This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer File: oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer (raw, json) Hash identifier: +WcKdM4e88sFz89ZcO1JL3V8X0WWarJKAry78PuxksA= Subject key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6B550A73545E419E61C8C9196250C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200260 IP: 193.242.222.0/24 IP: 2a13:75c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b5:50:a7:35:45:e4:19:e6:1c:8c:91:96:25:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e3:9e:ec:c4:c0:46:ef:38:25:23:e2:8c:7a: 03:76:ff:5c:a5:d1:22:c1:8c:eb:23:03:a8:c0:05: 6e:c8:26:c5:f1:c2:d0:bb:3e:81:36:fc:83:b6:cc: c0:43:ab:e1:71:24:35:a9:34:51:32:e7:5d:02:f0: df:29:a6:53:f4:50:6f:0d:f9:2b:38:bf:07:95:3e: 98:0a:0c:b7:e4:89:d8:d1:3a:40:93:00:97:7d:03: e2:b5:fb:af:60:83:05:53:7b:59:4a:09:90:67:1d: 5c:ea:08:d7:42:5b:df:bb:b2:86:43:e5:f8:cc:3a: 94:1a:c9:ce:7f:96:2d:43:85:e5:39:7f:bc:77:bc: cc:79:53:01:80:88:35:27:8d:e0:bd:22:dd:c5:68: 82:c8:5e:e9:d1:e2:c9:46:20:25:61:36:dd:e4:2b: f1:f9:90:4f:a5:02:ab:b4:cb:cd:22:3d:09:bc:38: ce:8b:8f:e7:ce:65:bf:9c:dc:0d:b1:a8:ed:ff:52: fd:9c:3d:16:99:a1:ec:d3:6e:4f:0c:38:1b:14:d1: 83:ee:79:98:79:9d:df:a0:5e:2f:db:d8:90:c1:35: 7e:18:1d:b7:54:04:68:73:d2:bc:cb:74:9f:9f:61: 80:bb:cc:7d:87:20:91:e4:2f:36:12:06:9a:74:e6: fb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.242.222.0/24 IPv6: 2a13:75c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200260 Signature Algorithm: sha256WithRSAEncryption 9f:c6:06:97:99:7c:5d:91:66:00:cd:f7:41:60:78:f8:0e:27: b8:8a:38:a3:c5:07:ae:35:5d:3b:86:42:93:45:c7:a7:0c:5c: 07:94:07:b3:04:4c:99:f2:3d:6a:55:f7:a3:b1:a8:dc:f2:03: 32:64:b4:01:32:f8:31:b5:62:2c:d9:d9:8c:71:e7:d2:d0:c1: fa:91:60:46:05:e5:bd:cc:a7:e4:d0:1f:23:68:da:81:f8:e2: 4c:be:4e:eb:27:1d:22:99:f6:3e:9c:a2:f4:f4:66:02:04:67: cd:e5:62:cf:cc:a5:9f:f0:5d:42:56:9b:18:43:18:91:78:56: 85:2f:17:54:c2:01:30:b0:38:1a:1f:b8:bc:e4:60:4a:ed:db: 93:f3:24:4e:37:22:70:7e:85:ef:ae:33:12:6d:f0:43:8b:0e: b5:75:2d:fa:ee:3c:59:1d:9f:83:c6:63:a1:e7:df:1a:52:28: 0f:11:03:1c:63:e1:10:be:b1:4a:ff:5a:fd:bc:3c:73:1e:78: 61:30:7a:bf:bf:d7:d4:0d:a7:15:53:fc:37:2e:e7:6d:70:ec: a6:d6:20:e9:47:5c:01:48:a4:08:fe:b5:57:84:b5:79:7b:f5: a0:de:9d:0b:c4:bf:48:85:21:47:69:af:b1:b5:25:86:18:9d: ed:9b:44:1c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+prVQpzVF5BnmHIyRliUMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTUyMzdjMzlhMzI1YWEzMDliNjllNjZmZTA5MjM3ZGExYWQwZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeOe7MTARu84JSPijHoDdv9cpdEi wYzrIwOowAVuyCbF8cLQuz6BNvyDtszAQ6vhcSQ1qTRRMuddAvDfKaZT9FBvDfkr OL8HlT6YCgy35InY0TpAkwCXfQPitfuvYIMFU3tZSgmQZx1c6gjXQlvfu7KGQ+X4 zDqUGsnOf5YtQ4XlOX+8d7zMeVMBgIg1J43gvSLdxWiCyF7p0eLJRiAlYTbd5Cvx +ZBPpQKrtMvNIj0JvDjOi4/nzmW/nNwNsajt/1L9nD0WmaHs025PDDgbFNGD7nmY eZ3foF4v29iQwTV+GB23VARoc9K8y3Sfn2GAu8x9hyCR5C82EgaadOb7TQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKFSN8OaMlqjCbaeZv4JI32hrQ0rMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5L2YzMzIy OS1jYTJkLTQxMDgtODkyZC00YzkxMGFlMzczNWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvZjMzMjI5 LWNhMmQtNDEwOC04OTJkLTRjOTEwYWUzNzM1ZC8xL29WSTN3NW95V3FNSnRwNW1f Z2tqZmFHdERTcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwfLeMA0EAgACMAcDBQMqE3XAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMORDANBgkqhkiG9w0BAQsFAAOCAQEAn8YGl5l8XZFm AM33QWB4+A4nuIo4o8UHrjVdO4ZCk0XHpwxcB5QHswRMmfI9alX3o7Go3PIDMmS0 ATL4MbViLNnZjHHn0tDB+pFgRgXlvcyn5NAfI2jagfjiTL5O6ycdIpn2Ppyi9PRm AgRnzeViz8yln/BdQlabGEMYkXhWhS8XVMIBMLA4Gh+4vORgSu3bk/MkTjcicH6F 764zEm3wQ4sOtXUt+u48WR2fg8ZjoeffGlIoDxEDHGPhEL6xSv9a/bw8cx54YTB6 v7/X1A2nFVP8Ny7nbXDsptYg6UdcAUikCP61V4S1eXv1oN6dC8S/SIUhR2mvsbUl hhid7ZtEHA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:26:19 2026 by rpki-client