This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O5pBDtUm-GwybZG2KApEGhbAxnY.cer File: O5pBDtUm-GwybZG2KApEGhbAxnY.cer (raw, json) Hash identifier: 7ZN9b8EwD2foWot6pG0+RUaFjM922KjSog3ah7CECjs= Subject key identifier: 3B:9A:41:0E:D5:26:F8:6C:32:6D:91:B6:28:0A:44:1A:16:C0:C6:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C73B24615B03EE8CBC37EB124471A5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48597 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3b:24:61:5b:03:ee:8c:bc:37:eb:12:44:71:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b9a410ed526f86c326d91b6280a441a16c0c676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c2:4d:28:72:19:72:f5:03:24:d9:33:97:f1: 2a:a0:c1:24:ba:1c:48:6e:4b:29:2a:7a:7c:b5:c8: 10:4f:3d:1d:9e:7d:01:3b:b0:98:96:54:8a:1b:09: 54:3e:c1:eb:08:34:75:5d:c2:28:ea:0b:b2:4d:03: 80:30:6d:30:49:81:cc:2f:7f:3a:35:cd:5c:db:09: 25:77:c5:5b:6e:69:9d:e5:e5:84:14:c5:28:26:eb: 20:fd:aa:b4:20:7b:be:d0:bc:03:10:b7:68:cd:b5: 67:33:35:0c:12:ab:d8:0a:42:7e:93:fc:04:7d:eb: 4a:80:16:fe:7f:6d:fc:ba:32:7b:5e:dd:c8:d7:db: f4:17:1d:85:5d:3f:c4:63:39:b5:1d:fa:90:1a:40: 27:38:54:ea:3c:a5:9f:76:23:da:13:97:fb:fe:25: 1e:ff:18:97:d3:c4:65:05:83:94:f6:b0:51:b2:2d: de:91:02:c9:8f:9e:8b:e7:e1:ee:aa:db:72:c1:b8: f2:4f:bf:02:0f:1b:84:52:af:2c:c3:53:7e:0e:8b: 19:bf:f3:b2:40:7c:21:54:64:89:76:4b:d5:a0:37: 34:a0:58:5a:46:71:82:c1:db:e8:07:92:4c:ac:ce: 5c:67:6f:35:2d:61:3b:63:57:40:b4:8e:0d:09:72: 6f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9A:41:0E:D5:26:F8:6C:32:6D:91:B6:28:0A:44:1A:16:C0:C6:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 48597 Signature Algorithm: sha256WithRSAEncryption 02:4b:ae:6f:50:72:01:90:0b:79:13:a9:52:2d:57:41:e2:2d: 78:2e:7c:c6:8c:0b:e9:f6:2e:26:f0:2e:8c:0b:9e:3d:2f:86: bd:a0:b6:37:08:d6:cb:ed:d6:b2:78:d4:10:4b:65:58:01:3f: 77:60:9d:3e:79:bb:1d:44:e4:18:6d:e8:24:48:57:04:ad:3e: e3:c2:7f:3a:cb:0b:2d:06:83:5b:ec:f1:2c:3a:10:79:84:18: 13:37:27:10:0a:4e:a4:da:ce:78:c4:a3:ff:8e:b7:9b:50:11: e2:d2:38:ad:d4:8d:b9:9d:3e:4b:06:bc:34:e6:7d:47:3d:0c: 6e:b3:85:9a:1d:81:d0:85:a9:d7:ef:25:9b:af:a6:b4:fb:e5: 37:d4:3f:da:20:55:f0:6d:7c:92:b2:b5:9b:06:4a:ac:5c:69: 19:0c:1a:15:0a:c7:7f:4f:b3:9c:1f:df:11:15:ff:c7:ae:f6: 61:e9:1d:5a:b2:bf:4a:20:12:30:77:67:5c:8e:31:2d:7d:de: 66:41:ad:32:55:c2:b9:9b:6d:c3:96:55:66:69:c6:c9:20:6c: 52:62:b4:44:a5:b4:b2:26:99:39:d0:41:34:91:8a:d3:3a:9d: 4a:5c:fa:88:cb:04:58:3b:4e:73:e2:d8:ed:c5:6d:ff:06:75: 5d:95:07:31 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3xzskYVsD7oy8N+sSRHGlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjlhNDEwZWQ1MjZmODZjMzI2ZDkxYjYyODBhNDQxYTE2YzBjNjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcJNKHIZcvUDJNkzl/EqoMEkuhxI bkspKnp8tcgQTz0dnn0BO7CYllSKGwlUPsHrCDR1XcIo6guyTQOAMG0wSYHML386 Nc1c2wkld8Vbbmmd5eWEFMUoJusg/aq0IHu+0LwDELdozbVnMzUMEqvYCkJ+k/wE fetKgBb+f238ujJ7Xt3I19v0Fx2FXT/EYzm1HfqQGkAnOFTqPKWfdiPaE5f7/iUe /xiX08RlBYOU9rBRsi3ekQLJj56L5+HuqttywbjyT78CDxuEUq8sw1N+DosZv/Oy QHwhVGSJdkvVoDc0oFhaRnGCwdvoB5JMrM5cZ281LWE7Y1dAtI4NCXJvCQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFDuaQQ7VJvhsMm2RtigKRBoWwMZ2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzVlOGUw NC1lNmVhLTRkNTktYjJmNy1kZjBhNmRjMjgyYTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvNWU4ZTA0 LWU2ZWEtNGQ1OS1iMmY3LWRmMGE2ZGMyODJhMC8xL081cEJEdFVtLUd3eWJaRzJL QXBFR2hiQXhuWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC91TANBgkqhkiG9w0BAQsFAAOCAQEAAkuub1ByAZAL eROpUi1XQeIteC58xowL6fYuJvAujAuePS+GvaC2NwjWy+3WsnjUEEtlWAE/d2Cd Pnm7HUTkGG3oJEhXBK0+48J/OssLLQaDW+zxLDoQeYQYEzcnEApOpNrOeMSj/463 m1AR4tI4rdSNuZ0+Swa8NOZ9Rz0MbrOFmh2B0IWp1+8lm6+mtPvlN9Q/2iBV8G18 krK1mwZKrFxpGQwaFQrHf0+znB/fERX/x672YekdWrK/SiASMHdnXI4xLX3eZkGt MlXCuZttw5ZVZmnGySBsUmK0RKW0siaZOdBBNJGK0zqdSlz6iMsEWDtOc+LY7cVt /wZ1XZUHMQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:43 2026 by rpki-client