This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer File: oIy1sm6mXYH99jodmyAFcJEAA7A.cer (raw, json) Hash identifier: qXGCazcwctAT83RpEE2CB3eCSGCC2Easd+Q9SFtAzkE= Subject key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE531DE9651444667540025B562504E63 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 03 Dec 2025 17:10:42 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 192.108.23.0 -- 192.108.26.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:31:de:96:51:44:46:67:54:00:25:b5:62:50:4e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 3 17:10:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4f:ff:b0:1c:db:0a:65:70:1e:9d:f3:0c:76: c2:61:a2:ab:ca:e4:00:1a:0f:8c:1f:f8:42:13:7b: 97:7a:e5:ff:38:46:3b:33:91:52:cf:c3:ba:8f:49: 72:bc:60:2d:a3:64:8e:5f:05:99:0c:15:6c:d7:91: ae:ea:e4:94:15:36:43:eb:16:e9:c8:2d:1f:40:86: 18:7c:a8:9b:f8:bb:2d:aa:84:0c:9d:f7:9b:ab:da: a2:b9:da:b8:e1:2f:e7:cd:1b:28:af:72:cc:56:24: 84:b3:3c:c1:fa:6b:78:ea:6b:b3:ee:ca:44:7e:06: a9:77:c1:7e:c1:a0:67:58:b9:9a:e3:4d:7c:b1:8c: dc:bf:41:6d:0f:e0:ca:41:0e:cc:43:21:a6:9a:1f: f7:12:1f:9d:19:e9:4c:df:f3:70:d0:61:f5:4c:47: 83:7b:65:8d:5c:16:be:58:86:29:fa:00:a3:96:e6: b7:9c:d9:d7:f0:ff:d0:e3:52:be:bc:5e:ae:99:37: 27:84:35:64:a2:1d:8e:8b:75:4c:95:48:77:c5:79: 48:2c:6e:07:79:c7:ea:3b:8d:ac:38:b3:50:d7:be: 7b:44:bf:ca:a6:01:6b:98:7c:00:8b:1b:83:88:6c: 28:33:35:28:77:b9:05:12:c4:a1:17:7e:c2:28:03: 81:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.108.23.0-192.108.26.255 Signature Algorithm: sha256WithRSAEncryption 82:d4:09:97:50:0d:44:4f:d1:b1:bb:59:cc:cf:fc:ac:dc:c9: 17:20:8d:c1:6e:d4:40:0b:32:12:0b:c5:6c:9e:ee:62:5c:1b: d0:71:a8:36:42:8c:0b:42:cd:50:0f:dd:00:6f:ff:b1:ab:9e: 44:15:96:49:19:f2:52:8c:ac:ed:79:2d:4e:f1:61:2e:e0:0f: 36:09:33:e8:8f:3a:62:ec:f9:bd:25:51:94:58:78:91:e5:66: 4e:52:b5:5b:e7:fe:60:d9:e8:6a:87:04:6a:7b:f6:31:af:ba: 50:59:ca:a2:e2:bf:94:9c:b8:1e:bf:ae:c5:8f:1d:bc:ad:22: b5:07:3a:50:3e:1e:4c:62:65:82:47:8f:36:89:ca:a8:53:fa: 0c:7b:96:f5:36:20:59:6b:73:1a:52:fd:5d:82:b3:0a:b0:32: d8:1b:8f:ab:3c:26:e4:6e:7d:7c:0b:11:14:31:48:3c:c6:47: 44:11:37:71:82:ea:64:90:c8:64:8a:76:90:08:93:44:53:8f: 75:d6:64:26:c6:03:3c:d1:8c:ff:fc:5e:fc:6a:06:ce:4a:ae: 59:34:fb:ab:df:99:df:24:97:e5:2a:1b:37:31:94:0f:3f:db: 23:24:aa:1c:a9:e2:89:c4:c9:69:61:ba:a3:cc:c5:3d:27:e2: f5:c5:bd:c5 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZrlMd6WUURGZ1QAJbViUE5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAzMTcxMDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDhjYjViMjZlYTY1ZDgxZmRmNjNhMWQ5YjIwMDU3MDkxMDAwM2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk//sBzbCmVwHp3zDHbCYaKryuQA Gg+MH/hCE3uXeuX/OEY7M5FSz8O6j0lyvGAto2SOXwWZDBVs15Gu6uSUFTZD6xbp yC0fQIYYfKib+LstqoQMnfebq9qiudq44S/nzRsor3LMViSEszzB+mt46muz7spE fgapd8F+waBnWLma4018sYzcv0FtD+DKQQ7MQyGmmh/3Eh+dGelM3/Nw0GH1TEeD e2WNXBa+WIYp+gCjlua3nNnX8P/Q41K+vF6umTcnhDVkoh2Oi3VMlUh3xXlILG4H ecfqO42sOLNQ1757RL/KpgFrmHwAixuDiGwoMzUod7kFEsShF37CKAOBUwIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFKCMtbJupl2B/fY6HZsgBXCRAAOwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzFiYjY0 OS1lOTgzLTRkZmMtOThhOC1jZWU5M2MyNWU2MzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvMWJiNjQ5 LWU5ODMtNGRmYy05OGE4LWNlZTkzYzI1ZTYzOS8xL29JeTFzbTZtWFlIOTlqb2Rt eUFGY0pFQUE3QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBADAbBcDBADAbBowDQYJKoZIhvcNAQELBQAD ggEBAILUCZdQDURP0bG7WczP/KzcyRcgjcFu1EALMhILxWye7mJcG9BxqDZCjAtC zVAP3QBv/7GrnkQVlkkZ8lKMrO15LU7xYS7gDzYJM+iPOmLs+b0lUZRYeJHlZk5S tVvn/mDZ6GqHBGp79jGvulBZyqLiv5ScuB6/rsWPHbytIrUHOlA+HkxiZYJHjzaJ yqhT+gx7lvU2IFlrcxpS/V2CswqwMtgbj6s8JuRufXwLERQxSDzGR0QRN3GC6mSQ yGSKdpAIk0RTj3XWZCbGAzzRjP/8XvxqBs5Krlk0+6vfmd8kl+UqGzcxlA8/2yMk qhyp4onEyWlhuqPMxT0n4vXFvcU= -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:14 2025 by rpki-client