This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer File: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer (raw, json) Hash identifier: qwJNtoS4T8dGqb02NltSx7N3b62U5rV/dGjXZbUquWo= Subject key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15790E385F57BC47B0AC298FB528AF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.57.212.0/24 IP: 212.66.32.0/20 IP: 212.66.56.0/21 IP: 2a04:2c80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:79:0e:38:5f:57:bc:47:b0:ac:29:8f:b5:28:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b7:d6:41:32:e7:79:80:40:4f:c8:87:28:32: 03:09:19:d4:6c:25:93:c3:4f:93:16:90:73:95:fb: 1c:3b:2a:52:6f:e6:e3:62:e8:b1:3f:d3:2a:23:48: 95:b6:24:bb:12:e7:5a:4c:6b:f0:a1:db:ec:12:58: a2:7c:fd:b3:aa:29:fd:c4:9e:f3:9e:97:7a:18:ad: 8a:1c:af:8d:d6:f8:66:09:68:dd:f8:ee:ec:d5:f6: 2c:c7:c6:b4:40:82:04:a3:b0:02:c2:19:e1:d8:c6: ba:ea:01:ac:24:9a:e7:66:01:43:29:79:83:bf:cf: 0b:c2:9e:05:1a:48:61:9e:9b:d3:f0:65:52:53:8b: f0:8f:43:15:48:a3:8b:af:48:da:9c:94:63:15:81: ec:b3:a5:4a:82:e2:4c:7a:96:6d:5e:bf:38:44:a8: 11:c9:51:3e:b1:01:84:eb:4a:ff:5a:6d:5d:f2:e6: 15:ab:34:36:8e:49:f8:b0:93:91:5f:90:cc:80:c1: e7:7c:24:a3:18:f3:87:05:97:62:3a:a9:12:cb:00: db:80:24:6f:b4:3c:59:c3:70:e6:83:3d:93:4f:fa: aa:fc:99:1d:9a:e1:17:5f:1f:fe:ed:4c:1a:df:0c: 7f:11:6a:07:ad:8a:20:f8:d7:29:e3:27:1b:85:0f: d5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.212.0/24 212.66.32.0/20 212.66.56.0/21 IPv6: 2a04:2c80::/29 Signature Algorithm: sha256WithRSAEncryption 9b:3f:61:71:69:97:d4:17:b8:98:2c:bf:f8:51:14:ca:43:5a: ec:fe:38:0a:dc:74:5d:13:42:70:9f:d6:b7:64:20:43:f0:bc: ab:93:1e:47:2e:94:bd:02:f4:9f:48:d0:d4:44:59:b4:05:02: f5:55:65:8e:68:aa:5e:56:e1:b6:21:6e:af:d3:8e:9e:cf:b3: ef:9e:f5:33:93:7a:6f:4d:84:f6:d4:66:15:f1:73:c6:dd:00: 2f:ad:02:7c:40:7a:f7:cd:cf:1a:17:d1:b5:bc:8a:8c:82:7d: 03:b2:6b:24:7b:82:43:86:4f:8b:c7:d6:b8:b8:32:c8:51:09: 00:72:bc:69:ad:50:e6:5c:58:78:d7:12:5c:8c:91:ba:ef:f9: ec:f7:1b:7e:a5:f3:b2:33:fd:e8:19:d4:f0:45:c0:7f:6e:60: 9f:ee:ae:5f:af:40:d4:f6:74:60:90:55:42:20:8d:73:dd:4b: e7:cf:d6:41:b0:a9:42:59:99:72:f9:83:15:0d:6a:e3:e5:01: 1c:19:a8:45:df:24:6e:bc:85:ca:16:8e:e6:0b:41:ec:a6:e6: 6d:22:47:1b:84:87:a4:bb:aa:d8:ee:35:8e:51:18:7c:03:10: 3f:cd:50:be:cb:1c:e6:c8:58:12:d8:5a:31:10:a1:86:a2:50: 90:ab:6b:c7 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt/FXkOOF9XvEewrCmPtSivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzc4N2QyYmU2ZWFjMzZjMWQyNzgwZjc4NmI4N2M5ZTE1M2U4MWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7fWQTLneYBAT8iHKDIDCRnUbCWT w0+TFpBzlfscOypSb+bjYuixP9MqI0iVtiS7EudaTGvwodvsEliifP2zqin9xJ7z npd6GK2KHK+N1vhmCWjd+O7s1fYsx8a0QIIEo7ACwhnh2Ma66gGsJJrnZgFDKXmD v88Lwp4FGkhhnpvT8GVSU4vwj0MVSKOLr0janJRjFYHss6VKguJMepZtXr84RKgR yVE+sQGE60r/Wm1d8uYVqzQ2jkn4sJORX5DMgMHnfCSjGPOHBZdiOqkSywDbgCRv tDxZw3Dmgz2TT/qq/JkdmuEXXx/+7Uwa3wx/EWoHrYog+Ncp4ycbhQ/VhQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFKN4fSvm6sNsHSeA94a4fJ4VPoHxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2Y1NjVk Ny0zMmFmLTRiZTEtODJhYy1iNjAyY2VkYWMzNmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvZjU2NWQ3 LTMyYWYtNGJlMS04MmFjLWI2MDJjZWRhYzM2Yy8xL28zaDlLLWJxdzJ3ZEo0RDNo cmg4bmhVLWdmRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQABTnUAwQE1EIgAwQD1EI4MA0EAgACMAcDBQMq BCyAMA0GCSqGSIb3DQEBCwUAA4IBAQCbP2FxaZfUF7iYLL/4URTKQ1rs/jgK3HRd E0Jwn9a3ZCBD8Lyrkx5HLpS9AvSfSNDURFm0BQL1VWWOaKpeVuG2IW6v046ez7Pv nvUzk3pvTYT21GYV8XPG3QAvrQJ8QHr3zc8aF9G1vIqMgn0Dsmske4JDhk+Lx9a4 uDLIUQkAcrxprVDmXFh41xJcjJG67/ns9xt+pfOyM/3oGdTwRcB/bmCf7q5fr0DU 9nRgkFVCII1z3Uvnz9ZBsKlCWZly+YMVDWrj5QEcGahF3yRuvIXKFo7mC0HspuZt IkcbhIeku6rY7jWOURh8AxA/zVC+yxzmyFgS2FoxEKGGolCQq2vH -----END CERTIFICATE-----Generated at Tue Jan 27 16:42:11 2026 by rpki-client