This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer File: OhoMABa5sz-T6Kejk9CRkNXhhJk.cer (raw, json) Hash identifier: U7uObTT+d+XGKmdLKGjoKa5ihFGMzRk4lo4V3U0u+W4= Subject key identifier: 3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7911005F152B7148BCD8C26633B52F38 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 178.250.200.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:00:5f:15:2b:71:48:bc:d8:c2:66:33:b5:2f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:be:e7:d8:b8:7f:0d:4b:39:ea:38:f3:a1:67: 4f:23:65:81:33:67:d0:2d:72:ab:56:0e:de:6e:2e: 6f:2e:3a:e6:f0:a8:cd:2f:76:04:8d:3d:b3:e2:dc: e2:c5:b0:cc:76:ba:07:8b:14:6b:8e:5c:87:80:26: 53:54:88:b3:e3:77:a2:7b:6c:8f:2a:8a:2c:bc:f2: fd:37:c5:88:40:f5:e7:92:39:48:e0:eb:74:91:a4: 25:82:77:57:83:20:a3:7d:16:cd:aa:31:ef:8c:cf: 1c:d6:11:23:94:b0:b2:ce:41:e1:5e:81:41:d1:f5: 1a:1f:19:bb:43:28:0b:b3:74:8c:97:d3:54:1e:11: 45:0b:4a:5e:c0:11:e6:51:b3:aa:77:3d:97:58:82: a8:ee:d9:d0:f4:53:b9:61:62:e3:57:f9:fb:2a:19: 1e:d7:7b:75:6f:ee:8d:5d:1b:66:9c:bc:18:43:9c: e6:b0:57:90:76:85:38:b9:39:c1:ae:de:7a:c7:be: 22:a0:fc:17:24:b4:f8:c3:5b:d1:f2:a5:61:00:ca: 89:fe:43:14:aa:d1:ba:6f:fc:14:32:fc:9a:6f:00: a6:f3:d8:3e:8b:b5:61:3d:66:b7:78:40:6f:a5:1e: 58:27:91:12:7a:00:1b:be:4e:88:56:c1:59:e3:66: 8f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.250.200.0/21 Signature Algorithm: sha256WithRSAEncryption 26:5d:33:6d:8a:3d:af:54:6b:fa:b0:f7:cc:5d:c8:ac:6b:16: 0c:cb:e4:29:82:02:26:c8:35:60:e7:56:8e:21:eb:29:17:44: 1c:be:cf:38:6f:c0:99:0a:89:36:e9:35:cf:0d:8f:97:63:74: 54:d7:d9:ee:54:89:d0:68:0b:e4:01:35:f1:1e:0a:70:2b:cf: 52:c4:78:62:cc:36:d5:90:7b:6f:f7:c2:64:5c:3d:58:c2:92: 0d:bf:ea:5e:5a:c5:03:ad:8e:35:3c:25:31:66:fd:20:f9:b8: fa:d2:3a:e7:da:45:9b:fe:6f:15:ef:cd:bc:6d:16:7c:df:52: ed:66:83:53:c7:98:4b:ce:93:4d:df:e2:d2:a0:d7:53:14:23: db:37:ea:48:52:0f:08:33:67:7c:5c:33:de:3d:c1:fb:db:54: b7:fb:00:1f:0f:57:0f:c3:b8:5e:ca:c3:c1:e5:08:b0:f3:52: 7d:2d:2a:e2:5e:f6:7f:78:c4:50:c7:8f:8d:c7:eb:cb:6c:71: c2:e8:10:a8:58:b8:52:c8:c6:a5:ae:76:ef:64:5f:3b:53:71: 57:d4:10:d8:b0:5d:00:66:19:f1:c3:bb:8a:49:11:e6:68:c5: 35:81:e0:32:d9:73:68:7a:b6:bd:d6:78:4d:ce:c3:aa:53:0f: 3f:49:d4:12 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5EQBfFStxSLzYwmYztS84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTFhMGMwMDE2YjliMzNmOTNlOGE3YTM5M2QwOTE5MGQ1ZTE4NDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm77n2Lh/DUs56jjzoWdPI2WBM2fQ LXKrVg7ebi5vLjrm8KjNL3YEjT2z4tzixbDMdroHixRrjlyHgCZTVIiz43eie2yP KoosvPL9N8WIQPXnkjlI4Ot0kaQlgndXgyCjfRbNqjHvjM8c1hEjlLCyzkHhXoFB 0fUaHxm7QygLs3SMl9NUHhFFC0pewBHmUbOqdz2XWIKo7tnQ9FO5YWLjV/n7Khke 13t1b+6NXRtmnLwYQ5zmsFeQdoU4uTnBrt56x74ioPwXJLT4w1vR8qVhAMqJ/kMU qtG6b/wUMvyabwCm89g+i7VhPWa3eEBvpR5YJ5ESegAbvk6IVsFZ42aPKQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFDoaDAAWubM/k+ino5PQkZDV4YSZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjLzk5NTg4 MS0zOWNkLTQxMDQtOWIyOS0wYjY0NTk3NzViNjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvOTk1ODgx LTM5Y2QtNDEwNC05YjI5LTBiNjQ1OTc3NWI2NC8xL09ob01BQmE1c3otVDZLZWpr OUNSa05YaGhKay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDsvrIMA0GCSqGSIb3DQEBCwUAA4IBAQAmXTNt ij2vVGv6sPfMXcisaxYMy+QpggImyDVg51aOIespF0Qcvs84b8CZCok26TXPDY+X Y3RU19nuVInQaAvkATXxHgpwK89SxHhizDbVkHtv98JkXD1YwpINv+peWsUDrY41 PCUxZv0g+bj60jrn2kWb/m8V7828bRZ831LtZoNTx5hLzpNN3+LSoNdTFCPbN+pI Ug8IM2d8XDPePcH721S3+wAfD1cPw7heysPB5Qiw81J9LSriXvZ/eMRQx4+Nx+vL bHHC6BCoWLhSyMalrnbvZF87U3FX1BDYsF0AZhnxw7uKSRHmaMU1geAy2XNoera9 1nhNzsOqUw8/SdQS -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:22 2026 by rpki-client