This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oPmMXcc-P6i_3MABQ_A5VVLv78A.cer File: oPmMXcc-P6i_3MABQ_A5VVLv78A.cer (raw, json) Hash identifier: vyA7jHJbcxF2Lc1leYT4YIN4rsLsuuJ3wVsSRMRUBYo= Subject key identifier: A0:F9:8C:5D:C7:3E:3F:A8:BF:DC:C0:01:43:F0:39:55:52:EF:EF:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BB41A80D60527C4A043101AAAD7DC1E84 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/806328-9042-4c13-ade0-163d03ea6499/1/oPmMXcc-P6i_3MABQ_A5VVLv78A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/806328-9042-4c13-ade0-163d03ea6499/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 12 Jan 2026 21:26:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211407 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b4:1a:80:d6:05:27:c4:a0:43:10:1a:aa:d7:dc:1e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 12 21:26:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0f98c5dc73e3fa8bfdcc00143f0395552efefc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6c:96:99:2e:c6:9d:29:99:cd:77:da:43:08: 9b:e8:70:35:a0:8e:51:27:3e:d9:d0:23:da:26:a3: 4b:21:30:ac:71:2a:0d:b0:3a:21:28:da:35:50:71: 30:c1:8b:af:e4:0f:f3:bc:48:ac:2a:db:ba:3e:5a: a5:bd:84:a2:fe:42:6a:0e:a5:b0:92:8f:9e:9f:bf: 4a:bd:d3:77:ea:12:85:21:a4:1d:2f:99:d0:87:05: cb:56:4a:b4:3b:b9:7a:7d:7e:24:c0:ef:a7:5e:5c: 37:b3:b8:54:10:49:52:08:d1:92:c8:b1:3a:00:c5: d5:c2:7c:8c:5a:64:bb:98:dc:89:8a:93:30:fb:28: 5a:42:13:45:19:e2:ca:a3:12:32:18:05:3b:e3:9e: fa:27:9e:1e:01:f3:8b:e4:26:48:7d:72:c4:03:68: b2:65:cb:26:cd:e9:5f:26:c2:53:2e:a3:d4:d8:91: 19:0f:49:8c:a0:13:cc:e4:01:f5:b6:ea:c8:c6:99: e3:4c:12:99:c1:b6:39:54:cf:06:8b:37:5f:a3:a9: 36:cc:de:3b:b3:58:ef:7a:14:61:89:ae:5d:3a:b8: 10:7e:d3:86:fb:1e:83:05:57:33:be:0c:6f:15:b4: 10:83:b9:bc:36:a2:50:63:a6:25:c0:6e:14:6d:b1: 4a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F9:8C:5D:C7:3E:3F:A8:BF:DC:C0:01:43:F0:39:55:52:EF:EF:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/806328-9042-4c13-ade0-163d03ea6499/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/806328-9042-4c13-ade0-163d03ea6499/1/oPmMXcc-P6i_3MABQ_A5VVLv78A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211407 Signature Algorithm: sha256WithRSAEncryption 8d:81:a9:f7:34:4c:51:97:b9:6b:ae:35:73:be:be:d1:aa:bf: 68:cb:02:16:99:99:19:d4:48:58:69:f5:16:d8:eb:1d:3b:c1: 64:9c:90:b2:9c:39:9b:96:b5:4f:a4:7e:4d:b5:7c:04:75:aa: a2:6f:bd:cc:d9:9d:be:b0:6d:6c:eb:84:ff:45:2c:1f:7e:c8: ca:ea:d5:5b:eb:23:4d:f9:78:1d:ce:fb:e4:63:21:24:ee:17: fd:64:77:a9:5a:26:34:10:2a:54:01:6c:92:b1:6e:35:a1:8a: 9e:3c:b8:d0:94:40:47:de:e6:c0:4a:07:cc:d9:12:1c:e4:57: ed:f9:e9:fa:1d:b7:75:b8:80:e2:b8:4d:4a:5b:33:c4:57:93: 7f:51:ae:91:79:43:da:3c:40:86:9e:81:e6:d5:36:63:43:31: bb:ee:e6:26:79:ba:c8:0b:49:7f:49:0c:b7:d7:bd:d5:37:8d: 54:54:83:7a:5c:4b:25:f4:9b:31:c1:f3:4a:8c:f1:59:28:06: 48:ed:f1:bd:c1:64:d2:d4:80:21:42:69:09:da:f0:61:0e:fb: c7:b2:25:70:66:e5:4c:25:59:77:7a:b7:97:17:2b:d7:4e:e2: b7:06:1c:c1:1a:82:5b:98:08:a4:30:d5:ea:6f:23:22:9d:c3: 6c:c2:55:4c -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZu0GoDWBSfEoEMQGqrX3B6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTEyMjEyNjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGY5OGM1ZGM3M2UzZmE4YmZkY2MwMDE0M2YwMzk1NTUyZWZlZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1myWmS7GnSmZzXfaQwib6HA1oI5R Jz7Z0CPaJqNLITCscSoNsDohKNo1UHEwwYuv5A/zvEisKtu6PlqlvYSi/kJqDqWw ko+en79KvdN36hKFIaQdL5nQhwXLVkq0O7l6fX4kwO+nXlw3s7hUEElSCNGSyLE6 AMXVwnyMWmS7mNyJipMw+yhaQhNFGeLKoxIyGAU74576J54eAfOL5CZIfXLEA2iy ZcsmzelfJsJTLqPU2JEZD0mMoBPM5AH1turIxpnjTBKZwbY5VM8Gizdfo6k2zN47 s1jvehRhia5dOrgQftOG+x6DBVczvgxvFbQQg7m8NqJQY6YlwG4UbbFKzwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFKD5jF3HPj+ov9zAAUPwOVVS7+/AMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3LzgwNjMy OC05MDQyLTRjMTMtYWRlMC0xNjNkMDNlYTY0OTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvODA2MzI4 LTkwNDItNGMxMy1hZGUwLTE2M2QwM2VhNjQ5OS8xL29QbU1YY2MtUDZpXzNNQUJR X0E1VlZMdjc4QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM5zzANBgkqhkiG9w0BAQsFAAOCAQEAjYGp9zRMUZe5 a641c76+0aq/aMsCFpmZGdRIWGn1FtjrHTvBZJyQspw5m5a1T6R+TbV8BHWqom+9 zNmdvrBtbOuE/0UsH37IyurVW+sjTfl4Hc775GMhJO4X/WR3qVomNBAqVAFskrFu NaGKnjy40JRAR97mwEoHzNkSHORX7fnp+h23dbiA4rhNSlszxFeTf1GukXlD2jxA hp6B5tU2Y0Mxu+7mJnm6yAtJf0kMt9e91TeNVFSDelxLJfSbMcHzSozxWSgGSO3x vcFk0tSAIUJpCdrwYQ77x7IlcGblTCVZd3q3lxcr107itwYcwRqCW5gIpDDV6m8j Ip3DbMJVTA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:35 2026 by rpki-client