This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer File: oMWM0HH3gLesNAwBROsE-1DMu_E.cer (raw, json) Hash identifier: h63Eo/SX75HWhP9CsZ5BCVuG6eGx8PP2StEylA2oQ1o= Subject key identifier: A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E378B1BF5EEA2262C0FCA10DBA78185 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.198.131.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:8b:1b:f5:ee:a2:26:2c:0f:ca:10:db:a7:81:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0c58cd071f780b7ac340c0144eb04fb50ccbbf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5b:6e:b0:5e:d5:62:8f:ef:4f:cf:b0:8b:7c: 10:a5:05:ad:1a:05:71:56:fa:88:78:e8:ac:da:4f: 68:56:e0:1b:1d:56:f5:b7:d8:51:c7:62:9f:d1:7f: c8:07:d4:8d:34:ce:e2:c4:7e:ba:a8:8c:15:da:77: 08:4f:b8:b2:f8:1e:0a:25:bf:32:11:01:a1:ec:8b: 6c:22:14:6b:95:ec:8e:c7:30:75:a6:cf:32:55:e7: 97:05:fb:1c:f5:e6:e7:78:49:b7:36:ff:63:89:f5: de:ef:d5:96:1e:fb:44:a8:2c:b0:3b:ce:17:e8:9c: e4:91:28:ea:02:f1:20:67:1a:46:e5:d5:86:81:fe: 76:97:61:38:79:80:b3:c2:8f:9a:28:fc:62:f6:83: 60:a1:d3:31:64:61:9e:b8:4f:af:a1:5b:c1:85:b0: 78:7c:2c:28:d6:fe:01:b9:52:13:a4:32:d0:ae:0a: 21:55:46:6b:2c:d6:ce:63:05:8b:d0:31:8d:59:ee: df:4b:14:20:dd:70:12:14:d3:76:10:e9:56:c0:5a: 55:29:d7:61:4f:71:d2:aa:df:ac:1b:db:07:ec:74: 53:f2:31:b3:e5:39:12:d4:c0:07:e5:31:bb:90:8f: 9f:09:91:3b:5f:52:a2:dc:25:a0:ac:28:f7:e7:d5: 62:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.131.0/24 Signature Algorithm: sha256WithRSAEncryption 24:ea:f0:af:20:86:01:12:48:08:88:78:a0:13:de:80:8f:8a: 54:7a:fc:35:f2:92:c8:d5:eb:bd:d1:56:ac:b3:d2:0b:59:cc: d2:47:36:0d:9e:3d:20:67:03:ba:5f:6f:be:ff:84:a9:cf:b0: 13:27:dd:3c:d4:67:c8:cb:eb:44:24:1e:61:fa:76:f0:06:17: 00:d9:0d:e6:17:f7:8a:fc:b0:55:6d:e5:f2:ab:fa:d9:ea:9a: 57:68:57:3f:2f:84:65:e6:43:9a:04:fd:ca:37:3a:05:c8:44: 43:18:ac:c1:09:01:f0:6f:6f:6b:db:77:9e:35:19:46:00:4d: dc:b9:04:45:cb:19:12:39:1d:d4:9a:2f:b6:83:74:db:e8:bb: b4:ee:bd:6e:13:86:9e:68:5c:d2:e8:56:53:85:33:39:7e:06: f4:49:5a:2a:b6:c3:2b:87:41:d1:be:d0:9d:c4:dd:76:47:49: 57:c4:76:9e:41:6d:6b:e5:f2:67:c0:4d:8b:05:1f:ea:29:a7: 8e:e6:a5:b2:43:73:b1:c3:d7:64:73:21:5c:0a:dc:c8:3b:cc: 3c:03:55:b9:71:71:bd:49:aa:8c:9a:93:1e:fb:6c:b9:08:ff: 87:e9:6d:7b:2d:1a:bf:8e:7f:14:b8:51:d5:82:2b:4f:d7:68: 7d:90:ba:91 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+N4sb9e6iJiwPyhDbp4GFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGM1OGNkMDcxZjc4MGI3YWMzNDBjMDE0NGViMDRmYjUwY2NiYmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVtusF7VYo/vT8+wi3wQpQWtGgVx VvqIeOis2k9oVuAbHVb1t9hRx2Kf0X/IB9SNNM7ixH66qIwV2ncIT7iy+B4KJb8y EQGh7ItsIhRrleyOxzB1ps8yVeeXBfsc9ebneEm3Nv9jifXe79WWHvtEqCywO84X 6JzkkSjqAvEgZxpG5dWGgf52l2E4eYCzwo+aKPxi9oNgodMxZGGeuE+voVvBhbB4 fCwo1v4BuVITpDLQrgohVUZrLNbOYwWL0DGNWe7fSxQg3XASFNN2EOlWwFpVKddh T3HSqt+sG9sH7HRT8jGz5TkS1MAH5TG7kI+fCZE7X1Ki3CWgrCj359ViWQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKDFjNBx94C3rDQMAUTrBPtQzLvxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkLzZjOTcy Mi0yNjA4LTQ0YWYtOGM3OS02NmIyZjk5YzBiNDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvNmM5NzIy LTI2MDgtNDRhZi04Yzc5LTY2YjJmOTljMGI0NS8xL29NV00wSEgzZ0xlc05Bd0JS T3NFLTFETXVfRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8aDMA0GCSqGSIb3DQEBCwUAA4IBAQAk6vCv IIYBEkgIiHigE96Aj4pUevw18pLI1eu90Vass9ILWczSRzYNnj0gZwO6X2++/4Sp z7ATJ9081GfIy+tEJB5h+nbwBhcA2Q3mF/eK/LBVbeXyq/rZ6ppXaFc/L4Rl5kOa BP3KNzoFyERDGKzBCQHwb29r23eeNRlGAE3cuQRFyxkSOR3Umi+2g3Tb6Lu07r1u E4aeaFzS6FZThTM5fgb0SVoqtsMrh0HRvtCdxN12R0lXxHaeQW1r5fJnwE2LBR/q KaeO5qWyQ3Oxw9dkcyFcCtzIO8w8A1W5cXG9SaqMmpMe+2y5CP+H6W17LRq/jn8U uFHVgitP12h9kLqR -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:04 2026 by rpki-client