This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer File: oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer (raw, json) Hash identifier: yx4bmla/STGgOoEGdjQMxEHCEO8goy8W/Zmnh4yyoNY= Subject key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758A48FECAAB78418083C765E2FAB4A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60539 IP: 185.143.238.0/24 IP: 2a13:aac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a4:8f:ec:aa:b7:84:18:08:3c:76:5e:2f:ab:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:76:42:62:22:79:06:33:3b:b9:6a:65:1d:0e: 9d:cf:47:bb:37:70:cb:c6:23:46:36:29:01:7b:78: f1:cf:29:5f:28:b8:02:f4:f2:a5:a8:f1:d8:0d:87: 00:24:7f:24:2d:cb:3f:77:7f:c2:af:d6:40:fe:88: bf:a1:6d:06:71:0a:e2:64:8e:5b:15:d6:75:68:6d: 64:5c:30:fa:f8:2d:5e:5b:a5:69:39:cd:a0:7a:68: 4f:73:bb:34:4e:01:77:4c:3d:38:d2:7c:71:9a:a6: dc:ac:d0:f5:62:91:ee:ec:11:73:2a:ca:0d:63:cd: be:8a:87:74:24:64:a6:89:99:fe:6e:67:4f:f8:fe: f2:a6:56:8b:27:a2:67:0c:49:e0:fb:59:b3:35:1f: be:26:24:be:20:12:04:23:f6:39:e6:b0:4a:4a:ca: eb:b0:c6:9c:e7:09:e4:b2:2a:b7:bc:64:67:e7:6a: 84:87:b0:7e:a7:52:8b:b4:e1:e7:b8:b7:39:0f:be: 4e:a0:4e:85:17:20:ef:26:52:cc:3f:ca:dc:bb:02: 08:9a:a1:ad:ae:e2:f0:a1:b3:df:2f:f0:53:e2:6a: 03:51:ed:c1:89:0f:79:0a:cc:65:bc:e8:59:3f:69: 1c:ab:b0:0a:e0:5d:fb:f0:b2:30:3e:a7:0e:d8:4d: 33:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.238.0/24 IPv6: 2a13:aac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60539 Signature Algorithm: sha256WithRSAEncryption 29:2e:45:e6:69:20:6d:b8:81:6d:1e:5b:77:94:35:85:e3:3d: 18:a2:5d:91:45:c5:71:d0:94:1b:5f:81:9f:96:0a:0c:5a:66: c9:cb:9b:6f:19:70:3b:d3:77:df:de:31:6c:9f:40:0e:83:7a: 01:49:ae:96:34:fa:cb:46:49:a2:d7:fe:2b:05:14:3c:cd:04: a6:08:54:d6:f8:fa:f9:0d:0f:e5:5e:d9:c1:53:f7:44:09:c5: 8f:30:55:13:9e:8b:e3:77:dd:ef:dd:41:d8:a7:9a:5f:bb:f6: 2a:f0:b0:26:58:f8:24:8b:1a:0b:83:c8:ea:19:f0:ce:d0:68: f4:55:fc:4c:47:03:bc:d7:bf:60:26:25:de:2d:20:de:1b:ef: 4a:d1:ff:27:b2:81:8d:58:e4:96:ca:e3:49:31:e0:49:fc:f8: 54:bd:e4:e6:5f:9e:5e:98:2e:b2:f5:12:4c:5b:53:2d:c8:32: d4:0e:89:cd:30:61:d9:ad:31:2c:c0:ec:dc:c5:53:1e:cf:59: 80:91:e3:59:83:e4:b2:40:79:f2:6f:82:3d:4e:02:76:42:a7: 5e:0a:a1:86:21:72:8d:dc:4f:15:3e:d7:c4:88:e4:cb:a1:fe: 33:ec:a2:ed:15:96:ae:2d:00:64:62:37:fe:e7:b9:15:dd:45: 98:0e:68:89 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WKSP7Kq3hBgIPHZeL6tKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTI0Y2NkZDcwZjNlYzc2MmNiZDY1ZTA0ZGQ2Zjc2YmUyMzZhOGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXZCYiJ5BjM7uWplHQ6dz0e7N3DL xiNGNikBe3jxzylfKLgC9PKlqPHYDYcAJH8kLcs/d3/Cr9ZA/oi/oW0GcQriZI5b FdZ1aG1kXDD6+C1eW6VpOc2gemhPc7s0TgF3TD040nxxmqbcrND1YpHu7BFzKsoN Y82+iod0JGSmiZn+bmdP+P7yplaLJ6JnDEng+1mzNR++JiS+IBIEI/Y55rBKSsrr sMac5wnksiq3vGRn52qEh7B+p1KLtOHnuLc5D75OoE6FFyDvJlLMP8rcuwIImqGt ruLwobPfL/BT4moDUe3BiQ95CsxlvOhZP2kcq7AK4F378LIwPqcO2E0zvQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKEkzN1w8+x2LL1l4E3W92viNqinMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2L2I2OTRi OC04MjExLTRjMDYtOWM4MS03YjM1Mzk3YWYyZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvYjY5NGI4 LTgyMTEtNGMwNi05YzgxLTdiMzUzOTdhZjJmNy8xL29TVE0zWER6N0hZc3ZXWGdU ZGIzYS1JMnFLYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuY/uMA0EAgACMAcDBQMqE6rAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDsezANBgkqhkiG9w0BAQsFAAOCAQEAKS5F5mkgbbiB bR5bd5Q1heM9GKJdkUXFcdCUG1+Bn5YKDFpmycubbxlwO9N3394xbJ9ADoN6AUmu ljT6y0ZJotf+KwUUPM0EpghU1vj6+Q0P5V7ZwVP3RAnFjzBVE56L43fd791B2Kea X7v2KvCwJlj4JIsaC4PI6hnwztBo9FX8TEcDvNe/YCYl3i0g3hvvStH/J7KBjVjk lsrjSTHgSfz4VL3k5l+eXpgusvUSTFtTLcgy1A6JzTBh2a0xLMDs3MVTHs9ZgJHj WYPkskB58m+CPU4CdkKnXgqhhiFyjdxPFT7XxIjky6H+M+yi7RWWri0AZGI3/ue5 Fd1FmA5oiQ== -----END CERTIFICATE-----Generated at Sun Jan 25 18:51:35 2026 by rpki-client