This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer File: oWldVVgkHgSoctwTRomPLOpw3-c.cer (raw, json) Hash identifier: wgoU2CFcxbUDkq+y8ISPFzW1r8HLeCoVXd/3ssQRc0s= Subject key identifier: A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79112CA4C58B8DFF6A228443DE300D19 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 95.128.197.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2c:a4:c5:8b:8d:ff:6a:22:84:43:de:30:0d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1695d5558241e04a872dc1346898f2cea70dfe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:56:c4:1d:de:25:f6:95:61:72:eb:81:d8:6c: 56:9d:d3:4b:a5:76:d5:c5:77:f2:0c:c0:96:83:b5: 83:af:58:50:eb:3e:f1:86:ba:4f:83:2c:60:96:e5: 4b:eb:9b:b3:c1:a8:1e:81:5c:cd:e9:81:03:0f:b8: d0:73:f2:56:36:54:9d:5b:61:59:52:4c:b5:88:6f: c1:30:d8:86:60:b5:90:a4:a2:c0:93:c2:16:4c:df: 0c:5a:93:3b:22:59:ba:7b:a9:f3:35:7f:d5:ec:3c: cf:33:97:63:32:53:81:a2:0b:75:79:95:4c:73:d5: 0c:b7:2c:56:92:0c:0c:04:02:7b:55:dd:d0:8c:f6: 94:00:0d:b7:e9:f9:14:d1:80:4b:d4:20:c5:cc:e3: bc:b6:e9:b5:27:61:26:0d:5a:92:3b:b9:92:3e:62: 70:32:f8:5b:21:bb:ea:be:84:ac:dc:5a:20:69:56: d6:eb:48:52:8d:c0:3b:e3:34:23:4e:20:dc:02:09: 57:1f:fd:11:ac:90:52:11:c9:6b:88:62:80:29:20: 2f:d1:77:07:12:ac:28:0e:94:36:2f:96:aa:9d:f5: 90:00:83:3d:58:cd:b8:c1:9e:30:a8:b7:45:a8:58: fd:6a:d6:95:db:19:4b:05:b2:d2:76:2f:7d:49:9e: a1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.128.197.0/24 Signature Algorithm: sha256WithRSAEncryption 31:df:30:aa:64:15:d0:c3:1e:6b:89:8c:53:a3:b7:38:9a:35: 10:01:9f:3d:cc:09:ae:12:ec:5b:13:10:ae:14:80:f2:9b:2b: 55:7a:60:de:01:e6:7c:e7:d9:16:b4:cc:3d:b8:05:a0:a3:eb: b4:49:99:26:97:82:2a:6b:ff:9e:dd:53:34:a8:18:79:4b:25: a8:6e:9e:e5:35:f8:49:04:37:e0:9b:9e:10:50:2e:38:bb:38: db:91:3f:89:6c:9f:d6:db:dc:60:5f:12:03:26:ac:4b:cc:d7: f8:a3:50:61:ee:3e:92:f9:de:b1:17:4d:c7:ba:44:85:d3:d7: ec:a3:9a:49:64:3c:d9:b4:e5:9e:d4:53:70:04:82:59:02:ed: 12:ad:36:9b:55:54:b0:74:39:f4:75:12:8d:87:e0:45:9b:60: 7b:63:6f:7c:ba:e4:9a:c1:13:60:46:9a:0d:3b:13:70:3c:3e: 6f:bf:2b:0b:f1:98:bb:90:03:23:a3:d5:e9:1b:cf:e0:c6:37: 34:2f:88:ed:84:da:5e:e5:e3:4d:6c:3f:da:97:9d:c2:db:98: 34:e4:4d:76:54:7c:7b:4f:ef:33:1c:d8:1e:06:eb:26:a7:fa: be:f3:fb:5f:33:38:4f:84:7c:1e:5a:f3:df:c1:0e:5d:69:87: ec:fb:f9:4e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5ESykxYuN/2oihEPeMA0ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTY5NWQ1NTU4MjQxZTA0YTg3MmRjMTM0Njg5OGYyY2VhNzBkZmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVbEHd4l9pVhcuuB2GxWndNLpXbV xXfyDMCWg7WDr1hQ6z7xhrpPgyxgluVL65uzwagegVzN6YEDD7jQc/JWNlSdW2FZ Uky1iG/BMNiGYLWQpKLAk8IWTN8MWpM7Ilm6e6nzNX/V7DzPM5djMlOBogt1eZVM c9UMtyxWkgwMBAJ7Vd3QjPaUAA236fkU0YBL1CDFzOO8tum1J2EmDVqSO7mSPmJw MvhbIbvqvoSs3FogaVbW60hSjcA74zQjTiDcAglXH/0RrJBSEclriGKAKSAv0XcH EqwoDpQ2L5aqnfWQAIM9WM24wZ4wqLdFqFj9ataV2xlLBbLSdi99SZ6htwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKFpXVVYJB4EqHLcE0aJjyzqcN/nMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwLzI3Y2E3 Zi02NmI0LTRiYjEtOWY1Zi1mNWJhNGZlMmJmNTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvMjdjYTdm LTY2YjQtNGJiMS05ZjVmLWY1YmE0ZmUyYmY1NC8xL29XbGRWVmdrSGdTb2N0d1RS b21QTE9wdzMtYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAX4DFMA0GCSqGSIb3DQEBCwUAA4IBAQAx3zCq ZBXQwx5riYxTo7c4mjUQAZ89zAmuEuxbExCuFIDymytVemDeAeZ859kWtMw9uAWg o+u0SZkml4Iqa/+e3VM0qBh5SyWobp7lNfhJBDfgm54QUC44uzjbkT+JbJ/W29xg XxIDJqxLzNf4o1Bh7j6S+d6xF03HukSF09fso5pJZDzZtOWe1FNwBIJZAu0SrTab VVSwdDn0dRKNh+BFm2B7Y298uuSawRNgRpoNOxNwPD5vvysL8Zi7kAMjo9XpG8/g xjc0L4jthNpe5eNNbD/al53C25g05E12VHx7T+8zHNgeBusmp/q+8/tfMzhPhHwe WvPfwQ5daYfs+/lO -----END CERTIFICATE-----Generated at Mon Jan 26 12:24:32 2026 by rpki-client