This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer File: ORvm1CiPvt6_hkKmoeOXeupfHzU.cer (raw, json) Hash identifier: x2yk9arbNfRXQUPb4JFH5TVnC9gys2ucIIdhPNqPmTg= Subject key identifier: 39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCACD16611F905DE7E6A71994783AAF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15733 IP: 2a03:39a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:cd:16:61:1f:90:5d:e7:e6:a7:19:94:78:3a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ac:3c:4c:9f:99:fb:e2:e4:1f:ad:f2:28:cb: 4c:8f:3c:65:00:41:98:af:f9:4a:76:96:35:ef:b0: 75:12:0f:8c:b8:ed:eb:03:36:21:e5:c8:b6:c3:38: 59:4e:47:9c:58:c9:e9:72:fa:20:73:ba:3a:f5:f3: 89:78:8a:88:2d:ec:1f:f2:fa:ff:f7:fc:01:aa:74: 92:57:57:8f:12:4a:b9:16:9d:19:f5:33:80:7a:33: bd:84:97:17:87:37:3a:63:e6:a8:5c:ce:61:a4:8c: 9e:ef:ba:a3:5f:c0:3a:64:7d:8e:a7:1c:20:b1:11: d6:9c:e7:6e:6a:82:6d:e1:bc:11:f5:50:be:06:aa: 9a:c3:51:de:d4:c3:86:6f:03:36:83:23:d0:98:ad: ad:f2:cd:4e:2a:5c:a0:5a:2a:94:2b:0b:63:ab:1a: 0e:54:f3:01:22:04:b9:dc:6c:75:66:b5:bd:94:d1: 36:b2:ee:c9:94:2f:d8:bd:c8:14:d2:de:8b:8e:6a: 3d:95:74:19:5e:09:87:88:ef:77:9c:6c:36:3c:bf: e3:cd:17:1d:de:4a:dd:b1:3e:29:c1:e8:b4:cd:61: ea:41:af:5a:23:5c:fa:8a:25:eb:63:5a:76:7d:d3: 78:45:e6:f3:7b:86:2a:47:35:19:fd:32:d0:b6:ab: 6f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:39a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15733 Signature Algorithm: sha256WithRSAEncryption 79:20:06:7b:51:5f:32:ae:0a:03:86:47:9e:09:53:45:09:7b: 78:a1:30:a4:a2:c2:61:14:36:69:be:18:5d:a8:b2:16:5e:c1: 9d:60:c6:5c:82:3c:0e:b7:05:57:fc:44:d9:62:44:55:70:37: 27:3d:1d:e9:22:2b:95:98:6f:90:1e:0e:5b:0b:8c:e5:1a:ed: 7f:24:f3:8e:69:d2:68:25:08:93:45:ce:7a:62:6d:12:48:fc: 5e:06:2b:04:f8:ef:14:f0:0e:d3:c8:b6:e7:c4:e8:74:1d:8f: e0:09:d3:92:0e:95:91:c7:50:f5:4d:bc:a6:da:1e:e5:3d:7c: 44:f6:5c:f7:f7:8c:37:4a:38:2e:de:26:48:bc:46:f4:5b:c8: 86:30:88:e8:65:a2:d5:fc:d2:6e:00:06:1e:09:33:46:91:9a: 9b:3d:d6:19:07:c0:ea:53:a4:b9:55:a0:d7:04:dd:0e:ac:36: bb:7e:48:1f:d6:ea:72:16:bb:9c:56:53:bb:00:57:71:9b:47: c8:b3:42:02:50:39:5a:b2:f2:bc:dc:91:db:8b:d0:38:2f:fa: b4:5f:e3:79:ba:fb:a0:52:27:d4:d0:7a:9d:55:e1:d0:ce:37: 90:a3:c2:7f:51:8d:9d:4f:9a:fc:ff:49:59:cc:49:30:0f:2b: dd:5a:fa:13 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9ys0WYR+QXefmpxmUeDqvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTFiZTZkNDI4OGZiZWRlYmY4NjQyYTZhMWUzOTc3YWVhNWYxZjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6w8TJ+Z++LkH63yKMtMjzxlAEGY r/lKdpY177B1Eg+MuO3rAzYh5ci2wzhZTkecWMnpcvogc7o69fOJeIqILewf8vr/ 9/wBqnSSV1ePEkq5Fp0Z9TOAejO9hJcXhzc6Y+aoXM5hpIye77qjX8A6ZH2Opxwg sRHWnOduaoJt4bwR9VC+Bqqaw1He1MOGbwM2gyPQmK2t8s1OKlygWiqUKwtjqxoO VPMBIgS53Gx1ZrW9lNE2su7JlC/YvcgU0t6Ljmo9lXQZXgmHiO93nGw2PL/jzRcd 3krdsT4pwei0zWHqQa9aI1z6iiXrY1p2fdN4Rebze4YqRzUZ/TLQtqtvmQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDkb5tQoj77ev4ZCpqHjl3rqXx81MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljLzVjZGVi NC1lYTc5LTRhNjYtOTBiZi1lNWZiNGFjMTEwZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvNWNkZWI0 LWVhNzktNGE2Ni05MGJmLWU1ZmI0YWMxMTBkYi8xL09Sdm0xQ2lQdnQ2X2hrS21v ZU9YZXVwZkh6VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUAKgM5oDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgI9dTANBgkqhkiG9w0BAQsFAAOCAQEAeSAGe1FfMq4KA4ZHnglTRQl7eKEwpKLC YRQ2ab4YXaiyFl7BnWDGXII8DrcFV/xE2WJEVXA3Jz0d6SIrlZhvkB4OWwuM5Rrt fyTzjmnSaCUIk0XOemJtEkj8XgYrBPjvFPAO08i258TodB2P4AnTkg6VkcdQ9U28 ptoe5T18RPZc9/eMN0o4Lt4mSLxG9FvIhjCI6GWi1fzSbgAGHgkzRpGamz3WGQfA 6lOkuVWg1wTdDqw2u35IH9bqcha7nFZTuwBXcZtHyLNCAlA5WrLyvNyR24vQOC/6 tF/jebr7oFIn1NB6nVXh0M43kKPCf1GNnU+a/P9JWcxJMA8r3Vr6Ew== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:48 2026 by rpki-client