This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer File: o4SlYxesgXmFG1cPDjp6oEToCKY.cer (raw, json) Hash identifier: 55lUpa+FAGpbW2+JJE6UMPd84+/KRG9OKGCTkcToeZg= Subject key identifier: A3:84:A5:63:17:AC:81:79:85:1B:57:0F:0E:3A:7A:A0:44:E8:08:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6B830D3C27174CC305910CDD125D0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.134.232.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b8:30:d3:c2:71:74:cc:30:59:10:cd:d1:25:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a384a56317ac8179851b570f0e3a7aa044e808a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ee:69:a1:5b:33:be:9c:eb:c0:56:04:94:06: 2d:be:de:6f:7a:bb:e5:35:7f:0a:f4:fb:f6:6f:f1: 29:24:98:8a:67:66:ef:20:6e:b8:43:2a:6f:54:b7: 46:98:81:7b:05:1b:f1:00:3e:22:0c:a8:dc:53:f2: 2b:c0:e6:b2:b7:2f:3d:a4:63:44:de:32:9c:d9:b5: ca:08:e8:4a:a0:91:22:b2:cb:7b:b7:30:8c:de:11: f9:f2:f7:4a:ec:c0:84:a8:e8:7e:fb:c9:f2:3b:2c: 5c:00:e6:78:f5:22:18:76:3c:0d:7d:58:79:f8:43: a7:f8:2a:99:1e:55:18:33:d9:6e:92:07:e7:4c:34: 2c:dd:92:f3:8f:14:46:71:ce:d4:44:22:2b:89:e9: b9:8c:64:8d:07:b2:05:af:a8:00:99:36:54:6e:ac: f4:be:f5:5a:b9:2e:0f:e9:59:e4:9c:ec:9d:47:69: af:18:01:f8:29:91:2c:80:8e:f8:c6:15:26:eb:75: 1d:e2:04:35:2a:aa:1f:36:69:42:5d:cd:9f:df:b9: 3f:58:7b:03:6b:6e:df:d0:37:b5:ab:05:8e:31:78: c1:b4:6e:70:33:53:d8:44:41:13:d3:cd:15:f9:04: d8:b4:96:e1:ce:45:60:ab:55:29:4d:2a:c2:40:54: 62:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:84:A5:63:17:AC:81:79:85:1B:57:0F:0E:3A:7A:A0:44:E8:08:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.232.0/22 Signature Algorithm: sha256WithRSAEncryption ae:2b:3b:76:61:66:78:88:34:19:4e:79:c5:6b:eb:6b:c9:49: ed:b2:47:5c:17:9f:34:88:c4:86:25:f2:00:f4:5d:15:c8:d8: 42:0e:f3:f4:09:c2:da:c5:47:30:d1:c8:2c:8d:60:7e:75:fe: 63:e5:36:47:2c:07:da:e5:a1:7b:23:44:d9:72:bd:09:ca:c1: d5:19:50:9c:15:81:6a:21:f3:6c:e8:66:2a:d1:c8:00:6e:be: 62:63:3f:58:32:82:d3:59:6e:1e:06:ee:d6:1f:fe:65:d0:55: e4:01:9a:0b:aa:06:2c:87:65:a7:c5:bf:f6:cb:f4:06:35:b3: 56:d8:cf:12:50:6e:a6:e5:01:b3:d1:af:bc:c5:e4:d8:88:cb: 4e:91:35:b2:32:6e:fe:eb:61:4b:36:0c:83:67:5f:2d:e2:0f: 5c:49:eb:47:c4:f5:ad:d8:7c:6d:0a:79:b9:2b:93:04:07:d2: ad:08:af:bd:b7:54:92:08:a6:4a:3e:5e:df:ab:89:95:7d:00: 12:fc:a0:27:eb:43:5f:b5:b2:47:19:64:ce:72:cc:6d:b5:10: a4:83:c3:6a:9e:f0:8b:5e:d7:fa:e3:3f:7e:ea:31:bd:3c:7f: 9e:60:04:70:b7:14:aa:53:3e:6a:93:b7:5c:dd:97:93:ee:a8: 93:5d:52:ac -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3xrgw08JxdMwwWRDN0SXQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzg0YTU2MzE3YWM4MTc5ODUxYjU3MGYwZTNhN2FhMDQ0ZTgwOGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu5poVszvpzrwFYElAYtvt5vervl NX8K9Pv2b/EpJJiKZ2bvIG64QypvVLdGmIF7BRvxAD4iDKjcU/IrwOayty89pGNE 3jKc2bXKCOhKoJEisst7tzCM3hH58vdK7MCEqOh++8nyOyxcAOZ49SIYdjwNfVh5 +EOn+CqZHlUYM9lukgfnTDQs3ZLzjxRGcc7URCIriem5jGSNB7IFr6gAmTZUbqz0 vvVauS4P6VnknOydR2mvGAH4KZEsgI74xhUm63Ud4gQ1KqofNmlCXc2f37k/WHsD a27f0De1qwWOMXjBtG5wM1PYREET080V+QTYtJbhzkVgq1UpTSrCQFRiVQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKOEpWMXrIF5hRtXDw46eqBE6AimMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3L2MyZmJl MS1kZDlkLTQyMDQtOTA2Ni1lMjI1YTI0OTM3OGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvYzJmYmUx LWRkOWQtNDIwNC05MDY2LWUyMjVhMjQ5Mzc4ZS8xL280U2xZeGVzZ1htRkcxY1BE anA2b0VUb0NLWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLYboMA0GCSqGSIb3DQEBCwUAA4IBAQCuKzt2 YWZ4iDQZTnnFa+tryUntskdcF580iMSGJfIA9F0VyNhCDvP0CcLaxUcw0cgsjWB+ df5j5TZHLAfa5aF7I0TZcr0JysHVGVCcFYFqIfNs6GYq0cgAbr5iYz9YMoLTWW4e Bu7WH/5l0FXkAZoLqgYsh2Wnxb/2y/QGNbNW2M8SUG6m5QGz0a+8xeTYiMtOkTWy Mm7+62FLNgyDZ18t4g9cSetHxPWt2HxtCnm5K5MEB9KtCK+9t1SSCKZKPl7fq4mV fQAS/KAn60NftbJHGWTOcsxttRCkg8NqnvCLXtf64z9+6jG9PH+eYARwtxSqUz5q k7dc3ZeT7qiTXVKs -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:56 2026 by rpki-client