This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o3CyP1wNuomxV_gcnDgQlRGLep8.cer File: o3CyP1wNuomxV_gcnDgQlRGLep8.cer (raw, json) Hash identifier: K4tAroaArWLQWsh9D4TfsHqCTkYDzsoBBCeriQjom38= Subject key identifier: A3:70:B2:3F:5C:0D:BA:89:B1:57:F8:1C:9C:38:10:95:11:8B:7A:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6E7706BBA85AFC69DFC9A61A7029D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44500 IP: 185.75.136.0/22 IP: 185.203.44.0/22 IP: 2a03:43a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e7:70:6b:ba:85:af:c6:9d:fc:9a:61:a7:02:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a370b23f5c0dba89b157f81c9c381095118b7a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:91:03:d6:4c:7d:97:32:c7:e5:4a:cb:f5:e8: 25:7e:a2:68:e3:f5:b3:f7:ec:83:e9:10:fb:ba:a6: 0c:b6:f4:e3:e1:c5:c3:9d:30:27:35:8f:84:bf:0d: bb:50:4f:1e:14:ea:bf:7e:df:9d:6f:65:c1:8a:9a: 29:f4:75:fd:d5:d1:d4:67:ba:18:96:43:3c:ea:ac: ae:c3:07:bb:e6:4d:2d:9f:e8:59:22:cf:10:1a:18: b4:c4:8a:a6:2c:87:cf:54:b1:e2:0d:4d:f6:ac:80: 82:c5:01:de:a6:d3:f8:6a:e9:10:89:9f:dc:e0:7b: 6d:15:79:2d:d8:19:88:49:f0:70:ef:ab:84:85:ca: f5:c1:de:e8:72:82:4c:a6:67:80:6c:23:18:8a:56: 41:65:f3:d3:a7:6f:b8:d9:77:05:15:d9:c6:bf:db: c1:0a:0d:f2:7a:cc:13:07:02:1c:0d:b2:b3:4a:fc: 13:1d:68:e6:7c:10:51:19:57:36:d9:0f:c4:03:56: e0:c6:7b:00:e6:c5:e6:91:05:97:e7:ff:4c:1d:1e: cd:6f:75:9c:db:54:96:51:e3:99:c8:27:9e:64:91: e9:f6:36:a9:fe:0a:b9:f6:27:c7:f1:7e:00:c3:d1: bf:ee:56:d6:42:84:a9:ba:69:6c:12:d1:4a:fa:7c: 25:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:70:B2:3F:5C:0D:BA:89:B1:57:F8:1C:9C:38:10:95:11:8B:7A:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.136.0/22 185.203.44.0/22 IPv6: 2a03:43a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44500 Signature Algorithm: sha256WithRSAEncryption 2f:c1:f7:c0:ed:e6:51:e1:a7:ba:c4:f0:9c:59:b7:b7:2f:92: 18:2c:82:24:28:13:86:d7:6a:d0:7e:fb:25:15:88:e5:1b:ce: 70:87:8a:b2:82:2f:69:07:38:ca:f3:66:41:4e:71:fd:ca:37: ab:58:a5:a6:1d:a3:6c:9f:98:e6:ff:21:1c:1d:d3:fe:b8:90: cf:0a:21:f1:7d:2e:45:6c:4a:ec:14:fc:82:53:cb:5b:3b:80: ac:2d:dd:f0:ff:0c:38:72:5d:00:c4:7c:18:23:cb:9c:8c:f4: 8e:be:d4:40:8c:8c:6d:70:3d:64:cf:48:9a:c3:04:15:30:91: 2e:e1:0b:d4:ac:b7:de:b3:26:e2:7a:f3:94:2a:a7:a3:08:d7: 38:ca:59:cd:07:ba:5b:99:54:3a:b4:a4:fc:e1:d0:5c:3c:a2: b3:c4:2e:b7:fa:2d:39:a0:18:9c:89:36:4b:ba:09:9a:4c:b7: ee:fa:fb:a8:1f:9f:05:f6:f1:22:f0:9b:39:a1:81:f2:8f:1c: 66:18:29:66:5f:a1:ac:6c:f6:1a:8b:7d:27:12:17:83:05:b4: 17:71:72:ce:7a:41:4f:c6:c0:42:74:91:bd:fe:e0:2d:1f:08: d2:1a:2c:f4:90:60:da:6e:f4:88:7c:1d:21:56:c7:1b:7e:c0: 44:e5:d3:6b -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3xudwa7qFr8ad/JphpwKdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzcwYjIzZjVjMGRiYTg5YjE1N2Y4MWM5YzM4MTA5NTExOGI3YTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZED1kx9lzLH5UrL9eglfqJo4/Wz 9+yD6RD7uqYMtvTj4cXDnTAnNY+Evw27UE8eFOq/ft+db2XBipop9HX91dHUZ7oY lkM86qyuwwe75k0tn+hZIs8QGhi0xIqmLIfPVLHiDU32rICCxQHeptP4aukQiZ/c 4HttFXkt2BmISfBw76uEhcr1wd7ocoJMpmeAbCMYilZBZfPTp2+42XcFFdnGv9vB Cg3yeswTBwIcDbKzSvwTHWjmfBBRGVc22Q/EA1bgxnsA5sXmkQWX5/9MHR7Nb3Wc 21SWUeOZyCeeZJHp9jap/gq59ifH8X4Aw9G/7lbWQoSpumlsEtFK+nwllQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFKNwsj9cDbqJsVf4HJw4EJURi3qfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzMxNTRi NC01YmQ0LTRhYzktYjBjOC0xYjI1YWU0MjI5ZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvMzE1NGI0 LTViZDQtNGFjOS1iMGM4LTFiMjVhZTQyMjlkYi8xL28zQ3lQMXdOdW9teFZfZ2Nu RGdRbFJHTGVwOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuUuIAwQCucssMA0EAgACMAcDBQAqA0OgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCt1DANBgkqhkiG9w0BAQsFAAOCAQEAL8H3 wO3mUeGnusTwnFm3ty+SGCyCJCgThtdq0H77JRWI5RvOcIeKsoIvaQc4yvNmQU5x /co3q1ilph2jbJ+Y5v8hHB3T/riQzwoh8X0uRWxK7BT8glPLWzuArC3d8P8MOHJd AMR8GCPLnIz0jr7UQIyMbXA9ZM9ImsMEFTCRLuEL1Ky33rMm4nrzlCqnowjXOMpZ zQe6W5lUOrSk/OHQXDyis8Qut/otOaAYnIk2S7oJmky37vr7qB+fBfbxIvCbOaGB 8o8cZhgpZl+hrGz2Got9JxIXgwW0F3FyznpBT8bAQnSRvf7gLR8I0hos9JBg2m70 iHwdIVbHG37AROXTaw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:42 2026 by rpki-client