This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer File: oIy1sm6mXYH99jodmyAFcJEAA7A.cer (raw, json) Hash identifier: tYdcCSxoJ3AAFSNdTwddw9+hWeuq0LaY617fXwhCmpE= Subject key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EACD46B2C3794438A0355834A4FF3D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.108.23.0 -- 192.108.26.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:cd:46:b2:c3:79:44:38:a0:35:58:34:a4:ff:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4f:ff:b0:1c:db:0a:65:70:1e:9d:f3:0c:76: c2:61:a2:ab:ca:e4:00:1a:0f:8c:1f:f8:42:13:7b: 97:7a:e5:ff:38:46:3b:33:91:52:cf:c3:ba:8f:49: 72:bc:60:2d:a3:64:8e:5f:05:99:0c:15:6c:d7:91: ae:ea:e4:94:15:36:43:eb:16:e9:c8:2d:1f:40:86: 18:7c:a8:9b:f8:bb:2d:aa:84:0c:9d:f7:9b:ab:da: a2:b9:da:b8:e1:2f:e7:cd:1b:28:af:72:cc:56:24: 84:b3:3c:c1:fa:6b:78:ea:6b:b3:ee:ca:44:7e:06: a9:77:c1:7e:c1:a0:67:58:b9:9a:e3:4d:7c:b1:8c: dc:bf:41:6d:0f:e0:ca:41:0e:cc:43:21:a6:9a:1f: f7:12:1f:9d:19:e9:4c:df:f3:70:d0:61:f5:4c:47: 83:7b:65:8d:5c:16:be:58:86:29:fa:00:a3:96:e6: b7:9c:d9:d7:f0:ff:d0:e3:52:be:bc:5e:ae:99:37: 27:84:35:64:a2:1d:8e:8b:75:4c:95:48:77:c5:79: 48:2c:6e:07:79:c7:ea:3b:8d:ac:38:b3:50:d7:be: 7b:44:bf:ca:a6:01:6b:98:7c:00:8b:1b:83:88:6c: 28:33:35:28:77:b9:05:12:c4:a1:17:7e:c2:28:03: 81:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.108.23.0-192.108.26.255 Signature Algorithm: sha256WithRSAEncryption 80:c6:51:a0:3c:23:59:93:1b:61:8b:c5:4a:e9:5e:1d:9e:f1: a2:a5:52:d3:2e:38:b4:ca:ed:54:9f:65:4f:8e:8a:aa:d4:54: b9:23:97:07:08:16:12:9b:be:97:81:ce:70:8e:3c:6f:62:71: bd:9a:24:3a:c5:ab:db:df:44:27:3f:f4:7e:11:49:c7:4a:56: e7:e5:bb:3b:f9:5b:f8:88:0c:28:fb:9b:f1:a0:33:1c:32:20: 64:80:0b:5a:a9:94:47:45:c9:31:05:0d:25:a4:5c:40:b7:81: 67:36:c1:13:91:c4:95:2e:12:67:77:51:cb:b5:e4:d7:f0:f7: 72:96:ff:3c:10:7a:e9:1d:0d:8d:11:bb:de:8e:ad:49:c6:e8: d1:a3:69:ef:a5:22:24:0b:93:df:3c:e4:20:fc:14:76:90:60: a3:0c:93:5b:1a:90:4b:08:be:44:5d:26:de:8e:82:60:2d:d4: ad:75:21:81:07:26:13:fc:9a:eb:a0:bd:b7:6f:df:62:7a:22: f0:ff:92:d9:b6:ed:69:0b:2b:cd:4f:cf:11:62:1c:04:df:39: 62:81:0c:fd:91:6e:4e:19:06:e8:5f:7a:6d:e3:a2:e8:d0:2b: 89:d9:72:39:95:f5:ad:ff:e3:94:7e:43:ec:53:78:c8:7a:fb: 70:95:59:31 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt26s1GssN5RDigNVg0pP89MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDhjYjViMjZlYTY1ZDgxZmRmNjNhMWQ5YjIwMDU3MDkxMDAwM2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk//sBzbCmVwHp3zDHbCYaKryuQA Gg+MH/hCE3uXeuX/OEY7M5FSz8O6j0lyvGAto2SOXwWZDBVs15Gu6uSUFTZD6xbp yC0fQIYYfKib+LstqoQMnfebq9qiudq44S/nzRsor3LMViSEszzB+mt46muz7spE fgapd8F+waBnWLma4018sYzcv0FtD+DKQQ7MQyGmmh/3Eh+dGelM3/Nw0GH1TEeD e2WNXBa+WIYp+gCjlua3nNnX8P/Q41K+vF6umTcnhDVkoh2Oi3VMlUh3xXlILG4H ecfqO42sOLNQ1757RL/KpgFrmHwAixuDiGwoMzUod7kFEsShF37CKAOBUwIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFKCMtbJupl2B/fY6HZsgBXCRAAOwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzFiYjY0 OS1lOTgzLTRkZmMtOThhOC1jZWU5M2MyNWU2MzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvMWJiNjQ5 LWU5ODMtNGRmYy05OGE4LWNlZTkzYzI1ZTYzOS8xL29JeTFzbTZtWFlIOTlqb2Rt eUFGY0pFQUE3QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBADAbBcDBADAbBowDQYJKoZIhvcNAQELBQAD ggEBAIDGUaA8I1mTG2GLxUrpXh2e8aKlUtMuOLTK7VSfZU+OiqrUVLkjlwcIFhKb vpeBznCOPG9icb2aJDrFq9vfRCc/9H4RScdKVufluzv5W/iIDCj7m/GgMxwyIGSA C1qplEdFyTEFDSWkXEC3gWc2wRORxJUuEmd3Ucu15Nfw93KW/zwQeukdDY0Ru96O rUnG6NGjae+lIiQLk9885CD8FHaQYKMMk1sakEsIvkRdJt6OgmAt1K11IYEHJhP8 muugvbdv32J6IvD/ktm27WkLK81PzxFiHATfOWKBDP2Rbk4ZBuhfem3joujQK4nZ cjmV9a3/45R+Q+xTeMh6+3CVWTE= -----END CERTIFICATE-----Generated at Tue Jan 27 12:43:49 2026 by rpki-client