This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oUIVlcmI-yZTZeucofo_F_xXB28.cer File: oUIVlcmI-yZTZeucofo_F_xXB28.cer (raw, json) Hash identifier: EX0J3G6BK3YeWE2LrLjQyVW5TR15jM/FQ3csTBRWw20= Subject key identifier: A1:42:15:95:C9:88:FB:26:53:65:EB:9C:A1:FA:3F:17:FC:57:07:6F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C70164B9A67B523034E0512B933901 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/d625c5-790c-4b51-9ef1-baef4ebf68da/1/oUIVlcmI-yZTZeucofo_F_xXB28.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/d625c5-790c-4b51-9ef1-baef4ebf68da/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51536 IP: 91.217.233.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:01:64:b9:a6:7b:52:30:34:e0:51:2b:93:39:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1421595c988fb265365eb9ca1fa3f17fc57076f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8f:94:c8:a0:1e:32:7c:9c:70:5d:30:f0:8b: 00:37:96:1d:d4:fa:17:07:b7:13:a8:25:07:16:20: 8a:c5:bc:56:34:d1:77:2b:7d:8d:38:f3:e0:dd:07: c4:a0:b8:b8:80:b4:3d:c6:bd:23:d4:8d:c0:d6:fa: 4a:bf:6d:49:6e:02:0d:6c:d2:6f:1c:79:97:45:80: 61:5d:49:55:56:c2:d4:7d:99:9d:3a:22:5c:e0:da: 63:bf:86:44:a6:33:f4:b4:79:c0:9d:d7:ad:ea:7a: 8e:cc:e9:50:14:ac:e3:70:21:51:f0:f8:a7:cc:4c: d7:53:9d:ad:bd:dd:06:95:67:eb:e3:69:59:cf:9a: 2c:59:eb:47:b6:89:ad:80:8c:1d:3a:25:7b:a4:aa: b3:1d:8c:8e:16:2d:53:55:1c:61:9e:e2:5b:c4:3a: ec:9d:bd:85:fe:39:5e:f4:5c:5a:45:85:88:98:9d: 3d:80:0b:13:d0:e4:44:3d:8f:da:26:e1:56:0b:ce: 60:17:8a:2a:d1:a6:3e:33:d6:49:37:9e:1b:25:a0: f2:ee:01:15:22:62:9d:53:9d:87:e2:23:ba:f5:a2: 31:18:0c:a4:f6:ba:b2:06:c5:16:65:72:8a:24:2b: 3f:fd:04:f1:9d:80:be:35:bf:b7:de:d9:1c:ce:e6: 06:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:42:15:95:C9:88:FB:26:53:65:EB:9C:A1:FA:3F:17:FC:57:07:6F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d625c5-790c-4b51-9ef1-baef4ebf68da/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d625c5-790c-4b51-9ef1-baef4ebf68da/1/oUIVlcmI-yZTZeucofo_F_xXB28.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.233.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51536 Signature Algorithm: sha256WithRSAEncryption 63:e5:31:d0:c3:a1:3c:4f:39:52:19:ff:4a:a5:a6:a7:2f:17: 3a:07:c7:b5:20:a5:ab:c4:f7:23:ed:fa:ac:3f:6c:9f:d5:ef: 48:ed:c0:15:02:d5:75:6a:de:08:70:d8:03:a7:9c:a8:0d:fd: e0:3b:46:c7:79:d1:41:1b:42:ee:10:9a:d3:17:4d:e7:65:82: 09:d0:e1:af:30:e3:f6:82:35:f5:95:c5:76:f7:89:3b:c7:5e: 4e:4e:13:c7:e6:3c:66:e7:fd:fd:d6:2a:30:86:af:7d:c2:4b: 87:e0:77:ec:8d:3d:56:b1:3e:01:2c:6c:3f:58:9d:a1:b4:f2: 14:40:33:56:62:ad:c0:a5:89:1b:82:3b:bd:b7:9d:7f:d4:6a: 09:77:5b:fa:20:43:77:ff:86:17:70:7f:40:a8:8e:c1:db:41: 38:e2:00:8e:a4:75:88:49:e0:28:50:06:58:7a:91:ba:87:5f: b1:ce:62:eb:c0:be:2f:3a:1b:9c:7a:63:d8:af:df:7b:7b:99: ba:0b:23:da:c5:e5:14:a4:03:9b:9a:42:db:78:a5:05:1b:25: d6:9e:b7:95:43:25:19:2a:3b:6f:43:fc:e7:34:61:22:48:fb: 39:71:ca:d7:63:5f:29:a7:ad:b7:a6:dc:01:58:6b:9d:8e:28: e8:83:a6:e8 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xwFkuaZ7UjA04FErkzkBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTQyMTU5NWM5ODhmYjI2NTM2NWViOWNhMWZhM2YxN2ZjNTcwNzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso+UyKAeMnyccF0w8IsAN5Yd1PoX B7cTqCUHFiCKxbxWNNF3K32NOPPg3QfEoLi4gLQ9xr0j1I3A1vpKv21JbgINbNJv HHmXRYBhXUlVVsLUfZmdOiJc4Npjv4ZEpjP0tHnAndet6nqOzOlQFKzjcCFR8Pin zEzXU52tvd0GlWfr42lZz5osWetHtomtgIwdOiV7pKqzHYyOFi1TVRxhnuJbxDrs nb2F/jle9FxaRYWImJ09gAsT0OREPY/aJuFWC85gF4oq0aY+M9ZJN54bJaDy7gEV ImKdU52H4iO69aIxGAyk9rqyBsUWZXKKJCs//QTxnYC+Nb+33tkczuYG0wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKFCFZXJiPsmU2XrnKH6Pxf8VwdvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiL2Q2MjVj NS03OTBjLTRiNTEtOWVmMS1iYWVmNGViZjY4ZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvZDYyNWM1 LTc5MGMtNGI1MS05ZWYxLWJhZWY0ZWJmNjhkYS8xL29VSVZsY21JLXlaVFpldWNv Zm9fRl94WEIyOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9npMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDJUDANBgkqhkiG9w0BAQsFAAOCAQEAY+Ux0MOhPE85Uhn/SqWmpy8XOgfHtSCl q8T3I+36rD9sn9XvSO3AFQLVdWreCHDYA6ecqA394DtGx3nRQRtC7hCa0xdN52WC CdDhrzDj9oI19ZXFdveJO8deTk4Tx+Y8Zuf9/dYqMIavfcJLh+B37I09VrE+ASxs P1idobTyFEAzVmKtwKWJG4I7vbedf9RqCXdb+iBDd/+GF3B/QKiOwdtBOOIAjqR1 iEngKFAGWHqRuodfsc5i68C+LzobnHpj2K/fe3uZugsj2sXlFKQDm5pC23ilBRsl 1p63lUMlGSo7b0P85zRhIkj7OXHK12NfKaett6bcAVhrnY4o6IOm6A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:02 2026 by rpki-client