This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer File: otN_wx79NwO_LEw-iLw8HPtHmRk.cer (raw, json) Hash identifier: bhaUh9dWZyuGhe2D+OIVJXKCzqlDbVOQFDkaQyOSWpI= Subject key identifier: A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C708F82A2BA6FA4B7DE23F75DDF095 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57317 IP: 185.105.112.0/22 IP: 2a06:3700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:08:f8:2a:2b:a6:fa:4b:7d:e2:3f:75:dd:f0:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0f:f0:44:d9:fe:21:5e:30:1c:6e:68:ef:90: e2:d0:60:2e:07:ee:5d:fa:fd:69:8e:40:72:8f:9b: e2:da:26:55:dc:27:a2:fd:24:21:0f:4a:96:e1:32: b5:1a:d8:75:b1:15:68:55:75:bc:11:fc:de:48:08: 2d:72:c6:55:ec:a5:46:02:ce:d9:4d:d1:de:35:c7: e4:f7:44:a8:9c:62:c4:da:e1:14:ea:3d:3d:b4:7c: 52:83:b9:b5:cc:b2:b7:ff:44:61:da:db:49:b4:0f: f9:8d:57:69:44:c0:21:b9:5e:8c:25:16:90:4b:0d: 8a:06:e2:4f:01:d0:f5:2f:5c:27:3c:eb:40:ec:d2: cd:46:b8:11:c7:11:76:c0:88:f6:45:c0:00:97:67: d8:59:84:22:6d:2a:64:8f:12:02:d6:60:a4:06:a8: 83:69:f1:8e:41:06:0c:6c:e9:2e:dd:45:f7:db:46: e4:01:33:ec:68:f1:0d:5d:e9:04:1e:8b:66:20:44: 65:8e:0c:56:7c:61:ab:28:60:fd:2d:d0:b7:9b:05: aa:be:5c:19:01:0b:5b:e1:12:4a:65:58:17:c1:55: 07:ee:bc:35:24:17:1f:8d:76:f0:83:13:72:0d:f8: f5:75:b9:04:84:03:e7:79:ae:4d:4b:1a:f9:6b:4a: 39:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.105.112.0/22 IPv6: 2a06:3700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57317 Signature Algorithm: sha256WithRSAEncryption 37:3d:3a:fa:22:65:5b:9b:6a:28:18:c6:6c:6f:ed:d2:a8:e9: 28:fe:e7:53:ca:47:49:78:16:db:3f:6f:7f:99:2a:02:5d:21: 8f:30:13:e0:93:57:e8:74:71:98:f8:b0:ec:5a:43:e1:37:f3: 9c:2a:8c:5d:ae:aa:61:22:be:36:25:34:f3:c8:d9:a0:84:6c: 14:88:8f:39:83:74:3c:36:b3:1f:51:24:4f:97:26:ff:eb:e4: d4:f1:e8:5a:d0:9d:f1:4f:05:33:93:b7:b0:58:37:a6:f4:cb: 49:9d:c0:63:ab:ae:d4:7c:b3:2a:bf:78:21:76:69:0d:cd:fb: 4f:f2:31:98:0e:76:5b:db:c3:e0:1f:96:1b:5e:f6:59:f2:e8: 71:01:54:a1:4c:4e:0e:6f:86:62:00:25:13:42:56:e7:6b:4d: 66:20:76:90:f8:fb:21:6d:3f:a6:b5:81:8a:96:91:09:37:2e: 93:f5:c3:51:28:c0:1c:45:47:51:41:3a:da:3e:e3:33:9e:ab: 9a:23:2f:bb:bd:52:8b:e4:ef:d6:4e:64:50:0e:37:30:c4:76: 6b:5f:8a:4e:4b:34:66:e6:98:ee:80:2a:e0:54:d7:1e:ca:f9: 2e:7e:2b:52:db:5a:b2:d7:07:be:23:b4:dd:ac:08:21:0f:d3: c7:99:2d:30 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xwj4Kium+kt94j913fCVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmQzN2ZjMzFlZmQzNzAzYmYyYzRjM2U4OGJjM2MxY2ZiNDc5OTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ/wRNn+IV4wHG5o75Di0GAuB+5d +v1pjkByj5vi2iZV3Cei/SQhD0qW4TK1Gth1sRVoVXW8EfzeSAgtcsZV7KVGAs7Z TdHeNcfk90SonGLE2uEU6j09tHxSg7m1zLK3/0Rh2ttJtA/5jVdpRMAhuV6MJRaQ Sw2KBuJPAdD1L1wnPOtA7NLNRrgRxxF2wIj2RcAAl2fYWYQibSpkjxIC1mCkBqiD afGOQQYMbOku3UX320bkATPsaPENXekEHotmIERljgxWfGGrKGD9LdC3mwWqvlwZ AQtb4RJKZVgXwVUH7rw1JBcfjXbwgxNyDfj1dbkEhAPnea5NSxr5a0o5HQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKLTf8Me/TcDvyxMPoi8PBz7R5kZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlLzM2MzJm NS04OWU3LTRkMjItOGJjMS0zMzM5OTA4MDI3MGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvMzYzMmY1 LTg5ZTctNGQyMi04YmMxLTMzMzk5MDgwMjcwZi8xL290Tl93eDc5TndPX0xFdy1p THc4SFB0SG1Say5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuWlwMA0EAgACMAcDBQMqBjcAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDf5TANBgkqhkiG9w0BAQsFAAOCAQEANz06+iJlW5tq KBjGbG/t0qjpKP7nU8pHSXgW2z9vf5kqAl0hjzAT4JNX6HRxmPiw7FpD4TfznCqM Xa6qYSK+NiU088jZoIRsFIiPOYN0PDazH1EkT5cm/+vk1PHoWtCd8U8FM5O3sFg3 pvTLSZ3AY6uu1HyzKr94IXZpDc37T/IxmA52W9vD4B+WG172WfLocQFUoUxODm+G YgAlE0JW52tNZiB2kPj7IW0/prWBipaRCTcuk/XDUSjAHEVHUUE62j7jM56rmiMv u71Si+Tv1k5kUA43MMR2a1+KTks0ZuaY7oAq4FTXHsr5Ln4rUttastcHviO03awI IQ/Tx5ktMA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:46:48 2026 by rpki-client