This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer File: Ol3CullC4E_di6mVFqG5Ox5PliQ.cer (raw, json) Hash identifier: xsDj1ZwQR4kjSmHBk9G3dkn+L9Bom9bpYsG4GsR+rdw= Subject key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37EDAEE40C696AAB78BC98C10459E5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48503 IP: 31.10.3.0/24 IP: 62.122.0.0/21 IP: 62.122.104.0/21 IP: 79.133.184.0/21 IP: 79.137.170.0/23 IP: 79.137.176.0/22 IP: 81.91.180.0 -- 81.91.188.255 IP: 81.211.128.0/17 IP: 85.193.96.0/19 IP: 89.208.123.0/24 IP: 89.223.112.0/21 IP: 91.103.104.0/23 IP: 91.234.208.0/23 IP: 93.157.176.0/21 IP: 95.163.145.0/24 IP: 176.64.0.0/16 IP: 185.44.84.0/22 IP: 185.212.244.0/22 IP: 185.223.188.0/22 IP: 185.229.84.0/22 IP: 185.229.120.0/23 IP: 185.234.24.0/22 IP: 185.234.60.0/22 IP: 185.250.28.0/22 IP: 188.124.232.0/21 IP: 188.124.244.0/22 IP: 193.41.130.0/23 IP: 194.0.188.0/23 IP: 194.0.244.0/23 IP: 195.189.48.0/22 IP: 212.96.64.0/19 IP: 217.171.144.0/24 IP: 2a0f:fd80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ed:ae:e4:0c:69:6a:ab:78:bc:98:c1:04:59:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:08:23:f6:b8:b9:35:06:c0:ce:03:96:3c:7b: 35:65:c1:ce:ef:96:a5:fe:cb:2d:47:86:fe:c0:e1: 8d:74:f9:72:91:ca:2f:2a:6e:f1:7b:f6:50:c0:4e: c7:c4:56:4f:d9:8e:00:8e:7e:ec:f0:24:18:90:a5: 1c:04:26:1f:6c:07:11:4d:f0:02:45:85:d7:08:6c: 1b:63:19:dd:f5:49:7d:f5:8d:06:0d:37:20:29:70: 8f:0c:34:17:bf:78:a5:52:12:1d:d7:75:d8:05:9a: 70:0e:80:10:0e:bf:f3:6a:d6:eb:16:73:b9:de:ee: aa:db:0d:50:cc:b7:8c:2b:ff:b6:bc:67:ca:83:36: d7:0d:9d:85:c3:b4:18:07:97:ea:4c:1d:f1:05:24: 9d:c3:50:83:45:17:de:0b:bd:ac:37:5a:08:86:7c: 0b:e1:c8:6e:f2:65:f5:64:89:40:e8:36:09:f6:2d: 00:3b:40:2c:3a:9f:66:9f:3f:98:0e:a8:3c:8e:50: 18:0d:f4:f8:b5:a2:76:f6:0f:24:8e:ff:ae:74:47: a2:15:87:1e:6b:22:a4:bf:b8:1f:de:53:3a:a2:71: bd:8c:b0:96:57:db:25:36:7c:f9:d3:cd:63:46:70: 9e:72:9f:bd:18:f1:e9:ab:31:6f:53:66:4c:fe:7c: 0a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.10.3.0/24 62.122.0.0/21 62.122.104.0/21 79.133.184.0/21 79.137.170.0/23 79.137.176.0/22 81.91.180.0-81.91.188.255 81.211.128.0/17 85.193.96.0/19 89.208.123.0/24 89.223.112.0/21 91.103.104.0/23 91.234.208.0/23 93.157.176.0/21 95.163.145.0/24 176.64.0.0/16 185.44.84.0/22 185.212.244.0/22 185.223.188.0/22 185.229.84.0/22 185.229.120.0/23 185.234.24.0/22 185.234.60.0/22 185.250.28.0/22 188.124.232.0/21 188.124.244.0/22 193.41.130.0/23 194.0.188.0/23 194.0.244.0/23 195.189.48.0/22 212.96.64.0/19 217.171.144.0/24 IPv6: 2a0f:fd80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48503 Signature Algorithm: