This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer File: OstMHbOigqLFrhaULo1gYb50UWs.cer (raw, json) Hash identifier: 4P4Y9On855NjhurZ5iASt5xJkafisn3UudJ/jzx/vCs= Subject key identifier: 3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79113AAE049E148DF7F517602980C6C6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20919 AS: 34207 AS: 212670 IP: 193.3.230.0/24 IP: 217.74.32.0/20 IP: 217.198.80.0/20 IP: 2a10:61c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3a:ae:04:9e:14:8d:f7:f5:17:60:29:80:c6:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a3:fa:03:22:a7:bf:aa:df:07:11:40:1f:4a: b7:bc:51:f1:1c:69:fd:0e:8e:0f:61:29:0b:01:17: 42:6b:23:1e:b9:34:1d:6c:a8:13:e0:9b:7f:55:0a: 53:d3:6c:bf:bd:98:1a:a7:b8:a0:5b:d8:95:98:83: c8:35:ce:86:6e:b2:71:7e:2b:36:7a:d3:78:98:2b: 0c:05:1e:dd:42:b0:ef:d1:47:ba:7b:86:41:93:5e: 54:5b:a5:c0:69:90:74:4e:6b:94:40:a2:2d:fc:34: f1:e5:31:7c:1e:67:90:9d:bd:08:b7:0a:5d:13:b0: bf:c6:8a:21:97:d6:c3:9c:6a:40:09:49:1a:7b:d5: 12:fe:03:18:6d:74:91:2a:01:cf:35:4a:30:58:fc: b7:da:d2:bf:a9:73:cc:fb:3a:d5:b5:a3:9c:d4:e0: c3:32:b9:96:ca:c2:a1:00:1e:39:64:0a:e0:4f:08: 89:0e:ef:4e:e2:58:ff:ce:c5:e7:6f:52:ea:6b:e4: ff:28:b1:9d:96:9e:52:73:d2:f9:48:39:2b:a9:06: a0:22:79:dd:65:32:47:c4:d7:cd:cb:53:f0:9a:20: f9:ca:07:9a:51:69:73:b8:b9:52:98:63:bb:46:f9: e7:21:4b:db:70:fa:b7:a4:4f:ec:d8:53:93:03:d2: 94:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.230.0/24 217.74.32.0/20 217.198.80.0/20 IPv6: 2a10:61c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20919 34207 212670 Signature Algorithm: sha256WithRSAEncryption 30:3e:ed:8b:9c:cf:c6:87:88:9a:92:76:3b:d2:ba:85:ae:af: 68:d9:99:80:54:df:74:2f:6f:dc:95:e6:78:f2:d4:5b:e7:20: b5:5e:8f:38:09:38:2c:a3:9a:6d:1f:cb:e5:f3:a2:93:fd:33: 27:5e:cf:2e:33:15:bd:15:fd:86:55:4c:6f:e3:1f:e3:30:ab: 73:21:62:27:77:42:63:02:1b:1c:bb:ac:12:b1:89:38:dc:40: 19:21:d3:de:9c:03:6e:68:e4:5d:bf:6b:94:64:6a:95:c4:32: 53:e6:2e:05:95:74:de:b0:c0:83:1c:2d:bb:b5:e6:e7:2d:1f: 39:8a:dc:85:45:bd:47:70:6b:af:d4:19:20:44:a1:ca:56:c4: f7:c2:30:85:bc:2f:6e:dc:68:77:11:0e:ce:df:a2:5a:09:d1: 88:b6:81:70:81:1a:46:ae:42:d7:b1:f2:72:2e:34:e5:b7:53: a1:d2:9b:0d:91:be:cb:1b:bb:c5:c5:83:31:97:e6:c7:f6:d6: a5:bd:d8:4f:dd:da:a6:5e:91:23:5d:f0:12:37:9e:96:92:06: f8:3b:ef:90:60:86:28:67:95:17:1f:2b:6a:b5:8d:6e:89:5a: 37:2b:d7:66:b8:26:e3:a9:f0:43:37:85:62:b5:ec:fe:07:7d: 9a:df:47:90 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZt5ETquBJ4Ujff1F2ApgMbGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWNiNGMxZGIzYTI4MmEyYzVhZTE2OTQyZThkNjA2MWJlNzQ1MTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKP6AyKnv6rfBxFAH0q3vFHxHGn9 Do4PYSkLARdCayMeuTQdbKgT4Jt/VQpT02y/vZgap7igW9iVmIPINc6GbrJxfis2 etN4mCsMBR7dQrDv0Ue6e4ZBk15UW6XAaZB0TmuUQKIt/DTx5TF8HmeQnb0Itwpd E7C/xoohl9bDnGpACUkae9US/gMYbXSRKgHPNUowWPy32tK/qXPM+zrVtaOc1ODD MrmWysKhAB45ZArgTwiJDu9O4lj/zsXnb1Lqa+T/KLGdlp5Sc9L5SDkrqQagInnd ZTJHxNfNy1PwmiD5ygeaUWlzuLlSmGO7RvnnIUvbcPq3pE/s2FOTA9KUqwIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFDrLTB2zooKixa4WlC6NYGG+dFFrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmLzVhODJh Ny04ZjYxLTQ3NDktOTExOC1jYmYzNGViY2E0YjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvNWE4MmE3 LThmNjEtNDc0OS05MTE4LWNiZjM0ZWJjYTRiOS8xL09zdE1IYk9pZ3FMRnJoYVVM bzFnWWI1MFVXcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAwQPmAwQE2UogAwQE2cZQMA0EAgACMAcDBQMq EGHAMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4CAlG3AgMAhZ8CAwM+vjANBgkqhkiG 9w0BAQsFAAOCAQEAMD7ti5zPxoeImpJ2O9K6ha6vaNmZgFTfdC9v3JXmePLUW+cg tV6POAk4LKOabR/L5fOik/0zJ17PLjMVvRX9hlVMb+Mf4zCrcyFiJ3dCYwIbHLus ErGJONxAGSHT3pwDbmjkXb9rlGRqlcQyU+YuBZV03rDAgxwtu7Xm5y0fOYrchUW9 R3Brr9QZIEShylbE98IwhbwvbtxodxEOzt+iWgnRiLaBcIEaRq5C17Hyci405bdT odKbDZG+yxu7xcWDMZfmx/bWpb3YT93apl6RI13wEjeelpIG+DvvkGCGKGeVFx8r arWNbolaNyvXZrgm46nwQzeFYrXs/gd9mt9HkA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:01 2026 by rpki-client