This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer File: OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer (raw, json) Hash identifier: +c1WnXg6EMKyOfe1YrJFVRxaSQdHWkBSxt1Z27x5mwY= Subject key identifier: 38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783435D1172DA329A2EF897EB6E7D31B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198085 IP: 195.66.110.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:35:d1:17:2d:a3:29:a2:ef:89:7e:b6:e7:d3:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38f23798b67393e4039e3f9555e214d6737c1351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d8:6e:bb:1f:c8:ab:f2:4f:28:40:b4:08:a1: 92:7c:ad:35:64:27:5a:63:81:08:9d:f9:80:53:60: 49:12:66:0e:cd:1b:58:04:1e:40:7c:c4:d0:1d:19: 36:6d:b4:ff:fd:62:be:75:57:8f:fa:d2:4d:58:a3: 34:d5:88:53:2a:fa:9d:44:73:b1:0e:36:77:ce:97: 90:95:ce:ec:ef:4a:ac:45:2a:62:73:55:18:4b:00: de:77:b1:46:c3:a8:13:8e:71:45:e2:78:e8:86:cd: 2a:0f:35:fa:a0:f1:14:cc:db:c7:bb:e1:1e:d7:02: 5e:bd:6b:85:92:18:8d:cc:f1:b3:0b:59:1c:5b:b0: 20:3b:10:1b:2d:89:46:85:82:e6:44:ad:c5:a8:eb: 3c:09:75:99:fd:41:d8:f6:b9:03:18:d3:0b:b1:e9: 89:3b:c3:3a:c2:ca:29:c0:93:4c:90:01:00:c0:98: a4:a4:62:91:7c:ea:85:2a:af:a8:36:cc:49:0b:3d: 2a:14:d3:a0:58:6d:30:89:ea:dc:cd:94:9c:90:57: bb:83:46:14:74:67:74:c2:f8:55:84:a5:df:06:35: a8:35:9f:c9:7c:7d:55:81:45:08:a2:87:20:c9:22: 4b:3a:bf:6b:60:ab:3f:6a:55:e1:7f:01:74:b3:09: d3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.66.110.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198085 Signature Algorithm: sha256WithRSAEncryption 92:ee:1f:7e:b6:62:07:04:2d:1f:59:30:47:ea:2a:e6:88:4b: f3:c8:b6:35:a9:2e:86:c1:e8:6e:af:fe:d3:d4:1f:95:5f:54: 1c:fe:40:2b:9c:3b:11:76:7d:a6:e5:a3:fc:5f:c0:66:40:be: 71:45:78:4e:8f:37:1c:70:96:5a:df:dd:99:d1:cf:c0:20:a8: f5:a0:a8:54:b6:1b:43:73:19:d3:be:11:e9:e4:a0:67:d9:66: 6f:6b:ce:35:4b:c3:b6:e7:07:d7:ac:cb:d2:1b:a9:95:f0:2a: ca:96:78:2b:b5:ad:08:97:08:13:b2:2a:7f:09:c3:be:20:a5: 17:aa:a5:4a:da:69:5b:a2:b1:b5:95:6f:17:2e:d1:bc:3b:cf: d1:95:e1:b6:55:3f:58:ed:40:06:bb:d1:1d:e3:58:e9:37:f6: c7:c1:8c:63:d5:71:94:b9:f5:20:5e:b9:c1:e6:6b:ee:bf:1c: 1a:c1:0c:a2:fa:56:48:4d:21:e5:77:0c:4c:44:2a:cc:7b:33: d5:9d:ba:d4:4e:b5:77:7b:b8:ff:28:a0:74:d4:92:ed:0b:6a: 6a:91:05:6d:7b:38:38:e2:df:26:d7:74:a6:a3:dc:f1:0e:81: 0b:69:ba:b8:c2:89:ad:b5:0a:ff:ba:4e:e8:d2:a6:7a:6a:e4: 28:9e:c5:9f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NDXRFy2jKaLviX6259MbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGYyMzc5OGI2NzM5M2U0MDM5ZTNmOTU1NWUyMTRkNjczN2MxMzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19huux/Iq/JPKEC0CKGSfK01ZCda Y4EInfmAU2BJEmYOzRtYBB5AfMTQHRk2bbT//WK+dVeP+tJNWKM01YhTKvqdRHOx DjZ3zpeQlc7s70qsRSpic1UYSwDed7FGw6gTjnFF4njohs0qDzX6oPEUzNvHu+Ee 1wJevWuFkhiNzPGzC1kcW7AgOxAbLYlGhYLmRK3FqOs8CXWZ/UHY9rkDGNMLsemJ O8M6wsopwJNMkAEAwJikpGKRfOqFKq+oNsxJCz0qFNOgWG0wierczZSckFe7g0YU dGd0wvhVhKXfBjWoNZ/JfH1VgUUIoocgySJLOr9rYKs/alXhfwF0swnTxQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDjyN5i2c5PkA54/lVXiFNZzfBNRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzlhYjRj OS0wYzEwLTQ2NzEtYmRkNC03MzBmY2QwZTVkY2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvOWFiNGM5 LTBjMTAtNDY3MS1iZGQ0LTczMGZjZDBlNWRjYS8xL09QSTNtTFp6ay1RRG5qLVZW ZUlVMW5OOEUxRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw0JuMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMFxTANBgkqhkiG9w0BAQsFAAOCAQEAku4ffrZiBwQtH1kwR+oq5ohL88i2Naku hsHobq/+09QflV9UHP5AK5w7EXZ9puWj/F/AZkC+cUV4To83HHCWWt/dmdHPwCCo 9aCoVLYbQ3MZ074R6eSgZ9lmb2vONUvDtucH16zL0huplfAqypZ4K7WtCJcIE7Iq fwnDviClF6qlStppW6KxtZVvFy7RvDvP0ZXhtlU/WO1ABrvRHeNY6Tf2x8GMY9Vx lLn1IF65weZr7r8cGsEMovpWSE0h5XcMTEQqzHsz1Z261E61d3u4/yigdNSS7Qtq apEFbXs4OOLfJtd0pqPc8Q6BC2m6uMKJrbUK/7pO6NKmemrkKJ7Fnw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:07 2026 by rpki-client