This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer File: oYRAnlwYO7zDFTX0x-7keCzWe-M.cer (raw, json) Hash identifier: zT3QOmSTq/BlKKl+1eOb00w35qlhcfjt9LugRck4QtM= Subject key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED0129DDDE78E1B61686F623115C47 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203216 IP: 185.137.88.0/22 IP: 2a07:3300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:01:29:dd:de:78:e1:b6:16:86:f6:23:11:5c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:04:50:9a:7a:18:54:78:38:86:94:bb:fc:47: 98:3a:7a:da:3a:ea:97:46:97:0c:31:3c:2d:aa:9f: 65:e3:9b:1c:f3:c3:ce:71:3c:03:f8:20:05:05:df: 71:93:f7:e1:9b:07:76:6e:1d:df:91:8b:ba:f5:09: 36:7f:92:79:07:27:e2:f7:04:60:45:e2:b1:29:83: fe:21:55:04:99:df:2f:3d:b7:b1:35:98:c5:ce:d2: f2:4d:58:8f:b4:34:26:20:e0:d9:bf:15:8e:df:38: 9c:78:99:36:6c:5a:8c:95:68:2b:22:4a:53:84:dc: 86:2c:fb:fa:8e:e4:6a:9f:ae:d0:4f:c5:5c:af:41: 2e:82:22:07:0f:50:6e:82:c5:0f:c8:87:b7:f7:75: 99:f3:90:35:1f:ca:26:97:df:f1:09:1d:dc:d6:c3: 0d:b0:1d:00:72:5d:63:77:5c:d1:ba:68:d7:06:36: 68:24:81:84:05:5c:99:7e:df:4e:c7:2b:fe:4b:32: 2c:9b:00:72:60:52:f6:6d:c1:ec:8a:fb:82:60:87: 18:71:1a:97:51:a1:a1:46:cb:48:6d:8f:eb:47:b3: 02:d3:36:de:18:e9:59:75:7b:e8:10:6f:ae:3e:df: 41:39:23:53:eb:2e:bb:4a:a5:e1:70:73:da:9a:b6: 64:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.88.0/22 IPv6: 2a07:3300::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203216 Signature Algorithm: sha256WithRSAEncryption 5a:59:51:70:e3:ee:2e:c5:33:87:a4:0a:b1:3e:bc:fb:4d:0c: 8b:de:2a:8d:33:ae:d7:51:41:9e:a0:49:ba:e6:1f:e6:c8:6f: 21:05:29:ab:7f:33:40:1e:4b:69:03:5c:fc:69:da:be:41:22: e8:13:e7:ad:78:c3:a3:17:50:7c:bc:70:7f:b8:19:90:fb:46: 63:2b:f5:40:47:91:f2:27:8b:95:90:1e:4a:91:99:54:c4:25: b4:5b:a3:17:60:90:6d:f3:2a:9f:34:2b:d5:46:f5:54:74:bb: bf:b6:6a:64:51:3a:7d:39:5c:79:b6:43:aa:a2:75:cd:0b:7f: a8:68:39:53:45:ab:78:ed:45:a7:de:6c:5c:e0:81:fc:4b:80: f1:49:67:99:7c:ec:d3:62:29:a8:0f:a6:65:d9:82:b0:01:49: a8:e8:c7:63:bf:fb:d5:7b:0d:63:04:0a:71:c2:39:f9:3b:ed: ec:01:25:81:1f:3a:01:0f:08:62:42:1b:0a:db:b6:11:50:1a: ed:5c:e9:15:3f:dc:ea:aa:14:85:71:5c:91:e9:d2:81:61:97: ae:1e:12:f1:21:54:08:0b:b1:46:78:51:67:0a:5d:51:f2:6c: 93:a1:0e:42:b8:31:d2:76:63:52:c4:d1:45:f1:7b:01:06:77: c8:27:f9:34 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87QEp3d544bYWhvYjEVxHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTg0NDA5ZTVjMTgzYmJjYzMxNTM1ZjRjN2VlZTQ3ODJjZDY3YmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wRQmnoYVHg4hpS7/EeYOnraOuqX RpcMMTwtqp9l45sc88POcTwD+CAFBd9xk/fhmwd2bh3fkYu69Qk2f5J5Byfi9wRg ReKxKYP+IVUEmd8vPbexNZjFztLyTViPtDQmIODZvxWO3ziceJk2bFqMlWgrIkpT hNyGLPv6juRqn67QT8Vcr0EugiIHD1BugsUPyIe393WZ85A1H8oml9/xCR3c1sMN sB0Acl1jd1zRumjXBjZoJIGEBVyZft9Oxyv+SzIsmwByYFL2bcHsivuCYIcYcRqX UaGhRstIbY/rR7MC0zbeGOlZdXvoEG+uPt9BOSNT6y67SqXhcHPamrZkvwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKGEQJ5cGDu8wxU19Mfu5Hgs1nvjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhLzFlOTY5 NC1jMjg1LTRjY2YtOTQzYi1jMmI3Y2ZmMDY2MWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvMWU5Njk0 LWMyODUtNGNjZi05NDNiLWMyYjdjZmYwNjYxYy8xL29ZUkFubHdZTzd6REZUWDB4 LTdrZUN6V2UtTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYlYMA0EAgACMAcDBQMqBzMAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMZ0DANBgkqhkiG9w0BAQsFAAOCAQEAWllRcOPuLsUz h6QKsT68+00Mi94qjTOu11FBnqBJuuYf5shvIQUpq38zQB5LaQNc/GnavkEi6BPn rXjDoxdQfLxwf7gZkPtGYyv1QEeR8ieLlZAeSpGZVMQltFujF2CQbfMqnzQr1Ub1 VHS7v7ZqZFE6fTlcebZDqqJ1zQt/qGg5U0WreO1Fp95sXOCB/EuA8UlnmXzs02Ip qA+mZdmCsAFJqOjHY7/71XsNYwQKccI5+Tvt7AElgR86AQ8IYkIbCtu2EVAa7Vzp FT/c6qoUhXFckenSgWGXrh4S8SFUCAuxRnhRZwpdUfJsk6EOQrgx0nZjUsTRRfF7 AQZ3yCf5NA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:02 2026 by rpki-client