This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer File: OLWdrt1DzJV1rDWVPj85biG7bYA.cer (raw, json) Hash identifier: Pl1j0GnnHHLsOqAcaPX65fI06aOlVERh0L4bMuMsVAc= Subject key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EFFB89BCFC45162D67324488CC0A5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.147.40.0/22 IP: 2a0f:c800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ff:b8:9b:cf:c4:51:62:d6:73:24:48:8c:c0:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:12:92:fb:71:0d:52:0d:58:ed:a4:e6:ea:11: 01:b1:2a:ff:c1:a8:21:09:c2:85:ab:64:4b:6d:6e: 9f:81:aa:a2:56:c2:62:c6:04:ba:2a:29:15:4f:02: 72:f0:df:84:86:43:0f:1e:ae:47:11:47:b6:92:51: 33:04:13:ce:10:95:5a:b1:ee:da:ce:95:eb:45:90: 83:5b:72:f1:7d:35:f8:7f:09:c7:61:9d:13:22:1d: cb:ec:cc:65:57:02:af:a6:c6:b8:bb:54:dc:da:a0: 2b:40:16:f6:9a:52:e0:ed:3a:f8:41:14:49:02:d7: b1:fc:8f:7b:26:3e:d2:01:75:76:ba:44:98:41:c0: bf:4c:e9:1c:e1:93:af:d6:d6:fc:e3:0b:3c:1b:66: d4:39:8c:2e:5b:dc:c2:ea:9f:40:67:6c:ba:9d:b7: b8:35:26:ce:ea:ce:97:4b:b0:72:09:79:8b:b2:32: 79:fe:de:a2:5f:8f:d7:36:f8:4a:66:cb:ba:8d:eb: 61:6b:e1:90:a7:b4:64:4d:22:52:1f:7a:8a:21:a8: 78:a6:f6:66:58:b3:40:a2:2c:dc:4b:a3:e3:9a:40: 17:60:5c:9d:2a:1a:c7:0a:2b:0a:f6:5a:2b:b9:df: e6:c8:4c:95:85:7b:80:0c:f8:15:77:f2:73:b1:e7: 22:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.40.0/22 IPv6: 2a0f:c800::/29 Signature Algorithm: sha256WithRSAEncryption 1b:9d:91:ff:8c:ea:ee:5f:d1:0c:c2:b2:23:f3:dc:e2:f4:7d: 81:51:41:d5:bb:c3:a3:bc:75:f0:c5:c3:97:ac:1f:dd:bc:6d: 63:39:8b:62:36:e4:b9:f4:08:a6:8e:be:23:ed:3d:bf:83:eb: 98:c7:5e:cc:83:f4:ae:49:5b:70:20:69:b1:34:ce:8d:40:7c: 1b:66:db:a2:fa:c3:e2:5a:a8:3f:7e:8a:bc:95:3a:e0:4b:61: b2:df:07:e3:be:20:f0:1f:7f:a1:97:ee:45:22:32:fd:fa:6f: 9a:7d:81:14:7a:5e:15:e5:e8:66:44:ea:11:5a:8f:66:94:30: 34:d8:66:c5:0c:5e:be:aa:0f:cd:6c:40:b5:7a:30:95:af:d7: 7f:1a:f0:83:1b:74:31:16:29:7c:27:96:71:ea:c9:b2:61:65: 37:22:e1:5f:c2:f0:77:d5:97:94:b0:a3:4a:08:8b:4f:0c:0c: 01:3e:94:71:30:40:ea:06:65:57:91:1c:03:cc:84:6c:93:7d: 94:58:de:e3:76:bb:fe:3e:52:70:c3:3c:9e:6f:3f:ff:bf:b6: b0:cb:7e:81:b5:46:d7:e2:d5:84:55:e5:28:8a:9e:49:34:05: ff:c9:19:a7:aa:e9:37:fb:7d:2d:cd:df:e9:e7:8c:de:88:ff: c8:58:c6:ac -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5fv+4m8/EUWLWcyRIjMClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGI1OWRhZWRkNDNjYzk1NzVhYzM1OTUzZTNmMzk2ZTIxYmI2ZDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRKS+3ENUg1Y7aTm6hEBsSr/wagh CcKFq2RLbW6fgaqiVsJixgS6KikVTwJy8N+EhkMPHq5HEUe2klEzBBPOEJVase7a zpXrRZCDW3LxfTX4fwnHYZ0TIh3L7MxlVwKvpsa4u1Tc2qArQBb2mlLg7Tr4QRRJ Atex/I97Jj7SAXV2ukSYQcC/TOkc4ZOv1tb84ws8G2bUOYwuW9zC6p9AZ2y6nbe4 NSbO6s6XS7ByCXmLsjJ5/t6iX4/XNvhKZsu6jetha+GQp7RkTSJSH3qKIah4pvZm WLNAoizcS6PjmkAXYFydKhrHCisK9lorud/myEyVhXuADPgVd/Jzseci3QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDi1na7dQ8yVdaw1lT4/OW4hu22AMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4LzQzMzEy Ny1lMmNmLTQxYTEtOTkxMy03YTBmNzJjYmIyZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvNDMzMTI3 LWUyY2YtNDFhMS05OTEzLTdhMGY3MmNiYjJkNS8xL09MV2RydDFEekpWMXJEV1ZQ ajg1YmlHN2JZQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZMoMA0EAgACMAcDBQMqD8gAMA0GCSqGSIb3 DQEBCwUAA4IBAQAbnZH/jOruX9EMwrIj89zi9H2BUUHVu8OjvHXwxcOXrB/dvG1j OYtiNuS59Aimjr4j7T2/g+uYx17Mg/SuSVtwIGmxNM6NQHwbZtui+sPiWqg/foq8 lTrgS2Gy3wfjviDwH3+hl+5FIjL9+m+afYEUel4V5ehmROoRWo9mlDA02GbFDF6+ qg/NbEC1ejCVr9d/GvCDG3QxFil8J5Zx6smyYWU3IuFfwvB31ZeUsKNKCItPDAwB PpRxMEDqBmVXkRwDzIRsk32UWN7jdrv+PlJwwzyebz//v7awy36BtUbX4tWEVeUo ip5JNAX/yRmnquk3+30tzd/p54zeiP/IWMas -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:03 2026 by rpki-client