This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer File: oLalsaFMhtTPtGxOhuzUBmgEzJA.cer (raw, json) Hash identifier: oJX6QWhW6Kjqfl3Yv+ujl3tDyQiVl7lIf1FAjWGvJF4= Subject key identifier: A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A360EDA3BF2AF709B50EBF236B53C7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39812 IP: 5.44.0.0/20 IP: 78.139.64.0/18 IP: 89.107.112.0/21 IP: 109.202.32.0/19 IP: 130.255.32.0/19 IP: 185.12.252.0/22 IP: 185.106.56.0/22 IP: 185.137.160.0/22 IP: 2a03:58c0::/32 IP: 2a0f:1d00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:60:ed:a3:bf:2a:f7:09:b5:0e:bf:23:6b:53:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ca:e0:c4:c6:83:2d:db:62:83:46:d6:ec:ed: 22:24:f5:2c:2a:7a:fc:de:4e:22:d2:78:18:18:3c: a5:69:19:e8:57:22:6c:fe:9f:ad:02:54:95:6b:97: 5a:51:cd:bb:59:18:45:8f:c6:f7:15:95:a6:84:7e: d9:3a:a4:9f:36:d8:a9:5d:95:cf:87:09:1c:1d:2f: e0:bc:4a:e3:17:29:07:b8:a2:91:b4:0d:9c:3f:bd: 01:b9:6a:26:9a:88:2f:b3:1e:9e:2d:24:3d:3c:3e: 5a:8e:59:6c:de:a3:e1:29:77:23:c2:5e:62:8b:3b: cc:7f:49:93:0a:76:2a:f2:80:33:b2:5f:75:dc:56: 9b:6f:d4:0b:78:aa:0a:21:5f:e1:73:e0:81:21:8a: 6b:8d:4c:b0:07:e9:1f:d8:38:91:2e:92:84:b3:04: 92:e3:42:75:67:f3:f5:92:9f:12:53:3e:dd:5b:44: 19:8b:1f:8c:ca:72:6f:db:90:16:2f:92:89:35:b5: 99:aa:95:b0:86:13:fd:dd:86:62:c4:50:7e:4e:93: a9:ec:60:fe:c5:21:96:16:a1:6a:9f:94:16:43:7e: 21:d8:a3:de:93:c9:ce:f1:de:60:d5:fb:24:5c:bd: 6c:ac:be:e5:0f:17:83:df:e0:63:9c:61:36:99:ed: 9c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.0.0/20 78.139.64.0/18 89.107.112.0/21 109.202.32.0/19 130.255.32.0/19 185.12.252.0/22 185.106.56.0/22 185.137.160.0/22 IPv6: 2a03:58c0::/32 2a0f:1d00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39812 Signature Algorithm: sha256WithRSAEncryption 22:52:75:c6:5b:03:de:60:a0:08:34:91:64:d6:71:b7:dc:2f: a7:46:b2:cd:6c:0b:7a:c9:4d:4a:ea:cc:6d:41:80:61:1f:2a: 4d:7f:ab:c8:cf:5b:c3:ae:f6:6c:e5:43:a4:ab:8a:47:36:a8: d1:45:a7:61:f5:44:35:ff:dc:5d:9e:67:b4:31:b8:7c:ab:e9: f0:1a:23:ea:a0:ae:3b:32:0e:cd:68:78:a8:8b:fe:6b:b2:73: 63:27:a8:74:74:ae:20:e4:61:de:85:cc:ed:f9:9c:c0:5d:95: 6b:d9:59:88:9c:94:33:55:c0:2a:e7:ab:73:6f:a5:1a:1d:8f: 8f:61:22:5c:8a:f4:83:50:5f:ef:29:2d:44:49:32:56:04:7a: 00:87:4f:fb:fa:ad:ba:b8:02:56:43:73:2b:fc:51:b8:23:40: dd:fa:06:fa:bb:5f:61:ca:15:4d:79:59:31:b1:f8:9e:ab:39: 68:4e:02:a7:3e:73:1e:fc:b2:5a:ed:16:e9:f9:c8:92:14:c8: 94:10:a4:76:41:6b:53:c7:f4:68:31:43:88:e5:2a:1d:b6:a1: d1:21:c5:3a:53:9e:09:e3:62:3f:62:ba:0c:62:a2:7b:9e:ef: b5:42:7d:af:5b:7d:6d:db:43:53:9f:63:15:3c:53:58:df:bb: 5d:6c:50:8f -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgISAZt4o2Dto78q9wm1Dr8ja1PHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGI2YTViMWExNGM4NmQ0Y2ZiNDZjNGU4NmVjZDQwNjY4MDRjYzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcrgxMaDLdtig0bW7O0iJPUsKnr8 3k4i0ngYGDylaRnoVyJs/p+tAlSVa5daUc27WRhFj8b3FZWmhH7ZOqSfNtipXZXP hwkcHS/gvErjFykHuKKRtA2cP70BuWommogvsx6eLSQ9PD5ajlls3qPhKXcjwl5i izvMf0mTCnYq8oAzsl913Fabb9QLeKoKIV/hc+CBIYprjUywB+kf2DiRLpKEswSS 40J1Z/P1kp8SUz7dW0QZix+MynJv25AWL5KJNbWZqpWwhhP93YZixFB+TpOp7GD+ xSGWFqFqn5QWQ34h2KPek8nO8d5g1fskXL1srL7lDxeD3+BjnGE2me2cYwIDAQAB o4IC4DCCAtwwHQYDVR0OBBYEFKC2pbGhTIbUz7RsTobs1AZoBMyQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0L2UxZmI1 Mi05NzlkLTQ0MzYtYmU1MS04NTg0YmVmMGI3ZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvZTFmYjUy LTk3OWQtNDQzNi1iZTUxLTg1ODRiZWYwYjdkNS8xL29MYWxzYUZNaHRUUHRHeE9o dXpVQm1nRXpKQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF BwEHAQH/BFAwTjA2BAIAATAwAwQEBSwAAwQGTotAAwQDWWtwAwQFbcogAwQFgv8g AwQCuQz8AwQCuWo4AwQCuYmgMBQEAgACMA4DBQAqA1jAAwUDKg8dADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAm4QwDQYJKoZIhvcNAQELBQADggEBACJSdcZbA95g oAg0kWTWcbfcL6dGss1sC3rJTUrqzG1BgGEfKk1/q8jPW8Ou9mzlQ6Srikc2qNFF p2H1RDX/3F2eZ7QxuHyr6fAaI+qgrjsyDs1oeKiL/muyc2MnqHR0riDkYd6FzO35 nMBdlWvZWYiclDNVwCrnq3NvpRodj49hIlyK9INQX+8pLURJMlYEegCHT/v6rbq4 AlZDcyv8UbgjQN36Bvq7X2HKFU15WTGx+J6rOWhOAqc+cx78slrtFun5yJIUyJQQ pHZBa1PH9GgxQ4jlKh22odEhxTpTngnjYj9iugxionue77VCfa9bfW3bQ1OfYxU8 U1jfu11sUI8= -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:27 2026 by rpki-client