This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer File: oaLWN8sKzPhyH0PiZs4hP47d0mo.cer (raw, json) Hash identifier: 7mooc1y2TJcnVMqU3YYio0Aa+XXx2G15WWfjeiOiwHU= Subject key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78355637ACAD2CC7777875893B29BFFE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209975 IP: 212.60.8.0/22 IP: 2a09:800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:56:37:ac:ad:2c:c7:77:78:75:89:3b:29:bf:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:39:ca:5c:e0:89:ab:f8:3d:42:c8:b9:65:10: db:5c:87:7f:41:2e:35:bc:7b:1e:9a:03:93:25:ea: 11:82:92:bc:dd:ff:61:14:d1:45:58:1c:8d:5a:73: ff:12:71:5e:dc:b8:49:e5:b6:67:03:58:c2:88:7e: b4:e5:5b:4b:fb:a7:e0:2f:3c:a9:39:39:4e:9f:b5: a8:b8:41:c8:d6:48:db:8b:7b:f0:0e:b6:ec:3f:43: 59:2a:43:27:a6:c9:42:43:84:93:6a:0c:dd:7b:f0: f9:9f:bc:f4:9b:fa:a9:e8:42:c4:86:fb:d2:70:f9: 75:3b:81:2b:bf:4a:83:3f:64:6b:74:55:11:5e:8b: 36:93:09:ff:5f:de:32:7d:76:a4:f4:a1:d9:d0:5b: 01:6a:92:5f:c2:c2:2b:e0:7b:26:e7:c0:a3:88:b7: 4a:c5:38:0c:ad:15:1d:ec:28:88:51:1f:43:b5:b0: 5b:83:53:fc:51:67:4e:c3:3b:4b:4d:10:b5:9f:93: 3d:ef:ad:f3:ec:9b:8a:65:da:d8:b7:4d:3d:91:ca: 5c:bf:58:55:9a:8b:92:7c:c9:20:08:6c:d1:da:21: 4b:10:41:a2:b9:68:c6:69:05:0c:23:cd:a6:fd:92: b6:c1:24:8b:b8:6f:80:22:d6:e0:37:2d:d1:de:49: 2b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.60.8.0/22 IPv6: 2a09:800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209975 Signature Algorithm: sha256WithRSAEncryption a2:b6:b9:b7:ca:5f:72:56:13:1b:b4:c8:5b:3a:28:9f:49:4e: bd:43:48:63:3c:b1:1b:04:d9:82:2b:c3:87:e6:a9:34:ca:aa: a1:12:e6:ce:f5:7d:1c:da:52:f2:ee:96:d0:26:ba:0a:85:a2: c4:83:3e:93:4f:5f:47:91:2d:e8:40:51:57:7c:37:4a:9c:50: 52:d1:dd:ff:fc:d8:f3:89:c3:73:49:18:7e:8a:40:97:04:46: af:20:30:c9:76:aa:d8:5f:01:56:b9:21:bc:8f:d6:c6:3b:ea: 55:02:82:28:8e:1d:c0:b8:f3:e2:9f:f4:27:20:85:59:55:31: ee:bb:7c:3e:c8:39:a5:a7:cb:0b:37:6b:5f:38:e7:35:e5:b8: 05:46:dd:33:cb:9b:b5:cf:f7:77:14:0b:9e:92:3e:ec:bb:29: 00:2f:44:03:b2:80:13:8c:07:12:7f:4c:85:64:b5:3f:fd:fc: d3:a3:98:d0:1f:30:27:fb:d5:c8:08:b0:de:07:88:36:78:a3: 7a:fc:be:21:5d:07:22:bb:c8:bb:1a:33:1b:4e:9e:50:5d:29: 5e:3f:cb:b9:10:19:1b:d0:0c:bd:cc:fb:e3:42:0b:59:67:59: d3:12:32:e2:d4:e2:57:6c:fc:4a:86:e9:64:59:f9:83:c0:03: 30:e6:6d:fc -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NVY3rK0sx3d4dYk7Kb/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWEyZDYzN2NiMGFjY2Y4NzIxZjQzZTI2NmNlMjEzZjhlZGRkMjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjnKXOCJq/g9Qsi5ZRDbXId/QS41 vHsemgOTJeoRgpK83f9hFNFFWByNWnP/EnFe3LhJ5bZnA1jCiH605VtL+6fgLzyp OTlOn7WouEHI1kjbi3vwDrbsP0NZKkMnpslCQ4STagzde/D5n7z0m/qp6ELEhvvS cPl1O4Erv0qDP2RrdFURXos2kwn/X94yfXak9KHZ0FsBapJfwsIr4Hsm58CjiLdK xTgMrRUd7CiIUR9DtbBbg1P8UWdOwztLTRC1n5M9763z7JuKZdrYt009kcpcv1hV mouSfMkgCGzR2iFLEEGiuWjGaQUMI82m/ZK2wSSLuG+AItbgNy3R3kkrywIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKGi1jfLCsz4ch9D4mbOIT+O3dJqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlL2VkYmY0 NC0zNzMyLTQ0ZmYtYTk0NC1lMjE5NzRhMjk0YmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvZWRiZjQ0 LTM3MzItNDRmZi1hOTQ0LWUyMTk3NGEyOTRiYS8xL29hTFdOOHNLelBoeUgwUGla czRoUDQ3ZDBtby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQC1DwIMA0EAgACMAcDBQMqCQgAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM0NzANBgkqhkiG9w0BAQsFAAOCAQEAora5t8pfclYT G7TIWzoon0lOvUNIYzyxGwTZgivDh+apNMqqoRLmzvV9HNpS8u6W0Ca6CoWixIM+ k09fR5Et6EBRV3w3SpxQUtHd//zY84nDc0kYfopAlwRGryAwyXaq2F8BVrkhvI/W xjvqVQKCKI4dwLjz4p/0JyCFWVUx7rt8Psg5pafLCzdrXzjnNeW4BUbdM8ubtc/3 dxQLnpI+7LspAC9EA7KAE4wHEn9MhWS1P/3806OY0B8wJ/vVyAiw3geINnijevy+ IV0HIrvIuxozG06eUF0pXj/LuRAZG9AMvcz740ILWWdZ0xIy4tTiV2z8SobpZFn5 g8ADMOZt/A== -----END CERTIFICATE-----Generated at Sun Jan 25 15:19:41 2026 by rpki-client