This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O-U4LPdsHE8EZFTfy45VXMlJXIA.cer File: O-U4LPdsHE8EZFTfy45VXMlJXIA.cer (raw, json) Hash identifier: Silb1szEFWsCZ26Sf2ul2Q+KXH0M+j+yL2yI9Ffe5l0= Subject key identifier: 3B:E5:38:2C:F7:6C:1C:4F:04:64:54:DF:CB:8E:55:5C:C9:49:5C:80 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B8EAE8EA71D7F71775F78D2BD36C35C69 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 05 Jan 2026 15:02:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209670 IP: 45.82.112.0/22 IP: 2a05:7380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:ae:8e:a7:1d:7f:71:77:5f:78:d2:bd:36:c3:5c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 5 15:02:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3be5382cf76c1c4f046454dfcb8e555cc9495c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fa:58:1a:ca:c0:26:bc:b0:1b:c4:76:80:f8: 90:5b:2e:32:aa:f9:99:2e:d7:f2:b2:ae:96:99:e6: 44:c2:b9:5b:c9:f3:9b:e1:b3:c8:bc:a3:da:84:91: af:9c:b9:d1:2f:36:0f:32:56:92:8b:cb:ec:33:d3: 80:72:d9:1d:c6:e6:6b:e6:04:1c:07:96:1f:aa:99: 26:44:d3:9d:e9:b5:b3:2a:ef:d9:44:9b:21:63:1f: ee:34:1e:6a:47:12:1e:eb:c6:14:3d:3a:3c:ec:33: 8f:cb:29:24:ef:e2:f8:bf:12:4f:c5:7f:ea:01:75: 77:19:c0:87:92:8b:e2:c8:2a:2c:ef:c3:f9:3d:f7: d4:4a:76:e4:ab:e3:31:6d:16:40:63:27:7a:c5:82: 21:bd:1b:9b:71:70:d3:07:fb:a9:41:4a:ef:31:b3: 6d:4c:37:c1:2a:e3:c0:30:8e:0f:9d:1c:e2:54:e5: bd:dd:61:1e:13:e7:cb:1e:7c:b8:3c:9f:94:f6:b3: 24:97:87:ea:af:25:2c:72:9a:4f:b3:4d:89:b6:22: af:0a:26:3e:40:c6:9b:19:05:6f:73:01:39:44:06: 77:78:c2:9c:9f:65:0d:d9:19:c1:5e:37:86:16:2d: b0:fd:6a:f7:a8:13:8b:a5:00:c4:f8:4f:2c:25:1d: b3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E5:38:2C:F7:6C:1C:4F:04:64:54:DF:CB:8E:55:5C:C9:49:5C:80 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.112.0/22 IPv6: 2a05:7380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209670 Signature Algorithm: sha256WithRSAEncryption 72:bb:07:1a:d2:b9:ad:3c:26:28:32:21:64:8c:f5:10:c5:9e: 83:71:89:f7:52:9e:bd:64:05:81:b5:2a:39:53:57:e1:be:82: 89:47:9b:b8:e3:a2:f5:95:8a:b6:5d:c1:b5:d0:c2:1f:ec:23: dc:b6:6c:47:a9:ee:bb:d4:6e:35:f3:72:13:68:d1:a5:94:00: f6:82:cf:b5:1a:89:60:8f:80:75:f8:c6:26:9d:57:d3:d6:37: d9:aa:9a:21:c1:e3:aa:a7:a8:e9:8f:8c:27:b6:ca:ad:70:5d: 2e:3f:23:f8:90:e5:cd:c1:e5:fd:ff:8a:a7:c9:8b:4a:72:d2: 95:06:63:1a:e1:9c:a9:bc:58:fd:48:af:ba:1a:9f:63:8c:b5: 3f:79:14:a7:f3:eb:e2:c4:c9:dd:87:31:b4:6d:a2:5b:51:fe: 72:6e:20:b4:3e:5d:dd:b9:74:dd:89:1b:00:e0:69:6c:f4:02: 19:8f:ff:0e:10:7c:21:08:48:6c:9e:d1:5d:9f:0c:5e:41:ba: ff:be:5c:a7:c0:48:46:a3:37:6f:4c:14:9c:4c:61:7c:4d:d4: c5:c3:7a:48:11:e6:aa:a6:8f:1c:30:18:64:77:f0:89:0e:6a: 65:ab:52:15:a7:bc:16:c9:04:1b:7f:4e:af:0c:df:62:b2:83: 98:41:c7:49 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZuOro6nHX9xd1940r02w1xpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA1MTUwMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmU1MzgyY2Y3NmMxYzRmMDQ2NDU0ZGZjYjhlNTU1Y2M5NDk1YzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PpYGsrAJrywG8R2gPiQWy4yqvmZ Ltfysq6WmeZEwrlbyfOb4bPIvKPahJGvnLnRLzYPMlaSi8vsM9OActkdxuZr5gQc B5YfqpkmRNOd6bWzKu/ZRJshYx/uNB5qRxIe68YUPTo87DOPyykk7+L4vxJPxX/q AXV3GcCHkoviyCos78P5PffUSnbkq+MxbRZAYyd6xYIhvRubcXDTB/upQUrvMbNt TDfBKuPAMI4PnRziVOW93WEeE+fLHny4PJ+U9rMkl4fqryUscppPs02JtiKvCiY+ QMabGQVvcwE5RAZ3eMKcn2UN2RnBXjeGFi2w/Wr3qBOLpQDE+E8sJR2ztwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDvlOCz3bBxPBGRU38uOVVzJSVyAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyLzM3YjM2 Mi1lNmI2LTRiMTgtODQwZS02Zjg4ZWRkNDAyNDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvMzdiMzYy LWU2YjYtNGIxOC04NDBlLTZmODhlZGQ0MDI0OC8xL08tVTRMUGRzSEU4RVpGVGZ5 NDVWWE1sSlhJQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLVJwMA0EAgACMAcDBQMqBXOAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMzBjANBgkqhkiG9w0BAQsFAAOCAQEAcrsHGtK5rTwm KDIhZIz1EMWeg3GJ91KevWQFgbUqOVNX4b6CiUebuOOi9ZWKtl3BtdDCH+wj3LZs R6nuu9RuNfNyE2jRpZQA9oLPtRqJYI+AdfjGJp1X09Y32aqaIcHjqqeo6Y+MJ7bK rXBdLj8j+JDlzcHl/f+Kp8mLSnLSlQZjGuGcqbxY/UivuhqfY4y1P3kUp/Pr4sTJ 3YcxtG2iW1H+cm4gtD5d3bl03YkbAOBpbPQCGY//DhB8IQhIbJ7RXZ8MXkG6/75c p8BIRqM3b0wUnExhfE3UxcN6SBHmqqaPHDAYZHfwiQ5qZatSFae8FskEG39Orwzf YrKDmEHHSQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:42 2026 by rpki-client