sha256WithRSAEncryption 8c:4e:2a:0f:b8:b2:fe:a2:04:c5:9a:98:a9:18:d3:0d:83:c8: 25:a4:21:8a:52:30:8f:85:1e:60:ea:7f:51:27:dc:47:06:86: 03:5c:5c:f9:3e:b3:5a:ce:dc:6e:fb:f8:33:ad:00:83:de:40: cc:45:3e:13:13:e7:ff:bf:2a:81:99:b1:59:15:a2:cf:12:64: c4:05:3b:7f:b8:35:52:87:f3:52:fd:9d:0e:00:43:b1:a5:18: 77:1a:52:59:04:10:4b:a8:1c:eb:98:71:e3:36:97:f7:34:69: 2c:35:3b:d9:f7:73:f5:4d:d1:b8:86:fa:0e:ff:3a:f5:8a:62: 96:6a:3c:09:30:1f:ab:db:b0:f4:f0:e3:a0:44:b8:47:78:bd: f4:29:ea:18:2e:94:d1:bc:9d:f5:c6:76:9e:d9:7b:1e:06:40: 4c:5e:7e:3b:ca:ef:a8:1b:47:db:7b:fe:83:9a:a2:6f:16:d7: 56:fd:96:9f:07:9e:c4:4d:bd:a2:35:f2:a1:4d:4f:20:01:6b: 39:89:53:ff:4b:1c:f5:6f:03:f3:b9:24:c6:3a:9c:08:5f:94: a1:34:6f:c1:35:8b:3e:d9:7e:c9:80:a0:86:74:01:43:98:15: 02:46:44:1f:62:a5:47:d5:89:e0:a1:39:11:9c:11:fa:bb:b4: 50:71:8f:e9 -----BEGIN CERTIFICATE----- MIIGaTCCBVGgAwIBAgISAZt+N+2u5Axpaqt4vJjBBFnlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTVkYzJiYTU5NDJlMDRmZGQ4YmE5OTUxNmExYjkzYjFlNGY5NjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswgj9ri5NQbAzgOWPHs1ZcHO75al /sstR4b+wOGNdPlykcovKm7xe/ZQwE7HxFZP2Y4Ajn7s8CQYkKUcBCYfbAcRTfAC RYXXCGwbYxnd9Ul99Y0GDTcgKXCPDDQXv3ilUhId13XYBZpwDoAQDr/zatbrFnO5 3u6q2w1QzLeMK/+2vGfKgzbXDZ2Fw7QYB5fqTB3xBSSdw1CDRRfeC72sN1oIhnwL 4chu8mX1ZIlA6DYJ9i0AO0AsOp9mnz+YDqg8jlAYDfT4taJ29g8kjv+udEeiFYce ayKkv7gf3lM6onG9jLCWV9slNnz5081jRnCecp+9GPHpqzFvU2ZM/nwKqQIDAQAB o4IDdTCCA3EwHQYDVR0OBBYEFDpdwrpZQuBP3YuplRahuTseT5YkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkLzcxNGY1 NC1mYTc1LTQwOTEtOGMwYi05YzE1ZmJkNWVlNWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvNzE0ZjU0 LWZhNzUtNDA5MS04YzBiLTljMTVmYmQ1ZWU1ZS8xL09sM0N1bGxDNEVfZGk2bVZG cUc1T3g1UGxpUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHzBggrBgEF BQcBBwEB/wSB4zCB4DCBzgQCAAEwgccDBAAfCgMDBAM+egADBAM+emgDBANPhbgD BAFPiaoDBAJPibAwDAMEAlFbtAMEAFFbvAMEB1HTgAMEBVXBYAMEAFnQewMEA1nf cAMEAVtnaAMEAVvq0AMEA12dsAMEAF+jkQMDALBAAwQCuSxUAwQCudT0AwQCud+8 AwQCueVUAwQBueV4AwQCueoYAwQCueo8AwQCufocAwQDvHzoAwQCvHz0AwQBwSmC AwQBwgC8AwQBwgD0AwQCw70wAwQF1GBAAwQA2auQMA0EAgACMAcDBQMqD/2AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC9dzANBgkqhkiG9w0BAQsFAAOCAQEAjE4q D7iy/qIExZqYqRjTDYPIJaQhilIwj4UeYOp/USfcRwaGA1xc+T6zWs7cbvv4M60A g95AzEU+ExPn/78qgZmxWRWizxJkxAU7f7g1UofzUv2dDgBDsaUYdxpSWQQQS6gc 65hx4zaX9zRpLDU72fdz9U3RuIb6Dv869Ypilmo8CTAfq9uw9PDjoES4R3i99Cnq GC6U0byd9cZ2ntl7HgZATF5+O8rvqBtH23v+g5qibxbXVv2WnweexE29ojXyoU1P IAFrOYlT/0sc9W8D87kkxjqcCF+UoTRvwTWLPtl+yYCghnQBQ5gVAkZEH2KlR9WJ 4KE5EZwR+ru0UHGP6Q== -----END CERTIFICATE-----Generated at Tue Jan 27 17:49:28 2026 by rpki-client