This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer File: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer (raw, json) Hash identifier: HbtGnMkrfN+Z3TkDVlSwkSRbHvAWfOJ8ClhMAZBacSA= Subject key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3B8E3C9456D169ED939AAD698DF79 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211528 IP: 84.234.126.0/24 IP: 185.251.37.0/24 IP: 195.34.93.0/24 IP: 2a10:ae40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:b8:e3:c9:45:6d:16:9e:d9:39:aa:d6:98:df:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6b:4d:b3:2a:ad:76:ea:90:2b:f8:1c:ed:7a: b1:34:dd:53:ca:2c:18:16:7a:58:ce:c1:6d:f5:83: 3b:2c:f8:6f:a0:71:db:12:a3:9f:d0:ae:12:02:61: fa:70:57:20:35:95:67:67:7e:78:f4:22:f4:88:70: 0c:90:2f:18:d8:42:40:18:22:ff:a9:d5:61:d8:44: c4:c9:12:df:0f:2d:ec:67:05:9f:e6:33:76:40:4c: 92:a7:45:79:ff:5c:e7:6a:08:66:4d:7c:db:0a:ad: 63:87:b0:0f:51:45:54:0e:5e:b3:98:eb:8a:ad:fd: 61:39:c3:0d:ab:62:24:61:ad:f2:00:e3:e0:fc:5d: 9a:d2:3e:23:47:8a:cb:6c:ad:4f:5f:6b:b8:0e:09: e4:19:44:96:4d:3b:91:1f:37:07:3b:34:58:c4:6a: 1d:ce:3c:5a:e4:e4:70:18:6f:95:e4:23:a1:6a:bb: 38:c1:70:db:cb:57:89:b2:4b:6a:d5:96:8e:92:78: 86:74:22:e7:b4:b7:7e:8d:05:3f:79:73:2c:29:90: 86:14:0f:72:8b:1f:c1:02:bd:3a:ed:4c:56:76:77: 05:c0:f8:ae:c7:03:f2:c3:f3:95:aa:0f:74:05:81: e9:89:a8:b3:a3:3b:c1:dc:eb:b7:5e:9e:b3:af:be: 25:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.234.126.0/24 185.251.37.0/24 195.34.93.0/24 IPv6: 2a10:ae40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211528 Signature Algorithm: sha256WithRSAEncryption 8b:c7:5d:4a:75:bc:c9:81:a7:90:c0:6f:57:a9:bf:ca:ec:51: ca:e2:26:ea:77:32:95:12:42:ff:52:ab:d0:a7:cf:7b:fb:38: 6b:93:e2:9c:bb:b1:2d:ee:70:40:21:98:6d:5b:77:f7:00:58: bd:67:28:be:e3:17:1d:20:9d:49:61:56:81:bd:12:2f:e8:42: 93:8a:e4:18:6d:8b:51:c8:2e:30:85:03:36:01:01:b4:b7:a2: 3c:a1:aa:3e:2e:72:bc:57:4f:42:f4:39:9b:ee:d0:6a:24:cd: 3b:85:1f:1e:b2:1c:e9:24:1a:02:53:1d:b2:1a:08:99:77:1b: 94:3b:2d:13:74:1a:58:e8:af:3b:95:c0:39:c2:ce:84:be:d7: f2:4d:f2:68:8f:71:23:f2:68:cd:78:12:17:34:4a:2a:5a:ef: 5c:bd:39:1c:88:80:c6:5a:fc:40:78:b1:2c:9b:3a:1f:7c:1b: 22:bf:a6:8c:e5:87:5c:9b:68:89:72:b1:94:bb:7a:89:db:de: af:a1:30:0b:66:2f:3a:c5:7c:d9:62:62:ca:f6:2a:a3:ce:fe: ce:ad:ed:74:fc:4f:99:69:e3:bb:b6:69:12:8b:28:23:96:eb: ef:1b:3e:fd:9f:63:05:85:59:a4:ec:40:a4:e9:88:96:f9:40: 65:6f:50:f5 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt7o7jjyUVtFp7ZOarWmN95MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGVjMTQ2OGVlMzEwM2ZlNTNiMWNmNWE5ODc1YWVjZDRlMjhhZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2tNsyqtduqQK/gc7XqxNN1TyiwY FnpYzsFt9YM7LPhvoHHbEqOf0K4SAmH6cFcgNZVnZ3549CL0iHAMkC8Y2EJAGCL/ qdVh2ETEyRLfDy3sZwWf5jN2QEySp0V5/1znaghmTXzbCq1jh7APUUVUDl6zmOuK rf1hOcMNq2IkYa3yAOPg/F2a0j4jR4rLbK1PX2u4DgnkGUSWTTuRHzcHOzRYxGod zjxa5ORwGG+V5COhars4wXDby1eJsktq1ZaOkniGdCLntLd+jQU/eXMsKZCGFA9y ix/BAr067UxWdncFwPiuxwPyw/OVqg90BYHpiaizozvB3Ou3Xp6zr74lcwIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFPjsFGjuMQP+U7HPWph1rs1OKK1RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlL2IwMjRi ZC0yZDBjLTQ1NzItYTQ5YS01ODc4YTgxNzNjNDQvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvYjAyNGJk LTJkMGMtNDU3Mi1hNDlhLTU4NzhhODE3M2M0NC8xLzEtT3dVYU80eEFfNVRzYzlh bUhXdXpVNG9yVkUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEF BQcBBwEB/wQrMCkwGAQCAAEwEgMEAFTqfgMEALn7JQMEAMMiXTANBAIAAjAHAwUD KhCuQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDOkgwDQYJKoZIhvcNAQELBQAD ggEBAIvHXUp1vMmBp5DAb1epv8rsUcriJup3MpUSQv9Sq9Cnz3v7OGuT4py7sS3u cEAhmG1bd/cAWL1nKL7jFx0gnUlhVoG9Ei/oQpOK5Bhti1HILjCFAzYBAbS3ojyh qj4ucrxXT0L0OZvu0GokzTuFHx6yHOkkGgJTHbIaCJl3G5Q7LRN0GljorzuVwDnC zoS+1/JN8miPcSPyaM14Ehc0Sipa71y9ORyIgMZa/EB4sSybOh98GyK/pozlh1yb aIlysZS7eonb3q+hMAtmLzrFfNliYsr2KqPO/s6t7XT8T5lp47u2aRKLKCOW6+8b Pv2fYwWFWaTsQKTpiJb5QGVvUPU= -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:35 2026 by rpki-client