This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer File: Otc0z5DHc0KIBrloIJUVuRSDGp0.cer (raw, json) Hash identifier: N1uAvIGHqxGp5RDBTax9W24xkAggNnfB8Gh3oINELnI= Subject key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C73EDDA84F9236BE555A398F440308 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209009 IP: 84.54.32.0/24 IP: 86.54.86.0/24 IP: 91.217.223.0/24 IP: 103.69.224.0/22 IP: 152.89.232.0/22 IP: 185.191.20.0/22 IP: 188.95.69.0/24 IP: 2a09:37c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3e:dd:a8:4f:92:36:be:55:5a:39:8f:44:03:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ad734cf90c773428806b968209515b914831a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:a3:6c:76:24:de:b5:34:0e:11:a9:30:53: 5a:59:a9:82:dd:ec:ae:50:94:57:d2:36:b8:55:00: ef:24:57:d3:02:70:fc:9d:1f:36:9e:79:dc:e5:34: 97:db:1a:e0:5a:f0:c8:67:90:a0:b0:83:66:86:c8: a4:bd:ef:65:bd:fe:66:ed:5b:6b:e8:92:45:e9:c0: 9c:a8:f5:f9:3d:56:d3:38:93:4a:de:a8:8e:12:ec: f9:dc:6f:8a:b8:fe:45:f8:4e:b1:56:ad:02:3f:de: 13:60:09:47:96:e3:e2:31:58:ca:dd:7c:8b:04:d8: 93:71:a5:8c:8e:23:9f:28:fd:46:ce:a3:94:1f:1d: 14:a3:2f:80:6e:4f:15:ba:fc:ba:f9:8a:b9:87:70: 03:03:8a:6d:98:9f:d1:8c:a1:8d:b4:2c:61:95:c6: 5a:6b:fe:cd:82:b3:12:76:50:55:82:98:b8:97:57: d3:c0:1e:fe:0d:16:da:e4:92:3b:ea:e8:9a:f1:ea: 42:24:ea:9c:24:10:26:53:16:7d:ee:51:9f:ba:9c: b9:7b:da:85:2a:21:3c:c5:31:3f:fc:8a:71:7b:ca: b9:9d:e4:9e:ba:e8:1c:68:e6:0a:cb:1c:22:4c:20: d3:59:ef:58:64:36:a2:c8:94:bd:ab:dc:93:b6:b3: 02:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.32.0/24 86.54.86.0/24 91.217.223.0/24 103.69.224.0/22 152.89.232.0/22 185.191.20.0/22 188.95.69.0/24 IPv6: 2a09:37c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209009 Signature Algorithm: sha256WithRSAEncryption 6b:7a:97:1d:f4:b8:31:6d:43:2a:8a:89:39:6c:9c:94:1f:43: 4c:d8:ae:1b:38:82:df:15:b4:de:a6:38:88:b3:da:a9:17:37: 71:01:f8:0f:81:cb:f3:a1:fd:9a:30:10:09:93:f4:ae:96:65: 9d:93:6f:42:de:3f:34:6d:b0:d7:ba:56:cf:fa:73:78:e2:97: 8a:0a:ad:1f:f9:a5:40:65:0e:74:4a:a2:f6:38:d4:06:61:13: 7c:45:ee:38:1f:86:e4:72:ae:d8:c0:89:0b:45:b2:e6:53:5f: 5e:b6:32:77:c7:af:80:cd:94:a8:8d:a4:66:c7:14:6f:c1:02: 01:cd:e9:49:ab:48:26:64:5c:77:fe:e6:84:68:72:47:4f:78: 9b:96:b0:db:be:d8:e3:36:68:c2:e0:1b:5e:b3:52:4c:ec:b5: de:cf:2a:30:c2:35:9c:88:0e:f9:76:bb:ad:92:e2:d0:65:04: 74:d6:ff:22:f5:a6:47:23:4d:73:04:28:1a:14:61:4d:de:9d: c3:63:5a:94:22:c3:33:10:60:88:6b:8d:c1:23:4e:f7:a8:db: b8:06:92:84:7b:4a:eb:3e:09:11:ef:a1:12:6f:18:87:29:85: 1b:ff:b2:a7:55:e3:d6:db:93:e5:55:ec:ee:71:e1:93:a7:29: 17:d8:a9:06 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt3xz7dqE+SNr5VWjmPRAMIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWQ3MzRjZjkwYzc3MzQyODgwNmI5NjgyMDk1MTViOTE0ODMxYTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3OjbHYk3rU0DhGpMFNaWamC3eyu UJRX0ja4VQDvJFfTAnD8nR82nnnc5TSX2xrgWvDIZ5CgsINmhsikve9lvf5m7Vtr 6JJF6cCcqPX5PVbTOJNK3qiOEuz53G+KuP5F+E6xVq0CP94TYAlHluPiMVjK3XyL BNiTcaWMjiOfKP1GzqOUHx0Uoy+Abk8Vuvy6+Yq5h3ADA4ptmJ/RjKGNtCxhlcZa a/7NgrMSdlBVgpi4l1fTwB7+DRba5JI76uia8epCJOqcJBAmUxZ97lGfupy5e9qF KiE8xTE//Ipxe8q5neSeuugcaOYKyxwiTCDTWe9YZDaiyJS9q9yTtrMCsQIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQxL2ViZjM4 MS0wMGM4LTQ4MGQtYTY2Yy03NmExZDRkODMxOTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvZWJmMzgx LTAwYzgtNDgwZC1hNjZjLTc2YTFkNGQ4MzE5Ny8xL090YzB6NURIYzBLSUJybG9J SlVWdVJTREdwMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQAVDYgAwQAVjZWAwQAW9nfAwQCZ0XgAwQCmFno AwQCub8UAwQAvF9FMA0EAgACMAcDBQMqCTfAMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMwcTANBgkqhkiG9w0BAQsFAAOCAQEAa3qXHfS4MW1DKoqJOWyclB9DTNiu GziC3xW03qY4iLPaqRc3cQH4D4HL86H9mjAQCZP0rpZlnZNvQt4/NG2w17pWz/pz eOKXigqtH/mlQGUOdEqi9jjUBmETfEXuOB+G5HKu2MCJC0Wy5lNfXrYyd8evgM2U qI2kZscUb8ECAc3pSatIJmRcd/7mhGhyR094m5aw277Y4zZowuAbXrNSTOy13s8q MMI1nIgO+Xa7rZLi0GUEdNb/IvWmRyNNcwQoGhRhTd6dw2NalCLDMxBgiGuNwSNO 96jbuAaShHtK6z4JEe+hEm8YhymFG/+yp1Xj1tuT5VXs7nHhk6cpF9ipBg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:27 2026 by rpki-client