This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer File: o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer (raw, json) Hash identifier: F2zBco4OoEmIDVLnrGOydtE/enj3cKHmNRsz/jrtpwM= Subject key identifier: A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EB28EE2CCCB242C3240EFE9005393 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47827 IP: 91.206.222.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b2:8e:e2:cc:cb:24:2c:32:40:ef:e9:00:53:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a35309368a8ad13bb08264497fc2e43151e6d5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bd:5e:28:87:61:25:76:81:d3:be:55:44:bb: 62:9d:9e:1a:b7:5f:a2:f2:5d:45:c3:d0:22:d1:13: 13:f2:2a:c8:1f:8b:9b:89:18:fc:19:4d:73:b0:af: 2e:96:06:d8:33:4b:20:08:1f:da:24:7c:2d:48:e9: 65:ae:25:d3:0b:00:f0:93:63:25:33:cf:e9:46:ae: bb:cf:e7:c4:97:f5:af:76:07:0a:25:5c:60:2e:dd: e7:f1:0d:0e:7f:25:4b:cd:52:77:22:60:39:da:71: 8f:54:95:ce:41:ac:a1:b5:85:6e:ec:2a:20:5f:8f: ca:47:7e:de:5b:6b:4c:10:85:7c:88:d6:32:f6:6a: 2d:cd:6e:9e:d8:7b:cd:51:55:b5:00:a7:be:35:15: 16:89:98:34:00:82:57:a4:d2:8a:14:6e:e2:24:1d: 7a:73:4c:17:8c:a8:ab:77:99:8b:64:6e:e0:0f:d3: 04:5a:ae:96:3d:a2:57:d3:3e:90:73:1e:06:9d:3a: 8a:6a:9d:34:9b:5d:51:44:35:e0:02:8a:46:71:62: 3e:9b:13:b9:9d:13:e4:2e:2d:dc:e9:38:73:a3:4b: c5:cf:ef:94:8a:15:70:79:e3:9d:b1:f1:aa:65:0f: 6a:c9:a8:1c:ca:b6:08:8b:ef:51:bd:03:8a:b2:37: f3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.222.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47827 Signature Algorithm: sha256WithRSAEncryption 01:43:a1:7f:55:86:16:15:45:0c:c5:3d:da:9b:8b:0c:aa:a5: 0b:0d:74:ab:b2:da:c1:b6:01:2f:f0:63:09:c2:76:4f:23:10: 48:e6:27:f3:2e:cb:39:2c:af:fe:c7:58:a9:1c:3c:6e:f8:76: 01:0e:76:90:aa:9a:4d:82:27:7c:df:14:1e:e7:31:f0:76:8b: d5:b8:48:a0:5b:63:3d:a4:e7:c9:e4:a6:19:bf:93:67:68:86: f0:28:91:51:9a:b7:84:e4:6e:c3:c3:c5:f4:7a:13:bf:11:9a: c5:29:f5:f4:d1:3d:66:a2:ba:81:b5:09:30:8f:02:f5:03:25: ab:78:ca:d2:de:f1:52:66:3f:13:e9:32:f9:d8:71:9f:8b:30: d9:02:d7:78:61:10:b8:40:16:33:0f:dc:bf:8b:45:cf:b1:ee: d6:e0:0d:e4:2d:d9:27:e4:d8:ee:a0:00:ed:48:0e:11:38:fa: 45:64:05:c9:73:0b:de:db:91:7a:63:2f:32:8d:ea:44:b4:61: 3f:c2:ab:ea:8c:26:72:43:96:50:26:0d:f3:ab:15:4e:eb:85: d3:a0:02:be:80:0d:ae:35:e4:fa:84:93:50:de:48:1d:3b:d0: 30:88:11:7e:89:41:19:05:43:12:34:94:5a:cb:9c:fe:09:4f: 03:f4:cb:45 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5frKO4szLJCwyQO/pAFOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzUzMDkzNjhhOGFkMTNiYjA4MjY0NDk3ZmMyZTQzMTUxZTZkNWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs71eKIdhJXaB075VRLtinZ4at1+i 8l1Fw9Ai0RMT8irIH4ubiRj8GU1zsK8ulgbYM0sgCB/aJHwtSOllriXTCwDwk2Ml M8/pRq67z+fEl/WvdgcKJVxgLt3n8Q0OfyVLzVJ3ImA52nGPVJXOQayhtYVu7Cog X4/KR37eW2tMEIV8iNYy9motzW6e2HvNUVW1AKe+NRUWiZg0AIJXpNKKFG7iJB16 c0wXjKird5mLZG7gD9MEWq6WPaJX0z6Qcx4GnTqKap00m11RRDXgAopGcWI+mxO5 nRPkLi3c6Thzo0vFz++UihVweeOdsfGqZQ9qyagcyrYIi+9RvQOKsjfz6QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKNTCTaKitE7sIJkSX/C5DFR5tWmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxL2VlNmZk MC0yNzkyLTQ5YzQtYjJkMi0xNzE0MjIzYjk0OWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZWU2ZmQw LTI3OTItNDljNC1iMmQyLTE3MTQyMjNiOTQ5ZS8xL28xTUpOb3FLMFR1d2dtUkpm OExrTVZIbTFhWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW87eMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC60zANBgkqhkiG9w0BAQsFAAOCAQEAAUOhf1WGFhVFDMU92puLDKqlCw10q7La wbYBL/BjCcJ2TyMQSOYn8y7LOSyv/sdYqRw8bvh2AQ52kKqaTYInfN8UHucx8HaL 1bhIoFtjPaTnyeSmGb+TZ2iG8CiRUZq3hORuw8PF9HoTvxGaxSn19NE9ZqK6gbUJ MI8C9QMlq3jK0t7xUmY/E+ky+dhxn4sw2QLXeGEQuEAWMw/cv4tFz7Hu1uAN5C3Z J+TY7qAA7UgOETj6RWQFyXML3tuRemMvMo3qRLRhP8Kr6owmckOWUCYN86sVTuuF 06ACvoANrjXk+oSTUN5IHTvQMIgRfolBGQVDEjSUWsuc/glPA/TLRQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:21 2026 by rpki-client