This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oVHP748-2G0RrqutTRngal0HDTA.cer File: oVHP748-2G0RrqutTRngal0HDTA.cer (raw, json) Hash identifier: Z3VB+EcbPUkG7mmHNoWAF0gZSC/C2i2B/vnr/VGBVY4= Subject key identifier: A1:51:CF:EF:8F:3E:D8:6D:11:AE:AB:AD:4D:19:E0:6A:5D:07:0D:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E47C1EE3585672085C19364F1A368 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44850 IP: 91.203.32.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:47:c1:ee:35:85:67:20:85:c1:93:64:f1:a3:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a151cfef8f3ed86d11aeabad4d19e06a5d070d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0c:31:c8:2a:ba:d4:1a:8c:fb:64:15:42:37: 4c:44:c5:7e:e9:a1:17:e8:d0:6b:32:a7:09:60:4b: dd:9f:72:e1:c9:79:53:22:57:7f:74:80:77:82:31: 69:ad:d1:aa:87:a4:30:3e:65:fe:b1:92:c4:8f:ee: e3:27:62:03:f3:81:9a:52:2e:fc:fc:ff:b1:c5:c9: 3c:ce:0d:be:8e:d1:eb:f0:17:4f:fc:50:d7:cc:60: 25:9f:ee:dd:da:2f:86:d3:b0:1a:32:89:ed:0b:a9: ef:e4:cd:8c:b0:3d:b5:01:b1:db:af:3d:f2:43:ca: 27:b9:ae:51:83:29:f8:a3:f6:9a:8d:dd:80:97:7a: 4f:6b:8f:66:34:53:99:27:ff:e7:47:a8:8c:df:c8: fe:a8:c6:38:03:4e:c2:e8:93:9e:ec:dd:95:49:95: ac:17:5e:31:33:a6:c1:ab:f2:bb:01:40:f4:a6:f6: 35:6e:f4:5a:54:12:79:6d:7d:e7:07:08:cf:f6:d9: 82:9c:16:dc:8d:d5:e4:12:9a:bf:94:4a:ac:8f:b9: 86:fb:8a:a2:b5:56:9d:af:20:34:2d:56:5b:13:0b: bf:38:18:85:d7:85:76:7e:e5:a1:e2:30:8a:d4:fc: dc:d1:18:53:22:c0:a9:72:ee:75:8f:b7:ee:54:61: f0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:51:CF:EF:8F:3E:D8:6D:11:AE:AB:AD:4D:19:E0:6A:5D:07:0D:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.32.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44850 Signature Algorithm: sha256WithRSAEncryption 5f:d6:1e:3e:ed:e2:65:8e:f7:51:67:e5:3d:e6:df:6e:47:52: 27:70:65:51:8f:6a:09:90:cd:b2:c6:f2:b1:ad:d3:f5:f4:56: f1:b1:5f:ac:70:11:e8:26:d1:8f:62:42:24:ac:35:f6:ae:01: 72:a2:46:6a:c6:b1:18:05:8f:4c:3a:a5:70:f5:24:84:9e:68: 84:c6:90:08:aa:fc:76:05:28:6f:93:65:9c:ec:a6:4a:2b:d2: b7:bb:43:a1:4e:09:c4:20:c0:2c:d4:c1:24:29:0b:a2:51:8c: 26:51:d3:64:a9:5b:1c:da:5a:59:8f:58:4e:9b:ff:5e:5b:17: 54:01:26:48:59:ac:99:cb:c2:71:c1:ae:bf:4e:03:35:40:5b: 4e:12:07:05:f1:99:de:fd:c6:e0:80:85:8d:3e:39:1d:d3:4d: 44:76:d1:44:8d:ff:c2:be:e2:dc:71:ac:d7:45:32:d6:af:ec: f7:97:e8:99:f1:57:f1:c2:ed:36:f9:88:f5:97:9c:67:41:6b: 78:b4:f8:e8:32:f3:e0:9b:32:4b:0b:49:e6:f1:01:c6:85:56: 82:e7:2d:84:44:9c:90:40:3b:9f:6b:37:80:0d:76:aa:cc:e9: 9c:28:7a:f4:54:f3:87:df:8e:bc:fb:27:9c:81:69:40:50:76: 14:c3:cf:63 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5fkfB7jWFZyCFwZNk8aNoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTUxY2ZlZjhmM2VkODZkMTFhZWFiYWQ0ZDE5ZTA2YTVkMDcwZDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQwxyCq61BqM+2QVQjdMRMV+6aEX 6NBrMqcJYEvdn3LhyXlTIld/dIB3gjFprdGqh6QwPmX+sZLEj+7jJ2ID84GaUi78 /P+xxck8zg2+jtHr8BdP/FDXzGAln+7d2i+G07AaMontC6nv5M2MsD21AbHbrz3y Q8onua5Rgyn4o/aajd2Al3pPa49mNFOZJ//nR6iM38j+qMY4A07C6JOe7N2VSZWs F14xM6bBq/K7AUD0pvY1bvRaVBJ5bX3nBwjP9tmCnBbcjdXkEpq/lEqsj7mG+4qi tVadryA0LVZbEwu/OBiF14V2fuWh4jCK1Pzc0RhTIsCpcu51j7fuVGHwaQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKFRz++PPthtEa6rrU0Z4GpdBw0wMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1Lzk1OWI5 Zi0xNDA4LTRjZjctOGU3NS00MDQ2YTMyZDI3YTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvOTU5Yjlm LTE0MDgtNGNmNy04ZTc1LTQwNDZhMzJkMjdhNC8xL29WSFA3NDgtMkcwUnJxdXRU Um5nYWwwSERUQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW8sgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCvMjANBgkqhkiG9w0BAQsFAAOCAQEAX9YePu3iZY73UWflPebfbkdSJ3BlUY9q CZDNssbysa3T9fRW8bFfrHAR6CbRj2JCJKw19q4BcqJGasaxGAWPTDqlcPUkhJ5o hMaQCKr8dgUob5NlnOymSivSt7tDoU4JxCDALNTBJCkLolGMJlHTZKlbHNpaWY9Y Tpv/XlsXVAEmSFmsmcvCccGuv04DNUBbThIHBfGZ3v3G4ICFjT45HdNNRHbRRI3/ wr7i3HGs10Uy1q/s95fomfFX8cLtNvmI9ZecZ0FreLT46DLz4JsySwtJ5vEBxoVW gucthESckEA7n2s3gA12qszpnCh69FTzh9+OvPsnnIFpQFB2FMPPYw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:52 2026 by rpki-client