This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer File: oODFkETIfj4t-hPL-ZAjruAS76A.cer (raw, json) Hash identifier: ViikbjLUvQsWWUQqbzyEAXs8eoGV8otOoYb5hQlxPxo= Subject key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB44DEA6A13547DC6D879D41AD7A4A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57480 IP: 91.232.4.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:44:de:a6:a1:35:47:dc:6d:87:9d:41:ad:7a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4d:29:75:f4:9a:08:a0:2a:5b:41:c3:27:27: 35:3d:09:89:84:c2:c8:91:99:54:af:ad:07:74:ea: 17:b0:ca:aa:11:fa:5f:62:0f:f1:31:0b:60:a6:4a: 01:32:18:e1:ba:b0:ce:76:86:2e:04:40:b4:21:d5: 72:c5:32:58:da:4d:d9:2f:da:00:27:7c:15:16:d5: ff:ce:4f:9a:32:b1:37:b9:6f:d7:63:2a:78:82:7e: 95:33:f8:3c:8c:57:aa:90:07:38:d4:e5:69:2b:e7: fe:7a:cc:58:39:93:e7:a1:5d:be:b5:ae:4e:7a:f9: fc:f9:65:25:a0:f3:e5:43:fc:17:c4:c2:22:99:34: e1:71:09:b6:4a:c4:46:02:87:fc:fd:c8:59:3e:1d: 5e:e3:8f:52:d7:a8:2d:71:d7:0a:b8:b1:bd:d1:29: 22:01:75:e9:d8:a7:99:f7:47:fc:9d:2b:d8:c6:f3: 50:e8:42:7a:7c:ec:85:c2:d0:0d:5d:2b:61:94:f5: 55:71:1d:ea:77:4d:53:f2:09:ce:58:fb:5e:74:e8: 13:e3:ba:7c:bd:2c:db:43:6b:8c:b1:17:02:36:89: 00:31:da:ed:b6:db:5d:c3:52:27:d5:92:59:da:de: fe:fb:17:62:fd:f2:e8:e5:37:2c:13:cc:f4:94:e5: b6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.4.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57480 Signature Algorithm: sha256WithRSAEncryption 55:a5:b6:63:52:86:eb:d2:73:a1:62:8c:c3:cd:07:06:82:8d: d5:b5:a3:ed:28:97:43:67:08:ea:3c:3c:23:73:38:6c:e6:c7: a9:02:d4:bf:e8:d6:fc:9f:4d:d4:4f:23:60:78:13:6a:9c:b9: 62:35:0c:9e:d5:0c:47:67:33:fb:6f:96:36:52:13:48:25:c7: b9:9d:5c:97:47:19:4d:4b:11:04:5d:5d:b9:ae:3c:5e:5e:98: 30:85:41:ef:b4:fd:4d:68:86:6f:ae:7f:8a:26:0c:e1:e0:0b: a3:a2:82:73:01:2c:63:35:41:9e:c0:d6:04:e6:6d:ff:45:9c: 5f:b6:ae:31:54:1a:6b:3c:73:6c:2b:9b:0f:64:8f:11:e9:88: c5:e2:e0:03:e9:6b:bd:f6:79:f5:24:5c:bf:e4:e5:4e:ac:b5: 5c:e8:3f:6e:d4:75:8b:08:b4:11:92:3c:06:4f:8d:50:a2:84: 8d:7b:2c:aa:95:9d:b2:5b:ff:47:5e:f9:e1:0e:a0:0e:3c:e0: e8:ba:dc:fa:aa:a2:cd:dc:44:25:7c:e7:57:4c:7e:2b:d1:e4: 0a:f7:8c:78:b5:a9:9c:76:7c:5f:e8:92:42:15:26:e3:1e:bc: 4a:60:40:ae:11:d8:86:58:97:b9:d5:dc:11:2d:62:b4:16:5f: 9d:cc:e2:dc -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt260TepqE1R9xth51BrXpKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGUwYzU5MDQ0Yzg3ZTNlMmRmYTEzY2JmOTkwMjNhZWUwMTJlZmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3k0pdfSaCKAqW0HDJyc1PQmJhMLI kZlUr60HdOoXsMqqEfpfYg/xMQtgpkoBMhjhurDOdoYuBEC0IdVyxTJY2k3ZL9oA J3wVFtX/zk+aMrE3uW/XYyp4gn6VM/g8jFeqkAc41OVpK+f+esxYOZPnoV2+ta5O evn8+WUloPPlQ/wXxMIimTThcQm2SsRGAof8/chZPh1e449S16gtcdcKuLG90Ski AXXp2KeZ90f8nSvYxvNQ6EJ6fOyFwtANXSthlPVVcR3qd01T8gnOWPtedOgT47p8 vSzbQ2uMsRcCNokAMdrttttdw1In1ZJZ2t7++xdi/fLo5TcsE8z0lOW2jQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKDgxZBEyH4+LfoTy/mQI67gEu+gMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzL2IxNTky ZC0zYTIzLTRmNDAtODFjOC0xNjAwYjc0MmI1ZGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvYjE1OTJk LTNhMjMtNGY0MC04MWM4LTE2MDBiNzQyYjVkZC8xL29PREZrRVRJZmo0dC1oUEwt WkFqcnVBUzc2QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW+gEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDgiDANBgkqhkiG9w0BAQsFAAOCAQEAVaW2Y1KG69JzoWKMw80HBoKN1bWj7SiX Q2cI6jw8I3M4bObHqQLUv+jW/J9N1E8jYHgTapy5YjUMntUMR2cz+2+WNlITSCXH uZ1cl0cZTUsRBF1dua48Xl6YMIVB77T9TWiGb65/iiYM4eALo6KCcwEsYzVBnsDW BOZt/0WcX7auMVQaazxzbCubD2SPEemIxeLgA+lrvfZ59SRcv+TlTqy1XOg/btR1 iwi0EZI8Bk+NUKKEjXssqpWdslv/R1754Q6gDjzg6Lrc+qqizdxEJXznV0x+K9Hk CveMeLWpnHZ8X+iSQhUm4x68SmBArhHYhliXudXcES1itBZfnczi3A== -----END CERTIFICATE-----Generated at Tue Jan 27 05:35:08 2026 by rpki-client