b:e0:d3:c9:9b: b3:06:e5:66:a7:1e:5f:c1:8e:b2:3d:a7:ba:42:d6:a8:34:3c: b2:ae:33:e0:0c:12:68:b9:7b:35:8a:f5:ea:75:86:26:b8:16: ea:6b:3c:fd:d9:1f:5b:05:d1:0a:b0:b0:c2:da:f8:ed:46:a5: 83:3e:f8:01:c3:90:95:94:a3:a8:92:2e:ad:e3:63:b4:6d:49: ab:ae:6b:90:20:80:1b:ab:da:af:34:86:35:ef:f9:67:14:9c: 3f:c7:e9:78:b1:a3:30:40:1f:9a:a6:f6:73:bc:a4:c6:75:14: e1:ee:d1:8a:80:b0:ef:78:1b:6f:e4:51:93:7e:22:ee:bf:ae: c9:2e:c2:7b:19:ac:35:0d:04:ca:73:f1:8e:6f:61:37:b2:6c: 41:2c:93:ab -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+N8vlKVbvzt2NoiFf2vxcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWQyZjdjYzI3NTMzMDk4MzMwMzFiYTg5NDY0OWE4MGNmZmIxM2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+uBKuFa24gK5fNdsMFYACcDPoGR Dj5f4sjR7WO2Mv6uwSzvJ5COSZA8cHV5T/qDajLeOiqHbXArBRQqENsadLLSN3zt wW7ibdQ2+i1RLrDEwfcDmuWvjtP+ctwki3VlOSk7VazLYTKocn0ZbDN+JiTNK2y2 lMVXtX+GVVJy1EFUGKN4fIwv/t7mCUAdKkg+FnZhIt6i6nPyjDFrVCOS2vf8cRq5 xNkKDyJvwDvGMQsmNSpuu4k5/IVH6LPFAfmrlS3STZQBXFJC0c7CAIPV6wzap/ri RCAEvwPpEiJ6lwSVwhTmZPFJoN+Y3eu9lB3v8txfQ0wPDmZXytkBoVSv1QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDrS98wnUzCYMwMbqJRkmoDP+xPoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxLzZlYmMx Yy00MmFiLTQ1NTktODRiMS1mNmFkOTMzMGM0YjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvNmViYzFj LTQyYWItNDU1OS04NGIxLWY2YWQ5MzMwYzRiMC8xL090TDN6Q2RUTUpnekF4dW9s R1NhZ01fN0UtZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSZMMA0EAgACMAcDBQAqAUBgMA0GCSqGSIb3 DQEBCwUAA4IBAQA5nXRuVJgdD+NX15IbJeCtxCkf7JqldpKW2GBYh0/G6C62VJPc MjBiAkugU3i7SI36MYCr/hDYwPuZaM8J7iL4xKGwMFCL0Os1XXFia5tgMpmdw4Pp jJ5dNizOmprqzrqtuP/3119IS+DTyZuzBuVmpx5fwY6yPae6QtaoNDyyrjPgDBJo uXs1ivXqdYYmuBbqazz92R9bBdEKsLDC2vjtRqWDPvgBw5CVlKOoki6t42O0bUmr rmuQIIAbq9qvNIY17/lnFJw/x+l4saMwQB+apvZzvKTGdRTh7tGKgLDveBtv5FGT fiLuv67JLsJ7Gaw1DQTKc/GOb2E3smxBLJOr -----END CERTIFICATE-----Generated at Sun Jan 25 22:56:51 2026 by rpki-client