This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer File: OtyOotHlv55F8F2VQFb4yQR6NgU.cer (raw, json) Hash identifier: 3SHK3D+jr5OdyBRkXxqk4hxjcERBpeNl0qGGQ50ZiHw= Subject key identifier: 3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CA96E444EBA50421FFE3214306BEE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203998 IP: 185.32.48.0/22 IP: 2a04:4f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a9:6e:44:4e:ba:50:42:1f:fe:32:14:30:6b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d0:2c:8e:1c:2b:50:7f:88:38:79:1c:c6:85: 34:f5:27:e1:fe:b5:1f:10:2f:ee:25:82:8b:3d:a8: 79:14:c5:36:6c:8e:40:aa:3a:02:92:d2:a4:15:8b: 21:24:92:29:ec:b7:49:9f:d2:7b:bc:3e:88:0f:a0: 30:ce:67:94:0b:ef:28:db:9a:07:da:4c:4a:71:7f: 1f:62:84:90:0e:0b:14:63:02:e6:23:df:29:76:e5: 54:48:b3:b6:55:df:6c:3e:f6:9e:e5:64:7e:27:85: e0:4f:ed:c4:07:01:78:da:52:ef:d9:ef:b6:c0:21: 7a:e8:d6:2f:f1:80:bc:b9:4b:e8:6a:a3:a6:fb:a5: e3:b9:5d:be:5c:27:a3:00:04:0c:5b:57:96:d1:3e: 5d:8e:f0:fe:98:56:0c:07:18:a8:d4:e2:f7:46:1c: b6:e2:a7:71:9d:c1:7c:87:bd:89:12:e3:9e:d7:a2: b6:0f:3d:ca:f5:6e:91:72:35:e3:19:2e:d9:99:f1: 35:d0:80:4c:4a:24:c5:f3:11:a1:8c:58:43:92:d9: 61:79:82:1c:0e:59:cb:a2:0c:32:b9:cf:12:a4:a4: 3f:a9:4f:30:ed:16:4f:11:c2:a7:4a:b0:42:79:8d: fc:a5:78:a5:19:91:32:37:84:64:82:4d:90:6f:63: b1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.32.48.0/22 IPv6: 2a04:4f00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203998 Signature Algorithm: sha256WithRSAEncryption a2:ed:38:97:85:ef:21:b1:1f:33:d7:1a:de:94:e3:75:6c:0f: 9a:d4:d6:cd:e6:55:e0:3a:f5:1c:d7:85:1a:97:b6:4b:8b:01: a6:0f:33:73:d4:ff:31:8a:a6:8d:80:4e:9c:52:36:65:b8:c5: f7:72:66:32:f7:2c:f2:e1:54:f2:7e:fe:d0:ec:66:a9:64:d9: ef:57:bf:db:a8:d0:2b:f6:0f:fb:7a:bf:0e:3e:fa:e1:f9:df: 35:80:e3:f8:4d:54:84:dc:ba:d8:13:45:89:27:9e:49:93:7c: 99:41:fe:3b:31:3e:fe:7f:38:0a:ab:af:ae:d9:ad:78:fa:8b: 2e:38:11:80:f5:04:d4:7f:47:dd:9a:d9:b0:f4:d2:e9:5c:5b: 03:24:eb:56:bb:c2:2c:37:85:f4:45:eb:c8:0c:41:00:2c:95: 43:39:ee:f9:70:ec:e6:58:f6:ae:30:d8:00:35:4e:1e:b5:09: d6:34:35:91:41:e7:64:c8:22:2b:91:52:b4:f4:cc:65:62:d9: 6a:8f:ea:d6:3d:ba:2f:26:19:8b:a9:5b:8c:d7:e3:90:01:1a: 2e:cf:b2:1d:96:97:68:6d:76:2f:9b:8e:93:9a:f7:52:56:92: 98:7e:6e:c3:89:a7:c7:3c:f4:c2:ea:9a:b4:53:38:f4:68:c5: 51:43:0d:5c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XKluRE66UEIf/jIUMGvuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWRjOGVhMmQxZTViZjllNDVmMDVkOTU0MDU2ZjhjOTA0N2EzNjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9AsjhwrUH+IOHkcxoU09Sfh/rUf EC/uJYKLPah5FMU2bI5AqjoCktKkFYshJJIp7LdJn9J7vD6ID6AwzmeUC+8o25oH 2kxKcX8fYoSQDgsUYwLmI98pduVUSLO2Vd9sPvae5WR+J4XgT+3EBwF42lLv2e+2 wCF66NYv8YC8uUvoaqOm+6XjuV2+XCejAAQMW1eW0T5djvD+mFYMBxio1OL3Rhy2 4qdxncF8h72JEuOe16K2Dz3K9W6RcjXjGS7ZmfE10IBMSiTF8xGhjFhDktlheYIc DlnLogwyuc8SpKQ/qU8w7RZPEcKnSrBCeY38pXilGZEyN4Rkgk2Qb2OxkwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDrcjqLR5b+eRfBdlUBW+MkEejYFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzI3MmQ0 Ni0wODIxLTRjOTMtYTNkMy00YWRjMGE2NzlmODQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvMjcyZDQ2 LTA4MjEtNGM5My1hM2QzLTRhZGMwYTY3OWY4NC8xL090eU9vdEhsdjU1RjhGMlZR RmI0eVFSNk5nVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSAwMA0EAgACMAcDBQMqBE8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMc3jANBgkqhkiG9w0BAQsFAAOCAQEAou04l4XvIbEf M9ca3pTjdWwPmtTWzeZV4Dr1HNeFGpe2S4sBpg8zc9T/MYqmjYBOnFI2ZbjF93Jm Mvcs8uFU8n7+0OxmqWTZ71e/26jQK/YP+3q/Dj764fnfNYDj+E1UhNy62BNFiSee SZN8mUH+OzE+/n84CquvrtmtePqLLjgRgPUE1H9H3ZrZsPTS6VxbAyTrVrvCLDeF 9EXryAxBACyVQznu+XDs5lj2rjDYADVOHrUJ1jQ1kUHnZMgiK5FStPTMZWLZao/q 1j26LyYZi6lbjNfjkAEaLs+yHZaXaG12L5uOk5r3UlaSmH5uw4mnxzz0wuqatFM4 9GjFUUMNXA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:59 2026 by rpki-client