This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer File: r_oT8a4FORYoDsaO4bCXb569Pqg.cer (raw, json) Hash identifier: LPKDUMS582fnHg332MHb3A5mJ7ssrsWGLrSDUIadR8c= Subject key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA699E8427594BB4B33D0188DFA444C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50386 IP: 77.73.128.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:99:e8:42:75:94:bb:4b:33:d0:18:8d:fa:44:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1d:d0:d8:a7:e2:a0:8c:37:61:cd:f2:aa:48: 0b:12:46:ae:62:79:fc:05:a1:e4:69:6f:b7:98:da: 4f:8b:d1:25:e3:89:5c:32:e0:8f:80:c9:3b:cd:d0: 7a:39:d0:50:1a:f6:b5:0c:c6:cf:ce:23:35:56:a8: d5:fc:f3:45:47:41:25:4a:c3:d6:e3:37:b7:d8:5b: 07:e4:98:fb:60:18:11:34:c8:43:c5:0a:5a:ea:db: 53:44:d7:2f:c1:c9:14:ff:35:ad:a6:cc:dd:59:ee: 74:8c:9c:a0:76:41:01:35:14:c2:64:c4:d1:37:b7: e4:28:6c:99:04:78:6e:73:9a:d1:3d:15:52:e2:45: c6:3f:cf:ff:b5:61:de:ec:2d:e3:01:55:03:50:97: 99:1d:74:11:0a:25:f7:12:90:34:2e:91:9f:c4:bd: be:ac:87:40:ea:9c:99:1a:dc:04:4b:aa:80:8f:3d: 55:0c:01:59:8d:69:8f:db:49:2f:60:c6:c1:fc:ec: ea:4e:c1:c8:41:86:ab:f9:6c:10:ea:4f:91:96:9e: 39:67:57:86:43:0e:2b:de:2b:8e:39:53:a0:2c:0b: 9f:a6:da:c2:6d:8c:af:7d:34:cf:fc:80:97:26:e0: f7:5f:5b:b0:38:de:93:af:5c:6d:ca:ab:9d:3d:f3: e7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.73.128.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50386 Signature Algorithm: sha256WithRSAEncryption 2f:73:09:38:b9:bc:8b:c3:71:64:4b:90:e6:7d:15:f3:54:96: 05:f7:46:9c:86:a3:9b:ea:cc:a8:05:8d:00:09:82:7c:de:e3: 10:85:d5:75:34:db:e0:85:58:9d:f3:b2:4b:bc:44:ed:b1:68: b7:9e:e8:a0:eb:e1:e2:22:af:e3:91:f4:b9:a2:e0:0a:99:92: f0:b8:c0:29:a5:d2:ef:53:02:10:81:03:6e:f3:56:37:1e:c1: 68:3d:d8:91:30:49:50:4f:b5:34:64:f0:f0:07:4e:c9:9f:ee: d8:43:7e:3b:6c:20:08:5c:57:68:f1:c4:a4:86:40:0f:96:60: 88:74:de:68:0e:83:0b:38:13:25:9f:1b:36:90:0a:be:0b:b5: 08:3f:37:bb:c8:87:db:27:d5:a3:08:74:b8:ac:00:40:d9:f2: d5:4d:2b:88:a6:0a:f1:b6:1b:66:00:f7:9b:d1:3d:66:46:d1: 91:c9:61:3f:aa:46:a2:91:4f:bc:6f:f1:b8:78:59:a3:03:09: b0:ad:7e:b5:5c:dc:bc:f4:9d:b3:70:17:0a:e9:05:d4:38:48: 77:f5:d6:33:eb:f5:17:99:bd:5e:2e:1e:ff:a8:5d:ef:b7:45: 28:00:b2:fc:91:f1:a9:03:d2:25:74:6f:41:a5:57:92:56:bb: 3d:1e:d8:fc -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+ppnoQnWUu0sz0BiN+kRMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmZhMTNmMWFlMDUzOTE2MjgwZWM2OGVlMWIwOTc2ZjllYmQzZWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R3Q2KfioIw3Yc3yqkgLEkauYnn8 BaHkaW+3mNpPi9El44lcMuCPgMk7zdB6OdBQGva1DMbPziM1VqjV/PNFR0ElSsPW 4ze32FsH5Jj7YBgRNMhDxQpa6ttTRNcvwckU/zWtpszdWe50jJygdkEBNRTCZMTR N7fkKGyZBHhuc5rRPRVS4kXGP8//tWHe7C3jAVUDUJeZHXQRCiX3EpA0LpGfxL2+ rIdA6pyZGtwES6qAjz1VDAFZjWmP20kvYMbB/OzqTsHIQYar+WwQ6k+Rlp45Z1eG Qw4r3iuOOVOgLAufptrCbYyvfTTP/ICXJuD3X1uwON6Tr1xtyqudPfPnOQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFK/6E/GuBTkWKA7GjuGwl2+evT6oMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5L2EzYzBh NC0zMTkxLTRlNTEtOGQ4MC00NzhjMmM4Y2IyYTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvYTNjMGE0 LTMxOTEtNGU1MS04ZDgwLTQ3OGMyYzhjYjJhMC8xL3Jfb1Q4YTRGT1JZb0RzYU80 YkNYYjU2OVBxZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDTUmAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDE0jANBgkqhkiG9w0BAQsFAAOCAQEAL3MJOLm8i8NxZEuQ5n0V81SWBfdGnIaj m+rMqAWNAAmCfN7jEIXVdTTb4IVYnfOyS7xE7bFot57ooOvh4iKv45H0uaLgCpmS 8LjAKaXS71MCEIEDbvNWNx7BaD3YkTBJUE+1NGTw8AdOyZ/u2EN+O2wgCFxXaPHE pIZAD5ZgiHTeaA6DCzgTJZ8bNpAKvgu1CD83u8iH2yfVowh0uKwAQNny1U0riKYK 8bYbZgD3m9E9ZkbRkclhP6pGopFPvG/xuHhZowMJsK1+tVzcvPSds3AXCukF1DhI d/XWM+v1F5m9Xi4e/6hd77dFKACy/JHxqQPSJXRvQaVXkla7PR7Y/A== -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:47 2026 by rpki-client