This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer File: OJsvo2UTg6f8aoatulbHxiB9dWg.cer (raw, json) Hash identifier: /k3LZyoyTVQQYHVYjKgNAohthgdC3pjPcuv8BJej+0g= Subject key identifier: 38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38F721AA1E7609DD91FB14223829BB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58173 AS: 61105 IP: 5.61.72.0/21 IP: 134.0.80.0/21 IP: 185.18.48.0/22 IP: 185.96.192.0/22 IP: 185.205.160.0/22 IP: 2a02:fec0::/29 IP: 2a05:8080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f7:21:aa:1e:76:09:dd:91:fb:14:22:38:29:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=389b2fa3651383a7fc6a86adba56c7c6207d7568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d5:cb:bb:a3:ed:a4:a1:3e:a8:21:9b:b4:5c: 5d:fe:43:45:94:df:3b:0a:1f:65:a3:c6:a3:50:b9: 3c:6d:76:d5:c1:62:6f:33:3b:b0:33:ae:fa:57:ac: 6c:15:33:d2:c8:7b:be:27:ce:e1:a6:c6:49:eb:46: fb:e3:86:cd:2b:e8:2a:27:35:20:b8:62:e7:71:b6: 7f:05:0c:c2:89:4f:51:7d:7b:4f:f4:10:a2:0b:61: d3:b0:9a:5a:07:47:9e:15:01:ea:0f:7d:7d:bc:45: 0f:2d:d0:4a:8c:54:2c:4d:5f:a6:4a:d6:59:35:30: 1c:a6:0f:5c:d2:63:56:d6:a8:e2:59:23:d7:38:d6: bf:b0:8c:39:8a:3e:99:93:85:c3:20:36:aa:73:ab: d1:86:be:3f:25:05:bf:00:09:e4:fb:4f:9d:26:d6: 14:5c:50:29:7c:86:2d:ce:eb:21:a3:ea:c3:74:7a: 52:75:ec:8c:78:74:7a:b7:4c:d1:f6:9c:e6:f6:ae: 71:c8:a6:86:57:58:da:84:c9:8e:dc:71:9e:ab:42: 80:f6:20:27:96:30:34:15:1f:56:71:56:2c:1f:5a: c2:37:61:49:9e:f0:b9:93:63:a0:2b:2f:77:ec:67: 3d:7d:fd:7d:26:7b:2e:bc:28:3f:88:6e:9e:c6:c9: 4c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.72.0/21 134.0.80.0/21 185.18.48.0/22 185.96.192.0/22 185.205.160.0/22 IPv6: 2a02:fec0::/29 2a05:8080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58173 61105 Signature Algorithm: sha256WithRSAEncryption aa:8c:7f:f3:1f:9d:15:48:2f:ea:87:fa:0b:4d:8d:4d:26:c2: c3:54:96:50:45:ee:d1:37:4e:ed:ef:02:ce:ae:79:b0:33:02: 1d:95:0f:a3:8f:7f:30:ee:11:7e:15:3f:34:7b:a9:4c:46:0b: d8:da:dd:10:5e:69:27:50:d3:f4:33:c2:0f:4f:4f:d4:a1:43: b0:29:7c:32:d0:19:d2:82:9d:13:04:b7:5e:b8:97:52:14:7a: 94:fa:4e:0f:00:28:8f:3f:f6:7b:27:44:15:df:79:1d:28:9e: 78:00:70:0e:a1:6f:7c:c4:2b:33:9e:be:fe:41:46:7a:54:7e: 44:6b:80:bf:83:10:41:32:e1:a2:3a:31:3c:05:6d:d3:c4:6f: 68:3b:d8:89:39:ea:f8:c0:d1:f3:79:03:6e:e1:d5:23:4f:60: 8f:7b:54:c6:a5:d0:70:04:65:b3:93:09:1b:82:0c:cb:42:d7: d1:f1:10:a8:2e:d7:52:a1:4d:85:d7:81:b1:3b:96:cf:15:3c: ac:93:6c:d1:ac:af:3a:85:77:99:2e:8c:f2:fc:78:c0:50:20: f5:49:52:dd:bd:24:76:65:76:56:27:d8:7e:3b:18:df:e4:8c: 0a:2b:ea:d1:ed:50:2d:ec:62:fa:05:49:67:70:4b:df:90:60: 8b:3a:d4:37 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt+OPchqh52Cd2R+xQiOCm7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODliMmZhMzY1MTM4M2E3ZmM2YTg2YWRiYTU2YzdjNjIwN2Q3NTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtXLu6PtpKE+qCGbtFxd/kNFlN87 Ch9lo8ajULk8bXbVwWJvMzuwM676V6xsFTPSyHu+J87hpsZJ60b744bNK+gqJzUg uGLncbZ/BQzCiU9RfXtP9BCiC2HTsJpaB0eeFQHqD319vEUPLdBKjFQsTV+mStZZ NTAcpg9c0mNW1qjiWSPXONa/sIw5ij6Zk4XDIDaqc6vRhr4/JQW/AAnk+0+dJtYU XFApfIYtzusho+rDdHpSdeyMeHR6t0zR9pzm9q5xyKaGV1jahMmO3HGeq0KA9iAn ljA0FR9WcVYsH1rCN2FJnvC5k2OgKy937Gc9ff19JnsuvCg/iG6exslMdQIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFDibL6NlE4On/GqGrbpWx8YgfXVoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllLzFhZDI2 Zi1hMzNlLTQwNjktYTgwMi0zNzNiNTIyYTgyMWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvMWFkMjZm LWEzM2UtNDA2OS1hODAyLTM3M2I1MjJhODIxZC8xL09Kc3ZvMlVUZzZmOGFvYXR1 bGJIeGlCOWRXZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAkBAIAATAeAwQDBT1IAwQDhgBQAwQCuRIwAwQCuWDAAwQCuc2g MBQEAgACMA4DBQMqAv7AAwUDKgWAgDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA 4z0CAwDusTANBgkqhkiG9w0BAQsFAAOCAQEAqox/8x+dFUgv6of6C02NTSbCw1SW UEXu0TdO7e8Czq55sDMCHZUPo49/MO4RfhU/NHupTEYL2NrdEF5pJ1DT9DPCD09P 1KFDsCl8MtAZ0oKdEwS3XriXUhR6lPpODwAojz/2eydEFd95HSieeABwDqFvfMQr M56+/kFGelR+RGuAv4MQQTLhojoxPAVt08RvaDvYiTnq+MDR83kDbuHVI09gj3tU xqXQcARls5MJG4IMy0LX0fEQqC7XUqFNhdeBsTuWzxU8rJNs0ayvOoV3mS6M8vx4 wFAg9UlS3b0kdmV2VifYfjsY3+SMCivq0e1QLexi+gVJZ3BL35BgizrUNw== -----END CERTIFICATE-----Generated at Mon Jan 26 18:56:37 2026 by rpki-client