This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer File: oRlmxatOoGc8xBx4bgd4OUuL2s8.cer (raw, json) Hash identifier: JsZfrBxIRR4mfTCyrBo+vEYdL2u7KLIMIuerYNMSEA8= Subject key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775952B6E57B6082273C2275E854ADB2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44486 IP: 45.88.108.0/22 IP: 45.135.200.0/22 IP: 91.218.64.0/22 IP: 2a04:e8c0::/29 IP: 2a0c:75c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:52:b6:e5:7b:60:82:27:3c:22:75:e8:54:ad:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:8a:e9:9e:f7:92:83:1c:44:ae:74:81:7c: 2a:85:98:2a:ab:10:6b:9a:c7:54:ce:80:38:da:69: 82:17:c2:28:e7:f5:40:8f:83:54:34:7f:a7:75:be: ef:57:4d:12:cd:69:16:98:ec:f0:84:c6:7d:6b:04: 20:d7:15:5e:21:cd:7f:b9:c8:84:47:b8:a1:e5:58: bc:99:32:48:24:81:a9:ca:9f:8b:2e:2c:a0:1a:77: 85:08:55:65:97:55:93:af:4f:c1:f8:95:19:c1:ca: 3c:f7:e2:a5:0d:c6:24:e6:f2:d0:8d:ae:78:7e:66: e4:32:88:31:24:1b:d0:10:da:4d:57:b0:db:34:33: 77:d1:82:e2:cc:95:1c:5f:6a:61:9b:a6:7a:d5:79: 1f:4e:a3:4d:b1:5a:0b:52:50:4e:ea:b0:6d:62:42: 73:47:75:54:ea:7f:82:72:45:c0:a6:3a:26:e6:23: 4b:32:9c:12:a4:8a:2d:92:a2:c7:98:8c:8f:22:e4: 41:c7:62:8b:c3:15:fe:16:cc:f4:45:b9:e5:bf:ad: 62:59:d4:ab:ba:3d:71:09:f8:a4:71:b3:32:b2:d8: 3d:70:b2:cc:52:0e:db:c1:ba:dc:93:70:13:40:ed: 23:58:43:7d:cc:17:b7:42:d1:f4:d7:c5:ef:16:74: 60:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.108.0/22 45.135.200.0/22 91.218.64.0/22 IPv6: 2a04:e8c0::/29 2a0c:75c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44486 Signature Algorithm: sha256WithRSAEncryption 38:0c:2b:bd:aa:2b:6d:21:66:e8:47:01:48:22:7b:21:c3:85: 39:1a:46:3f:e3:aa:63:9b:e1:19:15:0c:2a:93:b6:dd:7e:7e: a1:73:0a:38:de:5c:84:bd:82:11:0d:8c:7a:95:54:55:6e:0a: 9f:88:bd:bb:f7:b5:ca:c6:f6:8d:6c:72:cd:4f:c3:45:db:16: ab:9f:16:aa:7a:bf:58:cc:d9:f7:00:2c:ea:c7:5e:80:a1:cd: 30:e1:cf:79:ff:04:79:ed:5d:73:db:11:07:de:cd:36:d6:de: c7:91:e7:70:c3:2c:9e:6f:80:59:be:51:82:46:45:7b:a9:0c: 3e:ed:26:d5:18:22:3b:5d:e8:ba:a9:0b:dc:8d:7e:0b:4e:74: 24:74:f1:ec:6d:58:b1:52:ef:57:b3:03:34:9a:e8:07:be:c2: 9d:80:40:d5:53:ef:16:2b:48:83:49:5d:0f:40:4c:5a:94:6a: 1e:30:6d:ab:8e:65:53:52:01:f4:85:a2:a0:1a:2e:42:7d:a0: 7b:32:91:09:32:a9:19:da:ef:88:8d:30:90:48:61:2d:7f:e0: 93:05:d0:51:cc:4a:2b:7f:32:00:9b:7e:c3:45:70:32:cc:e8: bf:ad:43:d5:78:eb:cb:1d:6e:bd:f1:25:cc:c2:a3:96:85:6d: 71:a1:53:89 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZt3WVK25Xtggic8InXoVK2yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTE5NjZjNWFiNGVhMDY3M2NjNDFjNzg2ZTA3NzgzOTRiOGJkYWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpeK6Z73koMcRK50gXwqhZgqqxBr msdUzoA42mmCF8Io5/VAj4NUNH+ndb7vV00SzWkWmOzwhMZ9awQg1xVeIc1/uciE R7ih5Vi8mTJIJIGpyp+LLiygGneFCFVll1WTr0/B+JUZwco89+KlDcYk5vLQja54 fmbkMogxJBvQENpNV7DbNDN30YLizJUcX2phm6Z61XkfTqNNsVoLUlBO6rBtYkJz R3VU6n+CckXApjom5iNLMpwSpIotkqLHmIyPIuRBx2KLwxX+Fsz0Rbnlv61iWdSr uj1xCfikcbMystg9cLLMUg7bwbrck3ATQO0jWEN9zBe3QtH018XvFnRgmwIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFKEZZsWrTqBnPMQceG4HeDlLi9rPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4LzEyMGUz Mi03OTNjLTRlMjMtOWRkOC00YTc1YTE0MTIxYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvMTIwZTMy LTc5M2MtNGUyMy05ZGQ4LTRhNzVhMTQxMjFiZi8xL29SbG14YXRPb0djOHhCeDRi Z2Q0T1V1TDJzOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQCLVhsAwQCLYfIAwQCW9pAMBQEAgACMA4DBQMq BOjAAwUDKgx1wDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMArcYwDQYJKoZIhvcN AQELBQADggEBADgMK72qK20hZuhHAUgieyHDhTkaRj/jqmOb4RkVDCqTtt1+fqFz CjjeXIS9ghENjHqVVFVuCp+Ivbv3tcrG9o1scs1Pw0XbFqufFqp6v1jM2fcALOrH XoChzTDhz3n/BHntXXPbEQfezTbW3seR53DDLJ5vgFm+UYJGRXupDD7tJtUYIjtd 6LqpC9yNfgtOdCR08extWLFS71ezAzSa6Ae+wp2AQNVT7xYrSINJXQ9ATFqUah4w bauOZVNSAfSFoqAaLkJ9oHsykQkyqRna74iNMJBIYS1/4JMF0FHMSit/MgCbfsNF cDLM6L+tQ9V468sdbr3xJczCo5aFbXGhU4k= -----END CERTIFICATE-----Generated at Sun Jan 18 09:30:48 2026 by rpki-client